Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/V5wFUy2JnuescqtAFVqQWWbd-hM.roa
File: V5wFUy2JnuescqtAFVqQWWbd-hM.roa (raw, json)
Hash identifier: CjolXt/4Z28swrAtW+t6A477LImB/IFisxr0jQKcaoU=
Subject key identifier: 57:9C:05:53:2D:89:9E:E7:AC:72:AB:40:15:5A:90:59:66:DD:FA:13
Certificate issuer: /CN=3b7ec9423bf90c81d22d94841c10357a54260379
Certificate serial: 01856F9E07F75E863B04F5E17B909C01A44B
Authority key identifier: 3B:7E:C9:42:3B:F9:0C:81:D2:2D:94:84:1C:10:35:7A:54:26:03:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O37JQjv5DIHSLZSEHBA1elQmA3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/V5wFUy2JnuescqtAFVqQWWbd-hM.roa
Signing time: Sun 01 Jan 2023 23:15:05 +0000
ROA not before: Sun 01 Jan 2023 23:15:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35178
IP address blocks: 85.239.32.0/24 maxlen: 24
2a07:7dc0::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:33:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:9e:07:f7:5e:86:3b:04:f5:e1:7b:90:9c:01:a4:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b7ec9423bf90c81d22d94841c10357a54260379
Validity
Not Before: Jan 1 23:15:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=579c05532d899ee7ac72ab40155a905966ddfa13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3a:25:dd:b8:9d:4b:a2:7b:72:e2:be:13:a9:
14:c4:7b:2a:d8:97:2d:e2:36:87:40:91:c7:8d:f2:
78:ac:44:4c:e7:b6:d0:7b:41:b9:6f:4f:d1:f9:3d:
f9:b4:7e:b0:bb:1d:45:dc:44:fc:7a:d1:97:ce:15:
b0:b2:f4:20:b2:7d:2b:ec:7a:58:ff:46:b3:0a:ce:
59:b2:3c:df:c8:b9:d3:ce:9f:57:2b:46:59:61:f4:
46:06:40:5a:f7:06:1a:6b:6a:72:c7:51:91:83:b4:
46:ab:4e:d4:44:9f:ec:8a:94:9a:c3:84:f4:90:46:
16:71:58:ad:09:c1:25:08:4d:a1:2f:c8:ab:9d:ed:
c1:99:ca:4a:c2:38:c2:81:ac:6b:27:51:a5:e4:d5:
5b:88:24:9b:84:7e:61:80:26:5d:76:bb:6d:6e:77:
aa:f3:d1:ef:45:c9:5d:08:76:27:b3:c3:a8:de:87:
bd:31:ff:5e:14:31:f7:b3:d4:e1:cd:24:7a:71:57:
ec:42:3b:a3:01:ad:2a:b5:e4:71:ba:fe:05:0d:2b:
10:78:9a:ba:5b:7a:d5:5a:76:85:94:3f:34:4d:ff:
80:95:24:10:4f:79:3d:31:a5:a2:2f:38:53:a7:36:
f2:59:0a:ce:c2:d5:64:bd:63:72:fe:f5:e6:4b:4c:
d4:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:9C:05:53:2D:89:9E:E7:AC:72:AB:40:15:5A:90:59:66:DD:FA:13
X509v3 Authority Key Identifier:
keyid:3B:7E:C9:42:3B:F9:0C:81:D2:2D:94:84:1C:10:35:7A:54:26:03:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O37JQjv5DIHSLZSEHBA1elQmA3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/V5wFUy2JnuescqtAFVqQWWbd-hM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/O37JQjv5DIHSLZSEHBA1elQmA3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.239.32.0/24
IPv6:
2a07:7dc0::/29
