Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/FIL3lORP7BiY8iFr68w7SxA7YLs.roa
File: FIL3lORP7BiY8iFr68w7SxA7YLs.roa (raw, json)
Hash identifier: 1njm2xbBfZumPO+TI/E6+nnQ75gFi1M2cJE/fDm58SA=
Subject key identifier: 14:82:F7:94:E4:4F:EC:18:98:F2:21:6B:EB:CC:3B:4B:10:3B:60:BB
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 019306F072F4701BE1BA5C41E10BA04EF196
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/FIL3lORP7BiY8iFr68w7SxA7YLs.roa
Signing time: Thu 07 Nov 2024 14:04:01 +0000
ROA not before: Thu 07 Nov 2024 14:04:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44559
IP address blocks: 85.142.216.0/21 maxlen: 24
85.142.224.0/20 maxlen: 24
Validation: Failed, certificate revoked on Thu 07 Nov 2024 15:37:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:06:f0:72:f4:70:1b:e1:ba:5c:41:e1:0b:a0:4e:f1:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Nov 7 14:04:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1482f794e44fec1898f2216bebcc3b4b103b60bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c4:cc:fb:4c:33:05:ba:78:4b:e2:cf:2e:ab:
68:bc:6b:58:b6:cd:82:ff:7e:98:2d:81:11:ab:5e:
9d:df:47:d2:69:9e:7a:52:2a:3e:5d:4c:e0:ec:f3:
db:a6:cb:4f:64:37:bd:3b:93:57:2a:78:96:a9:5b:
53:6e:ae:1b:0f:06:4a:31:f7:87:93:78:60:1c:64:
71:8e:a4:4a:95:ac:08:6f:6a:98:59:df:aa:64:92:
a1:cc:54:55:c8:b9:4a:cd:e2:cf:f2:e2:11:ef:f2:
7e:6c:05:13:c5:39:10:72:9f:b5:2d:83:74:45:20:
fb:a3:68:cf:c2:bd:c8:63:76:fe:52:48:e8:f3:af:
77:1c:2c:5d:35:36:eb:09:e8:e7:83:84:05:39:d0:
4c:1d:ab:8b:9d:c9:fd:ca:17:a4:63:47:a9:3e:5e:
37:47:ad:ed:c6:8c:22:2e:57:f3:b2:84:78:46:ab:
75:27:4a:e8:85:c2:a6:e6:72:a6:57:25:80:8b:5f:
77:b8:a9:41:d3:f2:86:de:52:04:1d:71:70:af:24:
d4:40:26:ea:21:17:e5:c9:68:91:1c:87:14:17:59:
31:dc:56:d2:d9:0e:58:74:16:76:f8:bf:61:68:99:
9a:ab:1b:22:b4:05:86:e2:a4:41:8a:56:a6:6a:68:
dc:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:82:F7:94:E4:4F:EC:18:98:F2:21:6B:EB:CC:3B:4B:10:3B:60:BB
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/FIL3lORP7BiY8iFr68w7SxA7YLs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.142.216.0-85.142.239.255
Signature Algorithm: sha256WithRSAEncryption
54:e8:7d:76:bf:14:96:a5:a6:3d:ce:db:0b:f0:b1:ff:9a:56:
a4:1b:cf:d2:91:13:ea:6d:d0:25:7f:66:83:3f:e1:20:8a:58:
25:04:ba:35:01:1a:fb:91:c0:c7:e1:91:3a:ff:6a:97:6c:d8:
55:a4:b7:bb:32:6e:8d:b3:dc:5a:47:a0:65:f8:9d:8c:2d:7e:
27:dc:dd:7b:30:08:66:3b:ed:72:2c:a8:2f:61:03:bd:8a:25:
43:27:02:40:de:54:8a:74:c4:8e:32:98:22:f8:6a:91:38:6c:
06:c6:a6:8b:c9:d4:4d:03:4d:1c:70:8e:48:f9:de:07:92:a5:
27:cb:57:44:58:34:df:e9:03:96:1d:14:e2:ab:48:ee:f7:fd:
b7:77:a4:33:c9:55:cf:7d:1d:14:25:2a:5c:8d:ab:73:ec:16:
f0:f0:02:67:3d:a8:9d:41:df:55:36:b3:f0:7c:fa:f3:43:bf:
86:6b:86:31:a0:c4:8d:a0:f5:f4:ee:b0:a4:82:eb:7b:dc:19:
8c:af:89:55:eb:ca:aa:25:ed:88:04:5b:78:fc:0e:6c:e0:47:
0b:4b:3c:8c:d9:d7:50:66:3b:08:d6:cd:e9:d2:d2:43:61:c1:
2a:dd:74:fe:5a:f8:f0:bc:99:2b:ed:c1:9a:f4:ed:a9:21:de:
7d:19:28:3b
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZMG8HL0cBvhulxB4QugTvGWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4YjIyMDIzYjZlYWQ0YzI5NjgzYTlmZWQ0NDkzZDAzZGVl
MmM2ODUwHhcNMjQxMTA3MTQwNDAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNDgyZjc5NGU0NGZlYzE4OThmMjIxNmJlYmNjM2I0YjEwM2I2MGJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8TM+0wzBbp4S+LPLqtovGtYts2C
/36YLYERq16d30fSaZ56Uio+XUzg7PPbpstPZDe9O5NXKniWqVtTbq4bDwZKMfeH
k3hgHGRxjqRKlawIb2qYWd+qZJKhzFRVyLlKzeLP8uIR7/J+bAUTxTkQcp+1LYN0
RSD7o2jPwr3IY3b+Ukjo8693HCxdNTbrCejng4QFOdBMHauLncn9yhekY0epPl43
R63txowiLlfzsoR4Rqt1J0rohcKm5nKmVyWAi193uKlB0/KG3lIEHXFwryTUQCbq
IRflyWiRHIcUF1kx3FbS2Q5YdBZ2+L9haJmaqxsitAWG4qRBilamamjcrwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFBSC95TkT+wYmPIha+vMO0sQO2C7MB8GA1UdIwQY
MBaAFDiyICO26tTCloOp/tRJPQPe4saFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMt
NDBkOTViZDMzZmNiLzEvRklMM2xPUlA3QmlZOGlGcjY4dzdTeEE3WUxzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMtNDBkOTViZDMzZmNi
LzEvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBANVjtgD
BARVjuAwDQYJKoZIhvcNAQELBQADggEBAFTofXa/FJalpj3O2wvwsf+aVqQbz9KR
E+pt0CV/ZoM/4SCKWCUEujUBGvuRwMfhkTr/apds2FWkt7sybo2z3FpHoGX4nYwt
fifc3XswCGY77XIsqC9hA72KJUMnAkDeVIp0xI4ymCL4apE4bAbGpovJ1E0DTRxw
jkj53geSpSfLV0RYNN/pA5YdFOKrSO73/bd3pDPJVc99HRQlKlyNq3PsFvDwAmc9
qJ1B31U2s/B8+vNDv4ZrhjGgxI2g9fTusKSC63vcGYyviVXryqol7YgEW3j8Dmzg
RwtLPIzZ11BmOwjWzenS0kNhwSrddP5a+PC8mSvtwZr07akh3n0ZKDs=
-----END CERTIFICATE-----
Generated at Thu Nov 7 19:59:58 2024 by rpki-client on console-ams.rpki-client.org