Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/OffTaklhZytA3QLB98TA3jhN0Pc.roa
File: OffTaklhZytA3QLB98TA3jhN0Pc.roa (raw, json)
Hash identifier: ot0hos1AI//+OgiyjszzzEHft7ys3Q3y9hw0rtK2VJg=
Subject key identifier: 39:F7:D3:6A:49:61:67:2B:40:DD:02:C1:F7:C4:C0:DE:38:4D:D0:F7
Certificate issuer: /CN=31a185d0eb0ca7811c586425de0e960e1cfeb61b
Certificate serial: 018E61256735760A84F6C03D69C10B920025
Authority key identifier: 31:A1:85:D0:EB:0C:A7:81:1C:58:64:25:DE:0E:96:0E:1C:FE:B6:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/OffTaklhZytA3QLB98TA3jhN0Pc.roa
Signing time: Thu 21 Mar 2024 13:13:44 +0000
ROA not before: Thu 21 Mar 2024 13:13:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31365
IP address blocks: 85.153.1.0/24 maxlen: 24
85.153.2.0/24 maxlen: 24
85.153.3.0/24 maxlen: 24
85.153.5.0/24 maxlen: 24
85.153.6.0/24 maxlen: 24
85.153.10.0/24 maxlen: 24
85.153.33.0/24 maxlen: 24
85.153.43.0/24 maxlen: 24
85.153.58.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 13:19:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:61:25:67:35:76:0a:84:f6:c0:3d:69:c1:0b:92:00:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31a185d0eb0ca7811c586425de0e960e1cfeb61b
Validity
Not Before: Mar 21 13:13:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=39f7d36a4961672b40dd02c1f7c4c0de384dd0f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0f:2e:c3:ec:e0:ea:54:34:62:b8:3e:83:d1:
ca:55:f7:aa:97:7a:d3:4c:5d:12:b1:df:68:33:74:
43:fb:9e:58:6f:49:1c:4e:67:a0:e4:52:06:14:0b:
08:8c:73:56:33:ee:fd:43:fa:bb:b9:30:9d:86:fd:
06:55:c4:14:69:74:76:79:7c:af:da:79:f8:49:b5:
0f:55:4e:de:0c:8e:2e:8d:0d:bb:cb:42:a1:63:c9:
d1:40:4f:13:41:79:0a:6b:50:a6:5c:83:0d:d0:c3:
8b:be:ec:e2:04:8d:a9:e1:a2:77:ad:4f:bd:96:3f:
38:61:20:43:e0:16:db:49:09:b9:2a:3b:6a:d2:63:
04:4c:b8:ed:88:3b:16:62:ac:b6:80:05:f4:68:b2:
9d:6c:7a:d5:ad:66:d6:aa:05:5a:13:d6:f6:70:04:
12:a9:c9:8a:ca:d6:70:29:3d:69:a5:c4:5f:0f:82:
2f:35:f7:31:e6:9b:42:6f:db:3b:2f:8c:b4:00:c6:
09:1b:d9:14:02:59:04:ed:f7:22:47:9b:9c:0a:78:
4c:b4:2a:6b:1c:ae:e5:0e:7b:79:47:e3:07:49:8f:
ba:5b:8b:ed:48:ac:97:0c:4d:d5:4d:f8:a3:44:fb:
ff:15:ce:60:89:ee:6b:9b:9e:81:e1:bb:f8:f7:90:
20:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:F7:D3:6A:49:61:67:2B:40:DD:02:C1:F7:C4:C0:DE:38:4D:D0:F7
X509v3 Authority Key Identifier:
keyid:31:A1:85:D0:EB:0C:A7:81:1C:58:64:25:DE:0E:96:0E:1C:FE:B6:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/OffTaklhZytA3QLB98TA3jhN0Pc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.153.1.0-85.153.3.255
85.153.5.0-85.153.6.255
85.153.10.0/24
85.153.33.0/24
85.153.43.0/24
