Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/eFNagszo3Pc96cVnjdwSyHz8IM4.roa
File: eFNagszo3Pc96cVnjdwSyHz8IM4.roa (raw, json)
Hash identifier: zMVbFNnUhWcUfSJ09z/ImUAZJzAe8b0Y4aM3s5+CGrA=
Subject key identifier: 78:53:5A:82:CC:E8:DC:F7:3D:E9:C5:67:8D:DC:12:C8:7C:FC:20:CE
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 018AF55CF5BFE30022A07C3158A0FA1A08AB
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/eFNagszo3Pc96cVnjdwSyHz8IM4.roa
Signing time: Tue 03 Oct 2023 11:47:04 +0000
ROA not before: Tue 03 Oct 2023 11:47:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35913
IP address blocks: 85.254.140.0/24 maxlen: 24
85.254.84.0/23 maxlen: 23
85.254.124.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f5:5c:f5:bf:e3:00:22:a0:7c:31:58:a0:fa:1a:08:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Oct 3 11:47:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=78535a82cce8dcf73de9c5678ddc12c87cfc20ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:01:98:06:6e:72:a6:b4:75:f2:68:8a:e4:f0:
66:97:4c:61:62:b3:b2:9a:3c:24:30:ad:f0:b4:a9:
3f:d2:1b:af:73:17:e5:8f:b7:37:d5:51:c4:a6:4c:
cc:be:ea:b1:68:34:d4:8a:5b:20:9d:60:db:87:77:
34:0c:bc:ff:7c:e8:d5:84:00:a5:c7:03:5a:d8:20:
b8:3e:60:d1:da:84:9b:58:7b:e8:63:a0:e6:88:4f:
15:74:96:50:45:e1:d9:78:b1:94:60:6f:53:24:a6:
f3:35:e4:c6:7e:95:dd:be:92:57:c2:87:3d:35:34:
df:75:6f:b5:bf:60:92:cd:58:2e:ea:26:d8:04:9a:
6a:d2:e0:76:67:81:f4:c4:65:ed:4d:2e:d2:8e:d9:
35:ba:5c:74:ca:b0:29:54:3d:89:bb:3e:ea:5c:1f:
0e:a4:29:a0:0c:fb:36:b5:47:41:e1:dc:23:be:e3:
07:3e:3c:17:04:cc:c6:3a:f2:7c:60:5b:cb:51:93:
b0:e3:2c:88:5b:c9:ee:4a:1f:9e:16:4b:97:6e:6c:
b7:c9:a6:1b:79:bb:b6:3f:5c:f7:f3:c9:44:0b:65:
dc:17:8b:54:ac:fd:03:1e:fd:2e:9b:61:4e:90:c2:
b2:78:9c:c1:8c:4c:4f:9b:e2:28:ba:31:19:bb:0a:
02:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:53:5A:82:CC:E8:DC:F7:3D:E9:C5:67:8D:DC:12:C8:7C:FC:20:CE
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/eFNagszo3Pc96cVnjdwSyHz8IM4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.254.84.0/23
85.254.124.0/23
85.254.140.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:82:e4:ab:55:17:7b:94:a0:c9:bf:1b:d7:2b:03:07:3a:54:
27:5d:6c:05:9c:ab:2d:98:2d:46:4b:8c:28:a5:59:51:9d:14:
00:70:cd:c2:9e:25:8f:01:70:f9:dc:9b:6b:3a:f0:23:4c:b2:
15:df:95:db:96:90:89:49:bd:74:17:9a:dd:12:f8:fb:51:b4:
4e:77:35:9b:d9:4e:0d:5f:9d:6f:11:d4:32:93:5f:94:3f:09:
4f:e7:bb:7f:af:39:78:d8:80:48:ca:98:fb:c4:d0:90:2e:90:
9e:99:c9:f3:c4:8f:08:b7:e9:e1:9d:14:44:3a:df:e4:87:3b:
60:b1:65:ed:b9:20:7d:e3:1b:f5:83:5e:ea:07:85:94:2d:94:
91:e5:bf:2f:55:64:c0:11:a5:7a:58:c7:b4:62:23:2d:70:5f:
b4:d8:93:0d:94:15:d9:43:6b:71:e0:ba:db:58:da:f9:fb:61:
25:9f:09:28:4d:e2:ac:8f:6f:79:fe:36:68:51:33:80:5c:25:
a7:c7:67:0f:05:d7:64:25:0c:68:42:f6:00:3d:f2:6b:86:b1:
72:0c:8a:e4:d6:b4:a5:7b:d5:35:12:b5:c7:4e:da:c4:3c:6c:
a0:2d:0c:c7:c0:7b:75:6b:37:48:c6:31:d3:ad:6f:11:29:9f:
14:f0:2f:5b
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYr1XPW/4wAioHwxWKD6GgirMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiMDk1MmM4YmE4ZGFkYjFkMzRkZTZjNmE5Mzg2NGE2MDlm
YzQxZWMwHhcNMjMxMDAzMTE0NzA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ODUzNWE4MmNjZThkY2Y3M2RlOWM1Njc4ZGRjMTJjODdjZmMyMGNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlAGYBm5yprR18miK5PBml0xhYrOy
mjwkMK3wtKk/0huvcxflj7c31VHEpkzMvuqxaDTUilsgnWDbh3c0DLz/fOjVhACl
xwNa2CC4PmDR2oSbWHvoY6DmiE8VdJZQReHZeLGUYG9TJKbzNeTGfpXdvpJXwoc9
NTTfdW+1v2CSzVgu6ibYBJpq0uB2Z4H0xGXtTS7Sjtk1ulx0yrApVD2Juz7qXB8O
pCmgDPs2tUdB4dwjvuMHPjwXBMzGOvJ8YFvLUZOw4yyIW8nuSh+eFkuXbmy3yaYb
ebu2P1z388lEC2XcF4tUrP0DHv0um2FOkMKyeJzBjExPm+IoujEZuwoClwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFHhTWoLM6Nz3PenFZ43cEsh8/CDOMB8GA1UdIwQY
MBaAFKsJUsi6ja2x003mxqk4ZKYJ/EHsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAt
NTU1NGQ2ZTE2ODZmLzEvZUZOYWdzem8zUGM5NmNWbmpkd1N5SHo4SU00LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAtNTU1NGQ2ZTE2ODZm
LzEvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBVf5UAwQB
Vf58AwQAVf6MMA0GCSqGSIb3DQEBCwUAA4IBAQCjguSrVRd7lKDJvxvXKwMHOlQn
XWwFnKstmC1GS4wopVlRnRQAcM3CniWPAXD53JtrOvAjTLIV35XblpCJSb10F5rd
Evj7UbROdzWb2U4NX51vEdQyk1+UPwlP57t/rzl42IBIypj7xNCQLpCemcnzxI8I
t+nhnRREOt/khztgsWXtuSB94xv1g17qB4WULZSR5b8vVWTAEaV6WMe0YiMtcF+0
2JMNlBXZQ2tx4LrbWNr5+2ElnwkoTeKsj295/jZoUTOAXCWnx2cPBddkJQxoQvYA
PfJrhrFyDIrk1rSle9U1ErXHTtrEPGygLQzHwHt1azdIxjHTrW8RKZ8U8C9b
-----END CERTIFICATE-----
Generated at Tue Jan 2 06:31:48 2024 by rpki-client on console-ams.rpki-client.org