Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/EFedImeG9Ko3la8JE3_Uvr1e4zU.roa
File: EFedImeG9Ko3la8JE3_Uvr1e4zU.roa (raw, json)
Hash identifier: 78TS4JwUQ6HKY/w6XOnmNNrsalC8c6Mg5PAWnbM3QCQ=
Subject key identifier: 10:57:9D:22:67:86:F4:AA:37:95:AF:09:13:7F:D4:BE:BD:5E:E3:35
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 018E6F4213CBF7D5C8C1ADCE5CB98C7FBF37
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/EFedImeG9Ko3la8JE3_Uvr1e4zU.roa
Signing time: Sun 24 Mar 2024 06:59:45 +0000
ROA not before: Sun 24 Mar 2024 06:59:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 85.209.163.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 24 Mar 2024 12:41:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:6f:42:13:cb:f7:d5:c8:c1:ad:ce:5c:b9:8c:7f:bf:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Mar 24 06:59:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=10579d226786f4aa3795af09137fd4bebd5ee335
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:56:45:e0:8f:08:27:36:e6:50:84:c4:53:80:
68:6c:f9:67:0c:34:ee:db:20:72:1c:49:bb:92:f4:
98:76:c3:8f:4a:7e:a9:d4:52:14:fb:1f:85:94:dc:
45:68:08:68:65:e5:45:9c:7f:51:9a:ad:86:b0:77:
4a:98:7a:8a:65:dc:ec:80:c1:10:fc:4e:e6:d4:50:
af:93:89:69:41:ce:67:e3:15:20:2a:45:b1:67:cb:
ee:80:1a:c1:88:41:72:ed:90:02:90:c7:db:02:aa:
c0:b4:69:be:a7:4d:01:38:65:51:82:27:2a:0b:63:
aa:16:1f:d7:ee:14:51:fc:41:5e:16:a8:05:46:6a:
14:4a:6b:18:a3:ea:74:30:50:83:fc:e6:25:46:9c:
d5:4a:90:00:b7:de:43:e9:3c:e7:0c:0d:c4:7d:80:
b2:8a:ce:61:a4:74:3e:ce:d2:54:8d:02:25:f3:96:
bc:88:b9:61:10:a8:3a:d9:d6:05:06:9f:5b:9f:05:
6d:0f:39:54:58:e9:cf:4e:ad:41:4f:ef:6d:ae:38:
19:d2:b3:00:19:2e:98:9f:23:a6:76:5a:e8:23:fc:
8a:b8:e6:12:af:57:dd:cd:f1:40:fd:7e:1e:26:7a:
af:ff:39:09:39:54:62:68:8a:00:54:54:97:66:69:
85:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:57:9D:22:67:86:F4:AA:37:95:AF:09:13:7F:D4:BE:BD:5E:E3:35
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/EFedImeG9Ko3la8JE3_Uvr1e4zU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.163.0/24
Signature Algorithm: sha256WithRSAEncryption
d7:1d:c0:9f:ed:86:ab:85:19:a6:e4:37:62:7d:98:74:e2:b2:
f0:74:27:0c:c2:f3:74:b8:76:bb:58:0b:12:40:dd:cb:9a:66:
4f:ad:70:d5:63:0e:2b:99:dd:55:b8:3c:8b:51:a5:dc:93:a4:
28:d0:b4:d5:b5:e0:1d:81:61:73:af:34:01:a4:94:db:b3:44:
30:4a:38:a9:ef:b7:c0:69:e3:99:27:ff:f8:8f:f5:9d:c7:7a:
8f:0d:b9:e6:2d:77:1e:4c:3e:bf:94:dc:47:d9:d1:5c:03:c3:
c5:2f:e3:34:00:d0:11:1c:f5:64:66:33:d3:a3:d5:97:77:87:
81:aa:a4:89:4e:ef:d4:6c:08:ec:e4:e4:84:61:7f:8a:0b:8d:
f2:43:c7:f3:f9:78:4a:82:a9:0a:f0:6e:58:9b:a9:40:28:95:
97:12:5e:09:97:04:bb:00:23:eb:d8:13:32:d7:2a:cc:4e:82:
0a:5b:10:6a:66:54:b5:2e:23:e4:df:67:e8:14:76:2e:f4:88:
aa:98:69:38:99:5d:3c:f6:f4:42:61:bc:cd:54:4d:0b:d5:5e:
c1:c8:67:db:57:3a:26:09:71:79:77:dd:38:53:a0:ec:dc:c1:
75:2c:12:88:1e:f1:6f:29:c0:b7:09:e7:5d:62:ba:67:5a:22:
ad:97:5e:36
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY5vQhPL99XIwa3OXLmMf783MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj
Zjk3MDQwHhcNMjQwMzI0MDY1OTQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMDU3OWQyMjY3ODZmNGFhMzc5NWFmMDkxMzdmZDRiZWJkNWVlMzM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2lZF4I8IJzbmUITEU4BobPlnDDTu
2yByHEm7kvSYdsOPSn6p1FIU+x+FlNxFaAhoZeVFnH9Rmq2GsHdKmHqKZdzsgMEQ
/E7m1FCvk4lpQc5n4xUgKkWxZ8vugBrBiEFy7ZACkMfbAqrAtGm+p00BOGVRgicq
C2OqFh/X7hRR/EFeFqgFRmoUSmsYo+p0MFCD/OYlRpzVSpAAt95D6TznDA3EfYCy
is5hpHQ+ztJUjQIl85a8iLlhEKg62dYFBp9bnwVtDzlUWOnPTq1BT+9trjgZ0rMA
GS6YnyOmdlroI/yKuOYSr1fdzfFA/X4eJnqv/zkJOVRiaIoAVFSXZmmFRQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBBXnSJnhvSqN5WvCRN/1L69XuM1MB8GA1UdIwQY
MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct
ZTg2MTIxYzU5NGRmLzEvRUZlZEltZUc5S28zbGE4SkUzX1V2cjFlNHpVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm
LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVdGjMA0G
CSqGSIb3DQEBCwUAA4IBAQDXHcCf7YarhRmm5DdifZh04rLwdCcMwvN0uHa7WAsS
QN3LmmZPrXDVYw4rmd1VuDyLUaXck6Qo0LTVteAdgWFzrzQBpJTbs0QwSjip77fA
aeOZJ//4j/Wdx3qPDbnmLXceTD6/lNxH2dFcA8PFL+M0ANARHPVkZjPTo9WXd4eB
qqSJTu/UbAjs5OSEYX+KC43yQ8fz+XhKgqkK8G5Ym6lAKJWXEl4JlwS7ACPr2BMy
1yrMToIKWxBqZlS1LiPk32foFHYu9IiqmGk4mV089vRCYbzNVE0L1V7ByGfbVzom
CXF5d904U6Ds3MF1LBKIHvFvKcC3CeddYrpnWiKtl142
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:08:44 2025 by rpki-client