Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/c5drGLCdRTpv74KeBN4GxTK41xE.roa
File: c5drGLCdRTpv74KeBN4GxTK41xE.roa (raw, json)
Hash identifier: 084uK2MbmR4WdPFZQC8HEkfLe4eh+cnPfQm6vTSqc4c=
Subject key identifier: 73:97:6B:18:B0:9D:45:3A:6F:EF:82:9E:04:DE:06:C5:32:B8:D7:11
Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial: 018958AF50FA2EFC1369417CB1A5A74B7279
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/c5drGLCdRTpv74KeBN4GxTK41xE.roa
Signing time: Sat 15 Jul 2023 08:33:51 +0000
ROA not before: Sat 15 Jul 2023 08:33:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 85.115.211.0/24 maxlen: 24
85.115.208.0/23 maxlen: 24
85.115.210.0/23 maxlen: 24
85.115.210.0/24 maxlen: 24
213.145.88.0/21 maxlen: 24
213.145.92.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 17 Jul 2023 19:47:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:58:af:50:fa:2e:fc:13:69:41:7c:b1:a5:a7:4b:72:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Validity
Not Before: Jul 15 08:33:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=73976b18b09d453a6fef829e04de06c532b8d711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:81:7f:f5:1a:fa:45:d3:2c:74:96:c9:c3:64:
11:63:7b:9d:93:f4:8b:fc:e8:19:0c:01:af:43:04:
eb:84:10:02:b5:4a:cc:59:90:e2:66:00:bd:26:a4:
71:8e:2e:f1:2d:28:6f:9e:21:75:39:df:d3:3c:55:
2f:7f:38:52:1b:93:d1:9a:8d:d0:27:36:dd:20:a7:
f3:b9:a8:c4:ea:6f:04:d6:ae:68:e1:1d:91:44:bb:
70:68:fe:91:21:44:70:70:8c:13:a5:dc:9e:49:79:
0f:0c:1b:56:08:43:a6:e1:ea:51:88:3d:83:99:49:
e9:64:61:9a:ce:85:dd:3e:5f:6f:e6:38:d5:8f:80:
89:75:fe:b9:f3:1a:aa:c7:47:29:74:a5:1b:ac:f4:
df:34:05:9f:b8:46:ca:e3:33:af:48:6d:8b:69:a3:
a4:48:a0:cc:e2:85:c2:b8:46:58:7f:ec:5a:5b:60:
39:9a:36:58:6a:d2:3e:f7:1f:cf:41:0e:f5:0c:e9:
49:15:53:5f:36:5d:d5:a7:42:ad:cb:45:ab:12:44:
1d:1a:a8:8e:34:f0:88:97:c1:6d:27:bc:a7:56:42:
7c:3b:bc:4a:0d:3a:76:0f:c7:42:3f:b6:82:20:34:
73:fc:90:0b:64:dd:a2:b3:76:22:23:03:a0:a2:f4:
da:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:97:6B:18:B0:9D:45:3A:6F:EF:82:9E:04:DE:06:C5:32:B8:D7:11
X509v3 Authority Key Identifier:
keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/c5drGLCdRTpv74KeBN4GxTK41xE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.115.208.0/22
213.145.88.0/21
Signature Algorithm: sha256WithRSAEncryption
2c:4f:3e:16:e8:39:87:b8:eb:13:84:c6:b4:cf:e2:91:c7:f7:
59:1b:5c:c3:fb:a1:53:7c:cb:0c:61:d8:13:ed:e8:e1:0f:1e:
4b:5e:9e:4f:41:de:63:4e:41:43:6a:97:72:c5:6d:b2:24:f6:
bf:51:11:ed:27:11:ea:cf:47:ce:b8:af:35:e7:2c:53:25:93:
39:55:c4:4d:0d:ec:9a:ce:82:7b:17:65:30:0a:7c:ec:ac:e0:
bf:c4:7d:27:7b:f4:5d:72:c6:d7:7c:46:1a:d5:ef:b0:a8:b1:
4b:6e:c1:a5:88:14:90:d4:be:2b:1f:cf:53:a6:f8:8e:72:00:
c9:89:8b:eb:e5:e4:72:ca:88:c7:aa:87:ec:20:16:e3:0c:c3:
5d:0f:7b:d4:fe:2d:29:c1:c0:a7:49:31:ea:e0:bd:e1:d4:92:
e7:af:8a:81:82:ee:c0:d5:97:96:9a:94:05:e1:a4:04:0b:03:
fe:dc:37:1e:5d:40:d8:01:b0:b3:f7:8b:61:d9:e6:4f:f6:de:
fb:06:4d:76:31:ab:0b:40:f3:87:45:69:7c:1d:8e:3a:a7:41:
fd:41:61:b9:e8:51:15:ab:6c:6a:d1:dc:13:71:f6:e9:8e:c7:
e1:f5:4a:11:58:f3:06:5b:98:ce:db:03:3f:0a:cc:58:c6:4a:
af:7b:33:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:06 2024 by rpki-client on console-fra.rpki-client.org