Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/SD1E4V4OELJ_og-G2SEhbE4_zgA.roa
File: SD1E4V4OELJ_og-G2SEhbE4_zgA.roa (raw, json)
Hash identifier: l3r4AywLRvtlOdWBj5hrFfr0R9GzOjlMTMu/uSdnUjg=
Subject key identifier: 48:3D:44:E1:5E:0E:10:B2:7F:A2:0F:86:D9:21:21:6C:4E:3F:CE:00
Certificate issuer: /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Certificate serial: 01856F9DD74AD48EC271F8CA0DC7CCC931FB
Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/SD1E4V4OELJ_og-G2SEhbE4_zgA.roa
Signing time: Sun 01 Jan 2023 23:14:53 +0000
ROA not before: Sun 01 Jan 2023 23:14:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212805
IP address blocks: 85.153.146.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:30:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:9d:d7:4a:d4:8e:c2:71:f8:ca:0d:c7:cc:c9:31:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Validity
Not Before: Jan 1 23:14:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=483d44e15e0e10b27fa20f86d921216c4e3fce00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:89:f7:68:0b:e1:b3:64:1f:c5:ae:c5:ef:92:
97:06:40:ad:a5:0f:a4:b1:0d:e4:85:1e:16:03:22:
52:08:09:ef:93:16:70:84:a5:7c:8c:36:b9:c0:f8:
57:bb:88:5d:ee:78:17:43:ba:0c:f5:e8:b7:5d:73:
1f:1e:fc:f8:e7:6f:9e:02:5d:57:cb:18:ab:f4:71:
9a:ce:ae:82:88:aa:c5:47:34:ec:e8:2d:ed:c1:49:
67:01:9e:de:05:b7:41:e9:b7:e4:e0:dd:64:71:30:
78:32:65:8f:cd:28:b0:90:24:3d:df:47:c3:26:69:
23:d5:e3:2b:18:6d:4e:05:50:20:8c:42:42:16:bd:
3f:9c:95:0f:70:50:34:c6:2f:d7:ff:02:fe:d6:18:
e2:12:33:3c:48:fa:8c:d6:4a:26:e8:fe:50:d7:94:
b6:a0:d0:c6:cd:60:cf:63:91:dc:6c:fe:bf:5d:2d:
93:ec:9f:bd:8a:b8:95:1a:6d:af:c0:e3:00:19:e1:
9d:50:dd:d2:0b:ec:ea:31:53:7c:69:69:3a:b8:a2:
18:25:f6:38:e9:34:3d:ec:22:e4:b0:f0:09:9d:62:
80:2e:08:5f:0e:61:43:71:94:1f:5a:49:32:1f:f1:
04:ef:c8:c0:c8:b2:58:54:2f:d3:90:0c:0f:f1:e7:
76:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:3D:44:E1:5E:0E:10:B2:7F:A2:0F:86:D9:21:21:6C:4E:3F:CE:00
X509v3 Authority Key Identifier:
keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/SD1E4V4OELJ_og-G2SEhbE4_zgA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.153.146.0/24
Signature Algorithm: sha256WithRSAEncryption
12:12:34:51:d3:8f:73:66:2d:73:8c:30:d2:08:e5:9d:0f:e9:
b4:b9:cf:0a:e4:77:4a:a7:75:6b:12:d9:86:7b:4b:99:5e:aa:
17:b7:c7:3e:74:5d:63:a8:aa:ea:30:5a:fe:55:31:9a:7d:3b:
53:65:21:4e:b0:01:47:bd:f2:c1:f8:b1:e9:16:3b:b6:a9:a5:
9b:55:a2:2b:c7:19:6e:2b:44:18:07:92:3c:04:40:6f:84:c0:
63:10:6d:72:30:b0:ef:95:d9:84:47:29:b9:44:de:df:cb:54:
34:1a:5d:75:5c:77:0a:35:0e:15:0d:e6:76:c7:19:ce:51:3e:
05:f9:fb:37:6f:39:39:34:13:d0:0d:9e:7b:b4:49:be:58:ca:
06:66:ea:a4:6a:41:30:49:04:a1:c6:cb:12:a7:fb:3d:e7:7f:
99:8a:8c:2d:42:a7:4c:bb:ac:32:36:34:2c:a0:d9:09:f7:3d:
9c:14:5d:94:98:a2:a6:67:eb:b9:94:dd:ae:fd:c9:40:0a:4f:
80:cb:25:e6:60:58:e5:ae:34:af:7e:cd:86:90:51:47:67:30:
95:c0:78:2c:d2:3f:89:12:ef:8a:5a:26:e3:fb:5c:8b:69:eb:
1a:6c:92:d7:9a:1c:71:44:7c:70:b2:1a:37:c2:4d:08:97:03:
79:ec:3f:f0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvnddK1I7CcfjKDcfMyTH7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkNTljNDMyM2Y3NjdjZTRmZmM4NWRhYWQyMDhiOTBjMDRm
YmQzZTkwHhcNMjMwMTAxMjMxNDUzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ODNkNDRlMTVlMGUxMGIyN2ZhMjBmODZkOTIxMjE2YzRlM2ZjZTAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgIn3aAvhs2Qfxa7F75KXBkCtpQ+k
sQ3khR4WAyJSCAnvkxZwhKV8jDa5wPhXu4hd7ngXQ7oM9ei3XXMfHvz452+eAl1X
yxir9HGazq6CiKrFRzTs6C3twUlnAZ7eBbdB6bfk4N1kcTB4MmWPzSiwkCQ930fD
Jmkj1eMrGG1OBVAgjEJCFr0/nJUPcFA0xi/X/wL+1hjiEjM8SPqM1kom6P5Q15S2
oNDGzWDPY5HcbP6/XS2T7J+9iriVGm2vwOMAGeGdUN3SC+zqMVN8aWk6uKIYJfY4
6TQ97CLksPAJnWKALghfDmFDcZQfWkkyH/EE78jAyLJYVC/TkAwP8ed2HQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEg9ROFeDhCyf6IPhtkhIWxOP84AMB8GA1UdIwQY
MBaAFI1ZxDI/dnzk/8hdqtIIuQwE+9PpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalZuRU1qOTJmT1RfeUYycTBnaTVEQVQ3MC1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9mMDllY2YtZTgwNS00MTU4LWIzMTUt
ZjJiZTlmNmM2NjRjLzEvU0QxRTRWNE9FTEpfb2ctRzJTRWhiRTRfemdBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni9mMDllY2YtZTgwNS00MTU4LWIzMTUtZjJiZTlmNmM2NjRj
LzEvalZuRU1qOTJmT1RfeUYycTBnaTVEQVQ3MC1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVZmSMA0G
CSqGSIb3DQEBCwUAA4IBAQASEjRR049zZi1zjDDSCOWdD+m0uc8K5HdKp3VrEtmG
e0uZXqoXt8c+dF1jqKrqMFr+VTGafTtTZSFOsAFHvfLB+LHpFju2qaWbVaIrxxlu
K0QYB5I8BEBvhMBjEG1yMLDvldmERym5RN7fy1Q0Gl11XHcKNQ4VDeZ2xxnOUT4F
+fs3bzk5NBPQDZ57tEm+WMoGZuqkakEwSQShxssSp/s953+ZiowtQqdMu6wyNjQs
oNkJ9z2cFF2UmKKmZ+u5lN2u/clACk+AyyXmYFjlrjSvfs2GkFFHZzCVwHgs0j+J
Eu+KWibj+1yLaesabJLXmhxxRHxwsho3wk0IlwN57D/w
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:16 2024 by rpki-client on console-fra.rpki-client.org