Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/2xRCirTedVGbp_lZ1xIsOZ9aNLo.roa
File: 2xRCirTedVGbp_lZ1xIsOZ9aNLo.roa (raw, json)
Hash identifier: vRMPwrLPnakqRjgCqe7UHBVxgx3vgmKW+rfHYHCrKDM=
Subject key identifier: DB:14:42:8A:B4:DE:75:51:9B:A7:F9:59:D7:12:2C:39:9F:5A:34:BA
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 018779A530FFE9AC22BDA6419F6F9E7FC3BD
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/2xRCirTedVGbp_lZ1xIsOZ9aNLo.roa
Signing time: Thu 13 Apr 2023 08:04:41 +0000
ROA not before: Thu 13 Apr 2023 08:04:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 52209
IP address blocks: 85.133.233.0/24 maxlen: 24
85.133.237.0/24 maxlen: 24
85.133.234.0/24 maxlen: 24
85.133.241.0/24 maxlen: 24
85.133.242.0/24 maxlen: 24
85.133.250.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:79:a5:30:ff:e9:ac:22:bd:a6:41:9f:6f:9e:7f:c3:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Apr 13 08:04:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=db14428ab4de75519ba7f959d7122c399f5a34ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ff:f9:70:c5:89:b1:33:55:4b:07:1c:1c:49:
aa:d0:31:c7:7b:f7:94:e3:1b:e4:6b:83:d5:c1:a9:
33:26:b1:b8:38:17:a6:03:0a:5a:a5:03:b8:46:1e:
ab:10:c0:b6:21:4e:68:d7:60:02:f7:84:1e:62:4a:
72:33:3b:f1:2f:fb:97:3c:27:47:bc:d8:a2:97:f7:
82:7e:99:00:6b:1f:c6:8b:63:ff:77:87:d2:0d:38:
d3:37:9a:08:3f:f0:dd:ca:76:28:df:1e:94:e5:35:
b0:44:51:9f:df:a6:8f:f1:37:7c:2f:8f:ae:05:56:
b1:09:72:60:c3:9b:06:f9:f2:8c:7f:04:ce:dc:f3:
3a:0c:87:8c:45:7c:d6:b1:d0:71:3e:90:ad:ce:06:
26:3b:70:2e:3a:ba:11:38:b4:1f:28:23:a2:5f:0f:
be:5a:66:21:fb:4e:7d:8c:f0:84:71:28:c9:90:87:
12:b5:3e:28:8c:41:94:3b:cf:8d:6a:55:bb:8f:a2:
6a:0a:b0:8b:e7:01:88:65:d1:ac:b6:fc:d5:01:13:
95:ea:17:f1:15:53:88:c6:d5:4c:6f:85:4c:1e:ef:
cb:8a:83:51:e2:b2:93:37:17:9f:70:a4:33:3e:8b:
1c:91:df:ff:4e:a3:85:fd:c0:13:76:5b:7b:23:f7:
30:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:14:42:8A:B4:DE:75:51:9B:A7:F9:59:D7:12:2C:39:9F:5A:34:BA
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/2xRCirTedVGbp_lZ1xIsOZ9aNLo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.233.0-85.133.234.255
85.133.237.0/24
85.133.241.0-85.133.242.255
85.133.250.0/24
Signature Algorithm: sha256WithRSAEncryption
44:9f:aa:ba:0c:63:a5:51:33:ce:be:a4:c8:b4:93:53:30:e5:
a5:fe:fe:e0:73:d6:20:df:99:40:b5:b8:58:a5:01:64:37:48:
11:28:f8:c7:3e:49:15:2b:68:06:3b:32:58:07:58:75:6c:45:
79:49:7c:82:49:bf:97:0d:fc:19:77:65:3b:24:4b:fc:70:d4:
80:f1:95:e4:fd:37:31:57:d6:07:3e:ae:4f:54:9b:1c:11:ea:
08:cc:cb:44:1f:17:43:3e:21:7d:fd:59:29:b3:c1:5c:fb:c6:
1a:1a:b6:86:5e:c1:7f:48:e3:12:07:1e:a8:36:c7:d0:12:1f:
55:3b:a2:62:ba:b1:6d:23:2c:2c:04:9d:b3:b4:63:83:df:84:
53:77:78:87:d3:ed:76:00:63:67:0d:2e:39:db:43:07:35:dd:
69:70:b5:36:47:9a:82:52:b8:fd:e3:8e:b4:8b:e0:9e:c9:6a:
69:48:4c:b5:7a:bb:54:25:ba:6c:b4:18:58:3f:1d:85:0b:e6:
fd:4c:71:cf:31:99:06:78:ec:72:38:e6:de:5c:0f:57:ac:7f:
78:7d:d8:5e:30:05:86:51:7d:98:b7:26:6b:c5:04:07:db:23:
3d:d2:df:ef:d9:1e:27:6b:3f:50:14:50:7c:38:18:d2:c8:95:
b6:4b:e4:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:51 2023 by rpki-client on console.sobornost.net