Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/RrTdh7GwhHq7W0Tl0WyxwasuKhs.roa
File: RrTdh7GwhHq7W0Tl0WyxwasuKhs.roa (raw, json)
Hash identifier: UXCQn99UtRPwrRWdtm9x37fUfyctTJYhVRSI/HPOjo4=
Subject key identifier: 46:B4:DD:87:B1:B0:84:7A:BB:5B:44:E5:D1:6C:B1:C1:AB:2E:2A:1B
Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial: 0192E8A099B91229D9F793A46D400B719A1E
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/RrTdh7GwhHq7W0Tl0WyxwasuKhs.roa
Signing time: Fri 01 Nov 2024 16:48:11 +0000
ROA not before: Fri 01 Nov 2024 16:48:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 85.115.208.0/23 maxlen: 24
213.145.68.0/23 maxlen: 23
213.145.70.0/23 maxlen: 24
213.145.72.0/21 maxlen: 24
213.145.82.0/23 maxlen: 24
213.145.84.0/23 maxlen: 23
213.145.86.0/23 maxlen: 23
213.145.88.0/21 maxlen: 24
213.145.88.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 14 Nov 2024 07:13:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:e8:a0:99:b9:12:29:d9:f7:93:a4:6d:40:0b:71:9a:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Validity
Not Before: Nov 1 16:48:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=46b4dd87b1b0847abb5b44e5d16cb1c1ab2e2a1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:04:e0:52:10:db:c6:24:de:af:40:9a:f0:f0:
d3:97:20:b8:e4:a9:41:2a:b3:86:0e:0e:cb:0b:70:
5e:bc:c2:98:5d:df:ba:5d:ed:cf:13:e7:4d:72:12:
ac:0a:13:a6:b3:19:34:1b:b7:72:39:35:d7:ef:d0:
68:b3:fa:ba:d9:01:de:fc:6d:d9:4f:97:fc:2b:2d:
4a:f8:d8:94:aa:f7:99:6a:b8:3d:da:b7:9e:1e:bf:
7b:c3:2f:38:3b:91:aa:a4:b9:b3:62:61:e2:a1:17:
47:91:00:1a:a2:20:db:b2:a0:af:8d:83:29:f7:de:
61:e1:55:6c:20:bb:80:d0:85:5a:71:5c:3e:3f:06:
0b:af:d6:84:15:71:1a:44:8b:cb:cd:41:34:b7:0e:
12:45:2a:6b:99:29:8c:b9:d3:3e:fe:23:d5:a2:9b:
93:ef:4f:87:28:61:c8:b7:aa:0f:10:26:d4:c2:95:
af:50:57:e6:11:6e:70:6f:2f:de:7e:0d:08:41:60:
cb:7d:b2:bc:36:8d:ed:20:4c:15:e4:da:01:44:d9:
19:9a:57:a7:fc:8a:eb:69:17:17:57:e4:59:57:a5:
93:81:1e:0e:14:a6:1b:8f:6a:62:09:65:8d:1c:76:
e2:27:b1:0e:db:45:a5:34:15:fb:55:90:68:f0:7e:
f8:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:B4:DD:87:B1:B0:84:7A:BB:5B:44:E5:D1:6C:B1:C1:AB:2E:2A:1B
X509v3 Authority Key Identifier:
keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/RrTdh7GwhHq7W0Tl0WyxwasuKhs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.115.208.0/23
213.145.68.0-213.145.79.255
213.145.82.0-213.145.95.255
Signature Algorithm: sha256WithRSAEncryption
15:f7:94:b6:e9:39:80:02:25:89:a9:6e:1b:c8:b6:4c:a5:7f:
b9:a5:4b:0c:40:de:b6:63:35:9c:23:d8:cf:72:78:17:9f:3d:
