Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/EdFBmgM4dzMptjvjJ3WvM44u_VY.roa
File: EdFBmgM4dzMptjvjJ3WvM44u_VY.roa (raw, json)
Hash identifier: Rv3Oef8Xt/4DCX3rEIrbTDx/4I/MhWVBFe561SQyirk=
Subject key identifier: 11:D1:41:9A:03:38:77:33:29:B6:3B:E3:27:75:AF:33:8E:2E:FD:56
Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial: 018ACC7691F5620F363704C68BA296497CD4
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/EdFBmgM4dzMptjvjJ3WvM44u_VY.roa
Signing time: Mon 25 Sep 2023 13:10:37 +0000
ROA not before: Mon 25 Sep 2023 13:10:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 85.115.208.0/23 maxlen: 24
85.115.208.0/24 maxlen: 24
213.145.88.0/21 maxlen: 24
213.145.88.0/24 maxlen: 24
213.145.95.0/24 maxlen: 24
213.145.92.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 11 Oct 2023 14:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:cc:76:91:f5:62:0f:36:37:04:c6:8b:a2:96:49:7c:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Validity
Not Before: Sep 25 13:10:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=11d1419a0338773329b63be32775af338e2efd56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:e1:c3:f1:df:29:4d:8b:39:bb:8e:7f:1e:71:
c4:53:83:2f:50:d0:1a:39:9b:96:ee:16:1a:f1:36:
05:3e:ac:5a:ba:42:7e:f6:fa:35:2f:59:93:08:3b:
c0:69:4b:01:39:b9:ba:02:ac:7e:ff:c9:69:d8:89:
82:1f:87:ad:23:65:b4:29:59:ff:cb:63:30:33:d5:
28:27:28:7b:f8:c9:1f:34:8e:60:af:9f:ec:a3:49:
00:72:58:cf:72:1e:31:39:ea:95:93:72:3c:e7:26:
3c:d6:19:9a:d0:e2:8b:ad:ba:cc:6c:d5:03:74:f0:
7e:4f:6d:69:1d:ae:4b:86:2d:5f:f9:32:86:97:07:
15:0a:b3:11:b3:ff:ac:b2:5a:46:88:37:31:3d:9b:
23:1e:ad:2d:cd:4e:03:7f:2e:9d:9b:b4:66:41:39:
54:7b:41:6a:f4:2b:d4:c6:f3:91:7b:ba:3f:01:b1:
b7:da:81:04:d7:bb:65:18:db:72:e3:9d:0e:e7:9c:
67:66:26:3d:22:e7:0c:8b:28:81:06:be:6a:1f:d9:
16:9c:4e:a2:c6:62:1f:a7:e7:d7:6e:ae:1d:43:a8:
de:e7:87:d1:ed:94:08:c6:24:cd:f1:c9:9c:67:7a:
34:f2:7f:02:fe:07:bc:22:96:c9:56:ad:ac:c3:2b:
06:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:D1:41:9A:03:38:77:33:29:B6:3B:E3:27:75:AF:33:8E:2E:FD:56
X509v3 Authority Key Identifier:
keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/EdFBmgM4dzMptjvjJ3WvM44u_VY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.115.208.0/23
213.145.88.0/21
Signature Algorithm: sha256WithRSAEncryption
38:a1:77:7e:fa:93:1a:9f:0e:8b:c8:a4:21:27:78:ba:30:38:
f0:6a:0b:4b:11:a6:cf:6b:35:aa:fe:6c:45:cb:65:3a:3e:8c:
f0:5d:9c:e2:06:b9:93:bf:72:89:20:ff:b7:d8:cb:95:90:1e:
fd:02:87:71:bc:5c:94:bc:cf:70:c3:50:cb:ee:82:67:25:e4:
cc:93:28:12:13:20:4f:01:61:89:09:90:2a:d8:4e:4f:f9:b0:
3b:dd:e7:30:6c:37:15:c2:e6:5d:21:a8:f2:5c:4e:c8:9b:97:
83:0f:91:af:7b:67:91:9d:56:81:a3:56:46:09:44:5c:15:ac:
29:7d:db:d2:88:13:cc:32:f2:0e:b0:6c:93:83:15:96:24:2b:
65:24:fd:44:48:a9:ec:26:a9:5a:a0:69:5d:41:99:34:f6:13:
42:f0:e5:64:be:ec:c7:59:f7:a4:99:58:68:23:8b:83:cc:51:
d7:a2:9a:c7:ee:87:06:3b:1d:5c:18:3f:12:a5:ff:2f:8b:57:
7a:f6:1f:86:9c:92:92:2c:8a:7a:1b:46:fc:63:28:ee:d7:ac:
78:18:af:2a:85:d7:6b:83:d0:3a:b0:ea:b8:eb:29:cd:23:b2:
9e:c9:11:47:4e:fc:af:f1:9f:a8:8e:0d:08:3c:30:ad:2e:a1:
24:c6:9e:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:12 2024 by rpki-client on console-ams.rpki-client.org