Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/44uIzmeQobanMdMZH085NmqSTaM.roa
File: 44uIzmeQobanMdMZH085NmqSTaM.roa (raw, json)
Hash identifier: BMqoseRuatlFSaFAn9yyHNN1gwspQZoDFf4AN26Q1f4=
Subject key identifier: E3:8B:88:CE:67:90:A1:B6:A7:31:D3:19:1F:4F:39:36:6A:92:4D:A3
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 018871EC4E6F9A3A700196743401C1817A33
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/44uIzmeQobanMdMZH085NmqSTaM.roa
Signing time: Wed 31 May 2023 13:08:11 +0000
ROA not before: Wed 31 May 2023 13:08:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400377
IP address blocks: 85.133.219.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 15 Jul 2023 12:14:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:71:ec:4e:6f:9a:3a:70:01:96:74:34:01:c1:81:7a:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: May 31 13:08:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e38b88ce6790a1b6a731d3191f4f39366a924da3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0f:70:7c:6e:8c:3a:84:85:74:e3:ee:48:c6:
c9:95:a8:b6:f6:9d:78:c3:79:e5:c8:b2:fb:93:57:
ef:0a:9b:73:bf:df:bb:7d:5e:8d:c6:cb:11:56:b9:
bd:11:f4:d5:a2:3b:a0:82:c7:95:c2:65:be:25:75:
0f:43:e5:4a:53:79:a3:bc:aa:2d:dc:c5:4e:6b:b5:
a8:18:46:35:af:8b:95:4f:7b:1c:b0:a5:73:31:23:
f6:be:dc:89:ed:e8:3e:f0:e2:76:27:46:e9:04:a2:
a8:fb:79:a5:cb:22:ff:8e:0b:28:fd:10:a4:4c:cf:
ed:94:0f:5f:23:b5:02:06:d8:68:6f:af:67:df:71:
c8:4c:a0:10:37:ab:de:ac:21:38:a3:ef:68:20:c3:
11:5c:e6:29:23:06:a4:8f:07:62:07:a1:23:54:e7:
3c:47:3d:5f:36:11:9d:dd:06:68:df:1c:4e:36:b3:
02:c1:86:43:eb:50:08:df:5e:ed:a8:22:7e:d1:a2:
b8:29:03:34:1b:64:c4:87:a4:0a:b6:51:21:5b:e1:
fc:c1:b0:8f:bf:63:84:1f:f5:ef:c8:07:14:12:38:
84:c0:b0:4a:ec:c3:a5:4c:9e:18:ef:f1:7f:5f:ea:
22:c3:c2:de:1b:f4:fb:07:4d:fd:56:40:39:14:39:
cb:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:8B:88:CE:67:90:A1:B6:A7:31:D3:19:1F:4F:39:36:6A:92:4D:A3
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/44uIzmeQobanMdMZH085NmqSTaM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.219.0/24
Signature Algorithm: sha256WithRSAEncryption
47:7b:f7:2d:fa:27:0a:e1:06:6b:16:e3:a8:c5:c6:c3:00:62:
c2:ae:9d:1a:06:18:ab:da:25:78:81:82:eb:ed:68:a5:24:8c:
a1:75:e1:c9:d7:d9:98:6c:ef:e5:51:5b:05:fe:62:48:54:7c:
17:86:2f:0a:e0:83:5c:b7:c0:51:ff:c7:75:38:7b:4a:22:ea:
29:5e:76:ea:f1:3b:82:f0:a8:ed:72:d5:cf:df:32:5a:f5:4f:
e6:8a:c7:4f:b9:83:da:c0:14:13:dc:05:dc:e3:97:48:a8:e8:
fb:d8:f2:38:cd:d1:d3:77:ec:8b:64:da:0a:54:c3:a2:e1:a5:
19:b2:d7:28:10:a1:2e:dd:95:d4:36:35:ef:b8:f5:ff:7c:63:
be:03:53:1c:88:8f:6e:33:56:8d:19:bf:70:36:da:6f:89:03:
96:0f:7f:64:4d:f4:3e:73:f4:bc:dd:db:0b:3f:8b:ba:d6:54:
82:ff:b1:c8:c6:7b:6e:be:34:be:aa:b5:f3:7a:62:ae:70:c8:
6a:7d:86:2b:46:48:10:fa:c6:d9:06:a4:b7:2a:ce:20:0f:e6:
2c:6c:54:8e:9d:d8:31:1d:59:f5:3c:b6:33:31:fd:0e:10:3d:
ed:2a:bc:ad:be:71:5d:98:03:6b:b0:b0:ce:27:e1:6c:cb:b8:
c2:1e:61:e8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYhx7E5vmjpwAZZ0NAHBgXozMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkNWUzOTY1OGEzZWY2ZjEzY2EyMWNjMTFhNGUzM2ViY2Q5
NDY3MDIwHhcNMjMwNTMxMTMwODExWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMzhiODhjZTY3OTBhMWI2YTczMWQzMTkxZjRmMzkzNjZhOTI0ZGEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsg9wfG6MOoSFdOPuSMbJlai29p14
w3nlyLL7k1fvCptzv9+7fV6NxssRVrm9EfTVojuggseVwmW+JXUPQ+VKU3mjvKot
3MVOa7WoGEY1r4uVT3scsKVzMSP2vtyJ7eg+8OJ2J0bpBKKo+3mlyyL/jgso/RCk
TM/tlA9fI7UCBthob69n33HITKAQN6verCE4o+9oIMMRXOYpIwakjwdiB6EjVOc8
Rz1fNhGd3QZo3xxONrMCwYZD61AI317tqCJ+0aK4KQM0G2TEh6QKtlEhW+H8wbCP
v2OEH/XvyAcUEjiEwLBK7MOlTJ4Y7/F/X+oiw8LeG/T7B039VkA5FDnLUQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOOLiM5nkKG2pzHTGR9POTZqkk2jMB8GA1UdIwQY
MBaAFM1eOWWKPvbxPKIcwRpOM+vNlGcCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUt
NWQxZmE2NmMzNjNiLzEvNDR1SXptZVFvYmFuTWRNWkgwODVObXFTVGFNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUtNWQxZmE2NmMzNjNi
LzEvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVYXbMA0G
CSqGSIb3DQEBCwUAA4IBAQBHe/ct+icK4QZrFuOoxcbDAGLCrp0aBhir2iV4gYLr
7WilJIyhdeHJ19mYbO/lUVsF/mJIVHwXhi8K4INct8BR/8d1OHtKIuopXnbq8TuC
8KjtctXP3zJa9U/misdPuYPawBQT3AXc45dIqOj72PI4zdHTd+yLZNoKVMOi4aUZ
stcoEKEu3ZXUNjXvuPX/fGO+A1MciI9uM1aNGb9wNtpviQOWD39kTfQ+c/S83dsL
P4u61lSC/7HIxntuvjS+qrXzemKucMhqfYYrRkgQ+sbZBqS3Ks4gD+YsbFSOndgx
HVn1PLYzMf0OED3tKrytvnFdmANrsLDOJ+Fsy7jCHmHo
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:12 2024 by rpki-client on console-fra.rpki-client.org