Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/E5eHkFPSkSECCUI_-MRogn-Ztgw.roa
File: E5eHkFPSkSECCUI_-MRogn-Ztgw.roa (raw, json)
Hash identifier: NUIYwnV75Mq6NfJloSmpauxHT7inNUMV0Dkpqu1c/+U=
Subject key identifier: 13:97:87:90:53:D2:91:21:02:09:42:3F:F8:C4:68:82:7F:99:B6:0C
Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial: 0188BBD0CD3F055AC8B252B17B1BEBDB9426
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/E5eHkFPSkSECCUI_-MRogn-Ztgw.roa
Signing time: Wed 14 Jun 2023 21:30:03 +0000
ROA not before: Wed 14 Jun 2023 21:30:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 397563
IP address blocks: 85.115.208.0/24 maxlen: 24
85.115.209.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 17 Jul 2023 19:47:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:bb:d0:cd:3f:05:5a:c8:b2:52:b1:7b:1b:eb:db:94:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Validity
Not Before: Jun 14 21:30:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1397879053d291210209423ff8c468827f99b60c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d3:e5:51:e4:ac:e5:23:22:e9:ce:fc:23:6e:
b0:90:d8:3b:14:42:40:64:41:55:49:3b:02:2c:86:
c1:79:f9:21:b9:9a:ef:fa:e8:a4:d7:0e:e9:70:8b:
ac:fb:c3:a4:a9:04:08:b8:b6:2b:77:a4:06:b9:e3:
b3:42:cc:14:1b:c5:7d:fa:59:97:2e:a4:ee:43:4b:
09:87:16:d7:97:fb:df:78:1c:b2:71:bf:8b:31:a7:
83:0c:16:6c:1e:0e:e3:80:8e:90:d0:7b:04:68:0d:
f9:c1:10:02:a4:f1:b7:e9:ae:c4:13:e1:9e:39:fe:
08:92:d6:b2:20:0d:2b:e6:d4:ee:2f:d9:7f:35:9b:
5b:34:29:5a:f6:04:7d:86:f8:94:c9:10:80:4b:d9:
c8:55:43:c5:ae:a3:c5:80:0d:2a:51:26:29:53:11:
a4:87:56:74:72:d9:9d:8e:59:b3:07:11:fc:a9:71:
03:3b:be:86:a1:59:5d:23:d8:47:6b:35:0d:a3:6d:
f4:87:15:5c:36:54:93:26:61:09:74:ee:c6:6f:f6:
a2:f8:31:aa:da:b6:f6:cd:25:91:39:d1:2d:e5:6a:
ca:e4:77:4a:e3:72:81:73:f0:24:63:dd:dd:09:31:
f9:e9:92:a2:98:46:1b:c2:47:13:2c:a8:78:74:02:
dd:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:97:87:90:53:D2:91:21:02:09:42:3F:F8:C4:68:82:7F:99:B6:0C
X509v3 Authority Key Identifier:
keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/E5eHkFPSkSECCUI_-MRogn-Ztgw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.115.208.0/23
Signature Algorithm: sha256WithRSAEncryption
e8:52:c4:93:1b:ad:1d:fb:4f:a9:db:c5:b5:1e:63:22:d6:8e:
72:d8:21:19:77:2f:86:fe:da:ad:3d:1e:27:06:15:70:52:08:
29:1e:75:71:a2:4c:99:74:9e:ef:b4:95:2d:6e:3b:16:a4:90:
2a:54:90:c8:2d:fd:69:e2:8b:03:cd:bf:be:41:70:0a:07:78:
eb:44:98:33:97:9a:c3:f1:cb:e5:4d:0d:ca:ed:0c:75:1d:66:
6d:45:b4:bc:85:40:af:8a:77:9e:40:87:eb:49:2e:9e:3f:13:
93:1e:8b:6d:22:55:56:81:26:c2:3d:4a:ee:f0:21:23:19:85:
8f:79:84:61:dd:58:d8:cb:ca:67:61:1f:8b:a0:3d:3d:65:4a:
22:d5:0b:a6:cf:df:6e:1f:bf:b0:13:49:6b:42:1d:da:7e:04:
a4:4f:81:46:8c:07:8d:81:63:15:3b:f5:19:d6:10:b2:8b:13:
af:87:fa:fc:a7:1a:b9:27:1f:7e:c4:64:4c:41:ef:fa:1d:c3:
2b:67:87:6f:78:94:40:44:fe:df:55:21:de:f9:58:0c:3e:58:
c3:b3:4e:50:2c:18:21:76:e6:b3:9e:31:dc:77:35:0e:76:92:
6f:5e:a7:7f:97:77:7d:0b:e4:64:89:1a:96:9a:05:e2:28:74:
49:96:19:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:06 2024 by rpki-client on console-fra.rpki-client.org