Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/xubcqQv6f8aGMJttdR-l9olco2Q.roa
File: xubcqQv6f8aGMJttdR-l9olco2Q.roa (raw, json)
Hash identifier: MaUs46NyrPlwCd4I4p+BKnyRlHSzOXH9eQziBNnYqwQ=
Subject key identifier: C6:E6:DC:A9:0B:FA:7F:C6:86:30:9B:6D:75:1F:A5:F6:89:5C:A3:64
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 018F672F2FD371C0BF699CA7F211FFF3A3C5
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/xubcqQv6f8aGMJttdR-l9olco2Q.roa
Signing time: Sat 11 May 2024 10:24:56 +0000
ROA not before: Sat 11 May 2024 10:24:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3320
IP address blocks: 85.133.217.0/24 maxlen: 24
85.133.218.0/24 maxlen: 24
85.133.227.0/24 maxlen: 24
85.133.228.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 17 May 2024 10:55:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:67:2f:2f:d3:71:c0:bf:69:9c:a7:f2:11:ff:f3:a3:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: May 11 10:24:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c6e6dca90bfa7fc686309b6d751fa5f6895ca364
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:59:09:45:9b:26:66:a3:94:0d:68:8d:b5:c8:
f3:3b:6c:2f:e4:ee:6a:54:a1:f0:69:7c:4f:86:28:
91:ce:4e:e0:39:75:85:5b:3e:4d:1b:24:0c:e7:f7:
ae:72:1c:d5:93:82:a9:00:91:e5:c2:50:d6:51:00:
5a:03:ff:5d:c6:99:05:ff:74:63:a7:f9:00:74:49:
d7:34:5c:99:c0:5e:c0:6c:ce:4c:dc:6b:3f:df:f6:
d6:df:85:aa:70:9e:23:59:1a:16:da:1a:21:8b:3c:
38:41:f7:89:c6:d4:4a:2e:c5:64:c4:14:10:1d:c4:
da:6f:a0:d5:06:7d:a0:0f:89:cf:e5:34:f5:af:d9:
05:f6:71:2d:c2:86:9e:94:af:66:be:cf:82:98:c8:
7c:3e:26:5e:2b:57:1a:cb:84:88:b4:9f:14:e1:30:
30:57:ff:a9:fb:81:5c:5c:33:a3:ba:3f:12:20:49:
20:9b:75:c8:02:01:a4:15:29:fc:8f:45:ed:12:7c:
e5:2e:ad:11:9f:4b:51:3c:6a:cd:a1:2d:99:a0:df:
d3:cb:fe:30:a7:79:e8:3f:cf:1f:a0:73:3b:9e:d1:
b8:43:17:28:fb:85:d0:be:c9:34:b3:b7:e8:29:08:
37:21:27:ec:6b:e5:74:e0:a8:f8:e0:11:b4:4d:b5:
46:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:E6:DC:A9:0B:FA:7F:C6:86:30:9B:6D:75:1F:A5:F6:89:5C:A3:64
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/xubcqQv6f8aGMJttdR-l9olco2Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.217.0-85.133.218.255
85.133.227.0-85.133.228.255
Signature Algorithm: sha256WithRSAEncryption
75:52:80:89:d8:0d:67:a5:58:8b:92:2f:44:a3:bd:12:08:74:
73:c4:e8:50:4d:f6:84:44:8c:6a:3d:14:3d:35:0d:e1:5b:18:
d6:f9:62:b9:10:31:6f:72:54:ea:51:a6:0b:b8:78:36:40:74:
31:e5:db:7a:fe:02:38:02:3c:60:9e:80:ce:e5:51:1d:77:c8:
da:0d:07:6d:5b:ef:f9:6d:f9:a3:c9:98:0e:b9:8a:19:57:81:
9a:14:e4:6c:5a:96:d0:7b:9d:08:6f:08:8f:f5:d5:58:4f:68:
1a:4b:c1:93:54:3b:72:52:3f:69:ac:38:17:ee:bc:16:f1:9b:
58:7d:65:6b:b9:67:74:e3:fe:9c:05:f2:87:ae:0b:ea:9d:e0:
42:49:52:32:6c:79:3d:ff:1a:a7:f6:20:59:1a:04:c0:fd:a1:
4d:29:c7:62:41:0a:4f:1a:ec:58:e8:65:ab:07:d1:62:33:dc:
48:cd:91:fb:cc:78:c3:3b:33:14:d9:fd:58:30:02:a6:2c:d1:
13:3f:21:19:f2:3d:be:51:1e:46:21:a5:ad:26:80:7c:93:ba:
9f:b7:ad:99:d8:e9:b1:1f:4f:58:5e:21:16:3b:f6:a8:f6:f0:
2e:ec:0c:80:7f:32:16:80:b2:d7:0a:de:2c:2e:6c:04:2f:5c:
ca:42:d2:56
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgISAY9nLy/TccC/aZyn8hH/86PFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkNWUzOTY1OGEzZWY2ZjEzY2EyMWNjMTFhNGUzM2ViY2Q5
NDY3MDIwHhcNMjQwNTExMTAyNDU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNmU2ZGNhOTBiZmE3ZmM2ODYzMDliNmQ3NTFmYTVmNjg5NWNhMzY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+FkJRZsmZqOUDWiNtcjzO2wv5O5q
VKHwaXxPhiiRzk7gOXWFWz5NGyQM5/euchzVk4KpAJHlwlDWUQBaA/9dxpkF/3Rj
p/kAdEnXNFyZwF7AbM5M3Gs/3/bW34WqcJ4jWRoW2hohizw4QfeJxtRKLsVkxBQQ
HcTab6DVBn2gD4nP5TT1r9kF9nEtwoaelK9mvs+CmMh8PiZeK1cay4SItJ8U4TAw
V/+p+4FcXDOjuj8SIEkgm3XIAgGkFSn8j0XtEnzlLq0Rn0tRPGrNoS2ZoN/Ty/4w
p3noP88foHM7ntG4Qxco+4XQvsk0s7foKQg3ISfsa+V04Kj44BG0TbVGowIDAQAB
o4ICHzCCAhswHQYDVR0OBBYEFMbm3KkL+n/GhjCbbXUfpfaJXKNkMB8GA1UdIwQY
MBaAFM1eOWWKPvbxPKIcwRpOM+vNlGcCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUt
NWQxZmE2NmMzNjNiLzEveHViY3FRdjZmOGFHTUp0dGRSLWw5b2xjbzJRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUtNWQxZmE2NmMzNjNi
LzEvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAATAcMAwDBABVhdkD
BABVhdowDAMEAFWF4wMEAFWF5DANBgkqhkiG9w0BAQsFAAOCAQEAdVKAidgNZ6VY
i5IvRKO9Egh0c8ToUE32hESMaj0UPTUN4VsY1vliuRAxb3JU6lGmC7h4NkB0MeXb
ev4COAI8YJ6AzuVRHXfI2g0HbVvv+W35o8mYDrmKGVeBmhTkbFqW0HudCG8Ij/XV
WE9oGkvBk1Q7clI/aaw4F+68FvGbWH1la7lndOP+nAXyh64L6p3gQklSMmx5Pf8a
p/YgWRoEwP2hTSnHYkEKTxrsWOhlqwfRYjPcSM2R+8x4wzszFNn9WDACpizREz8h
GfI9vlEeRiGlrSaAfJO6n7etmdjpsR9PWF4hFjv2qPbwLuwMgH8yFoCy1wreLC5s
BC9cykLSVg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:02 2024 by rpki-client on console-ams.rpki-client.org