Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/Rk_xpXdAA-bSvZipOBEqICwKz2c.roa
File: Rk_xpXdAA-bSvZipOBEqICwKz2c.roa (raw, json)
Hash identifier: pTpX5+dg7hRvhj+YXQKzAhPhpS6m1n636p8HMdK/zDk=
Subject key identifier: 46:4F:F1:A5:77:40:03:E6:D2:BD:98:A9:38:11:2A:20:2C:0A:CF:67
Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial: 01901B69C36139473B1F075D6D50C7CCE035
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/Rk_xpXdAA-bSvZipOBEqICwKz2c.roa
Signing time: Sat 15 Jun 2024 10:20:34 +0000
ROA not before: Sat 15 Jun 2024 10:20:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 85.115.208.0/23 maxlen: 24
213.145.72.0/21 maxlen: 24
213.145.88.0/21 maxlen: 24
213.145.88.0/23 maxlen: 24
Validation: Failed, certificate revoked on Fri 19 Jul 2024 05:09:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1b:69:c3:61:39:47:3b:1f:07:5d:6d:50:c7:cc:e0:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Validity
Not Before: Jun 15 10:20:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=464ff1a5774003e6d2bd98a938112a202c0acf67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:0f:2e:bc:7f:09:01:23:70:ae:28:29:f1:7e:
02:0b:43:d1:ed:ae:3c:1c:aa:5f:7c:27:85:ec:87:
92:74:48:17:96:d3:e1:15:f1:69:11:4a:e8:e0:7d:
6c:30:f4:c1:2d:0c:52:75:0e:1d:cd:df:4c:2c:49:
6b:94:98:fb:03:c7:9d:d6:56:0a:f2:27:25:e9:19:
88:3d:21:7c:1b:82:27:f3:e4:01:ca:e8:b3:45:9e:
43:1b:a9:93:30:5f:d9:00:b6:48:d1:be:8b:2e:b6:
c2:67:7d:a1:96:f6:ef:ba:27:ca:bb:c9:a5:7c:a7:
94:b6:85:61:44:ce:27:17:8c:e1:ff:ab:e3:f5:95:
a3:98:fb:dd:5e:aa:d9:c3:54:60:ad:df:23:32:30:
0a:34:50:b4:47:22:64:7c:2c:eb:27:d1:dc:a1:0f:
90:bb:db:5c:96:3d:0b:c5:35:9e:7d:9a:61:b1:42:
ad:15:dd:bd:25:57:0a:d1:d4:11:54:ea:bc:15:5e:
05:81:40:2f:7e:3c:e2:49:45:58:f2:e4:24:38:61:
74:95:e5:c2:61:e8:38:dc:8e:32:ea:7e:d7:33:7e:
b7:c4:18:28:f7:e1:89:b0:72:e9:2e:76:4f:97:53:
1a:5a:08:d9:e3:66:13:fd:ec:98:ff:71:79:05:f8:
ff:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:4F:F1:A5:77:40:03:E6:D2:BD:98:A9:38:11:2A:20:2C:0A:CF:67
X509v3 Authority Key Identifier:
keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/Rk_xpXdAA-bSvZipOBEqICwKz2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.115.208.0/23
213.145.72.0/21
213.145.88.0/21
Signature Algorithm: sha256WithRSAEncryption
cf:09:58:e1:aa:aa:68:83:bc:ea:43:db:b5:db:54:9f:b6:d6:
b5:c5:39:05:23:cb:1c:5a:f7:18:c0:e1:50:32:19:d8:a0:3e:
96:ce:44:4d:7f:9a:4b:09:3f:92:83:1d:c8:1d:0b:48:68:79:
