Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/cPtdhEd18cu1WLBUIP-JiyPFJ_s.roa
File: cPtdhEd18cu1WLBUIP-JiyPFJ_s.roa (raw, json)
Hash identifier: vUbdSBOBmtCd8nk+YSLVioNj9rjH7eTzMoKnumnjBW0=
Subject key identifier: 70:FB:5D:84:47:75:F1:CB:B5:58:B0:54:20:FF:89:8B:23:C5:27:FB
Certificate issuer: /CN=d2622fdec8fadfca58e7575c29f10e73ae775715
Certificate serial: 01856F79A240B89313ADFA4926F1F454E0BE
Authority key identifier: D2:62:2F:DE:C8:FA:DF:CA:58:E7:57:5C:29:F1:0E:73:AE:77:57:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0mIv3sj638pY51dcKfEOc653VxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/cPtdhEd18cu1WLBUIP-JiyPFJ_s.roa
Signing time: Sun 01 Jan 2023 22:35:20 +0000
ROA not before: Sun 01 Jan 2023 22:35:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31287
IP address blocks: 151.237.41.204/32 maxlen: 32
151.237.84.0/22 maxlen: 22
151.237.80.0/22 maxlen: 22
85.187.192.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:79:a2:40:b8:93:13:ad:fa:49:26:f1:f4:54:e0:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2622fdec8fadfca58e7575c29f10e73ae775715
Validity
Not Before: Jan 1 22:35:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=70fb5d844775f1cbb558b05420ff898b23c527fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:5d:1c:35:b7:92:34:49:79:6b:2f:dc:f4:ed:
56:f2:c7:9b:63:7d:0c:ca:d1:2d:a4:e1:70:27:0c:
00:fc:67:ec:98:9c:c4:4b:c8:1b:ad:4c:2d:b5:c2:
27:05:d3:06:8e:98:81:a8:0f:91:a2:91:0b:c2:4a:
56:a2:05:80:e8:fc:6d:d4:ef:53:93:a4:ca:d9:77:
53:4e:ba:1e:fa:a9:45:30:0d:28:d2:b6:32:c7:49:
a1:95:21:00:80:0a:f5:d3:a2:f3:e2:60:50:8f:21:
79:03:1d:3a:f4:b1:dd:3d:f3:8a:e9:11:79:20:19:
92:25:12:22:f8:dd:9c:2d:c0:c1:86:60:dc:3c:45:
22:c1:7d:56:f3:8d:1b:c4:af:8e:3d:e6:80:4b:11:
ae:d0:b4:89:29:30:6a:c6:cf:c2:10:19:cd:99:c6:
0c:8a:74:8f:ae:d2:7d:99:bc:4c:20:ef:11:3b:35:
92:1d:47:93:fe:49:82:39:d5:59:5c:d7:fe:9a:ac:
da:e9:fa:8f:53:ab:fa:0c:74:34:ce:d4:8c:11:c1:
99:e4:f8:8c:b4:7a:32:92:2c:56:88:bf:cb:aa:f2:
0b:6f:cd:8c:bb:a1:3a:61:6a:e0:08:44:7e:bd:c8:
70:69:ca:fd:34:f1:d3:87:3f:65:25:6a:09:be:1c:
0b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:FB:5D:84:47:75:F1:CB:B5:58:B0:54:20:FF:89:8B:23:C5:27:FB
X509v3 Authority Key Identifier:
keyid:D2:62:2F:DE:C8:FA:DF:CA:58:E7:57:5C:29:F1:0E:73:AE:77:57:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mIv3sj638pY51dcKfEOc653VxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/cPtdhEd18cu1WLBUIP-JiyPFJ_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.187.192.0/21
151.237.41.204/32
151.237.80.0/21
Signature Algorithm: sha256WithRSAEncryption
