Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/EVoTEB2FRWSWHCV6_nD4CtMv0-U.roa
File: EVoTEB2FRWSWHCV6_nD4CtMv0-U.roa (raw, json)
Hash identifier: S7vx+gs1l0rl5ZzzvkMFPhkBSBsSh7BxGfG/4CzX1tQ=
Subject key identifier: 11:5A:13:10:1D:85:45:64:96:1C:25:7A:FE:70:F8:0A:D3:2F:D3:E5
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 01856D0AF3376FF221D78CA3BBA5E573BB6A
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/EVoTEB2FRWSWHCV6_nD4CtMv0-U.roa
Signing time: Sun 01 Jan 2023 11:15:12 +0000
ROA not before: Sun 01 Jan 2023 11:15:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202633
IP address blocks: 85.143.247.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:0a:f3:37:6f:f2:21:d7:8c:a3:bb:a5:e5:73:bb:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Jan 1 11:15:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=115a13101d854564961c257afe70f80ad32fd3e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:5c:64:e7:e2:aa:93:2e:0d:f9:70:f3:45:40:
e3:7c:b7:b6:99:cf:2e:d5:6a:2e:30:16:c7:07:76:
a1:f4:fb:b5:40:03:d6:da:8d:3f:bb:31:de:58:94:
65:50:a7:ab:a4:be:c6:c6:5a:49:4d:08:67:3f:ad:
1a:61:7c:21:7e:93:a6:4a:cc:3a:56:b5:e3:bd:25:
f0:9d:54:ea:ab:b9:93:57:7f:7e:5a:77:4d:c8:c0:
3a:f6:64:08:b8:9d:69:fa:dd:9a:3c:09:fb:22:79:
9d:f3:ff:1e:6c:bf:54:8e:bf:11:6e:3a:09:83:ad:
31:f1:c8:07:d3:7f:dc:e2:4f:b3:40:27:c0:41:f8:
f6:e9:1a:5c:a0:8f:5c:ec:94:42:6d:c0:e0:ae:76:
b7:ff:1d:c7:b9:99:0f:73:a3:f3:99:f7:87:1c:fb:
87:11:b2:0b:6a:34:d8:b2:79:f5:fc:e6:74:0f:ff:
81:01:dc:45:97:77:0b:e8:2d:64:c1:a2:9b:c4:94:
32:69:9b:a4:f8:28:37:63:c7:51:65:65:a8:62:2e:
ed:76:29:5d:7a:a9:24:c0:83:60:d0:a9:3c:30:74:
84:ac:b8:de:b3:63:26:0a:92:ce:1e:13:46:73:2f:
9d:ef:26:15:30:90:23:2f:31:9a:ca:d9:40:da:fe:
20:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:5A:13:10:1D:85:45:64:96:1C:25:7A:FE:70:F8:0A:D3:2F:D3:E5
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/EVoTEB2FRWSWHCV6_nD4CtMv0-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.143.247.0/24
Signature Algorithm: sha256WithRSAEncryption
30:3d:18:f3:30:6b:72:48:ef:9d:c1:b2:31:c0:90:33:25:0f:
c9:56:1f:c9:36:57:c4:94:21:4b:16:e9:ab:ed:f0:76:29:22:
92:14:22:f0:94:b0:3f:3b:83:ab:2d:81:50:c5:0c:df:9a:5e:
78:6a:5c:0c:7a:ba:95:1b:9a:82:b6:be:84:84:05:3c:2d:ac:
5f:74:f9:46:b1:45:55:dc:e7:76:c8:a2:4e:e9:cd:46:d9:50:
ad:99:25:b5:a1:0d:e7:a7:fa:51:55:a6:32:9f:4c:42:68:2a:
da:7f:e3:07:2a:7a:aa:8b:03:d4:1d:ac:ae:ea:56:45:d7:7d:
fb:b3:18:31:b0:4e:4b:d1:2d:45:69:a0:0c:3d:0e:71:be:b1:
72:16:52:8e:3d:d8:bd:f1:05:3f:af:8e:1c:b5:96:f2:a2:2d:
df:07:f0:4d:28:47:e6:e9:65:19:fd:ac:a4:12:5c:a7:63:34:
12:a7:8b:c1:25:4f:45:00:7c:35:5f:4e:6c:8e:41:4b:22:bf:
fd:9e:d3:27:45:2f:ff:a8:bc:b3:61:63:d3:ab:7e:1e:9a:a6:
92:15:63:ad:03:f9:1c:e5:63:7a:d9:d3:65:46:d3:54:2b:fc:
9f:89:92:dc:62:ce:9f:95:6e:35:59:d5:5e:56:8a:87:65:3d:
0b:13:eb:83
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtCvM3b/Ih14yju6Xlc7tqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4YjIyMDIzYjZlYWQ0YzI5NjgzYTlmZWQ0NDkzZDAzZGVl
MmM2ODUwHhcNMjMwMTAxMTExNTEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMTVhMTMxMDFkODU0NTY0OTYxYzI1N2FmZTcwZjgwYWQzMmZkM2U1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhFxk5+Kqky4N+XDzRUDjfLe2mc8u
1WouMBbHB3ah9Pu1QAPW2o0/uzHeWJRlUKerpL7GxlpJTQhnP60aYXwhfpOmSsw6
VrXjvSXwnVTqq7mTV39+WndNyMA69mQIuJ1p+t2aPAn7Inmd8/8ebL9Ujr8RbjoJ
g60x8cgH03/c4k+zQCfAQfj26RpcoI9c7JRCbcDgrna3/x3HuZkPc6PzmfeHHPuH
EbILajTYsnn1/OZ0D/+BAdxFl3cL6C1kwaKbxJQyaZuk+Cg3Y8dRZWWoYi7tdild
eqkkwINg0Kk8MHSErLjes2MmCpLOHhNGcy+d7yYVMJAjLzGaytlA2v4geQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBFaExAdhUVklhwlev5w+ArTL9PlMB8GA1UdIwQY
MBaAFDiyICO26tTCloOp/tRJPQPe4saFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMt
NDBkOTViZDMzZmNiLzEvRVZvVEVCMkZSV1NXSENWNl9uRDRDdE12MC1VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMtNDBkOTViZDMzZmNi
LzEvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVY/3MA0G
CSqGSIb3DQEBCwUAA4IBAQAwPRjzMGtySO+dwbIxwJAzJQ/JVh/JNlfElCFLFumr
7fB2KSKSFCLwlLA/O4OrLYFQxQzfml54alwMerqVG5qCtr6EhAU8LaxfdPlGsUVV
3Od2yKJO6c1G2VCtmSW1oQ3np/pRVaYyn0xCaCraf+MHKnqqiwPUHayu6lZF1337
sxgxsE5L0S1FaaAMPQ5xvrFyFlKOPdi98QU/r44ctZbyoi3fB/BNKEfm6WUZ/ayk
ElynYzQSp4vBJU9FAHw1X05sjkFLIr/9ntMnRS//qLyzYWPTq34emqaSFWOtA/kc
5WN62dNlRtNUK/yfiZLcYs6flW41WdVeVoqHZT0LE+uD
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:01 2024 by rpki-client on console-ams.rpki-client.org