Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/7CEylxUPMfzc4trbkPfNJYmFXvc.roa
File: 7CEylxUPMfzc4trbkPfNJYmFXvc.roa (raw, json)
Hash identifier: fQybGAAiRwoWmoM5U/bvQEcKdQeMFraYpiXPBMb0XJY=
Subject key identifier: EC:21:32:97:15:0F:31:FC:DC:E2:DA:DB:90:F7:CD:25:89:85:5E:F7
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 01856D0AEC425F5E848058750D454B1CFAE6
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/7CEylxUPMfzc4trbkPfNJYmFXvc.roa
Signing time: Sun 01 Jan 2023 11:15:10 +0000
ROA not before: Sun 01 Jan 2023 11:15:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56534
IP address blocks: 85.143.203.0/24 maxlen: 24
85.143.204.0/22 maxlen: 22
85.142.164.0/22 maxlen: 22
85.142.168.0/21 maxlen: 21
85.142.176.0/22 maxlen: 22
85.143.144.0/22 maxlen: 22
85.143.252.0/22 maxlen: 22
85.143.160.0/21 maxlen: 21
85.142.208.0/22 maxlen: 22
85.143.176.0/22 maxlen: 22
85.143.184.0/22 maxlen: 22
82.179.248.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 27 Jul 2023 13:10:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:0a:ec:42:5f:5e:84:80:58:75:0d:45:4b:1c:fa:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Jan 1 11:15:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ec213297150f31fcdce2dadb90f7cd2589855ef7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:71:99:99:f2:9d:67:ce:4c:4a:d0:e6:e5:56:
51:0e:79:98:45:bb:db:55:c9:6a:4c:4d:16:fe:0d:
64:1a:15:b3:48:4a:ba:c4:64:bc:49:86:a3:11:30:
2e:50:bc:66:34:a8:d4:8f:21:d8:cd:e3:81:b6:09:
b8:98:44:fe:9e:4c:2d:75:29:15:1f:9f:14:29:8b:
19:a5:21:c2:bf:fe:8e:10:c0:91:0d:aa:39:50:a8:
82:2b:03:6f:48:0e:71:6d:9a:05:3d:39:35:5f:36:
a5:65:7b:47:79:bf:22:72:43:e8:fe:25:26:f1:87:
53:89:8e:a7:a8:82:4c:74:a7:de:80:e2:a8:8d:6d:
87:37:11:f5:35:51:78:e2:71:f2:01:6a:3d:bb:d0:
8a:ce:5f:25:62:32:8b:11:a8:ee:2f:f3:17:be:af:
1d:3e:f4:71:d7:72:a2:77:41:84:e2:7a:2f:7d:a1:
21:42:53:e4:dc:0e:f8:3b:73:cb:a0:bd:9b:cc:82:
fd:ac:fd:c2:f4:80:a8:3a:e9:5c:11:23:30:07:a7:
df:13:0c:97:70:62:dc:70:b0:07:64:d3:22:4e:48:
ec:6c:e2:cd:49:14:3f:cb:3a:04:9c:82:41:19:94:
75:d2:6b:cd:cf:4e:92:e9:c3:14:9d:e3:1a:8f:61:
df:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:21:32:97:15:0F:31:FC:DC:E2:DA:DB:90:F7:CD:25:89:85:5E:F7
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/7CEylxUPMfzc4trbkPfNJYmFXvc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.179.248.0/22
85.142.164.0-85.142.179.255
85.142.208.0/22
85.143.144.0/22
85.143.160.0/21
85.143.176.0/22
85.143.184.0/22
85.143.203.0-85.143.207.255
85.143.252.0/22
