Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/a0e8e3-a4e7-4a9e-b798-04e1fa808426/1/KWbjvinYGJCg--ZXZthXd4kNrAA.roa
File: KWbjvinYGJCg--ZXZthXd4kNrAA.roa (raw, json)
Hash identifier: owpeJMo8tj3qpAV4VhCErGm4bn7WWYQX7Q9Uhsegc38=
Subject key identifier: 29:66:E3:BE:29:D8:18:90:A0:FB:E6:57:66:D8:57:77:89:0D:AC:00
Certificate issuer: /CN=b01a59d0a61aa6174438988cc83598dbfea5a998
Certificate serial: 01856C65E69BD01CA177E6E214B95E1CB2D5
Authority key identifier: B0:1A:59:D0:A6:1A:A6:17:44:38:98:8C:C8:35:98:DB:FE:A5:A9:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sBpZ0KYaphdEOJiMyDWY2_6lqZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/a0e8e3-a4e7-4a9e-b798-04e1fa808426/1/KWbjvinYGJCg--ZXZthXd4kNrAA.roa
Signing time: Sun 01 Jan 2023 08:14:55 +0000
ROA not before: Sun 01 Jan 2023 08:14:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209348
IP address blocks: 85.208.228.0/24 maxlen: 24
85.208.231.0/24 maxlen: 24
85.208.229.0/24 maxlen: 24
85.208.230.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:33:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:65:e6:9b:d0:1c:a1:77:e6:e2:14:b9:5e:1c:b2:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b01a59d0a61aa6174438988cc83598dbfea5a998
Validity
Not Before: Jan 1 08:14:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2966e3be29d81890a0fbe65766d85777890dac00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:2f:9f:78:48:0b:c5:b9:2e:9c:73:67:09:d0:
c7:18:4e:36:b8:1e:31:6c:80:6a:66:83:ab:6d:9a:
85:44:40:bb:3b:16:9d:07:2f:84:e5:be:e1:69:96:
c9:a6:6e:81:ee:dd:49:c9:44:9b:e7:7c:3d:99:a9:
81:50:aa:1e:f2:9a:a0:c2:04:39:7e:c2:9f:dc:69:
75:ec:8d:ef:5e:1c:b0:21:51:87:87:94:65:76:57:
23:34:53:4c:32:54:d8:f8:fd:85:68:3c:be:43:8e:
4c:74:33:42:fe:b9:07:4e:f3:36:bb:15:4f:5d:a2:
b2:ec:59:cf:a2:b6:62:7e:f2:2a:b6:1c:88:8c:2b:
91:50:5d:1d:fd:7d:c1:b6:3d:76:2e:79:05:ca:0f:
7c:9a:df:05:bb:22:b7:03:85:2c:ff:5e:9c:a3:87:
0b:9b:12:51:de:fd:05:c5:fa:71:3a:cd:a9:fe:84:
fd:e7:f3:fd:26:08:9d:c8:75:ce:2c:a5:cd:c1:50:
bc:ba:50:e7:15:9a:cb:7e:b0:89:4f:18:63:10:8b:
56:d6:36:2b:9d:b3:56:4b:a1:c6:e0:07:71:b6:9b:
df:fd:97:87:84:83:53:e1:05:16:46:f7:6b:ae:a5:
79:60:e6:f4:53:5f:a8:df:32:bd:d7:e8:af:6a:c5:
2b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:66:E3:BE:29:D8:18:90:A0:FB:E6:57:66:D8:57:77:89:0D:AC:00
X509v3 Authority Key Identifier:
keyid:B0:1A:59:D0:A6:1A:A6:17:44:38:98:8C:C8:35:98:DB:FE:A5:A9:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sBpZ0KYaphdEOJiMyDWY2_6lqZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a0e8e3-a4e7-4a9e-b798-04e1fa808426/1/KWbjvinYGJCg--ZXZthXd4kNrAA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a0e8e3-a4e7-4a9e-b798-04e1fa808426/1/sBpZ0KYaphdEOJiMyDWY2_6lqZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.228.0/22
