Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/E_8VaN1DQ4R30ZYthLfMFGFPe78.roa
File: E_8VaN1DQ4R30ZYthLfMFGFPe78.roa (raw, json)
Hash identifier: hw2A09yraboGukAAFrTXphpGJWjQsLCILxaQlo6q814=
Subject key identifier: 13:FF:15:68:DD:43:43:84:77:D1:96:2D:84:B7:CC:14:61:4F:7B:BF
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 018B801844BAA9DCAE062C948B3E445618A7
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/E_8VaN1DQ4R30ZYthLfMFGFPe78.roa
Signing time: Mon 30 Oct 2023 10:19:15 +0000
ROA not before: Mon 30 Oct 2023 10:19:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43160
IP address blocks: 185.44.233.0/24 maxlen: 24
212.63.123.0/24 maxlen: 24
212.63.120.0/24 maxlen: 24
212.63.122.0/24 maxlen: 24
185.235.103.0/24 maxlen: 24
185.196.202.0/23 maxlen: 24
185.196.202.0/24 maxlen: 24
85.217.136.0/24 maxlen: 24
85.217.138.0/24 maxlen: 24
85.217.135.0/24 maxlen: 24
85.217.137.0/24 maxlen: 24
85.217.142.0/24 maxlen: 24
85.217.143.0/24 maxlen: 24
85.217.141.0/24 maxlen: 24
85.217.146.0/24 maxlen: 24
85.217.150.0/24 maxlen: 24
85.217.152.0/24 maxlen: 24
85.217.151.0/24 maxlen: 24
85.217.158.0/24 maxlen: 24
85.217.154.0/24 maxlen: 24
85.217.157.0/24 maxlen: 24
85.217.159.0/24 maxlen: 24
85.217.153.0/24 maxlen: 24
85.217.155.0/24 maxlen: 24
185.130.24.0/23 maxlen: 24
88.98.96.0/23 maxlen: 24
88.98.96.0/20 maxlen: 24
88.98.98.0/24 maxlen: 24
88.98.104.0/23 maxlen: 24
88.98.99.0/24 maxlen: 24
88.98.100.0/22 maxlen: 24
88.98.106.0/23 maxlen: 24
88.98.111.0/24 maxlen: 24
88.98.110.0/24 maxlen: 24
185.130.26.0/23 maxlen: 24
185.202.166.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 30 Oct 2023 11:23:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:80:18:44:ba:a9:dc:ae:06:2c:94:8b:3e:44:56:18:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Oct 30 10:19:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=13ff1568dd43438477d1962d84b7cc14614f7bbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:4d:28:b4:f0:69:e0:2e:fc:0b:f7:2f:57:41:
e6:f5:2e:29:95:43:a2:02:e0:cb:7b:98:a9:81:73:
52:49:f5:24:5e:48:c5:1f:47:01:bd:0a:03:8e:b6:
af:45:61:3a:41:86:01:e6:28:06:0d:bb:a8:16:d0:
17:cc:2e:3b:64:f9:f6:44:37:ac:1e:b2:f7:48:99:
82:d5:fa:cf:06:b4:c3:8b:59:7d:a8:e2:35:1a:78:
27:1e:e3:99:d5:56:0b:f5:22:53:b0:b6:7b:9f:e8:
c6:98:96:77:f6:23:5d:2a:3e:bc:db:e1:53:71:27:
94:63:da:6e:0c:0c:d2:04:2f:84:ad:85:29:8c:ba:
ce:f6:22:c9:9f:e7:8a:42:fa:52:55:ab:80:ad:21:
89:8c:8d:2f:08:a6:1c:e9:34:be:6b:85:4b:0f:1a:
fc:4d:fa:05:a1:bd:62:9a:79:0e:7b:96:6a:12:e8:
96:8e:f4:1c:49:60:f8:0d:80:14:1d:a5:f0:4e:7c:
27:20:8d:6d:68:00:35:e1:40:eb:6b:22:20:25:0e:
f5:d3:23:2f:7e:ee:6d:6e:09:59:ee:b3:91:df:0d:
38:68:0f:ca:5c:2b:bb:d2:5d:64:8b:3d:15:a8:a0:
96:53:86:42:0e:4d:ab:ea:00:de:58:68:65:c9:4c:
ea:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:FF:15:68:DD:43:43:84:77:D1:96:2D:84:B7:CC:14:61:4F:7B:BF