a6:32:14:a3:78:52:eb:6a:dc:4a:29:aa:53:ce:45:66:3a:43:
14:ad:72:3f:6f:0d:6c:a1:28:3d:cc:d2:bc:dd:78:e4:9e:8c:
a3:38:97:c2:aa:81:0f:6d:84:06:0d:a5:1b:0f:ad:56:ec:b5:
6d:d1:ec:16:25:7e:96:5d:52:8d:8b:10:36:ff:f6:af:2d:c9:
8c:b9:19:4c:c6:0c:da:c2:0d:0a:6a:27:23:46:fc:53:96:a9:
63:12:9c:2d:b9:7c:62:39:b3:71:db:cd:4b:57:40:a0:f8:67:
8e:c8:07:0c:5e:e3:24:c1:78:ee:95:5a:d5:1c:75:15:c3:e2:
08:00:4b:3f:cf:dd:86:20:89:36:22:4a:aa:84:77:2d:f1:91:
81:34:01:80:f3:03:12:63:97:8f:ad:8f:f9:8d:3c:e6:69:14:
c6:11:4a:86:e5:3f:ba:89:0b:9b:f2:fb:1f:2e:6f:9e:ef:ec:
bc:d7:84:53:ec:d1:8e:9c:18:86:01:87:df:3b:97:1c:80:55:
bb:1e:a4:e0
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZAbacNhOUc7HwddbVDHzOA1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmYTE2YWIwNjAyMDA2Nzc0MGE0YzFmYjQ3YTkxMjYyMmYx
ZDA3MjIwHhcNMjQwNjE1MTAyMDM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NjRmZjFhNTc3NDAwM2U2ZDJiZDk4YTkzODExMmEyMDJjMGFjZjY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlA8uvH8JASNwrigp8X4CC0PR7a48
HKpffCeF7IeSdEgXltPhFfFpEUro4H1sMPTBLQxSdQ4dzd9MLElrlJj7A8ed1lYK
8icl6RmIPSF8G4In8+QByuizRZ5DG6mTMF/ZALZI0b6LLrbCZ32hlvbvuifKu8ml
fKeUtoVhRM4nF4zh/6vj9ZWjmPvdXqrZw1Rgrd8jMjAKNFC0RyJkfCzrJ9HcoQ+Q
u9tclj0LxTWefZphsUKtFd29JVcK0dQRVOq8FV4FgUAvfjziSUVY8uQkOGF0leXC
Yeg43I4y6n7XM363xBgo9+GJsHLpLnZPl1MaWgjZ42YT/eyY/3F5Bfj/QQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFEZP8aV3QAPm0r2YqTgRKiAsCs9nMB8GA1UdIwQY
MBaAFC+harBgIAZ3QKTB+0epEmIvHQciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDZGcXNHQWdCbmRBcE1IN1I2a1NZaThkQnlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy83ZjIzOTMtZDAxYS00MWY3LWE1MmUt
ZDI0MmI2ZjNhOGExLzEvUmtfeHBYZEFBLWJTdlppcE9CRXFJQ3dLejJjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy83ZjIzOTMtZDAxYS00MWY3LWE1MmUtZDI0MmI2ZjNhOGEx
LzEvTDZGcXNHQWdCbmRBcE1IN1I2a1NZaThkQnlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBVXPQAwQD
1ZFIAwQD1ZFYMA0GCSqGSIb3DQEBCwUAA4IBAQDPCVjhqqpog7zqQ9u121Sftta1
xTkFI8scWvcYwOFQMhnYoD6WzkRNf5pLCT+Sgx3IHQtIaHmmMhSjeFLratxKKapT
zkVmOkMUrXI/bw1soSg9zNK83XjknoyjOJfCqoEPbYQGDaUbD61W7LVt0ewWJX6W
XVKNixA2//avLcmMuRlMxgzawg0KaicjRvxTlqljEpwtuXxiObNx281LV0Cg+GeO
yAcMXuMkwXjulVrVHHUVw+IIAEs/z92GIIk2IkqqhHct8ZGBNAGA8wMSY5ePrY/5
jTzmaRTGEUqG5T+6iQub8vsfLm+e7+y814RT7NGOnBiGAYffO5ccgFW7HqTg
-----END CERTIFICATE-----
Generated at Fri Jul 19 06:10:44 2024 by rpki-client on console-fra.rpki-client.org