Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/OWyTAjtSvWszYB5iU9WyXZwIAHw.roa
File: OWyTAjtSvWszYB5iU9WyXZwIAHw.roa (raw, json)
Hash identifier: nlCk/HOy3DjEzwGC5F2LKT4kLZE8qrrp4PF5obG/FZ8=
Subject key identifier: 39:6C:93:02:3B:52:BD:6B:33:60:1E:62:53:D5:B2:5D:9C:08:00:7C
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 018972091D5C1307E25EF9A116590343207E
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/OWyTAjtSvWszYB5iU9WyXZwIAHw.roa
Signing time: Thu 20 Jul 2023 06:42:27 +0000
ROA not before: Thu 20 Jul 2023 06:42:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207279
IP address blocks: 85.133.205.0/24 maxlen: 24
85.133.208.0/24 maxlen: 24
85.133.233.0/24 maxlen: 24
85.133.242.0/24 maxlen: 24
85.133.161.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 02 Aug 2023 11:07:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:72:09:1d:5c:13:07:e2:5e:f9:a1:16:59:03:43:20:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Jul 20 06:42:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=396c93023b52bd6b33601e6253d5b25d9c08007c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:9d:b5:ad:29:7a:af:ea:45:b6:2c:fa:2b:b4:
29:cc:71:9c:d8:60:38:9b:b5:84:65:87:a4:b7:82:
9c:da:95:0c:df:9c:6c:ae:2b:58:40:37:65:1e:06:
fb:fa:ed:62:76:1d:0a:5e:9a:60:84:67:92:77:ff:
4a:6b:96:4c:4a:13:12:b5:af:40:9f:e2:2f:5f:6d:
f7:ce:71:5d:ca:c4:56:44:cd:1f:ab:c4:07:10:a3:
3a:08:f6:78:52:f7:81:45:24:24:01:f0:c1:03:a5:
85:ae:e9:1a:e0:00:69:5b:02:3e:80:1c:75:81:41:
8b:0a:a2:2c:08:f9:9a:3d:a6:bb:97:b6:1a:cb:ee:
1b:52:0d:44:65:3c:8c:fc:ba:3e:e6:85:5c:8a:8e:
d2:02:75:dd:a4:b9:54:1d:6d:8a:6f:77:94:44:a8:
97:c3:24:e8:af:31:0f:f8:4c:7b:57:ce:80:90:9b:
a8:93:b4:c4:19:ac:10:af:80:48:c0:11:3d:f3:cf:
ad:2d:ca:f7:ea:91:df:06:d4:7a:6c:f1:a3:d7:e2:
61:37:3a:cb:2b:3c:a0:86:64:84:4a:93:0b:41:5f:
42:e5:4f:1a:a9:50:16:d7:c9:66:6a:16:25:c3:ca:
fc:ae:77:ec:f1:94:f6:a9:b6:fa:0b:15:87:f0:49:
f2:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:6C:93:02:3B:52:BD:6B:33:60:1E:62:53:D5:B2:5D:9C:08:00:7C
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/OWyTAjtSvWszYB5iU9WyXZwIAHw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.161.0/24
85.133.205.0/24
85.133.208.0/24
85.133.233.0/24
85.133.242.0/24
Signature Algorithm: sha256WithRSAEncryption
48:3e:10:f6:c3:d5:b0:61:2b:3f:36:d2:54:2d:fd:a0:43:b0:
f1:aa:8f:31:79:21:ba:55:01:bf:18:15:29:e8:db:0c:5c:35:
dd:8c:0f:54:3b:40:8d:3f:d6:7a:e1:7e:23:31:da:2d:c6:67:
0e:28:f1:b8:f9:13:91:16:3a:9a:f2:37:f7:00:f1:5d:2f:ff:
e9:a9:d8:8a:15:e7:e7:1a:7d:89:e0:1b:b8:18:ce:6b:0b:3e:
29:9d:79:01:f5:3b:11:ae:61:27:58:c5:97:a6:c7:37:2c:09:
81:30:64:10:8c:44:4b:c2:c6:eb:d4:a9:2e:bf:37:97:48:a6:
81:61:5a:a3:0c:48:27:ce:cf:5f:d6:f0:c2:71:9b:15:7b:4f:
33:d3:77:b5:8a:e4:bb:c7:09:b1:b4:f6:a0:8c:e6:ac:07:95:
89:4c:d9:af:05:6d:12:8f:df:3c:06:e0:54:6f:41:3d:8b:a8:
32:e1:96:29:1c:7d:2d:9d:6a:ab:8d:72:b4:aa:cb:92:a8:bb:
bd:ff:e8:4d:99:74:81:90:ee:8a:dd:da:b6:fa:03:18:04:59:
19:ee:59:73:0f:b3:47:5a:74:db:92:8a:e3:42:18:65:0f:a6:
81:ca:27:2b:e7:d6:63:22:ac:03:1b:18:6b:4b:40:b4:32:1c:
0d:27:30:ca
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYlyCR1cEwfiXvmhFlkDQyB+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkNWUzOTY1OGEzZWY2ZjEzY2EyMWNjMTFhNGUzM2ViY2Q5
NDY3MDIwHhcNMjMwNzIwMDY0MjI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOTZjOTMwMjNiNTJiZDZiMzM2MDFlNjI1M2Q1YjI1ZDljMDgwMDdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgZ21rSl6r+pFtiz6K7QpzHGc2GA4
m7WEZYekt4Kc2pUM35xsritYQDdlHgb7+u1idh0KXppghGeSd/9Ka5ZMShMSta9A
n+IvX233znFdysRWRM0fq8QHEKM6CPZ4UveBRSQkAfDBA6WFruka4ABpWwI+gBx1
gUGLCqIsCPmaPaa7l7Yay+4bUg1EZTyM/Lo+5oVcio7SAnXdpLlUHW2Kb3eURKiX
wyTorzEP+Ex7V86AkJuok7TEGawQr4BIwBE988+tLcr36pHfBtR6bPGj1+JhNzrL
KzyghmSESpMLQV9C5U8aqVAW18lmahYlw8r8rnfs8ZT2qbb6CxWH8EnyLwIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFDlskwI7Ur1rM2AeYlPVsl2cCAB8MB8GA1UdIwQY
MBaAFM1eOWWKPvbxPKIcwRpOM+vNlGcCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUt
NWQxZmE2NmMzNjNiLzEvT1d5VEFqdFN2V3N6WUI1aVU5V3lYWndJQUh3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUtNWQxZmE2NmMzNjNi
LzEvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAVYWhAwQA
VYXNAwQAVYXQAwQAVYXpAwQAVYXyMA0GCSqGSIb3DQEBCwUAA4IBAQBIPhD2w9Ww
YSs/NtJULf2gQ7Dxqo8xeSG6VQG/GBUp6NsMXDXdjA9UO0CNP9Z64X4jMdotxmcO
KPG4+RORFjqa8jf3APFdL//pqdiKFefnGn2J4Bu4GM5rCz4pnXkB9TsRrmEnWMWX
psc3LAmBMGQQjERLwsbr1KkuvzeXSKaBYVqjDEgnzs9f1vDCcZsVe08z03e1iuS7
xwmxtPagjOasB5WJTNmvBW0Sj988BuBUb0E9i6gy4ZYpHH0tnWqrjXK0qsuSqLu9
/+hNmXSBkO6K3dq2+gMYBFkZ7llzD7NHWnTbkorjQhhlD6aByicr59ZjIqwDGxhr
S0C0MhwNJzDK
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:13 2024 by rpki-client on console-fra.rpki-client.org