5d:65:db:60:8d:25:8f:6a:0f:45:4d:c0:c5:2f:f7:8e:79:76:
c3:44:14:2c:09:b1:dd:a6:f2:1f:d3:6a:fe:e3:d9:00:f9:3f:
74:34:32:c2:f2:7a:20:b0:f3:f3:01:a4:5d:6d:a1:c7:3b:92:
fa:e4:59:76:73:82:0d:95:2a:62:d1:15:ba:a6:4c:22:73:b9:
32:fd:99:58:c1:e9:4e:52:f7:87:85:a9:63:73:63:9f:95:5e:
48:4e:67:86:a4:89:e1:8d:24:c6:6c:6c:ac:d4:dd:f7:30:1b:
32:59:dd:ed:21:9b:ba:14:92:3f:91:97:73:67:07:4a:a7:5a:
4c:ea:0f:43:7c:f8:de:eb:62:91:16:96:5a:b4:5d:e2:ac:90:
ef:2c:77:79:a6:9d:8e:a2:cd:8c:9e:57:97:40:a6:50:aa:ec:
6f:a7:10:c1:d5:9b:d1:f5:bb:e4:aa:f8:d8:f0:c4:58:90:3e:
1d:b3:24:10:21:ea:68:72:c0:c9:aa:81:4c:e5:58:0f:e1:40:
cc:b1:b8:2c:ad:d9:22:39:6d:81:39:74:a9:0d:23:5f:37:dd:
de:38:0e:68:77:e7:07:96:5f:e2:1a:0c:45:76:e0:ef:a0:b8:
9f:30:fe:11:66:29:48:20:29:94:7c:b2:7d:9d:3e:4b:c0:94:
be:71:90:77
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAYVveaJAuJMTrfpJJvH0VOC+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyNjIyZmRlYzhmYWRmY2E1OGU3NTc1YzI5ZjEwZTczYWU3
NzU3MTUwHhcNMjMwMTAxMjIzNTIwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MGZiNWQ4NDQ3NzVmMWNiYjU1OGIwNTQyMGZmODk4YjIzYzUyN2ZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl10cNbeSNEl5ay/c9O1W8sebY30M
ytEtpOFwJwwA/GfsmJzES8gbrUwttcInBdMGjpiBqA+RopELwkpWogWA6Pxt1O9T
k6TK2XdTTroe+qlFMA0o0rYyx0mhlSEAgAr106Lz4mBQjyF5Ax069LHdPfOK6RF5
IBmSJRIi+N2cLcDBhmDcPEUiwX1W840bxK+OPeaASxGu0LSJKTBqxs/CEBnNmcYM
inSPrtJ9mbxMIO8ROzWSHUeT/kmCOdVZXNf+mqza6fqPU6v6DHQ0ztSMEcGZ5PiM
tHoykixWiL/LqvILb82Mu6E6YWrgCER+vchwacr9NPHThz9lJWoJvhwLwQIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFHD7XYRHdfHLtViwVCD/iYsjxSf7MB8GA1UdIwQY
MBaAFNJiL97I+t/KWOdXXCnxDnOud1cVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMG1JdjNzajYzOHBZNTFkY0tmRU9jNjUzVnhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS84NWYwMmUtZjFhYy00NGZiLTkyZWIt
ZjA1YWEyMjlkNjM4LzEvY1B0ZGhFZDE4Y3UxV0xCVUlQLUppeVBGSl9zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS84NWYwMmUtZjFhYy00NGZiLTkyZWItZjA1YWEyMjlkNjM4
LzEvMG1JdjNzajYzOHBZNTFkY0tmRU9jNjUzVnhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAATATAwQDVbvAAwUA
l+0pzAMEA5ftUDANBgkqhkiG9w0BAQsFAAOCAQEAXWXbYI0lj2oPRU3AxS/3jnl2
w0QULAmx3abyH9Nq/uPZAPk/dDQywvJ6ILDz8wGkXW2hxzuS+uRZdnOCDZUqYtEV
uqZMInO5Mv2ZWMHpTlL3h4WpY3Njn5VeSE5nhqSJ4Y0kxmxsrNTd9zAbMlnd7SGb
uhSSP5GXc2cHSqdaTOoPQ3z43utikRaWWrRd4qyQ7yx3eaadjqLNjJ5Xl0CmUKrs
b6cQwdWb0fW75Kr42PDEWJA+HbMkECHqaHLAyaqBTOVYD+FAzLG4LK3ZIjltgTl0
qQ0jXzfd3jgOaHfnB5Zf4hoMRXbg76C4nzD+EWYpSCAplHyyfZ0+S8CUvnGQdw==
-----END CERTIFICATE-----
Generated at Tue Jan 2 01:49:50 2024 by rpki-client on console-fra.rpki-client.org