Signature Algorithm: sha256WithRSAEncryption
91:a1:94:20:a9:50:9f:a8:4b:c3:0b:25:d8:c4:28:0e:31:9b:
43:25:48:57:d1:2f:12:a4:49:17:76:dc:b7:12:d8:49:f2:bf:
7d:fa:1d:65:e1:1a:d1:66:3a:43:d5:a9:cf:f6:c5:d1:dc:90:
a6:ed:9a:68:55:ea:eb:cb:78:95:fc:df:dc:11:0a:e1:00:94:
f8:d2:90:41:80:6a:90:0b:cc:2f:aa:c5:9d:2b:8a:c0:0b:7c:
17:68:81:89:77:36:e0:e2:1e:43:e8:8d:8e:d4:f1:45:6d:94:
b2:69:eb:56:ff:75:57:75:cf:00:5d:f7:cc:f7:33:ca:49:c5:
3e:bd:1b:97:a9:cc:79:f1:c6:a5:31:6c:1e:06:80:cf:0b:38:
11:06:65:89:d8:f6:63:65:d9:a1:ee:2a:cc:21:80:a2:41:17:
60:ee:83:14:83:00:8d:19:44:ea:1b:f3:3a:3c:9c:85:11:3a:
a7:e9:66:03:ef:57:cd:5f:82:f2:45:3c:8a:be:6d:33:4e:df:
a2:6c:9e:a4:98:43:5d:12:6f:06:33:ed:44:01:74:f0:d8:ba:
f5:4d:49:25:59:21:5e:02:d4:15:e6:83:84:f3:76:8f:4d:b4:
df:79:cd:50:34:4e:2a:90:54:87:53:6f:6f:68:e2:d8:b5:f7:
06:58:57:c7
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVvngf3XoY7BPXhe5CcAaRLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiN2VjOTQyM2JmOTBjODFkMjJkOTQ4NDFjMTAzNTdhNTQy
NjAzNzkwHhcNMjMwMTAxMjMxNTA1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NzljMDU1MzJkODk5ZWU3YWM3MmFiNDAxNTVhOTA1OTY2ZGRmYTEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTol3bidS6J7cuK+E6kUxHsq2Jct
4jaHQJHHjfJ4rERM57bQe0G5b0/R+T35tH6wux1F3ET8etGXzhWwsvQgsn0r7HpY
/0azCs5ZsjzfyLnTzp9XK0ZZYfRGBkBa9wYaa2pyx1GRg7RGq07URJ/sipSaw4T0
kEYWcVitCcElCE2hL8irne3BmcpKwjjCgaxrJ1Gl5NVbiCSbhH5hgCZddrttbneq
89HvRcldCHYns8Oo3oe9Mf9eFDH3s9ThzSR6cVfsQjujAa0qteRxuv4FDSsQeJq6
W3rVWnaFlD80Tf+AlSQQT3k9MaWiLzhTpzbyWQrOwtVkvWNy/vXmS0zUxQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFFecBVMtiZ7nrHKrQBVakFlm3foTMB8GA1UdIwQY
MBaAFDt+yUI7+QyB0i2UhBwQNXpUJgN5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzM3SlFqdjVESUhTTFpTRUhCQTFlbFFtQTNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy84ZWE0N2YtZWZmMy00NjI3LTk0ZWQt
MWQxMGYzYzcwYmI0LzEvVjV3RlV5MkpudWVzY3F0QUZWcVFXV2JkLWhNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy84ZWE0N2YtZWZmMy00NjI3LTk0ZWQtMWQxMGYzYzcwYmI0
LzEvTzM3SlFqdjVESUhTTFpTRUhCQTFlbFFtQTNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAVe8gMA0E
AgACMAcDBQMqB33AMA0GCSqGSIb3DQEBCwUAA4IBAQCRoZQgqVCfqEvDCyXYxCgO
MZtDJUhX0S8SpEkXdty3EthJ8r99+h1l4RrRZjpD1anP9sXR3JCm7ZpoVerry3iV
/N/cEQrhAJT40pBBgGqQC8wvqsWdK4rAC3wXaIGJdzbg4h5D6I2O1PFFbZSyaetW
/3VXdc8AXffM9zPKScU+vRuXqcx58calMWweBoDPCzgRBmWJ2PZjZdmh7irMIYCi
QRdg7oMUgwCNGUTqG/M6PJyFETqn6WYD71fNX4LyRTyKvm0zTt+ibJ6kmENdEm8G
M+1EAXTw2Lr1TUklWSFeAtQV5oOE83aPTbTfec1QNE4qkFSHU29vaOLYtfcGWFfH
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:28 2024 by rpki-client on console-ams.rpki-client.org