Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/b1ff7b-b766-47c7-be0d-c0a7b7377eab/1/pcUV2kMs9qHjlIHsbE-JPZlu1p0.roa
File: pcUV2kMs9qHjlIHsbE-JPZlu1p0.roa (raw, json)
Hash identifier: hurkgjFZa7R/+F0W/IwjFWYqAEX7QN0ZSbXatbJjX4M=
Subject key identifier: A5:C5:15:DA:43:2C:F6:A1:E3:94:81:EC:6C:4F:89:3D:99:6E:D6:9D
Certificate issuer: /CN=64347465bc925c8e756ddfaa609eda02cc52d031
Certificate serial: 018CC348DC599BE59857693275901CB325FF
Authority key identifier: 64:34:74:65:BC:92:5C:8E:75:6D:DF:AA:60:9E:DA:02:CC:52:D0:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZDR0ZbySXI51bd-qYJ7aAsxS0DE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/b1ff7b-b766-47c7-be0d-c0a7b7377eab/1/pcUV2kMs9qHjlIHsbE-JPZlu1p0.roa
Signing time: Mon 01 Jan 2024 04:29:41 +0000
ROA not before: Mon 01 Jan 2024 04:29:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215870
IP address blocks: 85.114.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 May 2024 16:56:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:dc:59:9b:e5:98:57:69:32:75:90:1c:b3:25:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64347465bc925c8e756ddfaa609eda02cc52d031
Validity
Not Before: Jan 1 04:29:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a5c515da432cf6a1e39481ec6c4f893d996ed69d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:71:79:d9:d9:31:0d:59:7d:99:dd:ed:86:c5:
74:d8:45:59:4e:78:c3:85:6e:94:c4:c2:e0:e5:2c:
d4:31:f7:80:b3:d5:da:52:60:da:e3:b3:43:90:ba:
5f:dd:1a:00:29:16:33:f4:60:d0:e9:84:df:1f:a7:
f1:42:ba:38:25:a5:e0:64:35:b9:36:64:b5:7d:4f:
73:80:47:a9:8d:4f:01:63:25:34:4f:b1:9e:48:76:
f5:ba:92:b8:4d:25:19:0b:c6:73:4e:1b:56:31:c8:
d8:8d:ba:67:e6:84:aa:10:6b:a0:d3:41:1e:85:5e:
15:2a:63:36:48:06:af:d9:7c:25:e7:1f:fa:4d:33:
51:b1:9c:b5:2a:25:a6:9d:d9:b9:43:e9:14:d5:c6:
b4:5e:3d:8f:34:91:6f:db:43:ab:70:18:a4:62:d3:
7c:82:c8:fc:0e:21:3b:fc:ee:6c:74:44:cd:45:ba:
af:2a:86:7c:2b:7d:14:08:26:1c:e8:9a:b4:b9:c8:
c4:26:6e:49:5e:93:db:de:3e:34:15:ac:07:ea:f7:
3e:1c:4a:ca:c4:06:0f:cc:c6:15:31:28:70:25:17:
e4:8a:2b:fe:50:22:7c:85:b3:42:d1:77:f2:23:9b:
21:a5:8a:47:d8:d4:db:d2:5c:89:ee:a3:4b:a1:c2:
e0:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:C5:15:DA:43:2C:F6:A1:E3:94:81:EC:6C:4F:89:3D:99:6E:D6:9D
X509v3 Authority Key Identifier:
keyid:64:34:74:65:BC:92:5C:8E:75:6D:DF:AA:60:9E:DA:02:CC:52:D0:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZDR0ZbySXI51bd-qYJ7aAsxS0DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b1ff7b-b766-47c7-be0d-c0a7b7377eab/1/pcUV2kMs9qHjlIHsbE-JPZlu1p0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b1ff7b-b766-47c7-be0d-c0a7b7377eab/1/ZDR0ZbySXI51bd-qYJ7aAsxS0DE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.114.120.0/24
