Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/FLg3uTbD-GvDEXwU3f8TpVTdn70.roa
File: FLg3uTbD-GvDEXwU3f8TpVTdn70.roa (raw, json)
Hash identifier: KSzBUfqBOicoGmE0iqmYu8kHYF9S8ZfdptNZZuUqHV4=
Subject key identifier: 14:B8:37:B9:36:C3:F8:6B:C3:11:7C:14:DD:FF:13:A5:54:DD:9F:BD
Certificate issuer: /CN=874bf8070cee4305d1a389e910fb5102bbcc1941
Certificate serial: 0188B9E440747C3F56FE47FB488984E3F279
Authority key identifier: 87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/FLg3uTbD-GvDEXwU3f8TpVTdn70.roa
Signing time: Wed 14 Jun 2023 12:32:03 +0000
ROA not before: Wed 14 Jun 2023 12:32:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 55154
IP address blocks: 85.237.72.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 18 Jul 2023 18:25:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b9:e4:40:74:7c:3f:56:fe:47:fb:48:89:84:e3:f2:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=874bf8070cee4305d1a389e910fb5102bbcc1941
Validity
Not Before: Jun 14 12:32:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=14b837b936c3f86bc3117c14ddff13a554dd9fbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a6:4e:61:80:00:ac:41:64:92:61:29:18:6c:
2b:0c:2b:a9:0a:97:7a:64:57:87:1e:06:23:2a:43:
3b:1f:e0:e3:47:0f:b6:1a:f7:d7:fa:20:7c:29:58:
8b:c7:ec:ad:15:64:c7:c6:ef:1d:43:2f:e3:4f:a6:
71:fd:a1:6f:2f:1e:5b:fc:59:57:23:5d:14:d7:16:
3a:87:33:db:ab:92:a2:46:12:db:ee:05:d0:24:cd:
7b:26:29:1c:4c:a8:e0:6e:a8:e4:a1:29:80:da:a0:
09:55:ed:1a:98:1c:2d:d9:c1:38:d6:ef:d3:23:f1:
45:86:af:ce:ab:77:b5:70:28:d7:35:fa:40:53:81:
be:e0:b8:4a:1c:14:ea:26:f3:0b:1f:51:1c:c3:27:
8d:26:dc:63:1e:82:cf:8f:ca:c7:f4:b1:cb:46:fe:
dd:64:f7:30:92:ac:ce:a1:9f:60:bb:2c:ca:40:f4:
5e:0f:e9:83:7d:7c:4d:a9:af:69:2f:55:39:46:e8:
41:26:b4:75:67:31:63:24:c9:5d:c9:82:c5:10:83:
90:9b:80:a9:3d:0d:71:8a:3c:3a:4f:f1:9f:f5:b6:
9c:6b:0f:b7:bd:6b:3b:b0:47:ca:a5:9d:ce:00:b2:
2e:4f:ec:74:fb:cc:67:6a:f7:ea:99:84:65:2d:6a:
e7:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:B8:37:B9:36:C3:F8:6B:C3:11:7C:14:DD:FF:13:A5:54:DD:9F:BD
X509v3 Authority Key Identifier:
keyid:87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/FLg3uTbD-GvDEXwU3f8TpVTdn70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.72.0/22
Signature Algorithm: sha256WithRSAEncryption
20:ed:dc:b4:a9:6c:ae:9a:96:32:63:87:80:cc:1e:de:2b:29:
2e:cd:49:c6:62:eb:40:fe:d7:9f:b6:1b:7c:f2:cc:07:2b:d8:
fb:c9:32:8d:3e:cf:95:39:b9:61:2c:60:43:ec:e7:28:3a:38:
8c:f7:36:79:c4:24:6f:31:7b:9d:ce:13:ed:8f:47:75:7c:8e:
42:a6:06:62:ec:0a:44:b8:88:a0:97:f2:da:ef:16:2f:10:85:
e5:5f:3b:55:1b:e9:db:02:d0:0c:05:f7:f6:d1:70:a9:05:4b:
98:6d:5b:2f:9e:8d:3b:e9:7b:2a:27:e8:43:dc:be:7b:91:bd:
b9:fe:ac:c6:70:34:77:62:43:bb:cb:d9:ad:66:be:7d:ef:9c:
43:aa:9b:c8:df:17:2b:77:ab:96:5d:28:f0:3a:2c:6e:35:3d:
0f:5d:78:2c:67:32:f7:12:e1:64:07:2f:95:03:e1:34:ca:34:
e5:4a:5a:05:67:6c:fd:47:2b:f4:d7:d2:cd:ff:7e:91:11:ca:
42:bb:b7:d4:ac:43:43:9d:11:f7:39:58:39:a8:47:9e:61:f6:
7d:0d:76:69:46:e6:70:c2:32:2f:23:e9:fc:08:39:c7:08:c0:
26:28:a5:13:16:e6:d2:a1:4f:92:81:73:23:91:6c:ab:22:fe:
a8:c6:a4:49
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYi55EB0fD9W/kf7SImE4/J5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3NGJmODA3MGNlZTQzMDVkMWEzODllOTEwZmI1MTAyYmJj
YzE5NDEwHhcNMjMwNjE0MTIzMjAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNGI4MzdiOTM2YzNmODZiYzMxMTdjMTRkZGZmMTNhNTU0ZGQ5ZmJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKZOYYAArEFkkmEpGGwrDCupCpd6
ZFeHHgYjKkM7H+DjRw+2GvfX+iB8KViLx+ytFWTHxu8dQy/jT6Zx/aFvLx5b/FlX
I10U1xY6hzPbq5KiRhLb7gXQJM17JikcTKjgbqjkoSmA2qAJVe0amBwt2cE41u/T
I/FFhq/Oq3e1cCjXNfpAU4G+4LhKHBTqJvMLH1EcwyeNJtxjHoLPj8rH9LHLRv7d
ZPcwkqzOoZ9guyzKQPReD+mDfXxNqa9pL1U5RuhBJrR1ZzFjJMldyYLFEIOQm4Cp
PQ1xijw6T/Gf9bacaw+3vWs7sEfKpZ3OALIuT+x0+8xnavfqmYRlLWrnnwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBS4N7k2w/hrwxF8FN3/E6VU3Z+9MB8GA1UdIwQY
MBaAFIdL+AcM7kMF0aOJ6RD7UQK7zBlBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDB2NEJ3enVRd1hSbzRucEVQdFJBcnZNR1VFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9lZWUxMzEtYmI4Yy00ODg3LTg2OWIt
NmZlNGQ4ZmVkMTYwLzEvRkxnM3VUYkQtR3ZERVh3VTNmOFRwVlRkbjcwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9lZWUxMzEtYmI4Yy00ODg3LTg2OWItNmZlNGQ4ZmVkMTYw
LzEvaDB2NEJ3enVRd1hSbzRucEVQdFJBcnZNR1VFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCVe1IMA0G
CSqGSIb3DQEBCwUAA4IBAQAg7dy0qWyumpYyY4eAzB7eKykuzUnGYutA/teftht8
8swHK9j7yTKNPs+VOblhLGBD7OcoOjiM9zZ5xCRvMXudzhPtj0d1fI5CpgZi7ApE
uIigl/La7xYvEIXlXztVG+nbAtAMBff20XCpBUuYbVsvno076XsqJ+hD3L57kb25
/qzGcDR3YkO7y9mtZr5975xDqpvI3xcrd6uWXSjwOixuNT0PXXgsZzL3EuFkBy+V
A+E0yjTlSloFZ2z9Ryv019LN/36REcpCu7fUrENDnRH3OVg5qEeeYfZ9DXZpRuZw
wjIvI+n8CDnHCMAmKKUTFubSoU+SgXMjkWyrIv6oxqRJ
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:00 2024 by rpki-client on console-ams.rpki-client.org