Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/PAAJ_XBfbKoyG4ojaaPx8yvJqTc.roa
File: PAAJ_XBfbKoyG4ojaaPx8yvJqTc.roa (raw, json)
Hash identifier: /fUckOtRF26hp3rDT1hqlAlaUsQcvqP1SilzMQSGI6A=
Subject key identifier: 3C:00:09:FD:70:5F:6C:AA:32:1B:8A:23:69:A3:F1:F3:2B:C9:A9:37
Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial: 0188BBCA3E92CBBD903D85FD50827DF72443
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/PAAJ_XBfbKoyG4ojaaPx8yvJqTc.roa
Signing time: Wed 14 Jun 2023 21:22:53 +0000
ROA not before: Wed 14 Jun 2023 21:22:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 397563
IP address blocks: 85.115.208.0/24 maxlen: 24
85.115.210.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 14 Jun 2023 21:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:bb:ca:3e:92:cb:bd:90:3d:85:fd:50:82:7d:f7:24:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Validity
Not Before: Jun 14 21:22:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3c0009fd705f6caa321b8a2369a3f1f32bc9a937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:08:8f:4c:cc:43:80:73:6b:fa:24:ac:59:95:
8d:4c:72:d5:bf:46:bc:4c:20:a8:21:bf:c3:16:38:
a9:89:8a:c4:af:56:27:59:6c:eb:d1:c5:fa:cb:0e:
40:de:b5:f2:39:fa:f2:e3:d8:3d:f1:9a:4f:f4:21:
3b:1f:cf:bf:d3:5d:dc:b3:39:3d:e6:75:61:a7:86:
df:fb:06:1c:0c:cc:cb:93:83:94:12:b9:18:63:5e:
2c:f7:6f:cb:f3:7e:55:ad:7b:0b:e2:7a:dd:23:af:
3e:07:1b:df:4a:d9:af:2f:e9:78:50:23:d8:f4:8c:
48:37:96:64:fe:ea:b7:1e:9e:8a:65:74:58:32:f6:
3d:58:7e:00:c0:bb:fb:dc:a0:a2:eb:91:a9:3f:77:
27:67:6d:74:1a:8e:bc:8b:7a:31:3e:76:f6:c2:50:
65:4d:b6:03:c8:f4:6f:99:b2:d8:9e:ff:c2:a7:d5:
56:7c:52:ef:b6:4f:3e:d5:49:18:97:73:6f:e5:0d:
a1:be:37:38:77:e0:c1:fa:9e:20:f2:79:dc:af:89:
d8:d7:3f:69:c4:ad:c3:86:98:5d:ff:32:41:14:a4:
a1:75:ba:27:ad:af:6d:bd:d8:e8:85:f1:5c:08:4f:
c1:09:0b:e0:e8:c6:81:56:12:01:9b:d0:84:3b:99:
f4:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:00:09:FD:70:5F:6C:AA:32:1B:8A:23:69:A3:F1:F3:2B:C9:A9:37
X509v3 Authority Key Identifier:
keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/PAAJ_XBfbKoyG4ojaaPx8yvJqTc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.115.208.0/24
85.115.210.0/24
Signature Algorithm: sha256WithRSAEncryption
50:01:d6:51:44:e2:e7:fe:a2:85:73:6c:26:a2:45:00:ba:29:
0b:35:fa:d2:17:d8:42:39:a0:88:89:9f:e0:1e:68:16:8d:c5:
f4:7b:dc:58:67:d5:31:7c:91:17:04:48:6c:6c:f4:3d:06:c5:
