Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/4sY5OJ5kw41VNWdnjlfLiwCoMCU.roa
File: 4sY5OJ5kw41VNWdnjlfLiwCoMCU.roa (raw, json)
Hash identifier: ZFf+yNPGbLYgM4OmVHekFys7mlXPKg515FPfXL7eq40=
Subject key identifier: E2:C6:39:38:9E:64:C3:8D:55:35:67:67:8E:57:CB:8B:00:A8:30:25
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 018C870BCBB8834B1DFBC8582D082606782B
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/4sY5OJ5kw41VNWdnjlfLiwCoMCU.roa
Signing time: Wed 20 Dec 2023 11:45:46 +0000
ROA not before: Wed 20 Dec 2023 11:45:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29802
IP address blocks: 85.204.125.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:32:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:87:0b:cb:b8:83:4b:1d:fb:c8:58:2d:08:26:06:78:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: Dec 20 11:45:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e2c639389e64c38d553567678e57cb8b00a83025
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:63:dd:d1:1f:8c:fc:d5:98:e9:5c:87:07:5f:
4a:56:da:51:a6:66:17:cc:1e:d3:4c:f1:47:68:e7:
22:91:90:ba:4a:8c:28:9d:a8:4d:fc:e4:b5:98:70:
24:23:d9:98:d3:7a:9a:b7:a6:8a:15:b4:c6:81:70:
c3:1a:6a:00:f1:b6:1c:23:b4:74:54:0d:a0:c5:eb:
5c:49:0b:53:36:fd:70:47:f5:e9:bb:ac:b2:ae:21:
d8:12:96:02:53:59:62:8e:82:aa:e9:76:17:67:83:
43:67:ed:b7:b0:bf:d5:2e:b1:9b:e4:5d:9d:43:47:
be:96:40:5d:91:c5:09:66:d4:b8:52:bc:e2:f9:e9:
98:0b:87:72:9e:3d:f3:be:55:d5:5a:78:61:db:18:
bd:0a:5f:03:da:8a:17:95:5a:58:9e:3c:99:85:0c:
10:a5:2a:e7:4b:7c:91:e2:9e:4e:db:79:70:4a:fc:
4f:a2:44:5c:4b:f6:b9:d9:5b:52:12:ca:7e:f9:fd:
2c:2c:5a:ef:f2:bb:d8:5e:e3:7c:7d:f1:b5:62:83:
20:2d:5d:c0:ef:2b:4b:dc:38:dc:e9:a3:be:d1:e1:
85:16:18:a2:d0:93:80:ff:42:2a:97:74:58:ae:3a:
17:d9:2e:c7:71:02:5a:9d:ea:c7:74:2a:a4:f0:5c:
47:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:C6:39:38:9E:64:C3:8D:55:35:67:67:8E:57:CB:8B:00:A8:30:25
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/4sY5OJ5kw41VNWdnjlfLiwCoMCU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.125.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:bf:fa:04:c9:ad:5c:c8:2e:62:c5:a4:83:35:90:11:76:4f:
72:6b:48:31:de:9c:45:4c:dd:40:0b:39:2f:c1:2f:96:d4:1e:
fb:3d:dc:2d:d3:85:d6:48:ef:2d:34:5b:b4:19:62:19:89:6e:
20:8e:72:22:ab:f6:fe:de:74:42:df:6f:96:10:ee:72:8d:a0:
ad:ca:d4:33:d4:66:77:b8:9f:e8:66:75:ab:df:eb:d8:68:bc:
6e:40:95:b0:f4:5d:91:82:43:69:2a:26:6f:73:c4:04:16:01:
f8:14:5b:6a:dd:33:0d:ce:06:0b:58:ec:64:d5:99:eb:ad:33:
fe:d1:ae:f5:eb:f0:22:9c:f3:b6:21:98:b0:22:21:38:da:83:
2a:d4:68:3e:3a:bb:20:c3:e9:4b:9e:85:3b:56:e9:7c:0a:c7:
d8:7f:57:b9:4a:83:12:34:7b:28:ee:0f:52:79:38:47:fa:35:
6d:db:18:9c:89:8c:0b:b5:59:74:f3:b8:80:d6:75:70:41:fb:
c8:17:6e:3e:52:8b:c9:47:c7:12:77:10:2b:cf:70:38:74:8f:
dd:ec:65:b1:ae:45:df:a5:f7:1d:91:37:e1:95:4a:e1:13:6a:
15:29:10:d5:c6:2c:d0:dd:f6:68:33:07:28:8c:08:2b:17:c3:
55:ea:7d:97
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYyHC8u4g0sd+8hYLQgmBngrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlNTg5NTJkMzkzOTM1ZjBkM2JjZTgxNGZkOTE3OGQwNDY5
M2FlYjkwHhcNMjMxMjIwMTE0NTQ2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMmM2MzkzODllNjRjMzhkNTUzNTY3Njc4ZTU3Y2I4YjAwYTgzMDI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2Pd0R+M/NWY6VyHB19KVtpRpmYX
zB7TTPFHaOcikZC6SowonahN/OS1mHAkI9mY03qat6aKFbTGgXDDGmoA8bYcI7R0
VA2gxetcSQtTNv1wR/Xpu6yyriHYEpYCU1lijoKq6XYXZ4NDZ+23sL/VLrGb5F2d
Q0e+lkBdkcUJZtS4Urzi+emYC4dynj3zvlXVWnhh2xi9Cl8D2ooXlVpYnjyZhQwQ
pSrnS3yR4p5O23lwSvxPokRcS/a52VtSEsp++f0sLFrv8rvYXuN8ffG1YoMgLV3A
7ytL3Djc6aO+0eGFFhii0JOA/0Iql3RYrjoX2S7HcQJanerHdCqk8FxHdwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOLGOTieZMONVTVnZ45Xy4sAqDAlMB8GA1UdIwQY
MBaAFP5YlS05OTXw07zoFP2ReNBGk665MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2xpVkxUazVOZkRUdk9nVV9aRjQwRWFUcnJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9iMjZhYTgtYWNlNy00ZmE2LTllOGUt
NWQ0OGI2NWNlNTczLzEvNHNZNU9KNWt3NDFWTldkbmpsZkxpd0NvTUNVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9iMjZhYTgtYWNlNy00ZmE2LTllOGUtNWQ0OGI2NWNlNTcz
LzEvX2xpVkxUazVOZkRUdk9nVV9aRjQwRWFUcnJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVcx9MA0G
CSqGSIb3DQEBCwUAA4IBAQDSv/oEya1cyC5ixaSDNZARdk9ya0gx3pxFTN1ACzkv
wS+W1B77Pdwt04XWSO8tNFu0GWIZiW4gjnIiq/b+3nRC32+WEO5yjaCtytQz1GZ3
uJ/oZnWr3+vYaLxuQJWw9F2RgkNpKiZvc8QEFgH4FFtq3TMNzgYLWOxk1ZnrrTP+
0a716/AinPO2IZiwIiE42oMq1Gg+Orsgw+lLnoU7Vul8CsfYf1e5SoMSNHso7g9S
eThH+jVt2xiciYwLtVl087iA1nVwQfvIF24+UovJR8cSdxArz3A4dI/d7GWxrkXf
pfcdkTfhlUrhE2oVKRDVxizQ3fZoMwcojAgrF8NV6n2X
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:29 2024 by rpki-client on console-fra.rpki-client.org