Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/v2oN7mxg5uGfi7T_v_6xeVkFEOA.roa
File: v2oN7mxg5uGfi7T_v_6xeVkFEOA.roa (raw, json)
Hash identifier: g3ETgqFgn6GcVyGVW9d2UShBQoyQU40+vMqjZ3LuFsw=
Subject key identifier: BF:6A:0D:EE:6C:60:E6:E1:9F:8B:B4:FF:BF:FE:B1:79:59:05:10:E0
Certificate issuer: /CN=874bf8070cee4305d1a389e910fb5102bbcc1941
Certificate serial: 018AA96346030761DB52ED7115AAC926B45A
Authority key identifier: 87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/v2oN7mxg5uGfi7T_v_6xeVkFEOA.roa
Signing time: Mon 18 Sep 2023 17:42:50 +0000
ROA not before: Mon 18 Sep 2023 17:42:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 85.237.68.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 16 Dec 2023 16:09:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:a9:63:46:03:07:61:db:52:ed:71:15:aa:c9:26:b4:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=874bf8070cee4305d1a389e910fb5102bbcc1941
Validity
Not Before: Sep 18 17:42:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bf6a0dee6c60e6e19f8bb4ffbffeb179590510e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:df:be:42:90:0a:c1:59:41:42:cd:8a:c2:42:
97:57:20:11:b6:76:6a:34:65:6d:cc:59:a5:5b:c3:
74:7d:99:73:a5:ec:97:e8:05:88:e8:cf:b1:ef:59:
68:6c:cd:43:6a:15:20:bc:7e:86:8e:4a:44:c8:5c:
b4:12:ab:83:b2:0f:0d:99:51:f9:b4:f5:98:46:a5:
21:89:ef:df:5a:a7:54:80:c2:71:0c:c8:a2:f5:56:
d9:7d:81:a9:39:dd:56:64:79:14:50:ac:39:d6:93:
0a:c3:65:b6:95:33:84:40:53:bd:70:64:9a:2c:82:
4c:0a:8f:46:b5:56:32:93:bd:18:e6:6c:e1:05:de:
b0:05:9f:e1:98:80:16:72:dd:b2:a5:d4:f4:c1:bb:
fd:39:de:fc:ac:bb:a8:c1:b3:38:2a:e9:5d:63:49:
7a:47:9b:8d:76:c4:75:7d:a7:df:68:3e:1d:82:f9:
47:f7:d2:4e:04:5b:02:5b:00:52:e5:a5:ef:67:3b:
1e:2a:29:8b:dd:aa:bd:39:94:03:a9:c6:86:c0:ba:
e5:dd:8c:c4:4e:51:59:63:f3:94:f5:93:cf:3d:e8:
3f:73:b0:d7:64:7c:ad:0c:3f:f4:1e:5b:c8:d6:4f:
15:a1:4a:6e:1e:39:64:0a:90:53:08:2f:8b:b7:4a:
ee:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:6A:0D:EE:6C:60:E6:E1:9F:8B:B4:FF:BF:FE:B1:79:59:05:10:E0
X509v3 Authority Key Identifier:
keyid:87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/v2oN7mxg5uGfi7T_v_6xeVkFEOA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.68.0/24
Signature Algorithm: sha256WithRSAEncryption
63:8d:4b:9f:b4:22:e8:05:4d:85:1b:5c:bc:db:d7:59:e6:28:
31:52:94:23:19:4f:74:c9:bd:ce:15:aa:40:48:03:ce:50:58:
a4:f6:c6:fe:7f:5b:57:a1:c0:cd:b7:cf:8b:27:15:f1:ce:85:
