Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/1-qHkqE4PVAk_Bne8s8g0aemGql0.roa
File: 1-qHkqE4PVAk_Bne8s8g0aemGql0.roa (raw, json)
Hash identifier: 8twwE4374UjHnDqj3+j73chWDRTHPvr8bCfZnBFdDG0=
Subject key identifier: FA:A1:E4:A8:4E:0F:54:09:3F:06:77:BC:B3:C8:34:69:E9:86:AA:5D
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 018F2DC20BA7448BC36B52B81FDC42EEFAF6
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/1-qHkqE4PVAk_Bne8s8g0aemGql0.roa
Signing time: Tue 30 Apr 2024 06:47:22 +0000
ROA not before: Tue 30 Apr 2024 06:47:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198154
IP address blocks: 85.133.250.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 26 Dec 2024 10:09:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:2d:c2:0b:a7:44:8b:c3:6b:52:b8:1f:dc:42:ee:fa:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Apr 30 06:47:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=faa1e4a84e0f54093f0677bcb3c83469e986aa5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:86:6a:97:3d:3d:d6:45:ca:e7:a1:75:fa:b2:
df:bf:57:74:ec:60:60:13:3e:8e:2e:ce:01:eb:d6:
2b:e5:fc:0d:6d:8a:a6:b7:03:6b:46:ad:9c:47:6b:
e9:45:74:98:d3:74:ff:8e:30:ad:26:54:37:18:60:
91:22:06:fc:d6:6a:34:b5:6c:1c:15:0f:f4:06:91:
94:e2:5b:17:d4:42:42:ac:cd:10:37:91:03:d5:d7:
7c:0e:7d:f0:7b:b5:e5:16:2b:5c:7b:17:86:76:3e:
dc:c5:43:71:85:db:58:8a:13:01:22:36:f3:7b:3d:
3d:a9:2d:9c:d1:f3:82:73:dd:a9:6f:67:c1:0f:e1:
cb:86:38:08:0f:37:a4:84:5e:36:cb:47:e9:57:01:
03:90:67:d3:a9:48:2d:b9:8f:aa:f9:d0:53:72:35:
86:6e:a0:ed:f0:65:19:02:16:8d:e0:27:96:52:0d:
83:b3:32:65:e1:7e:e9:5e:ff:b7:2b:35:0d:a1:6d:
2e:95:38:61:24:c6:67:31:16:55:69:e1:22:d6:69:
4b:7d:b7:ce:b1:7f:ac:99:b1:31:73:d1:af:6d:fe:
0c:6e:c7:11:6a:68:13:b9:86:19:4c:03:b8:9d:0b:
22:fa:a8:fb:ca:32:d3:f5:6d:28:65:b1:f0:77:54:
6e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:A1:E4:A8:4E:0F:54:09:3F:06:77:BC:B3:C8:34:69:E9:86:AA:5D
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/1-qHkqE4PVAk_Bne8s8g0aemGql0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.250.0/24
Signature Algorithm: sha256WithRSAEncryption
16:7d:02:09:3d:26:45:33:44:31:61:0e:ee:16:f3:80:cb:da:
6d:05:4c:a0:be:38:9d:5f:cd:75:2f:7c:64:5d:66:d9:f6:b0:
f2:6b:bc:b7:a4:33:b2:99:84:f8:b8:56:13:fe:b0:c6:30:88:
1d:8a:31:3c:93:1d:d9:f3:66:3d:3a:88:51:55:b4:b1:01:09:
4f:b4:af:f0:0f:dd:b1:42:27:a8:02:91:8f:87:8f:64:3a:72:
27:a3:b8:0a:10:c6:a3:b4:c2:7e:af:38:a5:2d:57:50:4d:91:
ae:44:b1:b6:cf:85:ca:c2:11:b5:43:9a:94:c0:22:a9:ca:cd:
48:98:4f:7f:21:90:e9:c5:95:d2:62:c9:60:e9:3a:a4:a4:3d:
d5:85:92:8a:12:00:e5:ed:66:21:a8:e8:3b:16:de:da:70:5f:
f3:1d:39:59:15:c7:e9:14:6e:ea:55:b4:2a:92:27:5c:d8:3b:
5d:c9:10:24:b4:82:2c:c3:6d:19:c3:5b:19:8b:13:94:f4:69:
3e:65:10:76:3b:87:23:fc:89:56:9d:ed:9e:ff:b9:ee:69:b5:
74:78:c2:48:e7:b6:c8:28:d5:fa:e9:5c:14:b1:f3:4c:f1:cb:
ef:73:4f:cb:8d:d0:11:96:f2:f8:ed:a3:9b:55:aa:f5:32:1b:
c5:d9:09:86
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAY8twgunRIvDa1K4H9xC7vr2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkNWUzOTY1OGEzZWY2ZjEzY2EyMWNjMTFhNGUzM2ViY2Q5
NDY3MDIwHhcNMjQwNDMwMDY0NzIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYWExZTRhODRlMGY1NDA5M2YwNjc3YmNiM2M4MzQ2OWU5ODZhYTVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIZqlz091kXK56F1+rLfv1d07GBg
Ez6OLs4B69Yr5fwNbYqmtwNrRq2cR2vpRXSY03T/jjCtJlQ3GGCRIgb81mo0tWwc
FQ/0BpGU4lsX1EJCrM0QN5ED1dd8Dn3we7XlFitcexeGdj7cxUNxhdtYihMBIjbz
ez09qS2c0fOCc92pb2fBD+HLhjgIDzekhF42y0fpVwEDkGfTqUgtuY+q+dBTcjWG
bqDt8GUZAhaN4CeWUg2DszJl4X7pXv+3KzUNoW0ulThhJMZnMRZVaeEi1mlLfbfO
sX+smbExc9Gvbf4MbscRamgTuYYZTAO4nQsi+qj7yjLT9W0oZbHwd1RupQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPqh5KhOD1QJPwZ3vLPINGnphqpdMB8GA1UdIwQY
MBaAFM1eOWWKPvbxPKIcwRpOM+vNlGcCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUt
NWQxZmE2NmMzNjNiLzEvMS1xSGtxRTRQVkFrX0JuZThzOGcwYWVtR3FsMC5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZjAvZWY1MzZjLTAzZDMtNGFjNS1iMTI1LTVkMWZhNjZjMzYz
Yi8xL3pWNDVaWW8tOXZFOG9oekJHazR6NjgyVVp3SS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFWF+jAN
BgkqhkiG9w0BAQsFAAOCAQEAFn0CCT0mRTNEMWEO7hbzgMvabQVMoL44nV/NdS98
ZF1m2faw8mu8t6QzspmE+LhWE/6wxjCIHYoxPJMd2fNmPTqIUVW0sQEJT7Sv8A/d
sUInqAKRj4ePZDpyJ6O4ChDGo7TCfq84pS1XUE2RrkSxts+FysIRtUOalMAiqcrN
SJhPfyGQ6cWV0mLJYOk6pKQ91YWSihIA5e1mIajoOxbe2nBf8x05WRXH6RRu6lW0
KpInXNg7XckQJLSCLMNtGcNbGYsTlPRpPmUQdjuHI/yJVp3tnv+57mm1dHjCSOe2
yCjV+ulcFLHzTPHL73NPy43QEZby+O2jm1Wq9TIbxdkJhg==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:18:31 2025 by rpki-client