Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/3eaXctEJRpEGUl8CNZipzxZLMUU.roa
File: 3eaXctEJRpEGUl8CNZipzxZLMUU.roa (raw, json)
Hash identifier: TFNfA+FiNqPEj5MnYACGfy+OvDPjZjuZuNTfuIybMcA=
Subject key identifier: DD:E6:97:72:D1:09:46:91:06:52:5F:02:35:98:A9:CF:16:4B:31:45
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 0190FD16BFC0357860174F62CEE11D9BB480
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/3eaXctEJRpEGUl8CNZipzxZLMUU.roa
Signing time: Mon 29 Jul 2024 06:04:04 +0000
ROA not before: Mon 29 Jul 2024 06:04:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215480
IP address blocks: 85.133.195.0/24 maxlen: 24
85.133.218.0/24 maxlen: 24
85.133.224.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 31 Jul 2024 07:41:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:fd:16:bf:c0:35:78:60:17:4f:62:ce:e1:1d:9b:b4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Jul 29 06:04:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dde69772d109469106525f023598a9cf164b3145
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:5d:33:0f:57:44:11:ef:88:35:b9:e5:10:a1:
bc:31:b2:1f:df:e4:74:cf:23:f2:21:75:26:33:b1:
13:c0:c0:44:12:17:22:0c:ac:d8:7a:d1:f5:66:61:
65:6e:cd:bd:5d:e1:be:a9:1a:3c:67:13:46:1f:4c:
e6:4e:9a:7d:4b:5d:8c:a0:7e:ab:6e:be:c3:9a:d4:
03:42:c9:80:ab:ee:c1:b9:44:32:27:f2:16:37:50:
a7:33:c1:ca:ca:c0:c7:c4:03:af:a6:20:a5:f2:dd:
0c:7e:c3:cc:c1:76:da:aa:2d:35:ba:47:c5:df:2f:
b3:02:50:cb:74:4d:ac:dc:34:74:a0:8c:c0:90:ef:
69:37:a1:43:09:0e:44:7c:00:f5:28:f7:27:82:e6:
78:00:cf:ae:4f:51:64:82:0b:47:93:9f:c0:54:ac:
5b:d6:9a:03:a0:42:15:89:e6:9e:f4:63:54:ac:34:
79:c4:7b:39:1d:92:6b:55:bd:84:a1:1f:19:41:d9:
36:a6:e1:1c:32:eb:4e:e8:f4:73:5e:f3:27:80:4b:
b9:4d:73:45:0d:d8:30:81:3a:95:78:9a:29:af:d6:
e5:04:7c:7b:9d:0e:9c:af:79:1d:26:5a:84:e0:b2:
4f:e4:c9:bd:63:80:7c:53:13:c9:e5:fe:02:49:99:
6b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:E6:97:72:D1:09:46:91:06:52:5F:02:35:98:A9:CF:16:4B:31:45
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/3eaXctEJRpEGUl8CNZipzxZLMUU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.195.0/24
85.133.218.0/24
85.133.224.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:97:a1:8c:03:d2:da:99:a5:ef:23:bf:1e:55:7e:fe:ec:8d:
f7:44:48:61:8a:5a:ae:5b:b7:12:15:a9:be:41:75:34:c2:38:
e4:54:c3:22:97:1d:c8:58:e9:a0:09:65:c1:1a:1f:35:10:6d:
c8:55:1a:b9:02:a5:92:88:57:6a:78:1f:73:e7:39:0e:15:e3:
9d:6a:f2:f7:4f:c7:c6:ac:1a:8c:2a:b3:d5:6a:34:83:19:f8:
dd:7e:c0:45:9c:f9:74:7c:3e:70:c2:b9:89:8c:a4:05:43:61:
80:04:c9:b6:83:b3:37:de:0a:c4:aa:4d:8d:3f:12:24:a7:f3:
f4:de:1c:52:28:af:5c:0b:e0:90:ed:d4:14:20:7c:6d:c8:72:
c6:8b:4c:6a:7f:61:37:e1:9b:6f:24:2b:96:55:ec:cc:a2:9d:
30:89:0e:1c:8e:f0:bd:94:2e:15:3d:03:eb:38:39:4e:47:e0:
f8:42:77:9c:85:ae:58:b7:e6:f6:b1:18:fe:14:b1:66:8d:47:
0c:a7:5a:9f:5b:e3:30:bc:5d:dc:b9:69:e1:9e:fa:24:cc:f0:
94:21:d3:32:92:3b:c6:3e:74:ea:29:45:16:61:cb:52:4c:2a:
a1:35:43:cd:70:c5:51:23:10:bc:c3:57:6e:f4:ec:fe:4b:57:
99:6b:be:b0
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZD9Fr/ANXhgF09izuEdm7SAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkNWUzOTY1OGEzZWY2ZjEzY2EyMWNjMTFhNGUzM2ViY2Q5
NDY3MDIwHhcNMjQwNzI5MDYwNDA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZGU2OTc3MmQxMDk0NjkxMDY1MjVmMDIzNTk4YTljZjE2NGIzMTQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8V0zD1dEEe+INbnlEKG8MbIf3+R0
zyPyIXUmM7ETwMBEEhciDKzYetH1ZmFlbs29XeG+qRo8ZxNGH0zmTpp9S12MoH6r
br7DmtQDQsmAq+7BuUQyJ/IWN1CnM8HKysDHxAOvpiCl8t0MfsPMwXbaqi01ukfF
3y+zAlDLdE2s3DR0oIzAkO9pN6FDCQ5EfAD1KPcnguZ4AM+uT1FkggtHk5/AVKxb
1poDoEIVieae9GNUrDR5xHs5HZJrVb2EoR8ZQdk2puEcMutO6PRzXvMngEu5TXNF
DdgwgTqVeJopr9blBHx7nQ6cr3kdJlqE4LJP5Mm9Y4B8UxPJ5f4CSZlrBQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFN3ml3LRCUaRBlJfAjWYqc8WSzFFMB8GA1UdIwQY
MBaAFM1eOWWKPvbxPKIcwRpOM+vNlGcCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUt
NWQxZmE2NmMzNjNiLzEvM2VhWGN0RUpScEVHVWw4Q05aaXB6eFpMTVVVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUtNWQxZmE2NmMzNjNi
LzEvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAVYXDAwQA
VYXaAwQAVYXgMA0GCSqGSIb3DQEBCwUAA4IBAQB9l6GMA9LamaXvI78eVX7+7I33
REhhilquW7cSFam+QXU0wjjkVMMilx3IWOmgCWXBGh81EG3IVRq5AqWSiFdqeB9z
5zkOFeOdavL3T8fGrBqMKrPVajSDGfjdfsBFnPl0fD5wwrmJjKQFQ2GABMm2g7M3
3grEqk2NPxIkp/P03hxSKK9cC+CQ7dQUIHxtyHLGi0xqf2E34ZtvJCuWVezMop0w
iQ4cjvC9lC4VPQPrODlOR+D4Qnecha5Yt+b2sRj+FLFmjUcMp1qfW+MwvF3cuWnh
nvokzPCUIdMykjvGPnTqKUUWYctSTCqhNUPNcMVRIxC8w1du9Oz+S1eZa76w
-----END CERTIFICATE-----
Generated at Wed Jul 31 09:40:51 2024 by rpki-client on console-ams.rpki-client.org