d3:20:d0:27:1a:c9:a4:a3:df:bc:cc:90:80:3d:b0:97:5d:d0:
20:29:05:90:cb:10:57:4f:e4:99:eb:02:0b:b7:c2:02:0c:f1:
f3:5d:a4:6f:e5:bd:1f:f6:ba:72:17:33:69:ac:25:45:08:64:
71:40:b8:ed:6e:f8:96:01:f9:da:fe:29:f0:41:59:8c:60:81:
9a:94:f2:9e:0d:32:7e:52:7e:97:12:de:a3:bb:4e:8f:78:24:
b7:74:2d:8c:01:4c:cb:b5:95:de:32:16:9d:f6:d4:ab:ce:6e:
f3:af:90:ee:7c:eb:c8:c1:00:dc:78:aa:d5:45:91:93:5d:a7:
2d:37:80:6a:5c:b0:14:1b:1f:0b:9a:c3:0f:27:0b:f0:1c:a3:
07:3e:5e:c6:cf:6e:f1:2e:5b:a4:2a:2d:5d:f9:e5:6e:44:dd:
19:7c:b6:0d:59:08:7b:d6:aa:bc:ab:5e:7f:0e:6c:d9:46:27:
3a:07:5e:b7:d1:b9:14:4d:b5:3a:2c:89:4c:f0:35:7b:26:88:
72:ef:4c:35
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYqpY0YDB2HbUu1xFarJJrRaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3NGJmODA3MGNlZTQzMDVkMWEzODllOTEwZmI1MTAyYmJj
YzE5NDEwHhcNMjMwOTE4MTc0MjUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZjZhMGRlZTZjNjBlNmUxOWY4YmI0ZmZiZmZlYjE3OTU5MDUxMGUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0t++QpAKwVlBQs2KwkKXVyARtnZq
NGVtzFmlW8N0fZlzpeyX6AWI6M+x71lobM1DahUgvH6GjkpEyFy0EquDsg8NmVH5
tPWYRqUhie/fWqdUgMJxDMii9VbZfYGpOd1WZHkUUKw51pMKw2W2lTOEQFO9cGSa
LIJMCo9GtVYyk70Y5mzhBd6wBZ/hmIAWct2ypdT0wbv9Od78rLuowbM4KuldY0l6
R5uNdsR1faffaD4dgvlH99JOBFsCWwBS5aXvZzseKimL3aq9OZQDqcaGwLrl3YzE
TlFZY/OU9ZPPPeg/c7DXZHytDD/0HlvI1k8VoUpuHjlkCpBTCC+Lt0ruTwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFL9qDe5sYObhn4u0/7/+sXlZBRDgMB8GA1UdIwQY
MBaAFIdL+AcM7kMF0aOJ6RD7UQK7zBlBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDB2NEJ3enVRd1hSbzRucEVQdFJBcnZNR1VFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9lZWUxMzEtYmI4Yy00ODg3LTg2OWIt
NmZlNGQ4ZmVkMTYwLzEvdjJvTjdteGc1dUdmaTdUX3ZfNnhlVmtGRU9BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9lZWUxMzEtYmI4Yy00ODg3LTg2OWItNmZlNGQ4ZmVkMTYw
LzEvaDB2NEJ3enVRd1hSbzRucEVQdFJBcnZNR1VFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVe1EMA0G
CSqGSIb3DQEBCwUAA4IBAQBjjUuftCLoBU2FG1y829dZ5igxUpQjGU90yb3OFapA
SAPOUFik9sb+f1tXocDNt8+LJxXxzoXTINAnGsmko9+8zJCAPbCXXdAgKQWQyxBX
T+SZ6wILt8ICDPHzXaRv5b0f9rpyFzNprCVFCGRxQLjtbviWAfna/inwQVmMYIGa
lPKeDTJ+Un6XEt6ju06PeCS3dC2MAUzLtZXeMhad9tSrzm7zr5DufOvIwQDceKrV
RZGTXactN4BqXLAUGx8LmsMPJwvwHKMHPl7Gz27xLlukKi1d+eVuRN0ZfLYNWQh7
1qq8q15/DmzZRic6B1630bkUTbU6LIlM8DV7Johy70w1
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:00 2024 by rpki-client on console-ams.rpki-client.org