Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/d1IdwepTespe-cJATFq95BxMKhQ.roa
File: d1IdwepTespe-cJATFq95BxMKhQ.roa (raw, json)
Hash identifier: v4Y5LqgcEwHGjaADi1sVOTVZiUk3r22sEGXX6N/b7eM=
Subject key identifier: 77:52:1D:C1:EA:53:7A:CA:5E:F9:C2:40:4C:5A:BD:E4:1C:4C:2A:14
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 01857246E413010A1486B0BA459654942C51
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/d1IdwepTespe-cJATFq95BxMKhQ.roa
Signing time: Mon 02 Jan 2023 11:38:46 +0000
ROA not before: Mon 02 Jan 2023 11:38:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61370
IP address blocks: 85.187.191.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:e4:13:01:0a:14:86:b0:ba:45:96:54:94:2c:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 2 11:38:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=77521dc1ea537aca5ef9c2404c5abde41c4c2a14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:75:7d:a5:d6:93:e1:cf:71:9a:e5:bf:dc:f4:
f2:b0:24:3e:53:3d:a5:45:a4:8b:ac:07:5c:5e:8b:
85:af:fd:34:26:1f:ca:03:32:ee:03:2e:71:ba:63:
85:f6:f6:19:38:0a:73:7b:95:aa:dd:87:87:c9:0a:
6c:59:fb:60:2c:eb:90:b1:5f:e3:06:06:b9:28:f5:
6e:e8:b1:cb:66:fe:03:ed:a8:42:0b:7e:0b:bc:fd:
c5:34:27:3b:14:4b:0b:85:17:05:e4:1e:96:97:50:
79:5c:d8:74:e0:12:f5:32:a5:d1:9c:d4:ee:13:7b:
b8:55:70:bd:51:d2:a9:70:17:80:f4:4d:a5:a8:30:
a8:b1:c7:11:b1:98:69:b0:2c:ce:0c:11:e7:68:eb:
03:91:8e:0f:b9:1a:49:ae:ec:a2:65:b7:ed:ef:39:
26:22:a3:1a:b3:19:f5:98:0a:6b:a1:e7:13:fd:71:
e4:b0:6b:98:61:00:db:c2:35:84:6b:97:72:42:16:
d8:8c:70:55:52:93:99:f9:18:58:55:93:cd:52:4e:
64:72:47:f4:04:32:17:87:a6:e7:7d:46:ea:6e:11:
3b:70:d6:ec:b7:b3:ec:ff:c8:05:74:a8:d0:4c:ba:
7f:1d:84:6c:6c:7d:a2:2d:b9:ea:68:ba:bc:b6:1e:
bb:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:52:1D:C1:EA:53:7A:CA:5E:F9:C2:40:4C:5A:BD:E4:1C:4C:2A:14
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/d1IdwepTespe-cJATFq95BxMKhQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.187.191.0/24
Signature Algorithm: sha256WithRSAEncryption
36:5c:a0:79:28:15:a5:01:68:74:64:94:5d:1b:0a:e9:87:04:
d2:93:26:9c:0d:10:1d:78:14:1d:a3:0b:93:2e:b8:8f:43:04:
df:f0:ec:d4:af:96:fc:a6:be:1f:f6:9a:6e:5b:1f:d8:e8:1f:
11:52:59:1e:db:9b:1b:15:f6:86:c9:c0:fd:1c:41:e5:1f:18:
e2:ed:0e:47:30:a7:1e:f8:59:7a:ca:f7:0e:ca:fd:2f:6c:79:
7e:57:0f:a0:76:74:af:cc:c9:0c:e5:0b:8e:2d:bf:ed:b7:5d:
01:29:41:67:c7:a2:92:c9:68:27:cb:c9:36:a2:c7:ce:ea:1b:
14:a5:04:1c:f0:e0:05:4a:97:7b:45:60:94:a2:c6:58:8b:a1:
6c:55:86:78:09:fc:8d:66:b5:1b:8c:48:bc:60:43:d0:32:b9:
7e:00:1e:38:82:e5:8c:b2:66:50:07:83:22:48:19:42:f7:7f:
27:9a:61:eb:4d:92:79:8b:55:a9:a1:65:a7:b5:78:7b:e4:b9:
49:1e:ab:87:5e:12:21:fd:d6:41:e2:ea:ec:02:74:c9:21:e3:
31:09:74:d7:2b:de:fb:04:9b:72:84:ed:8c:f1:a9:e4:7a:f4:
47:68:7a:0a:aa:a5:e0:77:d5:f9:0b:f6:0b:1e:21:fa:cb:3f:
1c:37:12:2c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVyRuQTAQoUhrC6RZZUlCxRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlYmYzMDIwMWYxMmEwNDBkMzg2ZDJiNGVlZDQ0ODQ2MjNl
NGQxMWIwHhcNMjMwMTAyMTEzODQ2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NzUyMWRjMWVhNTM3YWNhNWVmOWMyNDA0YzVhYmRlNDFjNGMyYTE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjnV9pdaT4c9xmuW/3PTysCQ+Uz2l
RaSLrAdcXouFr/00Jh/KAzLuAy5xumOF9vYZOApze5Wq3YeHyQpsWftgLOuQsV/j
Bga5KPVu6LHLZv4D7ahCC34LvP3FNCc7FEsLhRcF5B6Wl1B5XNh04BL1MqXRnNTu
E3u4VXC9UdKpcBeA9E2lqDCosccRsZhpsCzODBHnaOsDkY4PuRpJruyiZbft7zkm
IqMasxn1mAproecT/XHksGuYYQDbwjWEa5dyQhbYjHBVUpOZ+RhYVZPNUk5kckf0
BDIXh6bnfUbqbhE7cNbst7Ps/8gFdKjQTLp/HYRsbH2iLbnqaLq8th67mwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHdSHcHqU3rKXvnCQExaveQcTCoUMB8GA1UdIwQY
MBaAFP6/MCAfEqBA04bStO7USEYj5NEbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUt
YTk3YzBkYzBhNzQ5LzEvZDFJZHdlcFRlc3BlLWNKQVRGcTk1QnhNS2hRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUtYTk3YzBkYzBhNzQ5
LzEvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVbu/MA0G
CSqGSIb3DQEBCwUAA4IBAQA2XKB5KBWlAWh0ZJRdGwrphwTSkyacDRAdeBQdowuT
LriPQwTf8OzUr5b8pr4f9ppuWx/Y6B8RUlke25sbFfaGycD9HEHlHxji7Q5HMKce
+Fl6yvcOyv0vbHl+Vw+gdnSvzMkM5QuOLb/tt10BKUFnx6KSyWgny8k2osfO6hsU
pQQc8OAFSpd7RWCUosZYi6FsVYZ4CfyNZrUbjEi8YEPQMrl+AB44guWMsmZQB4Mi
SBlC938nmmHrTZJ5i1WpoWWntXh75LlJHquHXhIh/dZB4ursAnTJIeMxCXTXK977
BJtyhO2M8ankevRHaHoKqqXgd9X5C/YLHiH6yz8cNxIs
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:12 2024 by rpki-client on console-fra.rpki-client.org