Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/9lXeWb6euzUEzVSP2yxdpm1ek4o.roa
File: 9lXeWb6euzUEzVSP2yxdpm1ek4o.roa (raw, json)
Hash identifier: Lto1zGrMfUWd/xGbfZv9nfEJEYu11GLkHKbwlYIzVbU=
Subject key identifier: F6:55:DE:59:BE:9E:BB:35:04:CD:54:8F:DB:2C:5D:A6:6D:5E:93:8A
Certificate issuer: /CN=dff5cc4848943b4fe89d2ce71fdc1e4ff7d7f3e3
Certificate serial: 0185701537754F85DC63C0D10A0D78C164A6
Authority key identifier: DF:F5:CC:48:48:94:3B:4F:E8:9D:2C:E7:1F:DC:1E:4F:F7:D7:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_XMSEiUO0_onSznH9weT_fX8-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/9lXeWb6euzUEzVSP2yxdpm1ek4o.roa
Signing time: Mon 02 Jan 2023 01:25:16 +0000
ROA not before: Mon 02 Jan 2023 01:25:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62442
IP address blocks: 85.159.113.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 19 Jan 2023 17:39:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:15:37:75:4f:85:dc:63:c0:d1:0a:0d:78:c1:64:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dff5cc4848943b4fe89d2ce71fdc1e4ff7d7f3e3
Validity
Not Before: Jan 2 01:25:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f655de59be9ebb3504cd548fdb2c5da66d5e938a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8e:2d:2a:3a:36:61:28:4f:a9:a5:9a:93:c7:
de:5d:5b:ae:d0:b5:e8:06:b8:33:cc:b2:7f:bd:2a:
7f:f9:41:fc:41:ea:08:08:02:cd:32:03:bc:02:de:
e1:9d:d4:d3:90:7d:f3:85:2d:33:ff:e2:44:6b:2e:
57:1b:17:ce:ed:1e:18:2c:02:c1:b1:fa:5c:0e:b1:
30:65:84:ed:6c:7c:60:db:a2:48:4a:4d:df:d9:a9:
1b:db:93:59:33:00:69:75:92:57:9e:53:8d:74:3a:
01:89:89:55:79:30:02:92:a3:56:01:70:7b:f9:48:
55:3a:8d:b1:7f:55:3d:b9:30:74:e4:a9:cc:a3:77:
de:29:8b:91:2e:69:0b:1f:c5:18:1e:1c:a9:6d:cc:
9c:77:ac:cf:76:27:86:4e:95:b5:0d:11:3b:98:3a:
50:01:11:10:a4:f4:cc:25:1e:bc:7e:02:44:16:9e:
29:ee:91:54:1b:1e:26:7a:fc:dc:e4:52:8b:23:0a:
ef:a7:c5:b8:cc:c8:1c:8f:26:43:51:06:13:53:04:
1c:46:02:c5:03:51:bd:08:da:3f:4e:9f:59:fe:bd:
13:c5:12:f2:fd:8b:b9:8d:39:03:e7:66:4e:e9:ab:
f0:1b:9b:28:81:a6:32:86:81:c5:d7:fb:df:26:b0:
0a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:55:DE:59:BE:9E:BB:35:04:CD:54:8F:DB:2C:5D:A6:6D:5E:93:8A
X509v3 Authority Key Identifier:
keyid:DF:F5:CC:48:48:94:3B:4F:E8:9D:2C:E7:1F:DC:1E:4F:F7:D7:F3:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_XMSEiUO0_onSznH9weT_fX8-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/9lXeWb6euzUEzVSP2yxdpm1ek4o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/3_XMSEiUO0_onSznH9weT_fX8-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.159.113.0/24
