Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/2e_k_UX1lYAdx8QBJUd5mIrThEw.roa
File: 2e_k_UX1lYAdx8QBJUd5mIrThEw.roa (raw, json)
Hash identifier: r0IUlmUpcVZ9WBw0npHKT05KTmEV4OHihp1QehB4jA0=
Subject key identifier: D9:EF:E4:FD:45:F5:95:80:1D:C7:C4:01:25:47:79:98:8A:D3:84:4C
Certificate issuer: /CN=874bf8070cee4305d1a389e910fb5102bbcc1941
Certificate serial: 018A6405027EC599529D53E75F0E366A81F6
Authority key identifier: 87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/2e_k_UX1lYAdx8QBJUd5mIrThEw.roa
Signing time: Tue 05 Sep 2023 06:26:04 +0000
ROA not before: Tue 05 Sep 2023 06:26:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35053
IP address blocks: 85.237.69.0/24 maxlen: 24
85.237.68.0/24 maxlen: 24
85.237.70.0/24 maxlen: 24
85.237.84.0/22 maxlen: 22
85.237.88.0/24 maxlen: 24
85.237.64.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 18 Sep 2023 09:25:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:64:05:02:7e:c5:99:52:9d:53:e7:5f:0e:36:6a:81:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=874bf8070cee4305d1a389e910fb5102bbcc1941
Validity
Not Before: Sep 5 06:26:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d9efe4fd45f595801dc7c401254779988ad3844c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:10:5f:9a:91:6c:ab:cc:bd:c0:bb:3d:80:32:
fb:2e:2d:52:77:e3:da:e8:6b:b1:96:d1:09:8b:37:
92:f3:c6:6d:08:d3:e8:27:04:33:08:ad:fc:d6:d8:
64:37:53:12:73:a2:55:e7:73:0f:7a:03:c6:6e:f9:
81:6a:d7:72:c6:6f:57:b3:c7:a8:9d:e3:ec:63:e2:
be:59:53:4d:92:ca:22:3f:87:a2:a1:35:49:de:6d:
ec:b4:ac:bd:50:7a:48:6d:52:23:08:c7:7f:48:0b:
b2:1c:5a:54:46:0f:e3:ad:51:eb:23:32:72:70:56:
ea:64:83:07:9e:97:ea:67:e6:66:0b:c4:a6:5b:eb:
cc:ff:72:8e:d3:71:b3:01:4e:cc:6d:27:03:ff:f0:
7c:07:5f:e7:1f:6a:b2:dd:de:fa:5f:40:1d:58:5c:
d1:10:39:72:f4:30:fa:ea:3e:38:76:5d:7a:1c:c0:
f8:07:ac:bc:09:1c:a1:5c:d1:e7:9b:a9:d4:ed:4d:
1e:7b:e7:f2:8a:87:22:04:1d:97:ed:ac:36:e5:37:
df:b0:8a:79:c5:0a:e3:4c:a5:a2:40:66:d0:a4:98:
9e:9f:af:bb:fd:75:7a:4c:dd:01:c1:b1:1b:52:76:
68:17:d3:c5:71:e6:c1:ce:a6:d0:bd:52:33:fa:8d:
57:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:EF:E4:FD:45:F5:95:80:1D:C7:C4:01:25:47:79:98:8A:D3:84:4C
X509v3 Authority Key Identifier:
keyid:87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/2e_k_UX1lYAdx8QBJUd5mIrThEw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.64.0-85.237.70.255
85.237.84.0-85.237.88.255
Signature Algorithm: sha256WithRSAEncryption
a0:c6:90:bf:27:2c:8a:dd:62:84:6f:a4:32:81:83:d6:3c:3f:
21:c9:06:66:eb:83:73:41:08:1b:43:ce:39:f3:5b:50:e1:21:
67:6e:59:fb:1b:cb:5d:2b:ff:32:77:c8:4a:22:48:f9:05:5f:
51:31:cf:84:6f:20:3d:24:a3:bf:75:f5:e0:89:8c:bd:02:57:
15:65:b4:50:0a:51:16:dc:c1:90:7f:c2:91:ba:c6:58:57:a1:
0a:45:6c:c7:8b:de:06:a1:58:4a:88:f8:6a:57:26:c7:bd:16:
95:25:a2:66:11:9c:ef:38:f3:9c:31:f5:b2:23:35:af:4a:b9:
19:a5:83:a4:63:12:12:e7:56:aa:73:37:43:2d:fd:8c:ed:81:
bc:fd:af:30:75:d6:19:25:df:16:3d:13:cc:bb:fc:81:02:1c:
86:96:2b:74:80:ec:35:2e:79:e8:94:1b:61:7a:98:ae:4a:d7:
f6:ab:34:49:16:71:35:f7:71:3b:82:c6:af:94:b3:a8:08:5e:
f8:9a:cb:42:2e:34:f2:82:87:e1:ff:aa:f2:19:05:4f:fb:cb:
ce:19:68:3b:a9:00:1c:a6:42:4c:cf:ca:66:08:c2:22:43:93:
44:fd:a8:20:cc:c0:66:9a:21:71:d2:ad:7a:04:92:db:b6:1a:
24:84:39:c9
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgISAYpkBQJ+xZlSnVPnXw42aoH2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3NGJmODA3MGNlZTQzMDVkMWEzODllOTEwZmI1MTAyYmJj
YzE5NDEwHhcNMjMwOTA1MDYyNjA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOWVmZTRmZDQ1ZjU5NTgwMWRjN2M0MDEyNTQ3Nzk5ODhhZDM4NDRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAghBfmpFsq8y9wLs9gDL7Li1Sd+Pa
6GuxltEJizeS88ZtCNPoJwQzCK381thkN1MSc6JV53MPegPGbvmBatdyxm9Xs8eo
nePsY+K+WVNNksoiP4eioTVJ3m3stKy9UHpIbVIjCMd/SAuyHFpURg/jrVHrIzJy
cFbqZIMHnpfqZ+ZmC8SmW+vM/3KO03GzAU7MbScD//B8B1/nH2qy3d76X0AdWFzR
EDly9DD66j44dl16HMD4B6y8CRyhXNHnm6nU7U0ee+fyiociBB2X7aw25TffsIp5
xQrjTKWiQGbQpJien6+7/XV6TN0BwbEbUnZoF9PFcebBzqbQvVIz+o1XWwIDAQAB
o4ICHzCCAhswHQYDVR0OBBYEFNnv5P1F9ZWAHcfEASVHeZiK04RMMB8GA1UdIwQY
MBaAFIdL+AcM7kMF0aOJ6RD7UQK7zBlBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDB2NEJ3enVRd1hSbzRucEVQdFJBcnZNR1VFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9lZWUxMzEtYmI4Yy00ODg3LTg2OWIt
NmZlNGQ4ZmVkMTYwLzEvMmVfa19VWDFsWUFkeDhRQkpVZDVtSXJUaEV3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9lZWUxMzEtYmI4Yy00ODg3LTg2OWItNmZlNGQ4ZmVkMTYw
LzEvaDB2NEJ3enVRd1hSbzRucEVQdFJBcnZNR1VFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAATAcMAwDBAZV7UAD
BABV7UYwDAMEAlXtVAMEAFXtWDANBgkqhkiG9w0BAQsFAAOCAQEAoMaQvycsit1i
hG+kMoGD1jw/IckGZuuDc0EIG0POOfNbUOEhZ25Z+xvLXSv/MnfISiJI+QVfUTHP
hG8gPSSjv3X14ImMvQJXFWW0UApRFtzBkH/CkbrGWFehCkVsx4veBqFYSoj4alcm
x70WlSWiZhGc7zjznDH1siM1r0q5GaWDpGMSEudWqnM3Qy39jO2BvP2vMHXWGSXf
Fj0TzLv8gQIchpYrdIDsNS556JQbYXqYrkrX9qs0SRZxNfdxO4LGr5SzqAhe+JrL
Qi408oKH4f+q8hkFT/vLzhloO6kAHKZCTM/KZgjCIkOTRP2oIMzAZpohcdKtegSS
27YaJIQ5yQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:33 2024 by rpki-client on console-fra.rpki-client.org