Signature Algorithm: sha256WithRSAEncryption
0b:ad:0f:7e:c5:d1:63:89:d8:6e:66:8b:2c:6c:06:29:70:3b:
0e:90:b9:87:2c:8d:92:91:a8:18:61:e6:71:e7:0a:3e:fe:bd:
19:56:cd:04:93:21:88:32:48:5d:38:36:a8:de:14:74:0c:71:
0d:2b:1b:04:43:92:5d:d5:a3:d8:89:f4:76:d8:05:7b:9b:ff:
67:89:41:11:9a:1e:26:8d:99:53:27:2f:ab:16:76:85:3d:25:
aa:27:38:f9:66:68:ba:fe:60:79:84:cd:26:f3:a2:ef:a6:b3:
34:10:8e:35:c8:49:4e:b4:e8:9b:34:77:5f:6d:2f:39:d6:20:
85:a6:b4:d0:d7:55:64:22:9c:67:a3:75:98:47:6e:c1:fb:d4:
5a:de:99:11:00:e1:78:78:78:40:17:04:eb:95:7e:14:bd:8b:
3e:96:60:78:ff:33:da:e8:bd:75:ce:f8:51:71:ec:7b:96:c6:
d3:12:0b:40:37:32:97:c5:f4:76:b8:e0:77:14:35:da:6f:93:
f6:88:b0:49:6a:38:02:28:64:b3:30:f8:85:ce:d6:61:28:d0:
cd:80:91:10:69:5e:be:cd:42:5d:8e:0e:8a:01:a2:2a:c0:40:
b9:5b:fb:c5:e9:d2:10:05:93:80:81:ec:d9:88:a8:3e:b6:0b:
33:86:56:e0
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgISAYVtCuxCX16EgFh1DUVLHPrmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4YjIyMDIzYjZlYWQ0YzI5NjgzYTlmZWQ0NDkzZDAzZGVl
MmM2ODUwHhcNMjMwMTAxMTExNTEwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYzIxMzI5NzE1MGYzMWZjZGNlMmRhZGI5MGY3Y2QyNTg5ODU1ZWY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXGZmfKdZ85MStDm5VZRDnmYRbvb
VclqTE0W/g1kGhWzSEq6xGS8SYajETAuULxmNKjUjyHYzeOBtgm4mET+nkwtdSkV
H58UKYsZpSHCv/6OEMCRDao5UKiCKwNvSA5xbZoFPTk1XzalZXtHeb8ickPo/iUm
8YdTiY6nqIJMdKfegOKojW2HNxH1NVF44nHyAWo9u9CKzl8lYjKLEajuL/MXvq8d
PvRx13Kid0GE4novfaEhQlPk3A74O3PLoL2bzIL9rP3C9ICoOulcESMwB6ffEwyX
cGLccLAHZNMiTkjsbOLNSRQ/yzoEnIJBGZR10mvNz06S6cMUneMaj2HfPwIDAQAB
o4ICSTCCAkUwHQYDVR0OBBYEFOwhMpcVDzH83OLa25D3zSWJhV73MB8GA1UdIwQY
MBaAFDiyICO26tTCloOp/tRJPQPe4saFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMt
NDBkOTViZDMzZmNiLzEvN0NFeWx4VVBNZnpjNHRyYmtQZk5KWW1GWHZjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMtNDBkOTViZDMzZmNi
LzEvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMF8GCCsGAQUFBwEHAQH/BFAwTjBMBAIAATBGAwQCUrP4MAwD
BAJVjqQDBAJVjrADBAJVjtADBAJVj5ADBANVj6ADBAJVj7ADBAJVj7gwDAMEAFWP
ywMEBFWPwAMEAlWP/DANBgkqhkiG9w0BAQsFAAOCAQEAC60PfsXRY4nYbmaLLGwG
KXA7DpC5hyyNkpGoGGHmcecKPv69GVbNBJMhiDJIXTg2qN4UdAxxDSsbBEOSXdWj
2In0dtgFe5v/Z4lBEZoeJo2ZUycvqxZ2hT0lqic4+WZouv5geYTNJvOi76azNBCO
NchJTrTomzR3X20vOdYghaa00NdVZCKcZ6N1mEduwfvUWt6ZEQDheHh4QBcE65V+
FL2LPpZgeP8z2ui9dc74UXHse5bG0xILQDcyl8X0drjgdxQ12m+T9oiwSWo4Aihk
szD4hc7WYSjQzYCREGlevs1CXY4OigGiKsBAuVv7xenSEAWTgIHs2YioPrYLM4ZW
4A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:01 2024 by rpki-client on console-ams.rpki-client.org