Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/ZPlplM7NAeR9MhrHNpRTIjb9-Qc.roa
File: ZPlplM7NAeR9MhrHNpRTIjb9-Qc.roa (raw, json)
Hash identifier: sw8XzuFsES9W/q4LjFJXGIcUew98vu5uBYvfQFj/i7c=
Subject key identifier: 64:F9:69:94:CE:CD:01:E4:7D:32:1A:C7:36:94:53:22:36:FD:F9:07
Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial: 01899433EDD0D758215FE87A8593E310C79E
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/ZPlplM7NAeR9MhrHNpRTIjb9-Qc.roa
Signing time: Wed 26 Jul 2023 21:56:18 +0000
ROA not before: Wed 26 Jul 2023 21:56:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 139482
IP address blocks: 85.115.208.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 25 Sep 2023 13:10:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:94:33:ed:d0:d7:58:21:5f:e8:7a:85:93:e3:10:c7:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Validity
Not Before: Jul 26 21:56:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=64f96994cecd01e47d321ac73694532236fdf907
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:8c:a1:f1:3d:c8:f1:80:dc:60:38:60:c3:7b:
a8:8b:e7:0b:86:84:8d:3e:07:1f:f5:e6:16:b7:be:
d9:07:81:66:2a:75:aa:74:31:a6:a5:20:94:74:ec:
1c:be:0f:da:64:9d:56:a6:39:34:cb:02:3f:12:e9:
5c:43:f7:82:5d:71:8f:5d:6d:58:80:81:ca:05:6c:
50:d2:e0:95:d3:45:ed:43:33:9e:dc:d3:02:26:9b:
1f:3a:94:17:a7:51:04:3e:59:f9:7b:27:77:96:0e:
c4:07:5d:85:da:3c:3d:95:f7:3f:0e:ed:12:7f:ea:
0e:ef:a1:83:24:ed:d4:4f:b1:57:3e:78:2b:97:b5:
e9:b3:96:ad:f8:ce:30:46:48:87:79:f8:16:db:a2:
aa:bb:01:cf:d5:d9:09:1d:fa:8c:b1:c8:5c:ef:12:
af:35:42:9e:2a:30:3e:b8:9f:3c:81:4c:d6:d3:67:
6f:88:02:eb:6e:0c:73:7b:1f:b2:94:6e:56:a9:0e:
4c:8a:0d:76:d7:11:75:4c:b6:77:d4:9a:43:29:0a:
5d:aa:f4:e1:01:73:9d:a7:a4:0e:b8:cd:d8:82:b0:
0f:b3:0b:72:45:66:b1:5b:78:b1:4c:c1:b5:97:b4:
a5:4c:8d:51:f8:57:b3:2e:c9:c6:fc:2d:40:57:e5:
99:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:F9:69:94:CE:CD:01:E4:7D:32:1A:C7:36:94:53:22:36:FD:F9:07
X509v3 Authority Key Identifier:
keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/ZPlplM7NAeR9MhrHNpRTIjb9-Qc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.115.208.0/24
Signature Algorithm: sha256WithRSAEncryption
da:36:a2:a4:07:77:68:4c:3f:d6:3c:6e:3f:1e:e8:1f:40:78:
73:b1:a9:a6:5a:72:ae:34:aa:ff:c9:9b:ef:a3:1d:28:28:b0:
35:fa:a0:d1:b0:66:07:e1:8a:40:5c:90:1e:91:ba:be:36:64:
67:7c:45:b1:f7:55:9d:52:32:06:47:29:15:32:3b:b7:5c:d4:
14:50:31:80:16:3d:9b:8d:25:f0:11:7c:75:fb:a6:52:8d:72:
0e:4b:05:b0:7f:be:4a:94:33:5d:6b:50:e6:55:5a:7b:7a:8a:
73:1f:6e:e8:32:6c:65:5e:5b:66:7f:79:2c:d5:73:48:7d:90:
f0:0e:d0:88:59:09:14:20:8a:63:b6:86:91:fb:17:7e:24:02:
4e:8d:63:17:51:9b:1c:dc:bb:7d:d5:fa:cd:c2:2b:94:ea:63:
7d:64:b9:e8:09:df:2f:44:ce:a6:d8:e5:5c:32:ae:39:98:bb:
51:c5:12:c6:37:3f:11:26:82:f3:90:e6:60:78:46:db:26:8c:
0f:87:64:52:8c:5c:01:23:e2:a5:b0:a5:2c:c8:77:0b:79:63:
a1:ff:07:97:99:a1:3e:4f:d4:a4:af:fb:0f:70:a8:13:18:9f:
02:30:b4:29:8a:73:9f:77:33:6e:c3:ef:9a:40:eb:e1:6d:c3:
bd:3b:e6:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:06 2024 by rpki-client on console-fra.rpki-client.org