Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/p8F8JLwH2a_zpIi0XDV1m-2KCVE.roa
File: p8F8JLwH2a_zpIi0XDV1m-2KCVE.roa (raw, json)
Hash identifier: 1m0jfdtQHmd9u/zVB5Xyzo14yHDcGA2CjkmAFiNEiyU=
Subject key identifier: A7:C1:7C:24:BC:07:D9:AF:F3:A4:88:B4:5C:35:75:9B:ED:8A:09:51
Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial: 0187DBFED2F276EACD1AA64E50B79D969721
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/p8F8JLwH2a_zpIi0XDV1m-2KCVE.roa
Signing time: Tue 02 May 2023 10:25:23 +0000
ROA not before: Tue 02 May 2023 10:25:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 85.115.208.0/23 maxlen: 23
85.115.210.0/23 maxlen: 23
Validation: Failed, certificate revoked on Sun 07 May 2023 15:28:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:db:fe:d2:f2:76:ea:cd:1a:a6:4e:50:b7:9d:96:97:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Validity
Not Before: May 2 10:25:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a7c17c24bc07d9aff3a488b45c35759bed8a0951
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:1a:ef:27:b2:49:9c:2b:de:e5:1b:27:9c:b4:
e5:d0:73:d9:29:61:06:8c:d6:d1:1f:45:fa:94:90:
ca:35:c9:68:66:f5:87:97:3d:b5:66:ea:a0:bb:95:
47:f7:ad:7b:31:95:e0:a6:60:56:3f:43:de:71:ae:
4f:a2:4b:1a:72:36:fe:20:82:f9:45:1f:05:0e:42:
a9:7c:76:ec:0d:01:66:da:dd:46:4b:fc:38:e7:3a:
85:1d:eb:ca:ea:c4:a5:af:92:00:c2:d0:ab:41:65:
c5:ec:4a:61:72:2b:18:b7:18:34:d1:8a:51:a7:25:
bc:84:47:21:80:66:3f:c4:af:58:6a:e2:d7:59:3f:
d2:16:41:16:ec:b9:47:f9:9e:49:bf:a2:91:c0:b5:
16:42:55:ba:75:d8:f1:5d:1a:7b:2e:93:bb:e2:31:
4c:35:f8:d5:4e:39:0c:a7:99:02:ad:66:eb:fd:17:
62:a5:87:56:bc:2c:57:5b:f1:e3:cd:aa:09:ac:bb:
9c:c5:d9:51:5b:3c:07:70:3b:00:24:39:21:6d:b7:
e3:bc:8f:a1:7c:5f:c1:cd:2a:1e:6c:b7:f9:9d:72:
c9:96:d8:e5:07:4c:79:0b:c9:f4:8e:be:94:01:82:
a5:c9:ef:1c:2f:4d:af:f4:1d:ee:fc:75:02:03:ee:
d0:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:C1:7C:24:BC:07:D9:AF:F3:A4:88:B4:5C:35:75:9B:ED:8A:09:51
X509v3 Authority Key Identifier:
keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/p8F8JLwH2a_zpIi0XDV1m-2KCVE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.115.208.0/22
Signature Algorithm: sha256WithRSAEncryption
1a:09:79:82:df:79:27:59:3a:13:43:09:f1:45:5f:07:ef:24:
7e:bf:70:c9:d3:69:da:65:5f:77:3e:92:10:ab:c4:fa:77:96:
08:96:c9:a1:1e:1b:51:38:77:27:13:b3:8a:6e:ef:f3:d3:86:
72:9f:10:05:7d:70:2c:bf:f4:2e:d2:c0:65:03:24:98:2f:80:
92:f4:e9:17:82:5c:f0:fc:b5:26:8d:dd:40:8a:2d:e4:ac:f5:
77:a2:13:ee:ff:09:c4:19:81:73:3b:01:e2:b3:30:87:b2:4d:
15:c6:25:d5:fe:20:07:d3:ff:94:72:48:e3:b2:8d:26:26:47:
b8:69:53:92:0a:26:cb:3e:1a:e6:b6:21:6c:0b:be:4e:8f:ff:
70:0e:c5:47:58:08:c9:99:fc:b8:b6:59:f2:35:81:f4:8a:57:
ec:8b:63:64:2f:d8:c0:1f:af:e9:11:50:f2:9d:55:74:de:6e:
49:8b:5c:69:e3:8b:f0:b2:42:ab:54:8c:ce:5e:eb:28:fd:20:
59:5d:ef:02:88:a8:ac:56:c5:56:d5:bb:90:b2:c8:82:6e:e4:
d0:21:ed:ae:b0:0f:28:c1:a7:01:19:51:94:45:03:05:f3:f9:
fe:0c:d6:cc:56:58:45:bd:cc:00:6b:94:01:59:3e:35:ec:3e:
e7:ee:ba:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:06 2024 by rpki-client on console-fra.rpki-client.org