Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/pZ8rMyVE3fTOrRfJmWJBnAapyBI.roa
File: pZ8rMyVE3fTOrRfJmWJBnAapyBI.roa (raw, json)
Hash identifier: G3bX7zSDECURqZ0RbVT84gfTadyTwYiu7Cu5VsxVEmo=
Subject key identifier: A5:9F:2B:33:25:44:DD:F4:CE:AD:17:C9:99:62:41:9C:06:A9:C8:12
Certificate issuer: /CN=4c2b89c3c57a3e296aa4061e962840be7ae8f018
Certificate serial: 0187A1E27F957CE75EF632E41FF5B2A43475
Authority key identifier: 4C:2B:89:C3:C5:7A:3E:29:6A:A4:06:1E:96:28:40:BE:7A:E8:F0:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TCuJw8V6PilqpAYelihAvnro8Bg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/pZ8rMyVE3fTOrRfJmWJBnAapyBI.roa
Signing time: Fri 21 Apr 2023 03:36:28 +0000
ROA not before: Fri 21 Apr 2023 03:36:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50538
IP address blocks: 85.234.109.0/24 maxlen: 24
85.234.108.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:a1:e2:7f:95:7c:e7:5e:f6:32:e4:1f:f5:b2:a4:34:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c2b89c3c57a3e296aa4061e962840be7ae8f018
Validity
Not Before: Apr 21 03:36:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a59f2b332544ddf4cead17c99962419c06a9c812
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:48:7a:08:16:68:86:95:fa:b9:55:6b:71:c8:
0b:39:3b:d1:60:a4:7d:50:12:0f:15:90:3b:ab:7f:
c7:4f:cc:e8:e1:76:0d:3c:a4:53:bf:c2:c2:f8:99:
36:32:b9:6b:cf:ad:d9:2a:15:1d:0f:11:27:a2:1c:
07:1b:72:9a:29:7d:84:a8:18:18:b9:69:69:77:1d:
57:a1:a8:54:43:eb:64:af:24:f3:fe:49:b5:27:b5:
2e:cd:af:6d:b4:40:8e:ee:e7:0b:1a:4c:69:dd:0a:
0a:94:17:84:bc:83:ff:ed:07:80:f0:a1:39:be:75:
62:d0:fa:0d:64:64:6e:3f:d3:01:4a:3f:df:32:37:
14:5d:d6:e0:7f:1a:be:43:1a:57:7a:84:6a:cf:fd:
3b:df:3a:68:91:98:21:26:5e:0c:f3:93:de:d9:e4:
9a:ae:3a:98:f3:31:d4:1d:82:53:6a:01:5f:a9:58:
7a:9f:cb:ae:bf:c5:97:da:3a:f7:2a:b6:32:88:bc:
eb:d3:a2:44:0f:ea:13:d2:f5:7c:5a:6f:9e:4f:24:
df:63:35:61:38:9f:94:9f:27:d0:52:63:8b:a5:f6:
8d:aa:f3:3c:74:ee:43:d0:4b:6c:86:32:1e:54:63:
4e:95:96:ea:9d:d4:3d:03:81:6c:cd:cb:02:d8:34:
92:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:9F:2B:33:25:44:DD:F4:CE:AD:17:C9:99:62:41:9C:06:A9:C8:12
X509v3 Authority Key Identifier:
keyid:4C:2B:89:C3:C5:7A:3E:29:6A:A4:06:1E:96:28:40:BE:7A:E8:F0:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TCuJw8V6PilqpAYelihAvnro8Bg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/pZ8rMyVE3fTOrRfJmWJBnAapyBI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/TCuJw8V6PilqpAYelihAvnro8Bg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.234.108.0/23
Signature Algorithm: sha256WithRSAEncryption
