Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/xT_4EjplkPy3GArK6NMWuRwgU9U.roa
File: xT_4EjplkPy3GArK6NMWuRwgU9U.roa (raw, json)
Hash identifier: yi/0BWqSEADBfFCTnXVylr2oJkvOA4/g24XxQNkaDcw=
Subject key identifier: C5:3F:F8:12:3A:65:90:FC:B7:18:0A:CA:E8:D3:16:B9:1C:20:53:D5
Certificate issuer: /CN=d45bdf6eec08370ae1f67e83f99b5ac1fe26872c
Certificate serial: 01872981DF9C39B51A164A54523C74785D1D
Authority key identifier: D4:5B:DF:6E:EC:08:37:0A:E1:F6:7E:83:F9:9B:5A:C1:FE:26:87:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1FvfbuwINwrh9n6D-Ztawf4mhyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/xT_4EjplkPy3GArK6NMWuRwgU9U.roa
Signing time: Tue 28 Mar 2023 18:36:29 +0000
ROA not before: Tue 28 Mar 2023 18:36:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213373
IP address blocks: 85.203.26.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:29:81:df:9c:39:b5:1a:16:4a:54:52:3c:74:78:5d:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45bdf6eec08370ae1f67e83f99b5ac1fe26872c
Validity
Not Before: Mar 28 18:36:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c53ff8123a6590fcb7180acae8d316b91c2053d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:72:48:fd:01:53:08:17:34:44:17:88:84:c8:
73:32:9b:f0:e4:11:71:ad:d9:a6:a3:9f:fd:35:29:
42:3b:1b:0d:f9:b4:e5:6a:39:a0:aa:3d:05:bf:90:
cc:e4:42:c2:15:0e:b0:fd:e3:28:fd:80:79:97:76:
2b:5d:12:ac:66:3c:a1:e3:7c:3a:17:b5:b4:12:f9:
cb:fb:cd:5e:bc:dd:94:3b:fa:08:fe:eb:3d:a1:81:
22:83:36:ed:91:82:31:88:2d:46:36:3d:03:a3:6d:
ad:7e:3c:ee:67:a9:c0:d7:13:65:4b:f8:66:46:e4:
1d:cc:f3:c3:e2:b1:5a:ca:56:da:c6:1e:cd:d3:5b:
db:de:9b:db:f3:67:0f:2e:cd:63:b9:69:9d:c3:0e:
22:32:1f:79:0f:30:e9:74:4d:f3:71:db:cb:eb:6c:
1d:44:e0:1e:27:eb:d0:84:d5:32:fc:fc:0c:ea:d4:
40:c7:d6:0c:c3:f7:e0:c7:bb:f0:94:2b:ee:d5:70:
0b:b9:9f:97:93:06:f8:00:47:06:fc:a2:a0:1e:89:
e8:0a:df:7f:11:c6:94:30:42:19:e6:85:25:85:e9:
63:cd:43:c6:6f:8f:46:0c:dd:94:42:0e:7b:08:54:
22:77:b8:a5:bd:ea:91:67:d8:eb:1f:58:38:08:46:
5f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:3F:F8:12:3A:65:90:FC:B7:18:0A:CA:E8:D3:16:B9:1C:20:53:D5
X509v3 Authority Key Identifier:
keyid:D4:5B:DF:6E:EC:08:37:0A:E1:F6:7E:83:F9:9B:5A:C1:FE:26:87:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FvfbuwINwrh9n6D-Ztawf4mhyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/xT_4EjplkPy3GArK6NMWuRwgU9U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/1FvfbuwINwrh9n6D-Ztawf4mhyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.203.26.0/24
Signature Algorithm: sha256WithRSAEncryption