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/E_8VaN1DQ4R30ZYthLfMFGFPe78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.217.135.0-85.217.138.255
85.217.141.0-85.217.143.255
85.217.146.0/24
85.217.150.0-85.217.155.255
85.217.157.0-85.217.159.255
88.98.96.0/20
185.44.233.0/24
185.130.24.0/22
185.196.202.0/23
185.202.166.0/23
185.235.103.0/24
212.63.120.0/24
212.63.122.0/23
Signature Algorithm: sha256WithRSAEncryption
99:72:e2:bb:89:bd:9a:dc:40:d3:0d:46:45:3a:de:84:5b:e7:
fc:53:3c:dc:7f:cb:0e:69:6f:a7:2a:8b:76:e1:1c:9b:0b:7b:
6e:29:2b:95:16:fe:70:ed:94:27:e1:1f:57:67:b8:b7:33:f1:
37:dd:ab:ec:44:72:8f:02:ef:c1:31:73:c8:bb:e0:28:19:9c:
d4:05:d3:58:aa:aa:30:0a:d0:7d:04:bb:7e:9a:4e:05:27:4b:
29:7e:f5:cd:18:ed:b1:91:ed:d8:07:69:90:0d:05:97:99:03:
94:7c:40:b4:5a:70:df:89:66:f8:20:2e:74:d0:3d:f9:4b:a2:
ec:3b:d7:4f:e8:64:4e:d2:74:ec:f1:7c:45:79:5f:56:ff:cc:
e3:0a:17:21:78:0d:80:b6:67:ae:3c:9f:0f:07:e1:4e:e3:08:
05:af:60:8e:c3:5d:60:17:27:09:51:27:15:74:c0:ae:53:29:
19:0c:18:47:71:83:4d:0f:05:55:0a:85:4f:b1:6f:ad:3c:36:
44:23:a1:b8:70:97:68:1e:62:c9:9e:89:dc:f6:7a:0b:c3:55:
e4:3f:77:f7:8e:c5:bb:79:da:1e:72:7a:62:6a:6d:64:41:5d:
f4:a0:fb:b2:d9:80:42:3b:c6:eb:3d:3a:dd:f8:bc:97:63:10:
46:68:66:9a
-----BEGIN CERTIFICATE-----
MIIFZjCCBE6gAwIBAgISAYuAGES6qdyuBiyUiz5EVhinMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0NzVmYjA5MzRjZjZhNThkY2NlZjExMDg3NWRiZTVlM2U4
YjZiNzUwHhcNMjMxMDMwMTAxOTE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxM2ZmMTU2OGRkNDM0Mzg0NzdkMTk2MmQ4NGI3Y2MxNDYxNGY3YmJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhE0otPBp4C78C/cvV0Hm9S4plUOi
AuDLe5ipgXNSSfUkXkjFH0cBvQoDjravRWE6QYYB5igGDbuoFtAXzC47ZPn2RDes
HrL3SJmC1frPBrTDi1l9qOI1GngnHuOZ1VYL9SJTsLZ7n+jGmJZ39iNdKj682+FT
cSeUY9puDAzSBC+ErYUpjLrO9iLJn+eKQvpSVauArSGJjI0vCKYc6TS+a4VLDxr8
TfoFob1imnkOe5ZqEuiWjvQcSWD4DYAUHaXwTnwnII1taAA14UDrayIgJQ710yMv
fu5tbglZ7rOR3w04aA/KXCu70l1kiz0VqKCWU4ZCDk2r6gDeWGhlyUzqtwIDAQAB
o4ICcjCCAm4wHQYDVR0OBBYEFBP/FWjdQ0OEd9GWLYS3zBRhT3u/MB8GA1UdIwQY
MBaAFNR1+wk0z2pY3M7xEIddvl4+i2t1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYt
Yzc5MTRhYjY0MjczLzEvRV84VmFOMURRNFIzMFpZdGhMZk1GR0ZQZTc4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYtYzc5MTRhYjY0Mjcz
LzEvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGHBggrBgEFBQcBBwEB/wR4MHYwdAQCAAEwbjAMAwQAVdmH
AwQAVdmKMAwDBABV2Y0DBARV2YADBABV2ZIwDAMEAVXZlgMEAlXZmDAMAwQAVdmd
AwQFVdmAAwQEWGJgAwQAuSzpAwQCuYIYAwQBucTKAwQBucqmAwQAuetnAwQA1D94
AwQB1D96MA0GCSqGSIb3DQEBCwUAA4IBAQCZcuK7ib2a3EDTDUZFOt6EW+f8Uzzc
f8sOaW+nKot24RybC3tuKSuVFv5w7ZQn4R9XZ7i3M/E33avsRHKPAu/BMXPIu+Ao
GZzUBdNYqqowCtB9BLt+mk4FJ0spfvXNGO2xke3YB2mQDQWXmQOUfEC0WnDfiWb4
IC500D35S6LsO9dP6GRO0nTs8XxFeV9W/8zjChcheA2AtmeuPJ8PB+FO4wgFr2CO
w11gFycJUScVdMCuUykZDBhHcYNNDwVVCoVPsW+tPDZEI6G4cJdoHmLJnonc9noL
w1XkP3f3jsW7edoecnpiam1kQV30oPuy2YBCO8brPTrd+LyXYxBGaGaa
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:50 2024 by rpki-client on console-ams.rpki-client.org