45:86:d5:a3:dd:ce:00:ba:57:8b:ab:40:79:1d:03:80:ff:0a:
af:d6:e4:ff:fe:5f:ad:f4:a7:cc:41:79:6b:3c:43:94:87:d9:
de:2d:b5:27:d2:50:5a:a7:c7:8a:2a:b3:6c:ce:9d:31:6e:f6:
2a:b7:5b:9c:3d:1d:1d:b5:82:32:f8:27:82:4e:2b:70:20:d7:
94:f1:ff:49:b7:b9:0e:b7:29:5c:fd:b1:cb:d7:f0:93:b0:39:
04:c3:a4:f7:1e:dd:82:60:74:8d:86:ac:13:6c:09:cd:c2:24:
38:b3:7d:99:21:c4:d7:69:52:b3:58:4c:2d:bb:7e:b3:a1:1b:
6d:19:c6:02:d1:2c:19:d1:21:a9:d7:3d:a4:38:df:3e:fc:5d:
3c:57:4b:2e:55:e9:fa:1b:79:80:11:55:55:86:32:d4:54:1a:
4a:5d:e0:c1:f1:db:4a:fa:1a:be:80:54:ee:e6:3d:06:b7:f8:
99:58:fc:9b:41:f3:12:5f:65:7a:d3:81:df:d4:17:e8:94:ab:
48:08:5d:88:88:37:d9:34:e9:72:cd:4c:fb:7d:ef:da:ce:4d:
90:17:3d:96:75:76:f1:77:33:f5:c9:8e:d9:41:b5:11:15:4f:
c5:10:56:90:86:f4:a2:65:9c:48:e3:88:3a:a6:81:5f:e5:9a:
81:04:5e:5a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYeh4n+VfOde9jLkH/WypDR1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjMmI4OWMzYzU3YTNlMjk2YWE0MDYxZTk2Mjg0MGJlN2Fl
OGYwMTgwHhcNMjMwNDIxMDMzNjI4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNTlmMmIzMzI1NDRkZGY0Y2VhZDE3Yzk5OTYyNDE5YzA2YTljODEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkh6CBZohpX6uVVrccgLOTvRYKR9
UBIPFZA7q3/HT8zo4XYNPKRTv8LC+Jk2Mrlrz63ZKhUdDxEnohwHG3KaKX2EqBgY
uWlpdx1XoahUQ+tkryTz/km1J7Uuza9ttECO7ucLGkxp3QoKlBeEvIP/7QeA8KE5
vnVi0PoNZGRuP9MBSj/fMjcUXdbgfxq+QxpXeoRqz/073zpokZghJl4M85Pe2eSa
rjqY8zHUHYJTagFfqVh6n8uuv8WX2jr3KrYyiLzr06JED+oT0vV8Wm+eTyTfYzVh
OJ+UnyfQUmOLpfaNqvM8dO5D0EtshjIeVGNOlZbqndQ9A4FszcsC2DSSuQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKWfKzMlRN30zq0XyZliQZwGqcgSMB8GA1UdIwQY
MBaAFEwricPFej4paqQGHpYoQL566PAYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEN1Snc4VjZQaWxxcEFZZWxpaEF2bnJvOEJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni83MjE1NWEtZDEwOS00YzJkLWI5NzQt
MTEyOGU1Y2U2YTViLzEvcFo4ck15VkUzZlRPclJmSm1XSkJuQWFweUJJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni83MjE1NWEtZDEwOS00YzJkLWI5NzQtMTEyOGU1Y2U2YTVi
LzEvVEN1Snc4VjZQaWxxcEFZZWxpaEF2bnJvOEJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBVepsMA0G
CSqGSIb3DQEBCwUAA4IBAQBFhtWj3c4AuleLq0B5HQOA/wqv1uT//l+t9KfMQXlr
PEOUh9neLbUn0lBap8eKKrNszp0xbvYqt1ucPR0dtYIy+CeCTitwINeU8f9Jt7kO
tylc/bHL1/CTsDkEw6T3Ht2CYHSNhqwTbAnNwiQ4s32ZIcTXaVKzWEwtu36zoRtt
GcYC0SwZ0SGp1z2kON8+/F08V0suVen6G3mAEVVVhjLUVBpKXeDB8dtK+hq+gFTu
5j0Gt/iZWPybQfMSX2V604Hf1BfolKtICF2IiDfZNOlyzUz7fe/azk2QFz2WdXbx
dzP1yY7ZQbURFU/FEFaQhvSiZZxI44g6poFf5ZqBBF5a
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:33 2024 by rpki-client on console-ams.rpki-client.org