Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/zV7o3sdycqat06Znlq8_Oo5xrDk.roa
File: zV7o3sdycqat06Znlq8_Oo5xrDk.roa (raw, json)
Hash identifier: lYnBmorctCmf5Cslg0u2zvP9CBETUdVTxjSBrZH3iVc=
Subject key identifier: CD:5E:E8:DE:C7:72:72:A6:AD:D3:A6:67:96:AF:3F:3A:8E:71:AC:39
Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial: 01899433ECF83DF7AA25B12D12DA0D15B568
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/zV7o3sdycqat06Znlq8_Oo5xrDk.roa
Signing time: Wed 26 Jul 2023 21:56:18 +0000
ROA not before: Wed 26 Jul 2023 21:56:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 85.115.208.0/23 maxlen: 24
85.115.209.0/24 maxlen: 24
85.115.210.0/24 maxlen: 24
85.115.210.0/23 maxlen: 24
213.145.88.0/21 maxlen: 24
213.145.88.0/24 maxlen: 24
213.145.95.0/24 maxlen: 24
213.145.92.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 08 Aug 2023 09:53:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:94:33:ec:f8:3d:f7:aa:25:b1:2d:12:da:0d:15:b5:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Validity
Not Before: Jul 26 21:56:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cd5ee8dec77272a6add3a66796af3f3a8e71ac39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:8f:3a:45:e3:44:79:4c:b0:53:ad:ff:cd:9d:
c7:24:b2:1c:3d:78:12:cc:b7:f4:96:3e:fb:cd:fa:
9f:21:c1:11:19:11:6b:f8:eb:46:36:0c:41:92:8c:
b4:8b:51:4a:4e:ac:8c:95:13:98:23:5e:74:ff:f4:
05:05:d2:4b:35:6c:ab:6d:42:0f:18:1c:f6:bb:c1:
6a:fe:2d:34:ad:91:4d:90:3c:36:54:a0:42:d0:24:
18:4d:61:ad:18:e4:93:e3:5e:53:a7:b0:2c:72:68:
49:9f:34:fe:7b:14:2d:17:94:b3:4f:3f:47:cc:4d:
f1:15:e8:c2:84:7f:de:54:26:d5:fb:74:a8:50:77:
68:bb:0b:32:7d:28:55:17:0b:b0:05:39:ea:44:8a:
a5:ab:25:23:70:4b:28:6b:7f:4c:21:fc:55:84:90:
56:72:16:ff:e5:fa:e8:76:20:ff:a0:51:e8:55:94:
e5:58:af:88:fe:36:73:46:97:a5:0f:e5:28:b9:ae:
84:69:c7:49:a7:6d:b7:4f:81:7c:ea:b7:31:15:48:
9e:1b:ca:51:35:c6:0e:0a:f3:b2:93:6d:9d:88:d3:
c1:6d:5c:8a:70:2c:35:2d:d8:8f:5d:d3:95:db:23:
23:a1:85:7d:e8:0e:90:df:7c:37:fb:06:e4:93:45:
a0:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:5E:E8:DE:C7:72:72:A6:AD:D3:A6:67:96:AF:3F:3A:8E:71:AC:39
X509v3 Authority Key Identifier:
keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/zV7o3sdycqat06Znlq8_Oo5xrDk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.115.208.0/22
213.145.88.0/21
Signature Algorithm: sha256WithRSAEncryption
cf:ff:6c:d4:0d:ef:78:eb:07:8f:9b:a6:73:aa:35:3b:1f:78:
bb:43:4b:ac:3c:72:e4:cc:82:ad:25:52:3d:88:3a:7e:20:6c:
84:e2:b6:0f:69:e1:a9:67:78:0a:7b:c5:23:23:20:c5:e5:02:
68:50:9e:61:af:29:3f:d1:9a:38:09:7e:0e:cb:10:da:01:18:
8d:82:ef:d3:c5:fe:88:01:a2:bc:23:3d:6a:4b:98:06:c7:7a:
67:22:d6:94:8f:5b:71:e7:5f:53:e7:1e:e9:4a:ff:6f:00:f7:
dd:ac:1f:37:99:15:4a:55:7a:7c:1c:b2:b9:92:97:2a:05:18:
7d:b4:8b:cd:93:e0:28:c3:b2:82:d1:b7:65:b3:b4:ea:39:6b:
c3:4b:37:11:08:e4:9c:36:99:e3:b1:3a:7f:39:ff:68:35:4d:
d4:73:3f:5c:2a:73:dc:44:bf:a4:55:59:01:f2:d6:ee:77:8b:
8f:f1:91:a3:a5:be:a7:6d:a5:81:a6:12:38:4b:ba:e9:3d:d2:
4b:d0:33:0c:0b:f5:fc:8c:74:65:c1:9b:78:43:82:ef:37:9b:
a8:ce:a5:02:46:18:b7:04:48:36:69:6b:b2:55:1e:e4:cb:c0:
d6:12:1a:5e:af:0e:68:63:0c:92:06:f1:c3:48:06:07:b5:c2:
8e:e8:fe:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:12 2024 by rpki-client on console-ams.rpki-client.org