Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/pnyLK-cCrpC-aZcmFOyWa274QQ0.roa
File: pnyLK-cCrpC-aZcmFOyWa274QQ0.roa (raw, json)
Hash identifier: 1KFKPNAeLr8tpodqVnznn9n/rkyNL6UvSpc9mQwbJfI=
Subject key identifier: A6:7C:8B:2B:E7:02:AE:90:BE:69:97:26:14:EC:96:6B:6E:F8:41:0D
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 018CC493306EDABC7B4118FE3C2C4AB12713
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/pnyLK-cCrpC-aZcmFOyWa274QQ0.roa
Signing time: Mon 01 Jan 2024 10:30:29 +0000
ROA not before: Mon 01 Jan 2024 10:30:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25211
IP address blocks: 85.239.144.0/24 maxlen: 24
85.239.148.0/24 maxlen: 24
85.239.146.0/24 maxlen: 24
85.239.147.0/24 maxlen: 24
85.239.150.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 02 Aug 2024 14:15:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:30:6e:da:bc:7b:41:18:fe:3c:2c:4a:b1:27:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: Jan 1 10:30:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a67c8b2be702ae90be69972614ec966b6ef8410d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0a:51:34:a6:74:a3:73:24:b3:26:04:8e:e5:
93:a0:b2:b7:9a:c7:11:72:0e:23:6d:13:61:6d:a2:
08:cf:1f:cd:dc:5a:f5:c2:d2:fd:33:71:5f:0a:8b:
2a:82:5d:f6:71:2a:ab:d7:6e:16:24:99:93:99:93:
e5:75:bb:04:1f:95:ee:1e:72:c4:d7:40:c5:00:10:
f3:1c:cd:5f:80:d0:da:39:1a:cb:61:90:12:e3:07:
39:1d:c3:cc:cb:6d:f2:c2:6f:25:d1:f8:e0:88:0f:
8d:d1:98:4b:96:c9:ff:88:b0:08:84:ac:33:25:5c:
ec:8b:fb:6e:e7:88:89:62:59:06:d3:27:38:c2:0c:
69:8f:1d:41:20:fa:f8:7f:04:55:bc:c4:ee:9c:c7:
91:1a:7d:d4:d6:74:fc:2b:96:ad:98:9a:f7:99:11:
c6:78:3b:34:42:21:59:9d:31:03:94:f7:dd:62:17:
68:93:a1:f5:42:2e:7d:8a:73:96:93:de:6e:bd:92:
99:35:34:74:0f:b5:3b:56:f6:e4:9a:6d:57:3c:f3:
eb:84:d8:cd:9a:ef:2b:0b:f0:78:b4:28:c9:b7:51:
52:08:6e:04:18:b7:5f:fd:7c:8c:a0:fa:9a:4a:62:
ed:d8:8b:fe:5f:02:63:fa:81:36:56:19:e2:a4:ea:
e6:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:7C:8B:2B:E7:02:AE:90:BE:69:97:26:14:EC:96:6B:6E:F8:41:0D
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/pnyLK-cCrpC-aZcmFOyWa274QQ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.239.144.0/24
85.239.146.0-85.239.148.255
85.239.150.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:5c:39:9f:e2:40:2a:86:14:d8:23:1c:58:23:ef:69:47:4b:
42:42:6e:37:cc:75:31:fc:04:34:9f:24:aa:cc:98:61:5b:3f:
65:95:ac:27:31:1a:14:cd:8f:4b:7c:97:ca:11:15:ce:1b:b8:
2a:d9:d6:60:fa:1e:d7:82:63:2f:3d:c0:37:f2:3a:ab:c8:f6:
b3:50:94:f9:47:33:eb:a4:f0:3c:4e:ae:26:66:f8:00:d1:d6:
d0:f9:04:39:bc:19:7a:1c:8e:16:1e:52:eb:b7:4c:a7:5b:0e:
06:9b:30:a1:75:5c:64:e3:94:77:aa:63:3e:13:42:42:98:4d:
42:0b:73:f5:51:84:eb:36:95:24:56:63:dc:06:28:c1:07:b2:
28:bd:f8:83:1d:a9:53:7c:20:ca:5c:f9:26:cc:da:8d:89:07:
45:ab:ee:bf:b2:bc:c6:9f:95:65:4e:56:06:35:38:3f:9a:50:
d8:9c:9d:e1:df:5c:7b:37:80:3a:a8:10:c4:0c:a6:94:33:41:
d0:c9:99:63:51:b0:d3:2f:bf:c3:f9:7f:05:0b:d5:63:cd:70:
6a:bb:42:c4:6f:7e:b2:d4:1b:30:e4:be:ed:73:26:9a:d5:80:
8b:53:97:f6:cf:6e:6a:7c:04:d0:21:56:80:00:48:21:25:55:
76:81:59:01
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAYzEkzBu2rx7QRj+PCxKsScTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5ZDJkYWZmMWM1YmI2MWEwYWM4YjNjYWVhZDRiOGExZmEy
ODRkMGYwHhcNMjQwMTAxMTAzMDI5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNjdjOGIyYmU3MDJhZTkwYmU2OTk3MjYxNGVjOTY2YjZlZjg0MTBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgpRNKZ0o3MksyYEjuWToLK3mscR
cg4jbRNhbaIIzx/N3Fr1wtL9M3FfCosqgl32cSqr124WJJmTmZPldbsEH5XuHnLE
10DFABDzHM1fgNDaORrLYZAS4wc5HcPMy23ywm8l0fjgiA+N0ZhLlsn/iLAIhKwz
JVzsi/tu54iJYlkG0yc4wgxpjx1BIPr4fwRVvMTunMeRGn3U1nT8K5atmJr3mRHG
eDs0QiFZnTEDlPfdYhdok6H1Qi59inOWk95uvZKZNTR0D7U7Vvbkmm1XPPPrhNjN
mu8rC/B4tCjJt1FSCG4EGLdf/XyMoPqaSmLt2Iv+XwJj+oE2VhnipOrmXQIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFKZ8iyvnAq6QvmmXJhTslmtu+EENMB8GA1UdIwQY
MBaAFCnS2v8cW7YaCsizyurUuKH6KE0PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9lNWVhOTgtOTYwMS00YWRkLWE3Zjgt
NGY1N2Q5Y2Y1Y2FhLzEvcG55TEstY0NycEMtYVpjbUZPeVdhMjc0UVEwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9lNWVhOTgtOTYwMS00YWRkLWE3ZjgtNGY1N2Q5Y2Y1Y2Fh
LzEvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQAVe+QMAwD
BAFV75IDBABV75QDBABV75YwDQYJKoZIhvcNAQELBQADggEBAC9cOZ/iQCqGFNgj
HFgj72lHS0JCbjfMdTH8BDSfJKrMmGFbP2WVrCcxGhTNj0t8l8oRFc4buCrZ1mD6
HteCYy89wDfyOqvI9rNQlPlHM+uk8DxOriZm+ADR1tD5BDm8GXocjhYeUuu3TKdb
DgabMKF1XGTjlHeqYz4TQkKYTUILc/VRhOs2lSRWY9wGKMEHsii9+IMdqVN8IMpc
+SbM2o2JB0Wr7r+yvMaflWVOVgY1OD+aUNicneHfXHs3gDqoEMQMppQzQdDJmWNR
sNMvv8P5fwUL1WPNcGq7QsRvfrLUGzDkvu1zJprVgItTl/bPbmp8BNAhVoAASCEl
VXaBWQE=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:04:59 2025 by rpki-client