Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/oBwMhJ_IaGGndU8j6Kj2alLLC7I.roa
File: oBwMhJ_IaGGndU8j6Kj2alLLC7I.roa (raw, json)
Hash identifier: 8imRYtPNA8VU4UYdiO2d7+XDMFldtXWYkQtM97c9mUA=
Subject key identifier: A0:1C:0C:84:9F:C8:68:61:A7:75:4F:23:E8:A8:F6:6A:52:CB:0B:B2
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 01905359146FD639E5255CE030910B98BC87
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/oBwMhJ_IaGGndU8j6Kj2alLLC7I.roa
Signing time: Wed 26 Jun 2024 07:01:05 +0000
ROA not before: Wed 26 Jun 2024 07:01:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42337
IP address blocks: 85.133.240.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 07 Jul 2024 14:18:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:53:59:14:6f:d6:39:e5:25:5c:e0:30:91:0b:98:bc:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Jun 26 07:01:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a01c0c849fc86861a7754f23e8a8f66a52cb0bb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9c:42:57:19:a8:ab:03:0d:f8:e6:5f:5a:10:
58:87:ce:28:6a:dc:1f:78:bc:d0:68:21:90:a5:3a:
2f:e3:b7:6a:18:da:60:f1:78:41:a1:72:b8:83:c3:
0c:02:9b:90:e4:25:10:60:a1:b0:c1:fa:91:90:e0:
4c:72:59:82:ba:3d:fc:04:9c:75:10:5a:c2:ea:ef:
4a:3b:74:ac:7a:81:41:07:04:f4:31:77:1b:79:47:
2c:ef:e6:9a:f9:18:c3:04:b4:b8:a4:fa:79:4a:9a:
27:08:93:69:48:1a:fd:90:cf:18:f2:ad:a1:1b:85:
da:dc:61:47:15:7c:57:94:29:39:f5:7b:01:01:25:
ca:f4:29:c8:63:a5:9b:88:2d:68:8c:9a:81:da:24:
4d:eb:9b:67:48:7a:14:59:1d:b1:87:ea:25:7c:a1:
4c:21:7d:74:55:11:06:2d:53:57:d9:3a:d7:42:59:
fe:cb:3d:6a:b7:be:7a:02:f9:ef:fc:4b:41:a2:d4:
28:a3:78:ff:0e:f8:b5:de:7d:fd:31:8c:ba:55:1e:
21:73:ba:bf:c5:64:04:ab:f4:99:e5:61:6e:e4:07:
65:51:2c:23:a8:00:e8:07:17:3d:41:8b:3e:ac:e6:
22:7e:d7:cf:8c:bb:67:df:4c:76:16:eb:2f:6f:18:
fe:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:1C:0C:84:9F:C8:68:61:A7:75:4F:23:E8:A8:F6:6A:52:CB:0B:B2
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/oBwMhJ_IaGGndU8j6Kj2alLLC7I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.240.0/24
Signature Algorithm: sha256WithRSAEncryption
18:a7:aa:16:b5:e9:e8:b8:d0:53:2b:dc:8c:ca:29:70:88:fb:
8a:8a:0c:87:67:4e:9a:c1:46:f3:8c:aa:70:92:47:db:b7:9d:
12:6e:30:f2:4e:46:7e:a7:48:33:fa:b2:b6:f8:8b:16:da:a7:
df:6c:7b:80:25:fa:f1:14:f1:2e:dd:2a:f9:62:a7:d7:99:1e:
bc:92:eb:4a:53:ac:8c:4b:fc:89:11:7f:28:cf:90:3f:c3:63:
ff:ef:c7:2f:ba:1c:ca:51:82:24:8a:31:4d:01:28:88:8a:64:
a6:38:c1:44:48:ce:4b:6c:03:13:ac:03:d8:31:d8:b2:ee:b5:
f1:3c:83:fc:58:03:a7:af:ce:5d:25:23:67:0d:b9:7f:b6:c6:
0c:48:9b:10:9d:5e:d6:81:ca:97:ac:3e:87:5f:b0:6a:24:65:
8a:4e:ec:21:fc:12:7b:a2:3e:8d:0b:70:50:3c:b2:55:09:17:
2d:e7:f7:ca:5e:9b:60:5c:05:73:91:d8:07:bd:d1:10:61:83:
30:b7:b4:ae:50:b2:65:5f:fd:23:74:9f:48:df:6b:9f:17:dc:
da:63:d2:24:25:f7:dc:43:5f:d2:71:15:cc:28:4b:d4:b4:c1:
49:b9:27:ee:a5:9a:15:67:81:dc:4a:f3:3f:7d:5f:1d:c8:d1:
9c:4a:8f:90
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZBTWRRv1jnlJVzgMJELmLyHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkNWUzOTY1OGEzZWY2ZjEzY2EyMWNjMTFhNGUzM2ViY2Q5
NDY3MDIwHhcNMjQwNjI2MDcwMTA1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMDFjMGM4NDlmYzg2ODYxYTc3NTRmMjNlOGE4ZjY2YTUyY2IwYmIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJxCVxmoqwMN+OZfWhBYh84oatwf
eLzQaCGQpTov47dqGNpg8XhBoXK4g8MMApuQ5CUQYKGwwfqRkOBMclmCuj38BJx1
EFrC6u9KO3SseoFBBwT0MXcbeUcs7+aa+RjDBLS4pPp5SponCJNpSBr9kM8Y8q2h
G4Xa3GFHFXxXlCk59XsBASXK9CnIY6WbiC1ojJqB2iRN65tnSHoUWR2xh+olfKFM
IX10VREGLVNX2TrXQln+yz1qt756Avnv/EtBotQoo3j/Dvi13n39MYy6VR4hc7q/
xWQEq/SZ5WFu5AdlUSwjqADoBxc9QYs+rOYiftfPjLtn30x2Fusvbxj+zQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKAcDISfyGhhp3VPI+io9mpSywuyMB8GA1UdIwQY
MBaAFM1eOWWKPvbxPKIcwRpOM+vNlGcCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUt
NWQxZmE2NmMzNjNiLzEvb0J3TWhKX0lhR0duZFU4ajZLajJhbExMQzdJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUtNWQxZmE2NmMzNjNi
LzEvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVYXwMA0G
CSqGSIb3DQEBCwUAA4IBAQAYp6oWtenouNBTK9yMyilwiPuKigyHZ06awUbzjKpw
kkfbt50SbjDyTkZ+p0gz+rK2+IsW2qffbHuAJfrxFPEu3Sr5YqfXmR68kutKU6yM
S/yJEX8oz5A/w2P/78cvuhzKUYIkijFNASiIimSmOMFESM5LbAMTrAPYMdiy7rXx
PIP8WAOnr85dJSNnDbl/tsYMSJsQnV7WgcqXrD6HX7BqJGWKTuwh/BJ7oj6NC3BQ
PLJVCRct5/fKXptgXAVzkdgHvdEQYYMwt7SuULJlX/0jdJ9I32ufF9zaY9IkJffc
Q1/ScRXMKEvUtMFJuSfupZoVZ4HcSvM/fV8dyNGcSo+Q
-----END CERTIFICATE-----
Generated at Sun Jul 7 16:54:14 2024 by rpki-client on console-ams.rpki-client.org