Signature Algorithm: sha256WithRSAEncryption
72:ce:96:27:af:7a:26:42:0a:6e:9e:01:e0:78:f3:e9:87:c7:
ea:f9:84:76:44:e1:91:c0:7a:31:05:23:25:2a:0e:6e:c2:70:
25:33:80:09:0d:2d:92:85:33:d9:8e:b7:26:03:84:7b:1a:1e:
c5:91:f4:38:7c:c3:44:27:26:ea:15:0c:4a:70:15:d0:2c:de:
44:4a:a5:62:06:7d:27:71:d3:4d:6d:17:ef:59:3f:6d:6a:58:
9e:c2:d4:a6:33:b6:08:95:d9:ed:f0:b0:45:c1:1f:9c:38:d6:
b8:60:f9:bd:ec:2c:21:2f:0c:08:7a:ac:6f:e8:82:97:17:83:
bc:76:6c:54:01:40:1f:a0:40:7c:bf:44:59:82:2d:76:97:92:
60:23:d9:5d:7f:07:a9:db:b3:7e:43:2c:0d:3b:62:1b:39:eb:
ae:dc:84:8b:08:e4:94:a0:92:87:9c:02:2b:5a:93:2d:d5:ea:
7e:bb:58:23:68:f6:29:24:cb:0d:c1:1b:ae:4e:04:e0:ce:be:
21:41:21:b0:3a:e1:a9:7d:99:b0:5b:54:fc:45:19:7f:87:bd:
e1:f9:21:34:61:10:67:46:40:55:e2:6c:94:2a:a9:14:5a:b5:
36:0a:ad:a7:da:e1:33:5e:da:5b:16:b3:42:88:f5:23:6e:e7:
09:8b:da:31
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwFTd1T4XcY8DRCg14wWSmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmZjVjYzQ4NDg5NDNiNGZlODlkMmNlNzFmZGMxZTRmZjdk
N2YzZTMwHhcNMjMwMTAyMDEyNTE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNjU1ZGU1OWJlOWViYjM1MDRjZDU0OGZkYjJjNWRhNjZkNWU5MzhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp44tKjo2YShPqaWak8feXVuu0LXo
BrgzzLJ/vSp/+UH8QeoICALNMgO8At7hndTTkH3zhS0z/+JEay5XGxfO7R4YLALB
sfpcDrEwZYTtbHxg26JISk3f2akb25NZMwBpdZJXnlONdDoBiYlVeTACkqNWAXB7
+UhVOo2xf1U9uTB05KnMo3feKYuRLmkLH8UYHhypbcycd6zPdieGTpW1DRE7mDpQ
AREQpPTMJR68fgJEFp4p7pFUGx4mevzc5FKLIwrvp8W4zMgcjyZDUQYTUwQcRgLF
A1G9CNo/Tp9Z/r0TxRLy/Yu5jTkD52ZO6avwG5sogaYyhoHF1/vfJrAKIQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPZV3lm+nrs1BM1Uj9ssXaZtXpOKMB8GA1UdIwQY
MBaAFN/1zEhIlDtP6J0s5x/cHk/31/PjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM19YTVNFaVVPMF9vblN6bkg5d2VUX2ZYOC1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9mNDE5ZWItMjMzMS00YmM3LThmMWIt
MjY4OWM4NTg3OGFkLzEvOWxYZVdiNmV1elVFelZTUDJ5eGRwbTFlazRvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC9mNDE5ZWItMjMzMS00YmM3LThmMWItMjY4OWM4NTg3OGFk
LzEvM19YTVNFaVVPMF9vblN6bkg5d2VUX2ZYOC1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVZ9xMA0G
CSqGSIb3DQEBCwUAA4IBAQByzpYnr3omQgpungHgePPph8fq+YR2ROGRwHoxBSMl
Kg5uwnAlM4AJDS2ShTPZjrcmA4R7Gh7FkfQ4fMNEJybqFQxKcBXQLN5ESqViBn0n
cdNNbRfvWT9taliewtSmM7YIldnt8LBFwR+cONa4YPm97CwhLwwIeqxv6IKXF4O8
dmxUAUAfoEB8v0RZgi12l5JgI9ldfwep27N+QywNO2IbOeuu3ISLCOSUoJKHnAIr
WpMt1ep+u1gjaPYpJMsNwRuuTgTgzr4hQSGwOuGpfZmwW1T8RRl/h73h+SE0YRBn
RkBV4myUKqkUWrU2Cq2n2uEzXtpbFrNCiPUjbucJi9ox
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:38 2024 by rpki-client on console-fra.rpki-client.org