Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/7_l5sSKJ8qGQGWinn3vb_01q_Dg.roa
File: 7_l5sSKJ8qGQGWinn3vb_01q_Dg.roa (raw, json)
Hash identifier: R9kpCHktkT0N7x7rnQwSqtuDDyZ5yr+0N7YikF07Hs8=
Subject key identifier: EF:F9:79:B1:22:89:F2:A1:90:19:68:A7:9F:7B:DB:FF:4D:6A:FC:38
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 01873905CE9D8E421B86B678858AC3EEC1A8
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/7_l5sSKJ8qGQGWinn3vb_01q_Dg.roa
Signing time: Fri 31 Mar 2023 18:54:54 +0000
ROA not before: Fri 31 Mar 2023 18:54:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 85.133.178.0/24 maxlen: 24
85.133.216.0/24 maxlen: 24
85.133.253.0/24 maxlen: 24
85.133.146.0/24 maxlen: 24
185.41.0.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:39:05:ce:9d:8e:42:1b:86:b6:78:85:8a:c3:ee:c1:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Mar 31 18:54:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eff979b12289f2a1901968a79f7bdbff4d6afc38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e5:b1:51:4a:04:bc:a6:45:2b:34:df:7e:a3:
2f:1b:75:b7:25:22:65:16:22:a8:c3:7b:a1:73:be:
2a:24:bb:e9:73:27:57:4d:07:ec:1d:7d:4f:cc:99:
6a:9d:6b:78:81:1f:37:4f:ca:a4:75:e5:3d:ae:42:
cc:4a:26:e6:d5:54:64:32:4c:80:10:17:89:c1:95:
be:da:1a:8d:76:ea:90:4e:0c:d8:18:5e:fa:70:93:
57:04:bc:c9:ff:67:a1:a6:a2:98:38:4c:dd:28:63:
dd:cc:b2:a7:96:38:41:da:28:05:a6:41:47:02:03:
2b:90:f2:e1:eb:5a:e3:36:5f:b8:a7:84:6f:cd:2e:
3d:4d:7c:7b:ff:f8:f6:43:f3:8b:c1:a7:e9:25:dd:
e4:65:5c:f1:f6:1b:35:6f:38:29:01:f8:ba:f4:c4:
48:e6:73:da:19:65:eb:bd:ce:2f:96:2a:07:70:5c:
fc:5f:7e:ea:5b:12:74:ea:ad:10:46:ab:74:ed:28:
0e:cb:b2:26:ca:a4:19:aa:a6:19:49:24:ae:9e:5a:
55:6b:c8:28:d0:d4:32:31:d6:05:c2:6b:d1:82:ab:
9f:7b:6c:cb:7f:7d:45:85:6c:85:b6:e7:f7:f7:e1:
ec:d6:ad:5a:2a:29:99:4b:e1:b1:de:b8:6a:e7:3e:
06:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:F9:79:B1:22:89:F2:A1:90:19:68:A7:9F:7B:DB:FF:4D:6A:FC:38
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/7_l5sSKJ8qGQGWinn3vb_01q_Dg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.146.0/24
85.133.178.0/24
85.133.216.0/24
85.133.253.0/24
185.41.0.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:12:ad:ca:c8:b6:a5:c9:29:87:c0:ff:3d:d7:74:4a:bd:ab:
41:1e:d7:b8:c9:09:de:7e:bc:5c:a1:3b:37:14:c3:bb:17:b6:
0e:cd:39:c6:6e:c6:72:06:e7:98:ec:3c:62:11:1b:96:eb:b8:
0c:89:20:bd:cf:ec:23:c7:b2:eb:25:24:9f:de:40:1d:ad:95:
cc:04:da:53:17:a8:5a:15:45:ad:c0:21:a0:3c:89:70:9d:9b:
6f:d7:c7:79:1b:fb:42:68:bc:b5:85:bb:d5:b1:a2:ba:bd:51:
13:62:5b:48:0a:67:62:1a:17:ea:b0:26:7a:d2:ad:1e:08:46:
69:80:41:c9:c5:c1:21:ba:00:fc:5d:08:46:b6:ab:08:1d:6e:
9d:7c:50:fd:ec:81:bc:4f:9f:e8:b7:06:b9:98:7e:a1:4f:6f:
78:da:7b:57:f3:c7:cf:97:02:29:7a:e9:93:cc:c9:e0:c1:51:
1f:e9:11:a2:53:bb:69:1c:6a:be:b4:22:03:e7:93:93:ce:15:
01:3f:a3:5b:2d:50:59:05:3d:6c:e3:8d:b9:59:15:33:8e:ff:
80:20:f9:4e:88:e1:80:d4:60:6b:dd:c2:99:f9:0b:40:67:b3:
03:2f:08:a6:6d:25:89:75:f9:29:7c:b1:aa:a1:86:a4:81:65:
31:36:8c:70
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYc5Bc6djkIbhrZ4hYrD7sGoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkNWUzOTY1OGEzZWY2ZjEzY2EyMWNjMTFhNGUzM2ViY2Q5
NDY3MDIwHhcNMjMwMzMxMTg1NDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZmY5NzliMTIyODlmMmExOTAxOTY4YTc5ZjdiZGJmZjRkNmFmYzM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAneWxUUoEvKZFKzTffqMvG3W3JSJl
FiKow3uhc74qJLvpcydXTQfsHX1PzJlqnWt4gR83T8qkdeU9rkLMSibm1VRkMkyA
EBeJwZW+2hqNduqQTgzYGF76cJNXBLzJ/2ehpqKYOEzdKGPdzLKnljhB2igFpkFH
AgMrkPLh61rjNl+4p4RvzS49TXx7//j2Q/OLwafpJd3kZVzx9hs1bzgpAfi69MRI
5nPaGWXrvc4vlioHcFz8X37qWxJ06q0QRqt07SgOy7ImyqQZqqYZSSSunlpVa8go
0NQyMdYFwmvRgqufe2zLf31FhWyFtuf39+Hs1q1aKimZS+Gx3rhq5z4GzwIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFO/5ebEiifKhkBlop5972/9Navw4MB8GA1UdIwQY
MBaAFM1eOWWKPvbxPKIcwRpOM+vNlGcCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUt
NWQxZmE2NmMzNjNiLzEvN19sNXNTS0o4cUdRR1dpbm4zdmJfMDFxX0RnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUtNWQxZmE2NmMzNjNi
LzEvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAVYWSAwQA
VYWyAwQAVYXYAwQAVYX9AwQCuSkAMA0GCSqGSIb3DQEBCwUAA4IBAQBrEq3KyLal
ySmHwP8913RKvatBHte4yQnefrxcoTs3FMO7F7YOzTnGbsZyBueY7DxiERuW67gM
iSC9z+wjx7LrJSSf3kAdrZXMBNpTF6haFUWtwCGgPIlwnZtv18d5G/tCaLy1hbvV
saK6vVETYltICmdiGhfqsCZ60q0eCEZpgEHJxcEhugD8XQhGtqsIHW6dfFD97IG8
T5/otwa5mH6hT2942ntX88fPlwIpeumTzMngwVEf6RGiU7tpHGq+tCID55OTzhUB
P6NbLVBZBT1s4425WRUzjv+AIPlOiOGA1GBr3cKZ+QtAZ7MDLwimbSWJdfkpfLGq
oYakgWUxNoxw
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:15 2023 by rpki-client on console-fra.rpki-client.org