Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/TPWjUAqLIu-IdZi_0cX5AYnT95s.roa
File: TPWjUAqLIu-IdZi_0cX5AYnT95s.roa (raw, json)
Hash identifier: MTtstFhxyR4Ip8aN5Luf11oLHO4hvAipPkBQOUxbSfY=
Subject key identifier: 4C:F5:A3:50:0A:8B:22:EF:88:75:98:BF:D1:C5:F9:01:89:D3:F7:9B
Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial: 018A6724037BEB130F024E1613F5733CEDE8
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/TPWjUAqLIu-IdZi_0cX5AYnT95s.roa
Signing time: Tue 05 Sep 2023 20:58:48 +0000
ROA not before: Tue 05 Sep 2023 20:58:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 64267
IP address blocks: 85.115.209.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 24 Oct 2023 13:21:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:67:24:03:7b:eb:13:0f:02:4e:16:13:f5:73:3c:ed:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Validity
Not Before: Sep 5 20:58:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4cf5a3500a8b22ef887598bfd1c5f90189d3f79b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:00:70:31:a7:fe:c9:9b:1e:5e:b8:72:72:a2:
6a:87:d1:af:d0:cd:76:ee:bd:4f:4e:05:ff:5f:5f:
c1:31:5d:12:5b:91:63:6c:ba:cb:ee:59:8b:e5:55:
21:4f:96:2c:b1:f1:2a:7c:28:fe:f2:2a:3e:55:c7:
d6:6d:cd:de:5b:85:57:ae:d5:6e:a4:0c:11:1b:ba:
cc:d2:03:61:44:7e:67:29:6d:9d:48:32:22:24:45:
6a:67:9a:71:ff:5b:8d:f9:cf:44:36:6e:d3:df:0b:
ab:70:39:72:89:f9:5f:e3:d2:b4:e1:ff:9c:9b:10:
9c:80:09:ea:d4:2b:28:3b:df:fa:c0:67:e3:7b:54:
fe:d1:d0:cc:16:26:fd:5c:11:71:4b:cc:32:8d:54:
19:30:27:33:7f:3d:87:fd:e4:5e:67:55:10:95:5d:
fc:e5:ae:32:ec:9d:fe:74:fb:0d:ea:9e:2e:b3:23:
4a:2b:58:8e:c6:b7:01:ad:f7:ba:2a:23:ad:c0:df:
f6:a8:67:9f:6d:bb:a9:74:68:c6:5b:41:63:fa:23:
33:94:c9:7c:1e:b7:0b:33:af:0e:f0:66:6f:da:d7:
d9:6c:d7:1e:f6:41:5a:4b:08:bd:39:1e:31:54:3d:
0f:91:16:4a:44:1e:65:9f:da:79:2a:03:2d:1c:5f:
8e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:F5:A3:50:0A:8B:22:EF:88:75:98:BF:D1:C5:F9:01:89:D3:F7:9B
X509v3 Authority Key Identifier:
keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/TPWjUAqLIu-IdZi_0cX5AYnT95s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.115.209.0/24
Signature Algorithm: sha256WithRSAEncryption
e2:38:d1:fa:82:05:69:61:79:88:33:e3:cf:05:33:98:5c:9d:
4d:b7:70:23:01:f9:02:45:9a:7b:8e:8f:45:f7:a7:72:96:cf:
99:69:de:a7:41:30:1d:6b:75:4a:69:9d:72:2d:95:3f:7b:0e:
0b:f0:bc:f8:38:70:0c:fc:34:cf:cb:71:62:c3:4d:74:5e:e7:
83:b8:9e:15:9c:00:e9:69:3b:64:57:d3:a3:e1:7a:39:82:fa:
88:47:fa:12:17:fb:9a:3d:94:8e:91:17:58:2f:ff:d4:c2:41:
6a:11:af:dc:80:ef:d4:db:31:1a:5d:10:9c:65:fe:b9:ca:06:
34:f6:f7:6d:d4:02:3e:c9:74:1e:11:6b:2f:7c:95:d7:73:b0:
b8:da:f5:51:fa:3d:45:00:24:64:44:39:cb:90:6c:4b:87:1e:
aa:12:29:96:da:cc:58:cb:2c:4c:e8:9a:4a:0d:f8:c1:8d:a5:
97:db:20:69:70:6b:02:46:98:f4:d8:3c:7d:90:2a:63:3e:c5:
4b:4a:98:e0:27:71:f6:df:b5:f3:a8:6b:82:14:95:76:65:99:
04:06:aa:5e:71:22:15:5f:93:4d:81:52:55:3c:cb:4e:9c:a9:
c6:6d:2c:d2:0e:e3:77:99:c8:4e:3d:d2:00:c3:dc:bd:6e:2f:
71:7b:ac:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:06 2024 by rpki-client on console-fra.rpki-client.org