Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/qcJTSUX1tmmVhFdefn5JVaZnxxU.roa
File: qcJTSUX1tmmVhFdefn5JVaZnxxU.roa (raw, json)
Hash identifier: V+OHdZZaTS2zq11n7ds1SKyO1oGX3j6vN7zTvCWB/dw=
Subject key identifier: A9:C2:53:49:45:F5:B6:69:95:84:57:5E:7E:7E:49:55:A6:67:C7:15
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 0188DDFDBD1F9F7C61EFB5E0DC884723C737
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/qcJTSUX1tmmVhFdefn5JVaZnxxU.roa
Signing time: Wed 21 Jun 2023 12:46:13 +0000
ROA not before: Wed 21 Jun 2023 12:46:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 85.133.179.0/24 maxlen: 24
85.133.215.0/24 maxlen: 24
85.133.217.0/24 maxlen: 24
85.133.137.0/24 maxlen: 24
85.133.156.0/24 maxlen: 24
85.133.165.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 15 Jul 2023 12:14:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:dd:fd:bd:1f:9f:7c:61:ef:b5:e0:dc:88:47:23:c7:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Jun 21 12:46:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a9c2534945f5b6699584575e7e7e4955a667c715
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:d0:47:41:27:1a:30:e6:2c:9b:a8:35:f6:d1:
35:3b:7f:77:4b:14:b7:53:29:ec:7f:cd:e5:13:c3:
69:5f:d8:1d:87:13:0a:44:89:98:92:07:a0:61:ee:
52:b5:42:41:46:0e:9a:09:70:5e:70:7f:f3:47:22:
02:83:b4:f8:4d:76:9a:ff:a5:57:e6:ba:ad:cb:38:
53:32:55:74:94:25:5a:76:a2:de:54:80:13:b5:21:
74:71:a1:89:1f:b9:4b:71:7c:c2:ff:e6:0d:35:11:
ce:1e:ca:52:0d:6b:cd:d5:e5:cb:8a:4b:14:d4:73:
30:2f:34:f0:07:01:d5:48:d2:e5:38:d5:bc:db:ac:
60:a6:1a:17:1f:c9:24:01:bd:6f:17:92:f0:86:d1:
83:ac:63:d2:f6:07:52:e0:30:88:68:85:af:78:b7:
b0:d0:32:0f:78:dd:e0:45:d4:78:ea:60:dd:49:27:
05:97:5c:01:ef:a7:43:4f:28:59:73:77:f7:85:f6:
05:60:fc:23:ad:5c:a8:b7:f5:f5:b3:13:4e:b0:44:
3c:03:fa:a0:bb:03:8a:e7:1d:bb:2f:b9:7b:63:74:
a9:89:c5:5b:8d:c8:9e:44:7a:d9:dd:20:1a:71:c1:
09:a8:0f:d6:0f:34:b1:1a:66:c9:4e:94:22:4a:4a:
23:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:C2:53:49:45:F5:B6:69:95:84:57:5E:7E:7E:49:55:A6:67:C7:15
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/qcJTSUX1tmmVhFdefn5JVaZnxxU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.137.0/24
85.133.156.0/24
85.133.165.0/24
85.133.179.0/24
85.133.215.0/24
85.133.217.0/24
Signature Algorithm: sha256WithRSAEncryption
45:6d:2b:b7:f0:cf:c0:3f:01:27:0e:b0:c1:b9:4d:f5:d1:1a:
e4:c5:b6:8f:ab:d7:7e:38:54:f7:8a:e0:ac:7d:26:9d:07:35:
59:91:78:45:ba:fc:54:f3:eb:6d:e1:0e:58:0d:40:5b:e5:51:
95:b6:8d:fe:3b:27:73:35:52:52:b9:30:a8:00:ac:8f:f4:13:
61:96:d0:00:6f:2c:8e:57:30:83:90:e2:7e:e1:2b:04:99:96:
28:32:77:82:8c:c1:66:0b:e4:d7:f0:77:23:85:b8:c1:6c:6a:
26:12:99:8a:dc:1c:e7:21:b5:06:2d:4a:dc:af:f8:b8:ab:c4:
85:02:ae:d7:8b:b2:a5:c8:94:ea:32:9b:71:d3:d6:3b:6e:65:
65:8d:89:41:31:aa:0a:7f:00:91:81:9d:d0:58:3c:33:08:a5:
56:6b:43:60:00:53:60:a3:87:30:54:3d:63:b0:52:18:a5:b3:
c9:98:f2:14:24:3e:98:13:e0:72:3b:fa:5b:11:49:38:86:8d:
51:2a:cb:a3:90:5c:7e:6a:23:e2:f4:ee:11:ba:c7:97:0f:a3:
c1:03:1f:37:86:40:6a:53:85:c8:ae:ad:dc:78:de:ce:65:e3:
9d:2a:3f:a0:fd:b0:07:9f:09:62:ef:32:93:99:07:0c:fd:82:
36:58:e0:d9
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAYjd/b0fn3xh77Xg3IhHI8c3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkNWUzOTY1OGEzZWY2ZjEzY2EyMWNjMTFhNGUzM2ViY2Q5
NDY3MDIwHhcNMjMwNjIxMTI0NjEzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOWMyNTM0OTQ1ZjViNjY5OTU4NDU3NWU3ZTdlNDk1NWE2NjdjNzE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNBHQScaMOYsm6g19tE1O393SxS3
Uynsf83lE8NpX9gdhxMKRImYkgegYe5StUJBRg6aCXBecH/zRyICg7T4TXaa/6VX
5rqtyzhTMlV0lCVadqLeVIATtSF0caGJH7lLcXzC/+YNNRHOHspSDWvN1eXLiksU
1HMwLzTwBwHVSNLlONW826xgphoXH8kkAb1vF5LwhtGDrGPS9gdS4DCIaIWveLew
0DIPeN3gRdR46mDdSScFl1wB76dDTyhZc3f3hfYFYPwjrVyot/X1sxNOsEQ8A/qg
uwOK5x27L7l7Y3SpicVbjcieRHrZ3SAaccEJqA/WDzSxGmbJTpQiSkojuwIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFKnCU0lF9bZplYRXXn5+SVWmZ8cVMB8GA1UdIwQY
MBaAFM1eOWWKPvbxPKIcwRpOM+vNlGcCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUt
NWQxZmE2NmMzNjNiLzEvcWNKVFNVWDF0bW1WaEZkZWZuNUpWYVpueHhVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUtNWQxZmE2NmMzNjNi
LzEvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAVYWJAwQA
VYWcAwQAVYWlAwQAVYWzAwQAVYXXAwQAVYXZMA0GCSqGSIb3DQEBCwUAA4IBAQBF
bSu38M/APwEnDrDBuU310RrkxbaPq9d+OFT3iuCsfSadBzVZkXhFuvxU8+tt4Q5Y
DUBb5VGVto3+OydzNVJSuTCoAKyP9BNhltAAbyyOVzCDkOJ+4SsEmZYoMneCjMFm
C+TX8HcjhbjBbGomEpmK3BznIbUGLUrcr/i4q8SFAq7Xi7KlyJTqMptx09Y7bmVl
jYlBMaoKfwCRgZ3QWDwzCKVWa0NgAFNgo4cwVD1jsFIYpbPJmPIUJD6YE+ByO/pb
EUk4ho1RKsujkFx+aiPi9O4RuseXD6PBAx83hkBqU4XIrq3ceN7OZeOdKj+g/bAH
nwli7zKTmQcM/YI2WODZ
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:13 2024 by rpki-client on console-fra.rpki-client.org