50:86:bd:fb:f3:78:f6:42:7e:f8:b5:6b:a6:b3:f7:08:f5:25:
47:90:17:11:24:e9:21:78:56:37:85:ca:f2:70:95:c4:fb:65:
25:ec:1b:f1:f8:c6:41:cc:4d:bb:d0:ed:f7:a1:11:e2:f6:19:
58:2a:76:62:b8:8a:16:25:08:46:91:2b:5c:90:6d:aa:e9:f4:
dd:b7:c6:ca:2e:6f:c8:85:22:c1:8c:47:6d:66:b2:9e:90:0b:
ec:9a:27:30:c1:35:6e:d4:48:5f:71:0e:d4:44:67:a2:8d:86:
53:19:a1:b8:66:a1:2b:b2:c1:09:27:ca:04:16:c4:e5:11:5e:
be:8a:d8:a5:ee:ca:5d:e6:37:5e:c6:34:69:33:4f:b3:9a:e0:
96:97:a9:8a:31:16:cf:8d:b0:40:3e:c1:f8:bd:0b:e3:91:35:
49:d4:39:10:df:0a:78:34:67:eb:aa:24:38:37:1b:c5:37:e3:
66:55:68:64:4c:2e:cb:a4:b9:d6:c4:e5:aa:9e:5d:d3:d5:d9:
95:d6:ca:ff:8f:bf:a3:11:df:73:75:f5:f7:f7:68:e8:27:86:
ac:ab:44:56:eb:93:f2:19:85:59:90:59:07:4d:b1:41:3a:34:
d4:d2:e5:02:b3:2e:2a:df:c2:ab:0d:12:a9:f8:b6:fa:7c:15:
54:37:26:21
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYcpgd+cObUaFkpUUjx0eF0dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0NWJkZjZlZWMwODM3MGFlMWY2N2U4M2Y5OWI1YWMxZmUy
Njg3MmMwHhcNMjMwMzI4MTgzNjI5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNTNmZjgxMjNhNjU5MGZjYjcxODBhY2FlOGQzMTZiOTFjMjA1M2Q1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHJI/QFTCBc0RBeIhMhzMpvw5BFx
rdmmo5/9NSlCOxsN+bTlajmgqj0Fv5DM5ELCFQ6w/eMo/YB5l3YrXRKsZjyh43w6
F7W0EvnL+81evN2UO/oI/us9oYEigzbtkYIxiC1GNj0Do22tfjzuZ6nA1xNlS/hm
RuQdzPPD4rFaylbaxh7N01vb3pvb82cPLs1juWmdww4iMh95DzDpdE3zcdvL62wd
ROAeJ+vQhNUy/PwM6tRAx9YMw/fgx7vwlCvu1XALuZ+Xkwb4AEcG/KKgHonoCt9/
EcaUMEIZ5oUlheljzUPGb49GDN2UQg57CFQid7ilveqRZ9jrH1g4CEZfdQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMU/+BI6ZZD8txgKyujTFrkcIFPVMB8GA1UdIwQY
MBaAFNRb327sCDcK4fZ+g/mbWsH+JocsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUZ2ZmJ1d0lOd3JoOW42RC1adGF3ZjRtaHl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9lMmRmZmYtOGJhOC00YmNmLWFjMzEt
OTg0NjM4NTllY2MxLzEveFRfNEVqcGxrUHkzR0FySzZOTVd1UndnVTlVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS9lMmRmZmYtOGJhOC00YmNmLWFjMzEtOTg0NjM4NTllY2Mx
LzEvMUZ2ZmJ1d0lOd3JoOW42RC1adGF3ZjRtaHl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVcsaMA0G
CSqGSIb3DQEBCwUAA4IBAQBQhr3783j2Qn74tWums/cI9SVHkBcRJOkheFY3hcry
cJXE+2Ul7Bvx+MZBzE270O33oRHi9hlYKnZiuIoWJQhGkStckG2q6fTdt8bKLm/I
hSLBjEdtZrKekAvsmicwwTVu1EhfcQ7URGeijYZTGaG4ZqErssEJJ8oEFsTlEV6+
itil7spd5jdexjRpM0+zmuCWl6mKMRbPjbBAPsH4vQvjkTVJ1DkQ3wp4NGfrqiQ4
NxvFN+NmVWhkTC7LpLnWxOWqnl3T1dmV1sr/j7+jEd9zdfX392joJ4asq0RW65Py
GYVZkFkHTbFBOjTU0uUCsy4q38KrDRKp+Lb6fBVUNyYh
-----END CERTIFICATE-----
Generated at Tue Jan 2 15:20:34 2024 by rpki-client on console-ams.rpki-client.org