85.153.58.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:69:5b:37:0d:e2:47:3a:2d:61:ac:eb:59:1a:b6:37:ef:53:
2b:10:e6:b5:1b:e8:16:ee:45:b2:9f:ad:71:23:12:ee:23:a1:
6b:e7:2c:48:f4:ec:31:c4:be:d8:80:77:47:88:13:aa:2f:ab:
75:ea:9a:d7:18:ac:65:5b:91:b3:32:05:65:ba:e0:03:82:3c:
88:a7:9d:7a:2f:ea:d9:42:19:59:72:ff:4c:32:f3:5d:a4:b2:
00:fb:92:b8:7d:68:06:16:dd:d1:df:7d:5a:80:69:95:5d:88:
3d:d6:c5:ee:fb:0b:f7:ea:a9:58:e0:2f:54:f2:68:1f:ef:15:
fe:6b:a2:cc:b0:fc:39:07:5e:98:f6:4b:49:cf:1c:1c:96:8c:
a1:48:21:34:cb:5a:43:f3:15:fd:a0:fc:c4:d6:5b:3b:a0:5a:
1a:9b:73:a0:2a:53:43:35:57:5b:d0:0f:a1:be:bb:07:2a:cd:
bb:ae:3f:46:ea:42:a6:8c:2d:3b:d5:f6:52:16:45:3b:38:26:
d3:be:cf:18:50:65:80:11:b9:94:66:f3:2d:cf:60:8f:23:05:
1d:f4:d7:3d:29:8f:73:e5:7b:55:e1:57:60:dd:f7:52:89:d0:
94:34:81:79:60:56:e8:88:b6:7c:11:bf:91:f9:06:1b:39:28:
bc:5c:fa:98
-----BEGIN CERTIFICATE-----
MIIFKzCCBBOgAwIBAgISAY5hJWc1dgqE9sA9acELkgAlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxYTE4NWQwZWIwY2E3ODExYzU4NjQyNWRlMGU5NjBlMWNm
ZWI2MWIwHhcNMjQwMzIxMTMxMzQ0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOWY3ZDM2YTQ5NjE2NzJiNDBkZDAyYzFmN2M0YzBkZTM4NGRkMGY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqg8uw+zg6lQ0Yrg+g9HKVfeql3rT
TF0Ssd9oM3RD+55Yb0kcTmeg5FIGFAsIjHNWM+79Q/q7uTCdhv0GVcQUaXR2eXyv
2nn4SbUPVU7eDI4ujQ27y0KhY8nRQE8TQXkKa1CmXIMN0MOLvuziBI2p4aJ3rU+9
lj84YSBD4BbbSQm5Kjtq0mMETLjtiDsWYqy2gAX0aLKdbHrVrWbWqgVaE9b2cAQS
qcmKytZwKT1ppcRfD4IvNfcx5ptCb9s7L4y0AMYJG9kUAlkE7fciR5ucCnhMtCpr
HK7lDnt5R+MHSY+6W4vtSKyXDE3VTfijRPv/Fc5gie5rm56B4bv495AgjQIDAQAB
o4ICNzCCAjMwHQYDVR0OBBYEFDn302pJYWcrQN0CwffEwN44TdD3MB8GA1UdIwQY
MBaAFDGhhdDrDKeBHFhkJd4Olg4c/rYbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWFHRjBPc01wNEVjV0dRbDNnNldEaHotdGhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8wODFjNmUtMWQ2NS00Y2NkLTk2ZjUt
MWRjYzg2YzExZTc0LzEvT2ZmVGFrbGhaeXRBM1FMQjk4VEEzamhOMFBjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny8wODFjNmUtMWQ2NS00Y2NkLTk2ZjUtMWRjYzg2YzExZTc0
LzEvTWFHRjBPc01wNEVjV0dRbDNnNldEaHotdGhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME0GCCsGAQUFBwEHAQH/BD4wPDA6BAIAATA0MAwDBABVmQED
BAJVmQAwDAMEAFWZBQMEAFWZBgMEAFWZCgMEAFWZIQMEAFWZKwMEAFWZOjANBgkq
hkiG9w0BAQsFAAOCAQEAKmlbNw3iRzotYazrWRq2N+9TKxDmtRvoFu5Fsp+tcSMS
7iOha+csSPTsMcS+2IB3R4gTqi+rdeqa1xisZVuRszIFZbrgA4I8iKedei/q2UIZ
WXL/TDLzXaSyAPuSuH1oBhbd0d99WoBplV2IPdbF7vsL9+qpWOAvVPJoH+8V/mui
zLD8OQdemPZLSc8cHJaMoUghNMtaQ/MV/aD8xNZbO6BaGptzoCpTQzVXW9APob67
ByrNu64/RupCpowtO9X2UhZFOzgm077PGFBlgBG5lGbzLc9gjyMFHfTXPSmPc+V7
VeFXYN33UonQlDSBeWBW6Ii2fBG/kfkGGzkovFz6mA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:43 2024 by rpki-client on console-fra.rpki-client.org