Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/d-oHbNBR6kRyucC9YI-EXxxZppg.roa
File: d-oHbNBR6kRyucC9YI-EXxxZppg.roa (raw, json)
Hash identifier: DQ/Ej3yCn2l0S8ZO+8YmBWZs4EDpQ2we/XXCCDV1Sqc=
Subject key identifier: 77:EA:07:6C:D0:51:EA:44:72:B9:C0:BD:60:8F:84:5F:1C:59:A6:98
Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial: 01860CBF0B704C25C2AB2BF36A60B939F057
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/d-oHbNBR6kRyucC9YI-EXxxZppg.roa
Signing time: Wed 01 Feb 2023 11:31:32 +0000
ROA not before: Wed 01 Feb 2023 11:31:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 85.115.208.0/23 maxlen: 23
85.115.210.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 May 2023 09:28:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:0c:bf:0b:70:4c:25:c2:ab:2b:f3:6a:60:b9:39:f0:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Validity
Not Before: Feb 1 11:31:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=77ea076cd051ea4472b9c0bd608f845f1c59a698
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:bd:82:03:c1:43:82:b8:23:9c:b3:5f:66:4c:
56:5b:6c:7b:a3:ab:4f:14:8c:09:df:76:8d:e9:77:
83:a6:39:86:25:a8:45:cf:a4:14:ea:7c:cd:97:4f:
0b:56:6e:dd:39:d0:5c:90:52:ce:c1:44:03:80:34:
f6:de:a1:85:93:26:d4:de:11:56:01:06:2b:7a:2c:
3d:59:ad:bb:a1:e4:04:d3:5a:b6:97:37:cd:1a:3f:
62:ac:40:61:11:17:30:6d:56:7a:5f:7c:e9:3e:cc:
0a:80:58:46:7c:a9:06:b3:c1:f7:ad:ba:f4:63:6d:
25:b4:03:6f:98:14:1f:39:8b:bf:f7:ae:e7:ae:3f:
ab:47:96:00:2d:03:68:cf:b9:78:ca:61:df:22:73:
c5:31:f8:08:57:cd:1c:15:3c:a8:8b:b6:82:fe:0f:
91:c0:e8:26:ae:66:a2:65:39:cd:3a:7d:f2:93:9d:
39:43:51:a6:d9:b4:a2:c8:a1:53:39:96:4a:44:64:
35:ff:1f:52:64:3c:e4:46:30:41:f1:3d:6b:7f:90:
03:da:3c:ab:1f:f3:a3:f9:ef:34:3f:4c:66:4c:21:
b9:15:e7:20:3f:05:a2:b4:bf:e3:83:c9:92:cd:5c:
40:2c:18:c1:31:a7:7b:80:d8:ee:61:b9:ff:5b:10:
9b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:EA:07:6C:D0:51:EA:44:72:B9:C0:BD:60:8F:84:5F:1C:59:A6:98
X509v3 Authority Key Identifier:
keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/d-oHbNBR6kRyucC9YI-EXxxZppg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.115.208.0/22
Signature Algorithm: sha256WithRSAEncryption
d7:7c:e2:6c:c6:0f:8e:a7:93:34:07:44:9e:6a:d7:af:07:d7:
88:f2:18:32:51:f6:d4:39:d7:66:2d:fa:89:de:f6:c7:94:4c:
be:e3:a1:f5:5d:14:9a:42:c9:f1:ac:56:b4:62:31:52:b8:9b:
b1:89:a5:71:5b:55:bd:df:7d:b3:03:de:45:45:e2:47:dc:f1:
13:81:49:3b:8f:10:b8:cf:58:da:68:f7:f8:fe:23:84:e4:c8:
11:04:f6:b2:de:60:b0:2c:c7:70:ce:36:c4:d7:8e:a1:35:08:
1e:ca:9d:10:49:ae:96:1b:20:27:8e:e0:74:53:87:bd:7f:dd:
a7:d1:4c:0d:21:42:17:96:51:00:2e:ea:4e:a0:20:0c:b7:d5:
0d:c4:d9:76:f7:6a:69:37:f9:cd:47:56:03:e4:0e:c7:90:0d:
24:65:e8:ac:90:41:b4:55:42:88:d7:01:33:0d:c4:6a:81:79:
39:12:38:9b:7f:14:88:02:4e:30:04:f2:e3:1e:20:1d:9b:d3:
e5:07:0d:8a:8b:6b:e7:19:3f:9e:ef:c5:3a:11:ec:4e:6f:db:
28:eb:1f:3e:50:ef:4b:82:bf:2f:07:50:bf:37:b0:f3:17:24:
e9:06:7b:90:a9:2c:0a:71:b9:52:09:68:15:07:4b:99:a1:84:
ab:ef:f5:ed
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYYMvwtwTCXCqyvzamC5OfBXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmYTE2YWIwNjAyMDA2Nzc0MGE0YzFmYjQ3YTkxMjYyMmYx
ZDA3MjIwHhcNMjMwMjAxMTEzMTMyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3N2VhMDc2Y2QwNTFlYTQ0NzJiOWMwYmQ2MDhmODQ1ZjFjNTlhNjk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwL2CA8FDgrgjnLNfZkxWW2x7o6tP
FIwJ33aN6XeDpjmGJahFz6QU6nzNl08LVm7dOdBckFLOwUQDgDT23qGFkybU3hFW
AQYreiw9Wa27oeQE01q2lzfNGj9irEBhERcwbVZ6X3zpPswKgFhGfKkGs8H3rbr0
Y20ltANvmBQfOYu/967nrj+rR5YALQNoz7l4ymHfInPFMfgIV80cFTyoi7aC/g+R
wOgmrmaiZTnNOn3yk505Q1Gm2bSiyKFTOZZKRGQ1/x9SZDzkRjBB8T1rf5AD2jyr
H/Oj+e80P0xmTCG5FecgPwWitL/jg8mSzVxALBjBMad7gNjuYbn/WxCbMQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHfqB2zQUepEcrnAvWCPhF8cWaaYMB8GA1UdIwQY
MBaAFC+harBgIAZ3QKTB+0epEmIvHQciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDZGcXNHQWdCbmRBcE1IN1I2a1NZaThkQnlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy83ZjIzOTMtZDAxYS00MWY3LWE1MmUt
ZDI0MmI2ZjNhOGExLzEvZC1vSGJOQlI2a1J5dWNDOVlJLUVYeHhacHBnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy83ZjIzOTMtZDAxYS00MWY3LWE1MmUtZDI0MmI2ZjNhOGEx
LzEvTDZGcXNHQWdCbmRBcE1IN1I2a1NZaThkQnlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCVXPQMA0G
CSqGSIb3DQEBCwUAA4IBAQDXfOJsxg+Op5M0B0SeatevB9eI8hgyUfbUOddmLfqJ
3vbHlEy+46H1XRSaQsnxrFa0YjFSuJuxiaVxW1W9332zA95FReJH3PETgUk7jxC4
z1jaaPf4/iOE5MgRBPay3mCwLMdwzjbE146hNQgeyp0QSa6WGyAnjuB0U4e9f92n
0UwNIUIXllEALupOoCAMt9UNxNl292ppN/nNR1YD5A7HkA0kZeiskEG0VUKI1wEz
DcRqgXk5EjibfxSIAk4wBPLjHiAdm9PlBw2Ki2vnGT+e78U6EexOb9so6x8+UO9L
gr8vB1C/N7DzFyTpBnuQqSwKcblSCWgVB0uZoYSr7/Xt
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:12 2024 by rpki-client on console-ams.rpki-client.org