Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/ExUTw0FhylFCP0oCM34jTb5RXcc.roa
File: ExUTw0FhylFCP0oCM34jTb5RXcc.roa (raw, json)
Hash identifier: sQpsachnWYq8DFHasANmAbQdUO5tJyjr55UzZdS0BHY=
Subject key identifier: 13:15:13:C3:41:61:CA:51:42:3F:4A:02:33:7E:23:4D:BE:51:5D:C7
Certificate issuer: /CN=1e36de27974727aa0046b3e9c8d0624674541255
Certificate serial: 01894E4C9E8293CB26E2682C4BA3ABB1CA26
Authority key identifier: 1E:36:DE:27:97:47:27:AA:00:46:B3:E9:C8:D0:62:46:74:54:12:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/ExUTw0FhylFCP0oCM34jTb5RXcc.roa
Signing time: Thu 13 Jul 2023 08:09:51 +0000
ROA not before: Thu 13 Jul 2023 08:09:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44477
IP address blocks: 85.159.226.0/24 maxlen: 24
85.159.229.0/24 maxlen: 24
46.29.236.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:4e:4c:9e:82:93:cb:26:e2:68:2c:4b:a3:ab:b1:ca:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e36de27974727aa0046b3e9c8d0624674541255
Validity
Not Before: Jul 13 08:09:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=131513c34161ca51423f4a02337e234dbe515dc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:97:b6:ae:fb:d0:b2:8d:b7:44:ee:74:34:65:
55:99:d8:d3:b5:59:49:c2:7d:16:33:01:f2:3a:e2:
e2:0a:a0:87:eb:b1:18:14:83:28:a0:cf:fe:0a:b0:
b1:8e:fc:d4:3f:54:4c:e9:74:59:ee:63:36:0e:f6:
10:11:e4:02:cd:90:da:ae:ff:31:85:b2:2d:2d:ad:
99:c1:d1:73:58:b6:5d:4c:d9:23:ca:15:05:ab:08:
ba:19:9f:ec:1f:11:f6:bb:35:e9:4e:03:0a:7f:fa:
60:68:a0:ea:53:2d:22:29:a4:16:f4:7e:a1:aa:e6:
22:e0:a7:05:b8:8e:35:08:39:fa:fa:c0:9a:cf:f2:
02:91:db:76:53:11:3f:a1:2b:f7:8e:72:05:3f:fa:
aa:b2:be:5d:e6:b1:88:e2:9d:12:fc:68:9d:67:e8:
dd:92:72:dc:3c:8f:61:fc:68:b5:1c:4d:dd:58:61:
c8:41:36:a1:83:63:fa:8c:e8:7d:8b:67:e8:9e:2c:
22:7e:4c:1b:c6:05:a8:ec:ac:d7:47:a9:43:c7:2f:
bb:2b:63:d1:d0:e6:d8:d8:6c:98:5e:28:5b:03:88:
d4:42:aa:4a:9b:4c:7c:6f:4b:f0:92:36:ea:bc:8f:
a2:ac:33:2a:bf:9d:3d:c8:e7:19:50:69:b0:f9:24:
61:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:15:13:C3:41:61:CA:51:42:3F:4A:02:33:7E:23:4D:BE:51:5D:C7
X509v3 Authority Key Identifier:
keyid:1E:36:DE:27:97:47:27:AA:00:46:B3:E9:C8:D0:62:46:74:54:12:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/ExUTw0FhylFCP0oCM34jTb5RXcc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.29.236.0/24
85.159.226.0/24
85.159.229.0/24
Signature Algorithm: sha256WithRSAEncryption
10:e1:1c:ca:60:20:5e:02:a6:f0:3e:f8:02:2d:da:d6:66:15:
