Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/Xtdgf4s3RM6J_OWf8KhNkRufCmU.roa
File: Xtdgf4s3RM6J_OWf8KhNkRufCmU.roa (raw, json)
Hash identifier: WS37Gv3u71ObZYAnYZSJENf4pZDff/CTrJyzGofaXBg=
Subject key identifier: 5E:D7:60:7F:8B:37:44:CE:89:FC:E5:9F:F0:A8:4D:91:1B:9F:0A:65
Certificate issuer: /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Certificate serial: 018C8741FEF75614D6A40C615E0D3C0AB396
Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/Xtdgf4s3RM6J_OWf8KhNkRufCmU.roa
Signing time: Wed 20 Dec 2023 12:44:58 +0000
ROA not before: Wed 20 Dec 2023 12:44:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61418
IP address blocks: 85.153.172.0/24 maxlen: 24
85.153.185.0/24 maxlen: 24
85.153.181.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:30:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:87:41:fe:f7:56:14:d6:a4:0c:61:5e:0d:3c:0a:b3:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Validity
Not Before: Dec 20 12:44:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5ed7607f8b3744ce89fce59ff0a84d911b9f0a65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6f:ca:a1:74:a8:8f:73:e4:f6:c7:69:50:29:
4d:30:2a:4b:80:af:e3:27:a6:9e:74:ae:84:0a:be:
b3:30:0f:1d:c8:54:70:5f:53:86:7e:3c:c7:ba:0d:
98:0e:1e:13:86:d9:dd:82:8f:9e:84:23:96:93:7d:
e9:96:6c:d5:c4:0f:43:74:a5:7f:6d:04:39:6b:13:
2e:2e:fa:b2:bb:5f:5a:be:3d:8a:98:a0:39:37:f6:
44:24:3d:06:46:47:b8:e5:9a:85:ee:4f:83:16:d4:
fd:55:f3:cc:48:07:eb:b2:27:f5:c0:ac:3b:d1:39:
04:2c:47:64:c0:08:23:30:27:0f:82:66:84:8e:e1:
5f:90:ee:d5:47:b1:94:fe:03:5e:b7:51:b9:87:28:
91:5e:ba:84:fa:44:12:c6:88:9e:7a:a3:22:f0:2f:
59:fb:e1:c0:92:f9:6e:28:ef:b6:75:b4:e4:86:dd:
3d:3f:22:88:0e:24:59:4c:e3:fd:1a:99:27:dc:ed:
c8:ad:28:dc:24:69:0c:ec:aa:58:49:b7:fa:0b:ad:
25:97:7f:97:73:c1:10:5d:5f:2a:3d:b0:2a:1d:ac:
c4:86:d1:91:6c:38:7c:e2:09:53:fd:41:b3:54:7c:
4f:49:17:97:8e:61:ec:06:7d:8a:f7:3b:09:9c:3a:
06:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:D7:60:7F:8B:37:44:CE:89:FC:E5:9F:F0:A8:4D:91:1B:9F:0A:65
X509v3 Authority Key Identifier:
keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/Xtdgf4s3RM6J_OWf8KhNkRufCmU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.153.172.0/24
85.153.181.0/24
85.153.185.0/24
Signature Algorithm: sha256WithRSAEncryption
26:2e:e2:c9:a0:07:94:3f:30:13:48:6b:04:c9:b7:40:bc:e8:
35:5f:c2:c6:fa:53:2c:73:6a:02:d7:1e:bd:6b:3d:9b:fd:fb:
2d:01:33:74:ea:7d:a0:07:3a:b0:1b:84:ad:8c:02:72:9f:5e:
20:af:63:27:c9:94:45:22:da:1f:94:e7:e2:f7:7d:ad:5c:2c:
09:81:d1:70:f7:4c:0e:1a:d2:f6:b2:37:fa:c9:5e:3b:2c:4c:
40:2f:76:2f:d3:ac:fc:ae:4e:31:e2:43:bb:98:0b:cb:37:5b:
18:a3:39:88:be:ff:4c:bc:e8:1a:12:f0:cb:de:2f:c5:4e:4e:
fe:21:ba:bf:b4:40:1e:55:65:a9:c9:8c:cd:7a:50:73:ce:d4:
97:e1:3e:b7:1d:ff:61:b1:21:e0:06:a5:bc:88:9a:5a:4e:22:
93:20:40:49:d0:34:e6:5e:41:c3:71:e6:08:47:c5:f9:54:44:
92:ec:8d:0c:c5:0f:d8:4c:16:45:7c:ce:1c:43:38:89:a2:20:
21:a4:50:75:91:35:57:80:c2:ba:b9:85:3e:6f:e5:48:3c:8b:
05:96:db:39:5a:08:60:73:58:c5:74:c9:f4:15:6f:7d:88:b0:
49:40:21:39:a6:3d:84:18:ea:07:99:8f:6b:51:85:75:23:3c:
82:c3:29:52
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYyHQf73VhTWpAxhXg08CrOWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkNTljNDMyM2Y3NjdjZTRmZmM4NWRhYWQyMDhiOTBjMDRm
YmQzZTkwHhcNMjMxMjIwMTI0NDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZWQ3NjA3ZjhiMzc0NGNlODlmY2U1OWZmMGE4NGQ5MTFiOWYwYTY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArG/KoXSoj3Pk9sdpUClNMCpLgK/j
J6aedK6ECr6zMA8dyFRwX1OGfjzHug2YDh4Thtndgo+ehCOWk33plmzVxA9DdKV/
bQQ5axMuLvqyu19avj2KmKA5N/ZEJD0GRke45ZqF7k+DFtT9VfPMSAfrsif1wKw7
0TkELEdkwAgjMCcPgmaEjuFfkO7VR7GU/gNet1G5hyiRXrqE+kQSxoieeqMi8C9Z
++HAkvluKO+2dbTkht09PyKIDiRZTOP9Gpkn3O3IrSjcJGkM7KpYSbf6C60ll3+X
c8EQXV8qPbAqHazEhtGRbDh84glT/UGzVHxPSReXjmHsBn2K9zsJnDoGSwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFF7XYH+LN0TOifzln/CoTZEbnwplMB8GA1UdIwQY
MBaAFI1ZxDI/dnzk/8hdqtIIuQwE+9PpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalZuRU1qOTJmT1RfeUYycTBnaTVEQVQ3MC1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9mMDllY2YtZTgwNS00MTU4LWIzMTUt
ZjJiZTlmNmM2NjRjLzEvWHRkZ2Y0czNSTTZKX09XZjhLaE5rUnVmQ21VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni9mMDllY2YtZTgwNS00MTU4LWIzMTUtZjJiZTlmNmM2NjRj
LzEvalZuRU1qOTJmT1RfeUYycTBnaTVEQVQ3MC1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAVZmsAwQA
VZm1AwQAVZm5MA0GCSqGSIb3DQEBCwUAA4IBAQAmLuLJoAeUPzATSGsEybdAvOg1
X8LG+lMsc2oC1x69az2b/fstATN06n2gBzqwG4StjAJyn14gr2MnyZRFItoflOfi
932tXCwJgdFw90wOGtL2sjf6yV47LExAL3Yv06z8rk4x4kO7mAvLN1sYozmIvv9M
vOgaEvDL3i/FTk7+Ibq/tEAeVWWpyYzNelBzztSX4T63Hf9hsSHgBqW8iJpaTiKT
IEBJ0DTmXkHDceYIR8X5VESS7I0MxQ/YTBZFfM4cQziJoiAhpFB1kTVXgMK6uYU+
b+VIPIsFlts5Wghgc1jFdMn0FW99iLBJQCE5pj2EGOoHmY9rUYV1IzyCwylS
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:16 2024 by rpki-client on console-fra.rpki-client.org