Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/qUKyMEtiaWk8DjvNGeUK2AYolvM.roa
File: qUKyMEtiaWk8DjvNGeUK2AYolvM.roa (raw, json)
Hash identifier: mnMdtZyTUysh9Qo3HHPWzGuj/fAQw50YdwdT5wXFYhU=
Subject key identifier: A9:42:B2:30:4B:62:69:69:3C:0E:3B:CD:19:E5:0A:D8:06:28:96:F3
Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial: 0191C0C15C473353CD12B044E5A7676D339D
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/qUKyMEtiaWk8DjvNGeUK2AYolvM.roa
Signing time: Thu 05 Sep 2024 05:56:23 +0000
ROA not before: Thu 05 Sep 2024 05:56:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 85.115.208.0/23 maxlen: 24
213.145.68.0/23 maxlen: 23
213.145.70.0/23 maxlen: 23
213.145.70.0/24 maxlen: 24
213.145.71.0/24 maxlen: 24
213.145.72.0/21 maxlen: 24
213.145.82.0/23 maxlen: 24
213.145.84.0/23 maxlen: 23
213.145.84.0/24 maxlen: 24
213.145.86.0/23 maxlen: 23
213.145.86.0/24 maxlen: 24
213.145.88.0/21 maxlen: 24
213.145.88.0/23 maxlen: 24
Validation: Failed, certificate revoked on Fri 06 Sep 2024 05:56:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:c0:c1:5c:47:33:53:cd:12:b0:44:e5:a7:67:6d:33:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Validity
Not Before: Sep 5 05:56:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a942b2304b6269693c0e3bcd19e50ad8062896f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b8:e6:0d:29:4f:f3:be:03:2e:51:d1:94:97:
05:12:66:a9:97:0f:98:ca:94:ab:51:9c:eb:de:71:
18:7c:37:6d:a2:51:a7:cd:89:98:2a:b7:04:bb:dd:
fa:ce:3a:af:b5:34:49:7e:a0:30:61:1c:dc:51:16:
da:73:22:a7:8e:2e:0a:6c:f6:79:d4:87:ea:e4:07:
d4:07:a2:72:fb:fa:fb:f0:29:2b:16:a9:09:d9:95:
b0:b8:04:21:1a:32:74:a9:b0:bc:73:18:68:27:0b:
0d:1d:8f:3b:19:fc:79:de:75:03:0e:bf:1c:4b:fa:
af:c1:78:1e:2d:85:53:95:ab:d6:f4:91:10:a9:9c:
eb:c2:91:89:7d:40:b1:1b:62:d0:ba:39:f2:88:04:
ef:b6:4b:cb:91:ed:60:a2:17:ce:ce:40:e7:c9:30:
97:b1:5f:e6:a1:24:3b:48:87:c5:8f:9a:48:18:c2:
69:01:b0:ec:41:01:f2:0b:a7:ae:f6:18:6f:e7:cd:
30:35:5b:5a:6d:e5:4c:11:6e:98:68:5c:a7:82:62:
9a:0f:9d:32:ed:39:01:38:02:fb:ab:cf:a4:ba:b5:
c6:7e:b5:94:e6:ee:26:aa:66:d5:c9:b7:12:a1:3f:
c9:88:f1:f5:21:cc:50:f2:9e:af:16:b8:91:c4:81:
31:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:42:B2:30:4B:62:69:69:3C:0E:3B:CD:19:E5:0A:D8:06:28:96:F3
X509v3 Authority Key Identifier:
keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/qUKyMEtiaWk8DjvNGeUK2AYolvM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.115.208.0/23
213.145.68.0-213.145.79.255
213.145.82.0-213.145.95.255
Signature Algorithm: sha256WithRSAEncryption
6d:aa:6c:88:50:60:0d:27:97:c3:5d:e1:e9:07:db:5f:0a:03:
93:04:00:e0:d3:e1:5b:8d:86:31:60:07:84:7e:c6:cb:2f:ae:
2b:c7:66:c9:9d:82:be:e9:e9:0e:d5:e9:71:cb:34:83:a1:89:
fb:d8:0a:b1:67:96:06:3f:2b:bc:67:6a:69:fb:8f:53:48:34:
b3:a3:f6:2f:5d:90:34:bb:58:87:4c:67:e6:c0:41:17:5a:e2:
05:97:52:89:88:e4:3b:08:b6:2b:4a:db:c0:04:00:a3:73:58:
8b:d1:34:b5:fe:25:c6:49:ee:46:42:e4:28:87:25:06:e6:a4:
59:52:ce:01:bb:0a:a9:fa:92:c4:40:13:89:63:44:2b:99:7c:
95:3d:02:f0:37:c5:62:aa:41:94:d7:fe:c0:7b:e7:18:cc:e4:
8f:e5:0b:3a:c3:8f:4c:e9:72:c4:fe:24:94:e7:11:21:0d:92:
4b:24:b7:06:83:98:2f:4a:85:88:83:5a:5a:21:9a:9e:04:2f:
af:c2:cb:49:31:5d:7c:cb:0d:48:66:d1:0f:f7:fb:6c:28:23:
a7:97:ae:9c:9b:f7:c4:7e:e2:02:e4:36:73:c3:34:f5:f4:03:
5d:6c:0a:0b:8c:38:2e:1c:23:71:17:39:be:2c:9d:3e:fa:c1:
d0:13:a7:c2
-----BEGIN CERTIFICATE-----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Generated at Fri Sep 6 07:58:15 2024 by rpki-client on console-fra.rpki-client.org