49:e9:10:3f:ab:c8:97:13:1b:93:f9:a2:f3:d4:43:39:0a:97:
ed:d9:19:53:b8:b3:22:6d:52:7d:9b:37:21:6e:9a:bf:12:76:
4d:42:ba:bd:c5:26:be:37:ef:47:10:28:41:5b:7e:6f:1e:2d:
02:2b:b5:3f:e4:71:f1:27:12:4b:df:bf:62:2c:e3:88:3e:df:
8f:b8:dc:4a:7b:55:e5:73:ef:47:cb:b4:aa:a8:84:fb:68:20:
5c:28:bc:18:75:9b:b1:ec:3e:a5:b1:3e:b5:1f:a5:37:37:b6:
f7:71:e1:93:95:df:45:0c:64:dc:a8:67:12:b1:b6:c1:b7:f7:
c2:36:af:09:5a:74:91:a0:51:b6:c8:bd:6c:2e:cf:94:b8:18:
c9:e8:23:ae:24:83:a1:f1:0e:12:23:0f:a0:f8:a5:b5:f9:06:
87:1c:df:79:af:dd:6b:07:bf:19:53:6a:46:61:e3:8d:ae:f1:
30:4e:d7:b6:ef:33:2d:c7:7c:2d:3e:c5:c8:15:68:53:0a:6b:
cd:cc:0d:f9
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYi7yj6Sy72QPYX9UIJ99yRDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmYTE2YWIwNjAyMDA2Nzc0MGE0YzFmYjQ3YTkxMjYyMmYx
ZDA3MjIwHhcNMjMwNjE0MjEyMjUzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYzAwMDlmZDcwNWY2Y2FhMzIxYjhhMjM2OWEzZjFmMzJiYzlhOTM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAigiPTMxDgHNr+iSsWZWNTHLVv0a8
TCCoIb/DFjipiYrEr1YnWWzr0cX6yw5A3rXyOfry49g98ZpP9CE7H8+/013cszk9
5nVhp4bf+wYcDMzLk4OUErkYY14s92/L835VrXsL4nrdI68+BxvfStmvL+l4UCPY
9IxIN5Zk/uq3Hp6KZXRYMvY9WH4AwLv73KCi65GpP3cnZ210Go68i3oxPnb2wlBl
TbYDyPRvmbLYnv/Cp9VWfFLvtk8+1UkYl3Nv5Q2hvjc4d+DB+p4g8nncr4nY1z9p
xK3Dhphd/zJBFKShdbonra9tvdjohfFcCE/BCQvg6MaBVhIBm9CEO5n0EQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFDwACf1wX2yqMhuKI2mj8fMryak3MB8GA1UdIwQY
MBaAFC+harBgIAZ3QKTB+0epEmIvHQciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDZGcXNHQWdCbmRBcE1IN1I2a1NZaThkQnlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy83ZjIzOTMtZDAxYS00MWY3LWE1MmUt
ZDI0MmI2ZjNhOGExLzEvUEFBSl9YQmZiS295RzRvamFhUHg4eXZKcVRjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy83ZjIzOTMtZDAxYS00MWY3LWE1MmUtZDI0MmI2ZjNhOGEx
LzEvTDZGcXNHQWdCbmRBcE1IN1I2a1NZaThkQnlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVXPQAwQA
VXPSMA0GCSqGSIb3DQEBCwUAA4IBAQBQAdZRROLn/qKFc2wmokUAuikLNfrSF9hC
OaCIiZ/gHmgWjcX0e9xYZ9UxfJEXBEhsbPQ9BsVJ6RA/q8iXExuT+aLz1EM5Cpft
2RlTuLMibVJ9mzchbpq/EnZNQrq9xSa+N+9HEChBW35vHi0CK7U/5HHxJxJL379i
LOOIPt+PuNxKe1Xlc+9Hy7SqqIT7aCBcKLwYdZux7D6lsT61H6U3N7b3ceGTld9F
DGTcqGcSsbbBt/fCNq8JWnSRoFG2yL1sLs+UuBjJ6COuJIOh8Q4SIw+g+KW1+QaH
HN95r91rB78ZU2pGYeONrvEwTte27zMtx3wtPsXIFWhTCmvNzA35
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:12 2024 by rpki-client on console-ams.rpki-client.org