Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/TrfPt8iYowiwvfeosWN8bXMTy90.roa
File: TrfPt8iYowiwvfeosWN8bXMTy90.roa (raw, json)
Hash identifier: bLGHS9f0yDdHoivuuDEB9ElcLqXuCkfPJlytpwnTtdU=
Subject key identifier: 4E:B7:CF:B7:C8:98:A3:08:B0:BD:F7:A8:B1:63:7C:6D:73:13:CB:DD
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 01877BDEA4DBA01DD220B4F2FEC969103E11
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/TrfPt8iYowiwvfeosWN8bXMTy90.roa
Signing time: Thu 13 Apr 2023 18:26:41 +0000
ROA not before: Thu 13 Apr 2023 18:26:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25098
IP address blocks: 85.133.202.0/24 maxlen: 24
85.133.225.0/24 maxlen: 24
85.133.136.0/24 maxlen: 24
85.133.164.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:7b:de:a4:db:a0:1d:d2:20:b4:f2:fe:c9:69:10:3e:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Apr 13 18:26:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4eb7cfb7c898a308b0bdf7a8b1637c6d7313cbdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:30:28:f3:1b:89:02:ea:50:3f:79:dd:a2:5e:
28:24:87:51:f7:80:56:27:40:22:84:6c:48:d0:e0:
34:1a:dd:72:5c:ee:eb:2c:25:4c:73:03:28:e2:e3:
2a:6b:b3:ee:2e:1e:25:46:7a:fe:ba:b8:31:de:2c:
21:a6:02:d9:ba:17:6e:ed:58:69:c9:f8:6b:82:21:
6c:4e:c4:a6:8a:ad:94:6f:ae:c3:7d:7d:64:82:8b:
35:a9:09:d1:e1:cf:53:a3:fe:9a:ef:b8:79:86:4d:
22:6d:de:f3:d0:85:6a:e9:06:d0:32:06:09:67:f4:
c6:6c:f6:de:ec:3c:d7:62:8d:b1:b3:a6:0b:f0:91:
fa:2c:4d:9e:f9:80:e2:9f:40:48:0c:72:ee:e3:70:
61:29:4f:36:d3:c1:b1:77:f6:10:31:5e:a5:b6:8a:
c9:0a:b3:dd:e6:da:50:a7:fc:11:f3:ea:9f:a8:d5:
7c:23:24:52:4b:a5:78:e2:83:40:fe:3e:7b:85:a2:
f6:aa:6a:2e:8c:ee:d4:d4:34:79:2f:88:93:f7:cb:
89:be:34:77:f1:5b:00:a4:a3:8d:ad:da:4c:77:70:
b5:38:28:da:60:f9:79:80:aa:b8:ff:c9:00:ab:9e:
25:64:cd:35:c7:f2:e3:ec:15:36:79:11:ba:aa:eb:
ef:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:B7:CF:B7:C8:98:A3:08:B0:BD:F7:A8:B1:63:7C:6D:73:13:CB:DD
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/TrfPt8iYowiwvfeosWN8bXMTy90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.136.0/24
85.133.164.0/24
85.133.202.0/24
85.133.225.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:15:e4:f5:1e:f1:34:03:23:a4:b2:74:71:65:5e:bb:26:82:
d5:9c:93:fb:42:e5:fb:25:17:b6:38:c1:6e:c9:b6:7c:a7:ae:
6c:19:8c:a0:9e:b2:2a:69:f5:ef:a2:3c:ab:24:02:8c:1f:87:
75:fe:6f:fc:79:b9:c8:88:03:e5:7b:e2:fd:7e:ab:73:fc:83:
91:05:11:38:59:1e:fe:56:d1:19:41:d1:93:65:f9:d6:af:ea:
cf:3b:88:29:3f:c8:6e:92:97:b6:1d:f4:e4:69:f7:d3:21:c4:
a9:de:39:99:82:5d:99:75:59:59:86:f3:44:70:fe:31:58:70:
4e:cc:f2:3d:e3:a3:2c:36:9e:33:32:3e:f7:6d:ca:d1:d9:8c:
82:f4:5c:4d:b7:8f:57:6a:b3:13:dc:ca:ae:53:df:f0:41:45:
fe:00:14:9c:13:8e:06:f8:91:e4:28:23:aa:b6:8b:08:f3:ee:
1a:ce:53:c5:79:73:41:eb:20:64:bb:48:96:5a:c8:7f:a9:9d:
69:2b:b7:05:ad:ba:19:70:f4:16:c9:2d:24:44:36:64:ef:17:
a1:8c:dd:f5:9f:ef:52:5a:68:84:d7:7c:23:7b:a1:cc:7b:d8:
7e:53:39:32:a3:81:62:43:61:a9:f8:3c:ba:16:81:bf:42:f8:
db:c6:f1:dc
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYd73qTboB3SILTy/slpED4RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkNWUzOTY1OGEzZWY2ZjEzY2EyMWNjMTFhNGUzM2ViY2Q5
NDY3MDIwHhcNMjMwNDEzMTgyNjQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZWI3Y2ZiN2M4OThhMzA4YjBiZGY3YThiMTYzN2M2ZDczMTNjYmRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzAo8xuJAupQP3ndol4oJIdR94BW
J0AihGxI0OA0Gt1yXO7rLCVMcwMo4uMqa7PuLh4lRnr+urgx3iwhpgLZuhdu7Vhp
yfhrgiFsTsSmiq2Ub67DfX1kgos1qQnR4c9To/6a77h5hk0ibd7z0IVq6QbQMgYJ
Z/TGbPbe7DzXYo2xs6YL8JH6LE2e+YDin0BIDHLu43BhKU8208Gxd/YQMV6ltorJ
CrPd5tpQp/wR8+qfqNV8IyRSS6V44oNA/j57haL2qmoujO7U1DR5L4iT98uJvjR3
8VsApKONrdpMd3C1OCjaYPl5gKq4/8kAq54lZM01x/Lj7BU2eRG6quvvzQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFE63z7fImKMIsL33qLFjfG1zE8vdMB8GA1UdIwQY
MBaAFM1eOWWKPvbxPKIcwRpOM+vNlGcCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUt
NWQxZmE2NmMzNjNiLzEvVHJmUHQ4aVlvd2l3dmZlb3NXTjhiWE1UeTkwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUtNWQxZmE2NmMzNjNi
LzEvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAVYWIAwQA
VYWkAwQAVYXKAwQAVYXhMA0GCSqGSIb3DQEBCwUAA4IBAQBsFeT1HvE0AyOksnRx
ZV67JoLVnJP7QuX7JRe2OMFuybZ8p65sGYygnrIqafXvojyrJAKMH4d1/m/8ebnI
iAPle+L9fqtz/IORBRE4WR7+VtEZQdGTZfnWr+rPO4gpP8hukpe2HfTkaffTIcSp
3jmZgl2ZdVlZhvNEcP4xWHBOzPI946MsNp4zMj73bcrR2YyC9FxNt49XarMT3Mqu
U9/wQUX+ABScE44G+JHkKCOqtosI8+4azlPFeXNB6yBku0iWWsh/qZ1pK7cFrboZ
cPQWyS0kRDZk7xehjN31n+9SWmiE13wje6HMe9h+Uzkyo4FiQ2Gp+Dy6FoG/Qvjb
xvHc
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:05 2023 by rpki-client on console-ams.rpki-client.org