Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/FV-7Zf-vLd_4DhrJuPZ55Gvk_Zs.roa
File: FV-7Zf-vLd_4DhrJuPZ55Gvk_Zs.roa (raw, json)
Hash identifier: KpP506g42EtnVtmpyPs965At9GynKmVPR0xqDrxT+WY=
Subject key identifier: 15:5F:BB:65:FF:AF:2D:DF:F8:0E:1A:C9:B8:F6:79:E4:6B:E4:FD:9B
Certificate issuer: /CN=e7f881401abacc88c941fdf740f1ab1536f05dba
Certificate serial: 018CCA2BBB3117C470DE936DBBF624AA6B9D
Authority key identifier: E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/FV-7Zf-vLd_4DhrJuPZ55Gvk_Zs.roa
Signing time: Tue 02 Jan 2024 12:35:12 +0000
ROA not before: Tue 02 Jan 2024 12:35:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212974
IP address blocks: 85.248.37.0/24 maxlen: 24
85.248.36.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 19:49:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:bb:31:17:c4:70:de:93:6d:bb:f6:24:aa:6b:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7f881401abacc88c941fdf740f1ab1536f05dba
Validity
Not Before: Jan 2 12:35:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=155fbb65ffaf2ddff80e1ac9b8f679e46be4fd9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2e:94:f2:73:00:de:05:38:6c:85:e5:a1:d6:
6c:0d:c9:5a:35:42:5b:c1:a1:4d:eb:ce:36:63:a0:
e2:a2:b0:6e:20:c7:df:4d:5e:9f:00:23:bb:1f:c9:
9f:47:ab:09:ae:8c:9f:1d:17:4f:62:0c:ea:dd:73:
24:76:cc:a3:5b:9c:e5:cb:e0:3b:c6:56:9f:a1:ee:
7e:3f:9a:0a:66:f8:f5:f4:65:6a:51:6b:df:d2:f7:
fc:ab:de:0d:dd:89:1a:3a:b6:c6:3f:ed:96:d7:bb:
3b:ad:87:8c:03:b0:25:b3:6d:1d:8a:dc:ef:ce:9d:
d8:4c:c4:69:e5:fb:67:27:38:49:d1:a7:df:b1:e5:
84:33:ed:cc:09:b6:0c:be:bf:d4:28:7f:d2:a6:87:
76:3b:8e:ed:ba:28:78:4f:00:ac:be:2b:e7:3c:e4:
b2:5c:23:af:9d:5a:a2:a3:b6:ef:d9:d9:8f:33:e0:
40:97:4c:6c:38:8f:a9:7b:cc:76:91:f2:a3:62:75:
6f:de:16:ef:58:b0:58:ea:af:57:88:b0:36:ff:a9:
fa:02:31:3b:d6:2f:cf:52:48:dd:8b:5c:eb:42:b4:
cf:7d:a2:8f:fa:2a:49:ee:ae:40:3b:a6:0e:24:30:
5a:9a:6a:5d:4d:cc:df:8b:2c:2b:38:2e:c1:d7:20:
a7:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:5F:BB:65:FF:AF:2D:DF:F8:0E:1A:C9:B8:F6:79:E4:6B:E4:FD:9B
X509v3 Authority Key Identifier:
keyid:E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/FV-7Zf-vLd_4DhrJuPZ55Gvk_Zs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.248.36.0/23
Signature Algorithm: sha256WithRSAEncryption
1e:0a:99:bf:ee:f7:0a:30:95:c6:52:15:6f:9e:8a:eb:36:b6:
44:c8:50:03:dc:79:4b:e3:ec:3a:c2:63:83:46:49:fc:d2:4b:
