Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/1-r1sjTpKcYZUynsqxAliSyqh4s8.roa
File: 1-r1sjTpKcYZUynsqxAliSyqh4s8.roa (raw, json)
Hash identifier: +ycJgJQpqEBJR4vw6Iu5ALlUTnFszuqRnAGLkCS8JIQ=
Subject key identifier: FA:BD:6C:8D:3A:4A:71:86:54:CA:7B:2A:C4:09:62:4B:2A:A1:E2:CF
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 0192B327B60DD8D1A6379E6058EE7E9E6EC2
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/1-r1sjTpKcYZUynsqxAliSyqh4s8.roa
Signing time: Tue 22 Oct 2024 07:36:16 +0000
ROA not before: Tue 22 Oct 2024 07:36:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3356
IP address blocks: 85.133.193.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 24 Oct 2024 20:05:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:b3:27:b6:0d:d8:d1:a6:37:9e:60:58:ee:7e:9e:6e:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Oct 22 07:36:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fabd6c8d3a4a718654ca7b2ac409624b2aa1e2cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ba:7e:37:3c:ea:8f:34:19:db:5f:88:be:dc:
c8:28:f1:c6:2b:83:7a:bd:4d:91:b6:c3:d7:2f:6f:
75:2d:89:5c:a0:78:76:9d:b3:0d:13:a5:2d:b4:4d:
64:fa:5d:ad:d6:fa:a5:c2:69:bc:d4:7d:e6:4d:71:
50:ba:ab:04:98:82:4a:75:70:31:ca:2f:a0:9f:20:
94:0f:0c:4e:b0:ec:df:df:cf:c8:f7:b6:e1:13:3d:
fe:72:7a:7e:f2:81:7e:0a:9c:a7:08:84:fe:16:dd:
f6:65:7f:e9:53:d2:70:c6:00:13:28:6e:3a:04:a8:
d4:82:27:4a:a2:33:51:97:61:1c:7f:e4:58:ee:8b:
80:9f:b2:c3:77:3f:ec:f7:f1:46:3e:41:0f:04:18:
65:49:75:b1:48:a4:31:1c:45:d0:29:23:f1:da:17:
8e:21:12:65:58:27:fa:ab:27:ed:96:2a:13:7c:b1:
14:df:a3:85:11:ba:e5:24:06:bb:e4:93:c6:98:04:
7a:79:11:fc:26:53:f3:a2:ef:cf:d6:3f:56:d2:3a:
26:f3:72:9b:1c:c9:fc:52:30:24:fe:f8:b1:5d:57:
b4:ae:40:6e:e3:0f:72:1d:17:3f:99:e0:74:1b:3d:
84:2d:c7:d3:49:8d:eb:9a:97:44:df:d4:3c:63:88:
3e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:BD:6C:8D:3A:4A:71:86:54:CA:7B:2A:C4:09:62:4B:2A:A1:E2:CF
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/1-r1sjTpKcYZUynsqxAliSyqh4s8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.193.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:98:e5:b6:6b:eb:d2:d2:2d:1a:62:94:6d:21:be:f2:5a:50:
12:4a:1f:d1:07:bd:79:d1:83:f1:91:62:e4:01:e6:9e:c1:83:
b5:80:50:58:06:6f:78:d9:24:5c:c6:dd:d9:a6:c3:a0:01:8f:
56:dd:c9:d1:b9:a7:36:34:12:92:d1:ac:06:cd:37:c9:52:2e:
81:23:3e:62:f5:64:b5:50:7f:8f:47:ee:e8:6b:e4:94:16:1b:
52:b6:18:8d:08:f0:ba:9e:7c:fd:5e:43:cc:0a:0a:a5:de:12:
a6:1d:f2:58:9e:42:de:e9:94:a6:ca:2e:1c:7d:74:b4:90:7c:
0e:38:5e:c4:01:8a:a3:8b:6a:2c:19:8b:9e:2a:90:e1:17:49:
70:89:2d:b9:21:66:17:c3:41:e6:cc:41:58:93:c4:72:a1:52:
c2:93:aa:c0:27:6e:51:51:38:74:5b:2e:04:8e:98:ca:2f:b9:
61:92:04:c8:82:71:76:94:5e:0d:b7:ea:6e:ad:95:f8:fa:5a:
eb:b1:ae:5b:85:de:d0:7b:b1:d7:e7:26:f2:fa:88:89:dc:5e:
24:39:40:68:1b:8d:bc:1e:f8:20:29:82:b1:1d:03:52:a3:27:
c0:9f:cc:77:83:96:79:03:95:4b:fb:00:4c:c4:77:49:fb:99:
21:d7:67:dd
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZKzJ7YN2NGmN55gWO5+nm7CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkNWUzOTY1OGEzZWY2ZjEzY2EyMWNjMTFhNGUzM2ViY2Q5
NDY3MDIwHhcNMjQxMDIyMDczNjE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYWJkNmM4ZDNhNGE3MTg2NTRjYTdiMmFjNDA5NjI0YjJhYTFlMmNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7p+NzzqjzQZ21+IvtzIKPHGK4N6
vU2RtsPXL291LYlcoHh2nbMNE6UttE1k+l2t1vqlwmm81H3mTXFQuqsEmIJKdXAx
yi+gnyCUDwxOsOzf38/I97bhEz3+cnp+8oF+CpynCIT+Ft32ZX/pU9JwxgATKG46
BKjUgidKojNRl2Ecf+RY7ouAn7LDdz/s9/FGPkEPBBhlSXWxSKQxHEXQKSPx2heO
IRJlWCf6qyftlioTfLEU36OFEbrlJAa75JPGmAR6eRH8JlPzou/P1j9W0jom83Kb
HMn8UjAk/vixXVe0rkBu4w9yHRc/meB0Gz2ELcfTSY3rmpdE39Q8Y4g+8wIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPq9bI06SnGGVMp7KsQJYksqoeLPMB8GA1UdIwQY
MBaAFM1eOWWKPvbxPKIcwRpOM+vNlGcCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUt
NWQxZmE2NmMzNjNiLzEvMS1yMXNqVHBLY1laVXluc3F4QWxpU3lxaDRzOC5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZjAvZWY1MzZjLTAzZDMtNGFjNS1iMTI1LTVkMWZhNjZjMzYz
Yi8xL3pWNDVaWW8tOXZFOG9oekJHazR6NjgyVVp3SS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFWFwTAN
BgkqhkiG9w0BAQsFAAOCAQEAi5jltmvr0tItGmKUbSG+8lpQEkof0Qe9edGD8ZFi
5AHmnsGDtYBQWAZveNkkXMbd2abDoAGPVt3J0bmnNjQSktGsBs03yVIugSM+YvVk
tVB/j0fu6GvklBYbUrYYjQjwup58/V5DzAoKpd4Sph3yWJ5C3umUpsouHH10tJB8
DjhexAGKo4tqLBmLniqQ4RdJcIktuSFmF8NB5sxBWJPEcqFSwpOqwCduUVE4dFsu
BI6Yyi+5YZIEyIJxdpReDbfqbq2V+Ppa67GuW4Xe0Hux1+cm8vqIidxeJDlAaBuN
vB74ICmCsR0DUqMnwJ/Md4OWeQOVS/sATMR3SfuZIddn3Q==
-----END CERTIFICATE-----
Generated at Thu Oct 24 22:39:05 2024 by rpki-client on console-fra.rpki-client.org