Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/9EI2GyVBT6OW1bOgL2jOaIGktpc.roa
File: 9EI2GyVBT6OW1bOgL2jOaIGktpc.roa (raw, json)
Hash identifier: b3nPWJYlMe5A+4KI+pmvRzUuBIh+sHeQXT+R1kskZfY=
Subject key identifier: F4:42:36:1B:25:41:4F:A3:96:D5:B3:A0:2F:68:CE:68:81:A4:B6:97
Certificate issuer: /CN=b143fa703fbee04bbd91ce63a32148b36b8e55aa
Certificate serial: 01857139E10C411C566BFACD618A1CBADE31
Authority key identifier: B1:43:FA:70:3F:BE:E0:4B:BD:91:CE:63:A3:21:48:B3:6B:8E:55:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sUP6cD--4Eu9kc5joyFIs2uOVao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/9EI2GyVBT6OW1bOgL2jOaIGktpc.roa
Signing time: Mon 02 Jan 2023 06:44:56 +0000
ROA not before: Mon 02 Jan 2023 06:44:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35508
IP address blocks: 85.112.96.0/23 maxlen: 24
79.142.96.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:39:e1:0c:41:1c:56:6b:fa:cd:61:8a:1c:ba:de:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b143fa703fbee04bbd91ce63a32148b36b8e55aa
Validity
Not Before: Jan 2 06:44:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f442361b25414fa396d5b3a02f68ce6881a4b697
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:84:b1:b1:5c:52:85:3c:de:c9:ae:29:3b:5c:
e6:39:b1:90:1a:81:c0:29:58:cd:e8:11:71:0e:e2:
3c:3a:59:2b:91:2c:fe:25:a4:9e:df:0b:a2:61:da:
be:61:48:7c:98:48:55:06:5a:e5:58:cb:74:dd:9c:
c8:91:67:bb:3d:8a:b9:ea:bf:3d:92:bc:06:97:92:
01:4e:9c:b9:2b:2a:aa:1e:f2:5e:d4:40:8a:59:1c:
12:e8:6e:dc:ca:b7:64:94:d1:36:84:76:fa:bf:af:
52:d4:6c:c9:d1:58:f0:d1:41:39:50:83:c2:b5:69:
56:ae:92:13:cf:8c:28:7d:09:7d:d4:69:00:dd:2f:
1e:aa:0b:db:01:92:3b:f7:bd:5c:9a:bc:ab:09:d1:
5b:b1:08:1a:7e:05:63:fd:19:c3:20:16:3c:ef:93:
b1:6d:f9:25:e3:fb:c5:44:be:82:e4:28:a1:d7:dc:
40:54:4a:95:02:f2:c0:6d:fa:f5:71:0f:d9:3d:2a:
2d:a3:5f:ed:04:32:4f:45:3e:09:2d:7e:f5:c1:a8:
f2:06:c9:b9:a0:a1:a7:e8:11:93:06:58:88:aa:34:
94:93:7d:25:86:db:39:4b:8a:60:0f:dd:82:4b:7a:
24:d5:0e:e2:e6:d1:05:70:c8:e1:2f:52:75:87:68:
86:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:42:36:1B:25:41:4F:A3:96:D5:B3:A0:2F:68:CE:68:81:A4:B6:97
X509v3 Authority Key Identifier:
keyid:B1:43:FA:70:3F:BE:E0:4B:BD:91:CE:63:A3:21:48:B3:6B:8E:55:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUP6cD--4Eu9kc5joyFIs2uOVao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/9EI2GyVBT6OW1bOgL2jOaIGktpc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/sUP6cD--4Eu9kc5joyFIs2uOVao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.142.96.0/23
85.112.96.0/23
Signature Algorithm: sha256WithRSAEncryption
66:1f:a7:23:ed:c8:03:1e:10:08:c3:45:dc:8d:f3:56:bd:68:
43:bb:dc:09:02:8a:7a:8d:b7:4a:5a:cf:f7:b2:dd:cb:cd:45:
3e:87:1d:27:68:56:0b:45:d7:2e:d3:65:c1:14:60:6c:ec:4a:
24:01:fa:02:e7:9d:28:8e:40:ff:8f:55:f5:f0:51:2a:01:20:
f1:e5:c8:4e:32:68:dd:b6:93:bb:50:7a:02:e3:97:ec:df:f8:
19:c2:2f:9c:bb:d3:e1:42:67:06:da:3f:07:86:a9:65:ad:4d:
77:8e:79:2a:4c:d6:f7:5c:08:04:d9:de:01:ff:a1:3a:11:15:
f1:7e:2b:d3:34:ab:95:26:a6:ff:72:a8:91:1b:bd:af:44:53:
51:2e:28:60:8e:19:a7:ce:92:b9:39:3c:55:e1:be:e2:94:a9:
bb:3e:fd:e8:67:9c:1f:51:67:5d:0a:42:bd:49:50:96:db:cf:
94:25:ef:a6:c1:35:7e:d5:6e:9d:e0:23:d0:a9:db:9b:7f:d0:
f2:3b:48:c5:9e:e3:6f:d0:e4:8b:71:77:e4:cb:24:86:7c:a1:
2c:e6:b1:79:4c:3a:90:63:46:4a:cf:fc:08:a1:5f:43:b9:ef:
d4:49:8a:3c:25:e6:47:7f:4e:a8:e9:2c:ab:7e:fd:10:90:8a:
16:6a:26:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:20:50 2024 by rpki-client on console-fra.rpki-client.org