Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/V6YsKGDBBO1q8wxOCL1GbKRvGIE.roa
File: V6YsKGDBBO1q8wxOCL1GbKRvGIE.roa (raw, json)
Hash identifier: DAOP68voNOogZz5LT21wqwSs2/r+DI3iH0REoANDbnc=
Subject key identifier: 57:A6:2C:28:60:C1:04:ED:6A:F3:0C:4E:08:BD:46:6C:A4:6F:18:81
Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial: 018AC5CB1CCA1B7AFAFBB11C86051DF371AF
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/V6YsKGDBBO1q8wxOCL1GbKRvGIE.roa
Signing time: Sun 24 Sep 2023 06:05:37 +0000
ROA not before: Sun 24 Sep 2023 06:05:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 85.115.210.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:c5:cb:1c:ca:1b:7a:fa:fb:b1:1c:86:05:1d:f3:71:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Validity
Not Before: Sep 24 06:05:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=57a62c2860c104ed6af30c4e08bd466ca46f1881
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:08:82:08:ad:70:22:90:ac:9e:9f:fd:21:ab:
2e:bc:a6:80:8f:5b:8b:b3:bf:8f:a4:f0:df:8e:bf:
2c:2c:d9:70:84:c3:1b:78:70:0e:c7:a9:5a:5e:d7:
cd:bd:46:9f:5b:00:84:d0:75:dc:22:9e:23:1c:0d:
b2:33:05:82:28:35:60:26:6f:fb:17:86:8e:70:16:
0f:18:5d:9a:ab:42:78:a2:8e:f8:4b:f2:2e:db:ba:
40:dd:ef:85:15:95:c7:7d:99:bf:0b:f4:56:85:97:
21:58:d4:77:46:db:e0:e5:c1:4c:a9:35:2f:bb:5b:
4c:95:38:a3:28:fe:ea:34:58:50:16:cd:4a:b9:dd:
ba:82:65:78:e1:52:2c:c7:e0:55:3b:6f:c2:5d:26:
e7:e6:51:82:d4:25:b0:17:98:d7:7d:0c:cd:da:85:
ea:07:28:25:57:8a:a3:6d:f2:7f:cc:31:ba:0a:b8:
13:9f:f1:41:83:10:68:52:19:48:58:e5:cc:99:3d:
91:bc:78:12:d2:d2:a0:06:09:b0:ff:dd:9e:8e:ce:
91:5b:42:7c:eb:42:7d:9f:bf:c5:83:27:b5:46:93:
d8:05:37:c2:82:16:a7:15:0b:9e:94:c4:1c:39:17:
64:aa:fc:42:b6:2c:4d:f0:81:25:25:30:45:7c:3f:
ca:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:A6:2C:28:60:C1:04:ED:6A:F3:0C:4E:08:BD:46:6C:A4:6F:18:81
X509v3 Authority Key Identifier:
keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/V6YsKGDBBO1q8wxOCL1GbKRvGIE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.115.210.0/23
Signature Algorithm: sha256WithRSAEncryption
ed:8e:69:da:fb:3d:94:59:54:8a:37:0b:4e:be:ef:b3:13:bf:
45:8b:eb:38:ab:30:ef:3d:1a:a3:cf:37:e8:f0:61:eb:a0:be:
8a:85:03:ef:dd:8b:77:99:79:8b:92:cb:da:99:00:98:c2:16:
3b:8c:a3:3b:4f:68:3c:fc:4b:5c:7e:b3:de:a7:e2:9c:3d:a9:
7d:51:8d:ad:50:3e:84:86:27:47:8b:38:5e:8b:1b:9b:5a:18:
0a:36:33:aa:a5:dd:97:fa:0b:8d:37:9d:85:e1:8a:13:b9:92:
ef:85:f2:f1:09:99:c7:2a:34:5b:40:b7:b0:93:d2:0d:32:06:
bc:47:04:76:39:95:36:e1:db:8b:d4:95:bc:e1:b7:88:04:98:
1c:32:6e:a7:d4:21:7e:56:96:33:22:11:1b:f0:a8:26:4b:01:
eb:f2:eb:b0:1d:04:b4:7a:3d:6e:5b:2f:a5:ce:76:49:eb:8d:
d1:3c:40:26:ca:82:52:91:d7:e1:e7:17:2f:c9:f8:47:fc:c1:
7e:d9:9f:cb:79:a5:47:34:f6:03:05:ee:01:5b:26:69:05:67:
1b:20:72:6d:a7:8f:f8:9a:d0:83:1c:62:b3:7b:9e:28:f4:b2:
3c:51:91:e7:c2:77:66:c2:1d:63:0d:0b:58:e2:e8:84:ac:95:
50:c2:07:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:12 2024 by rpki-client on console-ams.rpki-client.org