Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/e0kK6w9I_Ix-AMtp3CbEsh2Yw88.roa
File: e0kK6w9I_Ix-AMtp3CbEsh2Yw88.roa (raw, json)
Hash identifier: A35W9LVYob087u/QcWCy9NuXk0ICYzOrGqEa3WRtWFI=
Subject key identifier: 7B:49:0A:EB:0F:48:FC:8C:7E:00:CB:69:DC:26:C4:B2:1D:98:C3:CF
Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial: 01860DB0BE086D76BB6E6940E6C0C9AC6C60
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/e0kK6w9I_Ix-AMtp3CbEsh2Yw88.roa
Signing time: Wed 01 Feb 2023 15:55:32 +0000
ROA not before: Wed 01 Feb 2023 15:55:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 85.115.208.0/23 maxlen: 24
85.115.210.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 May 2023 09:28:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:0d:b0:be:08:6d:76:bb:6e:69:40:e6:c0:c9:ac:6c:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Validity
Not Before: Feb 1 15:55:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7b490aeb0f48fc8c7e00cb69dc26c4b21d98c3cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:88:13:d5:e1:55:c4:b5:b0:54:d6:b0:af:1b:
a9:a4:b9:7e:6d:38:75:4e:d6:03:45:49:64:ec:d2:
44:4c:c4:b6:17:ca:b7:d7:6a:72:fd:0b:a2:ab:50:
9b:eb:a4:39:64:4f:b7:9a:04:ff:a3:fe:fa:d5:be:
ca:ff:d9:54:33:c6:1a:0f:2f:86:a2:38:44:05:14:
2d:34:48:a6:93:c0:d4:f5:6f:77:c0:79:fe:c3:a0:
ab:70:62:ec:ad:c6:87:d6:fe:0e:40:c6:94:66:66:
1b:6d:a3:19:71:72:26:13:a2:4a:f5:28:6f:72:24:
95:20:77:06:24:62:8c:f6:a0:c5:56:80:ed:28:9f:
26:89:5d:7c:1d:36:27:dc:c1:14:c7:20:cb:a3:a6:
27:de:8f:eb:34:88:fc:b3:a3:c3:9c:cd:a8:6e:cc:
03:10:91:69:6a:5c:07:bd:4e:79:03:42:db:68:e6:
7f:96:0a:b0:1f:00:66:43:a4:f1:39:74:e9:3f:81:
60:00:ba:10:cf:7c:7e:95:45:aa:d2:01:a0:6f:01:
27:1d:34:22:93:2a:7f:54:80:12:61:20:25:a8:89:
4b:66:c9:c9:49:a6:b1:c3:45:c1:d5:e9:d2:ae:42:
5c:a2:d4:10:4a:8d:29:e6:1b:d0:08:f8:86:f4:e8:
f6:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:49:0A:EB:0F:48:FC:8C:7E:00:CB:69:DC:26:C4:B2:1D:98:C3:CF
X509v3 Authority Key Identifier:
keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/e0kK6w9I_Ix-AMtp3CbEsh2Yw88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.115.208.0/22
Signature Algorithm: sha256WithRSAEncryption
22:86:80:f7:e9:0b:03:43:05:fe:2a:05:26:dc:02:3c:0e:36:
11:f2:c8:91:43:62:0c:bb:ed:89:b0:07:3a:6f:ab:34:c4:f5:
dd:f9:f7:26:5b:89:0d:0d:fd:06:de:a7:c3:2b:26:9a:7e:05:
7d:b5:2f:9e:9e:d7:c7:55:e4:e3:6d:8c:d9:44:42:98:d7:c5:
1d:6d:56:1d:e6:0a:31:07:e4:37:8d:32:7a:c7:37:17:51:0a:
84:ad:e7:9b:2f:e3:78:80:a3:ee:33:2c:8e:2a:6b:2c:5a:39:
03:70:9f:81:23:23:f4:ac:ea:e9:43:b9:09:01:10:9d:dd:75:
c3:4b:01:c9:40:c2:0c:99:3d:b9:96:3c:b3:0b:9d:2d:8c:1a:
60:5f:aa:f1:0d:93:3b:32:8b:4a:9e:e7:d9:e3:71:bb:52:0f:
c5:b7:39:c1:0b:c8:04:f8:00:f2:1d:43:1e:60:f9:70:ee:1d:
1c:b5:d7:27:4d:6b:b7:b2:d9:42:5c:00:f8:bb:d4:91:95:19:
47:00:fd:52:22:2a:f6:68:fd:96:48:7d:89:ee:c7:fb:20:2a:
94:e8:40:7b:c3:a3:5d:9f:5e:f4:e2:42:06:ff:6d:a4:6f:0b:
04:1b:79:75:3d:09:72:3a:a9:fe:94:1e:77:bd:87:a6:40:3b:
5d:9e:57:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:12 2024 by rpki-client on console-ams.rpki-client.org