1e:88:07:de:51:02:4a:ed:ad:84:53:5a:d7:6c:78:ff:c8:0e:
75:b7:58:be:9d:23:d4:f9:52:56:f4:f8:6a:eb:e5:c1:a8:d3:
9a:32:f6:ab:d5:c3:b0:fb:61:fc:ea:94:b0:d7:92:56:d8:ca:
df:d0:7e:96:c6:5e:46:0b:2e:ff:1b:ad:4b:f4:3a:e9:bf:87:
7b:80:5b:78:cf:a3:07:c3:85:18:a4:58:0f:e5:d8:40:d0:2d:
f5:02:1f:53:3e:47:bb:29:b8:57:ba:3b:03:d4:fc:c4:51:d4:
4b:c1:c3:42:b3:a9:cf:8f:0a:fa:d2:b0:53:4e:a0:d5:3a:33:
6b:a7:34:da:a3:a5:66:e3:73:00:ff:23:d8:e1:e7:1d:ed:8d:
46:0c:e3:09:e7:f5:9e:76:6a:e3:db:c8:ab:6e:c1:f0:73:9f:
b2:b9:ce:8b:87:32:02:19:f3:28:64:69:11:92:43:dd:a6:be:
03:d0:47:32:e1:33:1c:c8:82:09:e5:0e:50:bd:26:3a:d9:d8:
9c:a5:c7:91:24:d0:c4:22:f7:07:17:f8:bd:a2:2a:e3:48:ae:
58:d9:c1:9c
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZLooJm5EinZ95OkbUALcZoeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmYTE2YWIwNjAyMDA2Nzc0MGE0YzFmYjQ3YTkxMjYyMmYx
ZDA3MjIwHhcNMjQxMTAxMTY0ODExWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NmI0ZGQ4N2IxYjA4NDdhYmI1YjQ0ZTVkMTZjYjFjMWFiMmUyYTFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ATgUhDbxiTer0Ca8PDTlyC45KlB
KrOGDg7LC3BevMKYXd+6Xe3PE+dNchKsChOmsxk0G7dyOTXX79Bos/q62QHe/G3Z
T5f8Ky1K+NiUqveZarg92reeHr97wy84O5GqpLmzYmHioRdHkQAaoiDbsqCvjYMp
995h4VVsILuA0IVacVw+PwYLr9aEFXEaRIvLzUE0tw4SRSprmSmMudM+/iPVopuT
70+HKGHIt6oPECbUwpWvUFfmEW5wby/efg0IQWDLfbK8No3tIEwV5NoBRNkZmlen
/IrraRcXV+RZV6WTgR4OFKYbj2piCWWNHHbiJ7EO20WlNBX7VZBo8H74NwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFEa03YexsIR6u1tE5dFsscGrLiobMB8GA1UdIwQY
MBaAFC+harBgIAZ3QKTB+0epEmIvHQciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDZGcXNHQWdCbmRBcE1IN1I2a1NZaThkQnlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy83ZjIzOTMtZDAxYS00MWY3LWE1MmUt
ZDI0MmI2ZjNhOGExLzEvUnJUZGg3R3doSHE3VzBUbDBXeXh3YXN1S2hzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy83ZjIzOTMtZDAxYS00MWY3LWE1MmUtZDI0MmI2ZjNhOGEx
LzEvTDZGcXNHQWdCbmRBcE1IN1I2a1NZaThkQnlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAATAiAwQBVXPQMAwD
BALVkUQDBATVkUAwDAMEAdWRUgMEBdWRQDANBgkqhkiG9w0BAQsFAAOCAQEAFfeU
tuk5gAIlialuG8i2TKV/uaVLDEDetmM1nCPYz3J4F589HogH3lECSu2thFNa12x4
/8gOdbdYvp0j1PlSVvT4auvlwajTmjL2q9XDsPth/OqUsNeSVtjK39B+lsZeRgsu
/xutS/Q66b+He4BbeM+jB8OFGKRYD+XYQNAt9QIfUz5Huym4V7o7A9T8xFHUS8HD
QrOpz48K+tKwU06g1Toza6c02qOlZuNzAP8j2OHnHe2NRgzjCef1nnZq49vIq27B
8HOfsrnOi4cyAhnzKGRpEZJD3aa+A9BHMuEzHMiCCeUOUL0mOtnYnKXHkSTQxCL3
Bxf4vaIq40iuWNnBnA==
-----END CERTIFICATE-----
Generated at Thu Nov 14 08:42:07 2024 by rpki-client on console-ams.rpki-client.org