Signature Algorithm: sha256WithRSAEncryption
26:6c:02:12:fc:89:32:af:9d:4c:ff:0a:94:ab:b5:15:8f:d8:
13:09:6d:c3:f1:6d:52:1d:9f:c5:de:07:de:fa:31:72:5c:03:
99:a9:13:d3:c3:01:98:3d:74:df:d2:4c:f4:c4:59:8e:f6:4b:
1f:89:4a:41:3c:48:6c:e0:e1:e8:a8:13:d2:1b:43:d1:f8:75:
d7:5a:22:e2:c8:17:be:c2:38:3c:3e:5c:f9:89:9f:92:20:14:
06:f6:0a:06:6f:43:ba:a5:dc:34:a1:fb:b6:3a:1a:ec:23:19:
7b:12:2f:17:ba:a2:c1:41:33:5d:81:9b:56:35:82:cc:04:5e:
1a:6a:f2:26:c8:70:23:4a:ef:c1:cb:1c:64:55:cb:de:57:22:
98:e2:84:e0:5a:2b:c6:1c:76:2e:d6:10:98:6e:f0:1c:5a:ff:
44:a9:95:a4:eb:43:ec:dd:07:f4:6f:46:a7:e6:a3:98:ab:a2:
a1:19:40:91:54:0d:28:e1:b8:cc:07:d3:f0:1f:6f:ef:82:4f:
ee:9c:f2:44:11:47:3c:c8:2b:e5:1c:2c:f5:43:04:6d:0d:5d:
2c:1f:6c:e5:22:27:06:20:be:0e:a2:92:5e:c3:8d:fb:29:72:
2f:6f:2c:88:b2:72:5f:67:2b:75:89:81:ad:d2:98:06:33:24:
c0:e5:ae:da
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVsZeab0Byhd+biFLleHLLVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwMWE1OWQwYTYxYWE2MTc0NDM4OTg4Y2M4MzU5OGRiZmVh
NWE5OTgwHhcNMjMwMTAxMDgxNDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyOTY2ZTNiZTI5ZDgxODkwYTBmYmU2NTc2NmQ4NTc3Nzg5MGRhYzAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAny+feEgLxbkunHNnCdDHGE42uB4x
bIBqZoOrbZqFREC7OxadBy+E5b7haZbJpm6B7t1JyUSb53w9mamBUKoe8pqgwgQ5
fsKf3Gl17I3vXhywIVGHh5RldlcjNFNMMlTY+P2FaDy+Q45MdDNC/rkHTvM2uxVP
XaKy7FnPorZifvIqthyIjCuRUF0d/X3Btj12LnkFyg98mt8FuyK3A4Us/16co4cL
mxJR3v0FxfpxOs2p/oT95/P9JgidyHXOLKXNwVC8ulDnFZrLfrCJTxhjEItW1jYr
nbNWS6HG4Adxtpvf/ZeHhINT4QUWRvdrrqV5YOb0U1+o3zK91+ivasUrWQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFClm474p2BiQoPvmV2bYV3eJDawAMB8GA1UdIwQY
MBaAFLAaWdCmGqYXRDiYjMg1mNv+pamYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0JwWjBLWWFwaGRFT0ppTXlEV1kyXzZscVpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9hMGU4ZTMtYTRlNy00YTllLWI3OTgt
MDRlMWZhODA4NDI2LzEvS1dianZpbllHSkNnLS1aWFp0aFhkNGtOckFBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9hMGU4ZTMtYTRlNy00YTllLWI3OTgtMDRlMWZhODA4NDI2
LzEvc0JwWjBLWWFwaGRFT0ppTXlEV1kyXzZscVpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCVdDkMA0G
CSqGSIb3DQEBCwUAA4IBAQAmbAIS/Ikyr51M/wqUq7UVj9gTCW3D8W1SHZ/F3gfe
+jFyXAOZqRPTwwGYPXTf0kz0xFmO9ksfiUpBPEhs4OHoqBPSG0PR+HXXWiLiyBe+
wjg8Plz5iZ+SIBQG9goGb0O6pdw0ofu2OhrsIxl7Ei8XuqLBQTNdgZtWNYLMBF4a
avImyHAjSu/ByxxkVcveVyKY4oTgWivGHHYu1hCYbvAcWv9EqZWk60Ps3Qf0b0an
5qOYq6KhGUCRVA0o4bjMB9PwH2/vgk/unPJEEUc8yCvlHCz1QwRtDV0sH2zlIicG
IL4OopJew437KXIvbyyIsnJfZyt1iYGt0pgGMyTA5a7a
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:13 2024 by rpki-client on console-ams.rpki-client.org