Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/x1neiZN1x9VnFAPEJDs59LTMfHk.roa
File: x1neiZN1x9VnFAPEJDs59LTMfHk.roa (raw, json)
Hash identifier: DegmUqLvERngFQULsyLVBXsuo2m5EEmhB3PjFSmb4pk=
Subject key identifier: C7:59:DE:89:93:75:C7:D5:67:14:03:C4:24:3B:39:F4:B4:CC:7C:79
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 0187DE9953E32670C0276F73D385F0D9BA0E
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/x1neiZN1x9VnFAPEJDs59LTMfHk.roa
Signing time: Tue 02 May 2023 22:33:23 +0000
ROA not before: Tue 02 May 2023 22:33:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39421
IP address blocks: 85.208.114.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:de:99:53:e3:26:70:c0:27:6f:73:d3:85:f0:d9:ba:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: May 2 22:33:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c759de899375c7d5671403c4243b39f4b4cc7c79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:97:d0:cc:28:2c:7e:5a:47:3f:64:1f:49:2a:
08:be:5a:45:5e:8d:e1:52:9e:28:62:c8:5a:ad:c8:
8c:9f:ef:9c:e1:69:0f:dc:55:66:86:a7:6d:8b:46:
8c:9b:43:21:6f:6c:6d:1c:a4:fe:24:d5:3e:78:57:
d2:f7:75:1e:ef:8c:02:cd:92:fa:92:cf:84:1b:c6:
68:85:a8:d3:02:69:28:26:1c:15:93:d8:53:b7:9e:
79:e2:cb:38:0f:88:98:5e:07:b1:73:58:cb:b3:69:
b5:a1:de:2f:c5:4d:8c:c4:45:d0:23:92:5f:99:b9:
b6:ea:fd:54:d6:06:58:a2:7d:24:e4:c2:20:6d:b1:
b6:8b:de:55:ff:c8:62:07:01:2a:7e:41:e0:19:9a:
79:bf:40:12:1a:30:c3:2e:45:9a:2e:d2:26:c0:12:
d4:0a:d6:d9:c0:01:cc:d5:42:08:0c:0e:6e:6e:57:
a6:15:93:ec:64:e7:9b:9b:c9:73:22:10:67:2d:ea:
43:d9:79:a0:87:6a:73:b9:0f:13:cc:20:f5:0a:fe:
d9:35:57:9b:76:b9:6e:4d:df:d3:10:c1:be:1b:20:
95:2c:76:a4:b3:14:3b:f4:d6:1e:1c:ca:c8:b4:48:
91:6b:c5:a4:4a:df:de:68:79:06:76:4f:2b:43:82:
91:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:59:DE:89:93:75:C7:D5:67:14:03:C4:24:3B:39:F4:B4:CC:7C:79
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/x1neiZN1x9VnFAPEJDs59LTMfHk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.114.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:b9:59:e5:54:63:12:2d:a9:2d:d7:24:7f:4d:c3:08:02:fa:
f8:66:50:06:62:1a:f1:b8:68:21:d5:41:e1:9b:ec:30:ee:81:
2a:d5:14:90:3d:77:20:37:d2:5c:0b:69:2d:f7:9a:3c:9d:ed:
62:c1:e1:59:da:3c:b0:08:62:ed:70:ee:2a:dc:5d:a8:ff:80:
72:c6:fa:71:47:0a:44:9b:4c:b6:7c:62:8b:e8:cd:9e:94:3f:
de:74:5c:49:82:01:cd:9e:c5:88:e1:21:df:c9:6f:a2:53:5e:
30:ee:cc:70:71:2e:aa:74:d6:06:38:c1:e7:31:53:51:56:63:
84:06:4e:f8:89:7a:c8:6d:d7:69:75:a8:f6:06:be:a3:f7:f2:
1e:f2:5f:4a:e1:5d:02:7c:22:d0:ce:df:91:7a:90:0f:df:53:
eb:97:3c:b3:f9:90:df:8c:6c:48:73:ad:72:bd:f5:c6:af:73:
12:94:d4:58:da:a9:b9:3b:2a:da:42:39:ff:af:d5:3e:0e:26:
31:ff:14:27:55:76:58:22:70:e7:08:8e:15:d9:f9:ee:43:e9:
e1:91:23:cf:60:7f:9a:07:ea:d1:77:c7:64:98:e8:93:9f:8f:
cb:12:fc:e9:08:5b:d7:82:9d:aa:23:de:26:c3:de:f0:97:db:
bb:43:2e:e1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYfemVPjJnDAJ29z04Xw2boOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj
Zjk3MDQwHhcNMjMwNTAyMjIzMzIzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNzU5ZGU4OTkzNzVjN2Q1NjcxNDAzYzQyNDNiMzlmNGI0Y2M3Yzc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpfQzCgsflpHP2QfSSoIvlpFXo3h
Up4oYsharciMn++c4WkP3FVmhqdti0aMm0Mhb2xtHKT+JNU+eFfS93Ue74wCzZL6
ks+EG8ZohajTAmkoJhwVk9hTt5554ss4D4iYXgexc1jLs2m1od4vxU2MxEXQI5Jf
mbm26v1U1gZYon0k5MIgbbG2i95V/8hiBwEqfkHgGZp5v0ASGjDDLkWaLtImwBLU
CtbZwAHM1UIIDA5ublemFZPsZOebm8lzIhBnLepD2Xmgh2pzuQ8TzCD1Cv7ZNVeb
drluTd/TEMG+GyCVLHaksxQ79NYeHMrItEiRa8WkSt/eaHkGdk8rQ4KR8wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMdZ3omTdcfVZxQDxCQ7OfS0zHx5MB8GA1UdIwQY
MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct
ZTg2MTIxYzU5NGRmLzEveDFuZWlaTjF4OVZuRkFQRUpEczU5TFRNZkhrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm
LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVdByMA0G
CSqGSIb3DQEBCwUAA4IBAQCiuVnlVGMSLakt1yR/TcMIAvr4ZlAGYhrxuGgh1UHh
m+ww7oEq1RSQPXcgN9JcC2kt95o8ne1iweFZ2jywCGLtcO4q3F2o/4ByxvpxRwpE
m0y2fGKL6M2elD/edFxJggHNnsWI4SHfyW+iU14w7sxwcS6qdNYGOMHnMVNRVmOE
Bk74iXrIbddpdaj2Br6j9/Ie8l9K4V0CfCLQzt+RepAP31Prlzyz+ZDfjGxIc61y
vfXGr3MSlNRY2qm5OyraQjn/r9U+DiYx/xQnVXZYInDnCI4V2fnuQ+nhkSPPYH+a
B+rRd8dkmOiTn4/LEvzpCFvXgp2qI94mw97wl9u7Qy7h
-----END CERTIFICATE-----
Generated at Mon Oct 2 08:58:25 2023 by rpki-client on console-fra.rpki-client.org