Signature Algorithm: sha256WithRSAEncryption
77:30:95:a4:ef:76:a1:d2:d8:52:3d:d4:de:62:13:b7:ea:0a:
8e:62:e8:f1:1f:84:9b:dc:7e:cf:9a:89:39:20:86:e4:2c:13:
21:12:f3:b1:df:f9:de:ba:10:31:6a:c8:98:ea:9c:82:0e:73:
e1:74:59:8d:ee:2c:25:7c:be:16:e0:9b:9e:51:07:81:db:b4:
62:fe:86:4e:2c:b2:31:2a:6a:b3:95:67:e9:c4:49:5d:53:0f:
d5:0f:96:4e:1d:ca:75:09:91:1d:3a:2a:78:57:41:1b:0c:a9:
36:79:26:cd:11:11:30:4f:a3:73:c5:7f:25:ad:0b:e2:50:db:
50:6b:80:97:4f:a6:a4:d5:d8:29:d1:f8:72:10:4d:b3:fc:be:
3c:ca:ee:71:1c:6d:b3:5f:cd:8f:cd:bb:6b:69:83:d8:e8:55:
d7:cc:09:62:08:ea:7e:14:ad:a2:9b:d0:fb:6c:6e:96:e1:8c:
72:ed:87:63:d9:04:21:f1:c5:c9:e8:90:22:4b:27:4e:c9:de:
7c:2b:eb:83:b2:82:61:73:30:53:c3:e4:d5:56:a0:5d:e9:18:
20:a9:b9:62:c6:89:34:9d:4c:c1:07:c1:40:42:65:9c:73:cb:
0f:fd:0f:bf:19:56:4c:d5:de:b0:1e:cd:61:14:17:4a:4f:d6:
ae:0e:a7:02
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzDSNxZm+WYV2kydZAcsyX/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0MzQ3NDY1YmM5MjVjOGU3NTZkZGZhYTYwOWVkYTAyY2M1
MmQwMzEwHhcNMjQwMTAxMDQyOTQxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNWM1MTVkYTQzMmNmNmExZTM5NDgxZWM2YzRmODkzZDk5NmVkNjlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+XF52dkxDVl9md3thsV02EVZTnjD
hW6UxMLg5SzUMfeAs9XaUmDa47NDkLpf3RoAKRYz9GDQ6YTfH6fxQro4JaXgZDW5
NmS1fU9zgEepjU8BYyU0T7GeSHb1upK4TSUZC8ZzThtWMcjYjbpn5oSqEGug00Ee
hV4VKmM2SAav2Xwl5x/6TTNRsZy1KiWmndm5Q+kU1ca0Xj2PNJFv20OrcBikYtN8
gsj8DiE7/O5sdETNRbqvKoZ8K30UCCYc6Jq0ucjEJm5JXpPb3j40FawH6vc+HErK
xAYPzMYVMShwJRfkiiv+UCJ8hbNC0XfyI5shpYpH2NTb0lyJ7qNLocLgZwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKXFFdpDLPah45SB7GxPiT2ZbtadMB8GA1UdIwQY
MBaAFGQ0dGW8klyOdW3fqmCe2gLMUtAxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkRSMFpieVNYSTUxYmQtcVlKN2FBc3hTMERFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9iMWZmN2ItYjc2Ni00N2M3LWJlMGQt
YzBhN2I3Mzc3ZWFiLzEvcGNVVjJrTXM5cUhqbElIc2JFLUpQWmx1MXAwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi9iMWZmN2ItYjc2Ni00N2M3LWJlMGQtYzBhN2I3Mzc3ZWFi
LzEvWkRSMFpieVNYSTUxYmQtcVlKN2FBc3hTMERFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVXJ4MA0G
CSqGSIb3DQEBCwUAA4IBAQB3MJWk73ah0thSPdTeYhO36gqOYujxH4Sb3H7Pmok5
IIbkLBMhEvOx3/neuhAxasiY6pyCDnPhdFmN7iwlfL4W4JueUQeB27Ri/oZOLLIx
KmqzlWfpxEldUw/VD5ZOHcp1CZEdOip4V0EbDKk2eSbNEREwT6NzxX8lrQviUNtQ
a4CXT6ak1dgp0fhyEE2z/L48yu5xHG2zX82PzbtraYPY6FXXzAliCOp+FK2im9D7
bG6W4Yxy7Ydj2QQh8cXJ6JAiSydOyd58K+uDsoJhczBTw+TVVqBd6Rggqblixok0
nUzBB8FAQmWcc8sP/Q+/GVZM1d6wHs1hFBdKT9auDqcC
-----END CERTIFICATE-----
Generated at Wed May 1 19:47:42 2024 by rpki-client on console-ams.rpki-client.org