Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/c1qvVxNu231ehJSGJb-SZCgJ89s.roa
File: c1qvVxNu231ehJSGJb-SZCgJ89s.roa (raw, json)
Hash identifier: VjGaXGkueHSD5PjRGvg/ilP4x95p9Wx3f7TBqaatIPg=
Subject key identifier: 73:5A:AF:57:13:6E:DB:7D:5E:84:94:86:25:BF:92:64:28:09:F3:DB
Certificate issuer: /CN=874bf8070cee4305d1a389e910fb5102bbcc1941
Certificate serial: 01874E1F69BDF139911E7314330F9A8C95C9
Authority key identifier: 87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/c1qvVxNu231ehJSGJb-SZCgJ89s.roa
Signing time: Tue 04 Apr 2023 21:14:54 +0000
ROA not before: Tue 04 Apr 2023 21:14:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 54641
IP address blocks: 85.237.92.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:4e:1f:69:bd:f1:39:91:1e:73:14:33:0f:9a:8c:95:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=874bf8070cee4305d1a389e910fb5102bbcc1941
Validity
Not Before: Apr 4 21:14:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=735aaf57136edb7d5e84948625bf92642809f3db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:dd:c3:5b:1d:3f:40:e0:be:0c:42:82:e4:f2:
64:30:d2:6a:90:95:fa:0f:e9:9f:ae:b2:82:df:80:
8e:0a:51:c9:c0:64:98:32:d4:df:ed:c3:43:f8:98:
81:87:77:64:fb:5e:2e:d7:0d:91:58:94:fc:ef:50:
cd:7c:b8:ed:62:84:03:2f:7b:f3:81:bb:e4:ec:b9:
85:ee:6a:32:ef:3c:ae:de:56:53:c6:32:d9:f5:13:
eb:44:bd:7d:2f:d0:7b:48:a7:fb:41:5a:89:27:1f:
77:c2:13:9b:88:ea:bd:eb:5e:dc:74:2b:45:cb:71:
71:12:24:3f:5b:d9:13:25:ab:d4:29:d9:8a:6a:7f:
04:11:a4:c0:12:d3:e2:d0:32:57:e3:4a:e3:4c:d3:
14:5c:f4:66:78:85:32:85:7a:44:75:8a:9e:39:37:
20:53:01:86:7e:e8:f1:5b:ee:02:ea:d7:4d:2c:5c:
67:4c:a2:92:d9:57:7d:fd:0c:b4:44:ed:71:58:0f:
ee:41:3d:7a:71:ee:d8:ae:ad:70:d4:f3:bd:ef:25:
7e:cc:f0:73:37:ac:a4:82:95:8d:4a:07:9d:d7:c5:
63:3e:74:92:f4:d1:49:c5:aa:29:69:66:b0:e5:d6:
7f:f1:92:65:24:c4:6f:5a:f3:27:3e:bc:fc:32:cf:
de:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:5A:AF:57:13:6E:DB:7D:5E:84:94:86:25:BF:92:64:28:09:F3:DB
X509v3 Authority Key Identifier:
keyid:87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/c1qvVxNu231ehJSGJb-SZCgJ89s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.92.0/22
Signature Algorithm: sha256WithRSAEncryption
41:37:8f:28:8b:60:08:bd:01:e9:4e:b1:21:e4:96:a8:5e:8e:
81:81:a6:4b:0e:db:ee:96:da:de:93:95:ab:12:f0:5d:d4:30:
19:2c:41:9d:3d:f0:71:87:e9:ce:98:10:d6:26:70:a2:f9:eb:
19:98:64:07:3d:ca:87:44:d8:b2:0b:1c:2c:37:68:fd:d0:e6:
62:88:96:42:9b:d4:d4:e9:b6:13:14:3e:cd:11:ec:20:c3:49:
53:c1:a6:d0:27:d2:05:22:e9:8b:95:f0:0c:45:8a:34:e8:3c:
ef:a9:00:1c:0c:00:b1:99:16:30:21:94:a4:7c:56:97:31:56:
cf:a1:c8:a5:2a:07:2c:63:d4:51:06:39:0d:29:5b:6f:05:94:
1e:17:80:fb:bb:69:eb:3e:4c:7c:98:b3:a4:2a:77:f7:18:5f:
ed:ed:9c:03:d1:39:3a:c0:31:19:5d:3e:a4:b1:41:01:31:74:
cf:85:a1:27:b9:1d:27:99:ef:c8:4c:05:2e:be:cd:21:fa:7f:
63:b9:6a:20:6b:01:a9:4b:32:ba:cd:5a:09:e6:20:3d:4c:a1:
59:08:01:3c:3a:df:d9:3f:c4:01:45:27:e9:42:a8:5c:64:76:
ee:0c:d2:66:0b:d2:5d:15:bc:da:14:1b:ec:52:9f:4a:c4:f6:
bf:c4:b2:60
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYdOH2m98TmRHnMUMw+ajJXJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3NGJmODA3MGNlZTQzMDVkMWEzODllOTEwZmI1MTAyYmJj
YzE5NDEwHhcNMjMwNDA0MjExNDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MzVhYWY1NzEzNmVkYjdkNWU4NDk0ODYyNWJmOTI2NDI4MDlmM2RiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi93DWx0/QOC+DEKC5PJkMNJqkJX6
D+mfrrKC34COClHJwGSYMtTf7cND+JiBh3dk+14u1w2RWJT871DNfLjtYoQDL3vz
gbvk7LmF7moy7zyu3lZTxjLZ9RPrRL19L9B7SKf7QVqJJx93whObiOq9617cdCtF
y3FxEiQ/W9kTJavUKdmKan8EEaTAEtPi0DJX40rjTNMUXPRmeIUyhXpEdYqeOTcg
UwGGfujxW+4C6tdNLFxnTKKS2Vd9/Qy0RO1xWA/uQT16ce7Yrq1w1PO97yV+zPBz
N6ykgpWNSged18VjPnSS9NFJxaopaWaw5dZ/8ZJlJMRvWvMnPrz8Ms/edQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHNar1cTbtt9XoSUhiW/kmQoCfPbMB8GA1UdIwQY
MBaAFIdL+AcM7kMF0aOJ6RD7UQK7zBlBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDB2NEJ3enVRd1hSbzRucEVQdFJBcnZNR1VFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9lZWUxMzEtYmI4Yy00ODg3LTg2OWIt
NmZlNGQ4ZmVkMTYwLzEvYzFxdlZ4TnUyMzFlaEpTR0piLVNaQ2dKODlzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9lZWUxMzEtYmI4Yy00ODg3LTg2OWItNmZlNGQ4ZmVkMTYw
LzEvaDB2NEJ3enVRd1hSbzRucEVQdFJBcnZNR1VFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCVe1cMA0G
CSqGSIb3DQEBCwUAA4IBAQBBN48oi2AIvQHpTrEh5JaoXo6BgaZLDtvultrek5Wr
EvBd1DAZLEGdPfBxh+nOmBDWJnCi+esZmGQHPcqHRNiyCxwsN2j90OZiiJZCm9TU
6bYTFD7NEewgw0lTwabQJ9IFIumLlfAMRYo06DzvqQAcDACxmRYwIZSkfFaXMVbP
ocilKgcsY9RRBjkNKVtvBZQeF4D7u2nrPkx8mLOkKnf3GF/t7ZwD0Tk6wDEZXT6k
sUEBMXTPhaEnuR0nme/ITAUuvs0h+n9juWogawGpSzK6zVoJ5iA9TKFZCAE8Ot/Z
P8QBRSfpQqhcZHbuDNJmC9JdFbzaFBvsUp9KxPa/xLJg
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:00 2024 by rpki-client on console-ams.rpki-client.org