6d:8b:d4:06:fd:80:7e:43:20:19:43:d6:01:57:cc:93:6d:16:
bd:01:2e:f3:f0:c2:a7:74:ac:dc:13:71:8c:a3:17:9d:4b:51:
ab:a3:6b:29:0e:0d:18:de:11:ed:11:4e:c8:60:0d:d8:b2:58:
a1:6d:c9:44:96:bf:5b:36:1e:8d:bf:8c:36:b3:68:20:49:d5:
69:63:73:27:0a:f0:5e:66:24:aa:89:e8:4c:96:23:83:d8:7c:
72:24:85:a5:d5:c8:aa:c8:a8:1b:f4:c3:25:d5:84:c2:d1:82:
e3:36:d5:0a:49:f3:a1:ed:39:65:48:9f:25:fd:1a:7d:d9:1b:
cc:0c:f1:f3:e7:9b:a0:4f:1f:9f:38:12:7e:76:96:cd:4d:08:
f1:61:98:85:ef:50:b7:04:6e:78:d8:d5:47:f4:8e:95:d5:7f:
2b:95:a1:cb:ab:66:0c:68:ad:a6:41:27:e0:a3:91:38:78:6e:
a1:96:a1:50:ab:17:7e:0f:22:a7:e2:a0:a9:fd:31:7e:de:a4:
85:6b:b6:0e:ff:42:a7:01:e0:e5:76:0b:1b:dc:28:4d:aa:fa:
96:8d:e2:0e:b3:f5:47:0c:b3:9c:93:4a:31:e8:51:9d:d9:77:
16:2e:45:59
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYlOTJ6Ck8sm4mgsS6OrscomMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlMzZkZTI3OTc0NzI3YWEwMDQ2YjNlOWM4ZDA2MjQ2NzQ1
NDEyNTUwHhcNMjMwNzEzMDgwOTUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMzE1MTNjMzQxNjFjYTUxNDIzZjRhMDIzMzdlMjM0ZGJlNTE1ZGM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5e2rvvQso23RO50NGVVmdjTtVlJ
wn0WMwHyOuLiCqCH67EYFIMooM/+CrCxjvzUP1RM6XRZ7mM2DvYQEeQCzZDarv8x
hbItLa2ZwdFzWLZdTNkjyhUFqwi6GZ/sHxH2uzXpTgMKf/pgaKDqUy0iKaQW9H6h
quYi4KcFuI41CDn6+sCaz/ICkdt2UxE/oSv3jnIFP/qqsr5d5rGI4p0S/GidZ+jd
knLcPI9h/Gi1HE3dWGHIQTahg2P6jOh9i2foniwifkwbxgWo7KzXR6lDxy+7K2PR
0ObY2GyYXihbA4jUQqpKm0x8b0vwkjbqvI+irDMqv509yOcZUGmw+SRhAQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFBMVE8NBYcpRQj9KAjN+I02+UV3HMB8GA1UdIwQY
MBaAFB423ieXRyeqAEaz6cjQYkZ0VBJVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGpiZUo1ZEhKNm9BUnJQcHlOQmlSblJVRWxVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy81OWU4YzMtNjI2Yi00ZWNlLThlMzkt
ZGY3OTNhOTQwYmFiLzEvRXhVVHcwRmh5bEZDUDBvQ00zNGpUYjVSWGNjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy81OWU4YzMtNjI2Yi00ZWNlLThlMzktZGY3OTNhOTQwYmFi
LzEvSGpiZUo1ZEhKNm9BUnJQcHlOQmlSblJVRWxVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALh3sAwQA
VZ/iAwQAVZ/lMA0GCSqGSIb3DQEBCwUAA4IBAQAQ4RzKYCBeAqbwPvgCLdrWZhVt
i9QG/YB+QyAZQ9YBV8yTbRa9AS7z8MKndKzcE3GMoxedS1Gro2spDg0Y3hHtEU7I
YA3YslihbclElr9bNh6Nv4w2s2ggSdVpY3MnCvBeZiSqiehMliOD2HxyJIWl1ciq
yKgb9MMl1YTC0YLjNtUKSfOh7TllSJ8l/Rp92RvMDPHz55ugTx+fOBJ+dpbNTQjx
YZiF71C3BG542NVH9I6V1X8rlaHLq2YMaK2mQSfgo5E4eG6hlqFQqxd+DyKn4qCp
/TF+3qSFa7YO/0KnAeDldgsb3ChNqvqWjeIOs/VHDLOck0ox6FGd2XcWLkVZ
Generated at Mon Oct 30 13:08:39 2023 by rpki-client on console-ams.rpki-client.org