31:fe:c3:14:b8:aa:88:e5:c1:1d:37:20:00:4f:bb:5e:ff:1a:
6c:52:81:8a:15:34:05:38:56:c2:4c:b8:26:bf:bf:89:da:7e:
1f:43:d1:a9:8d:95:07:ca:99:64:51:99:ae:4b:bd:4a:08:38:
2b:ec:30:25:83:16:00:5f:1d:ab:16:ae:57:76:1c:d0:27:d8:
c6:bc:6a:2d:47:b1:55:2b:a4:af:40:7f:2b:91:e5:4b:2a:f7:
47:9b:44:a1:41:2b:3b:06:1e:ae:15:d6:f6:e6:12:3c:ea:c2:
7f:aa:17:69:11:e9:68:11:bd:67:74:e0:ae:32:79:cb:ff:ed:
ca:3c:b8:28:ac:e5:ee:26:ed:a1:db:f8:58:31:2d:a4:5b:a9:
27:68:06:a9:80:5b:9b:9c:d3:03:c7:f2:5a:67:31:9b:41:be:
6f:49:6c:b0:51:7e:c9:a0:32:71:67:1e:2c:50:3d:36:c6:ef:
ce:75:da:11:6f:ba:67:37:0b:b4:b3:0b:90:66:67:5d:aa:ba:
d3:f6:85:e0:14:30:1b:54:de:cb:b3:97:ba:d0:b3:54:e6:1b:
d8:4b:02:c7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzKK7sxF8Rw3pNtu/YkqmudMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3Zjg4MTQwMWFiYWNjODhjOTQxZmRmNzQwZjFhYjE1MzZm
MDVkYmEwHhcNMjQwMTAyMTIzNTEyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNTVmYmI2NWZmYWYyZGRmZjgwZTFhYzliOGY2NzllNDZiZTRmZDliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAni6U8nMA3gU4bIXlodZsDclaNUJb
waFN6842Y6DiorBuIMffTV6fACO7H8mfR6sJroyfHRdPYgzq3XMkdsyjW5zly+A7
xlafoe5+P5oKZvj19GVqUWvf0vf8q94N3YkaOrbGP+2W17s7rYeMA7Als20ditzv
zp3YTMRp5ftnJzhJ0affseWEM+3MCbYMvr/UKH/Spod2O47tuih4TwCsvivnPOSy
XCOvnVqio7bv2dmPM+BAl0xsOI+pe8x2kfKjYnVv3hbvWLBY6q9XiLA2/6n6AjE7
1i/PUkjdi1zrQrTPfaKP+ipJ7q5AO6YOJDBammpdTczfiywrOC7B1yCnpQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBVfu2X/ry3f+A4aybj2eeRr5P2bMB8GA1UdIwQY
MBaAFOf4gUAausyIyUH990DxqxU28F26MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNV9pQlFCcTZ6SWpKUWYzM1FQR3JGVGJ3WGJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9mNTUzNGEtYTYxMy00N2JlLWI0MmIt
ZTJmYmMzYTY4ODAwLzEvRlYtN1pmLXZMZF80RGhySnVQWjU1R3ZrX1pzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS9mNTUzNGEtYTYxMy00N2JlLWI0MmItZTJmYmMzYTY4ODAw
LzEvNV9pQlFCcTZ6SWpKUWYzM1FQR3JGVGJ3WGJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBVfgkMA0G
CSqGSIb3DQEBCwUAA4IBAQAeCpm/7vcKMJXGUhVvnorrNrZEyFAD3HlL4+w6wmOD
Rkn80ksx/sMUuKqI5cEdNyAAT7te/xpsUoGKFTQFOFbCTLgmv7+J2n4fQ9GpjZUH
yplkUZmuS71KCDgr7DAlgxYAXx2rFq5XdhzQJ9jGvGotR7FVK6SvQH8rkeVLKvdH
m0ShQSs7Bh6uFdb25hI86sJ/qhdpEeloEb1ndOCuMnnL/+3KPLgorOXuJu2h2/hY
MS2kW6knaAapgFubnNMDx/JaZzGbQb5vSWywUX7JoDJxZx4sUD02xu/OddoRb7pn
Nwu0swuQZmddqrrT9oXgFDAbVN7Ls5e60LNU5hvYSwLH
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:44:06 2025 by rpki-client