Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/O8-JPo7K2-wGl_wMgNtGe88z0lA.roa
File: O8-JPo7K2-wGl_wMgNtGe88z0lA.roa (raw, json)
Hash identifier: 04zC2WyRrjobiX9AAgFFKmGR13r9LeBWLka7oXobsSc=
Subject key identifier: 3B:CF:89:3E:8E:CA:DB:EC:06:97:FC:0C:80:DB:46:7B:CF:33:D2:50
Certificate issuer: /CN=f0f14ed124f9a2f3deab1006f184cf4fb80a3aec
Certificate serial: 018673CAD15DC45A02C97A65788458C27DD7
Authority key identifier: F0:F1:4E:D1:24:F9:A2:F3:DE:AB:10:06:F1:84:CF:4F:B8:0A:3A:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8PFO0ST5ovPeqxAG8YTPT7gKOuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/O8-JPo7K2-wGl_wMgNtGe88z0lA.roa
Signing time: Tue 21 Feb 2023 11:45:17 +0000
ROA not before: Tue 21 Feb 2023 11:45:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 64267
IP address blocks: 85.204.37.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:73:ca:d1:5d:c4:5a:02:c9:7a:65:78:84:58:c2:7d:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0f14ed124f9a2f3deab1006f184cf4fb80a3aec
Validity
Not Before: Feb 21 11:45:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3bcf893e8ecadbec0697fc0c80db467bcf33d250
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:72:16:7b:8f:79:72:d7:81:1d:23:91:c6:8c:
e5:c1:2e:3e:ef:6d:85:72:ba:56:33:c9:e8:6f:6b:
35:a8:41:4e:24:21:49:88:da:84:b8:d8:cf:dc:73:
ff:cd:9d:19:f1:88:b6:8a:68:e5:26:80:c0:69:d8:
14:86:c5:4f:95:f4:2d:0e:a8:cd:ae:a9:16:0b:d1:
5d:5a:22:4c:a5:71:9d:2f:79:84:25:89:04:bc:09:
a5:4d:47:53:60:fd:84:75:cf:a9:95:a4:08:32:e6:
75:57:8e:1a:05:a3:2c:0b:ef:16:07:ad:92:31:a4:
58:cd:e6:6c:81:59:80:b4:91:f6:98:4c:ac:3a:e9:
27:c1:82:fb:40:d2:19:9a:1c:f4:39:fa:91:35:c1:
78:55:7e:a2:7b:6d:38:c4:6f:b1:e4:60:d3:bb:e2:
57:86:5a:4b:6f:8d:76:68:f3:55:0c:7e:d3:94:12:
e8:c5:02:3f:9f:59:2a:7d:bf:e9:a2:6d:97:5b:49:
ff:ae:f1:b1:92:75:4c:fa:30:d6:dc:69:0f:aa:f1:
93:0b:57:99:67:39:85:e2:e9:ba:75:7e:2f:11:98:
11:31:37:b5:81:d2:51:63:cb:ec:12:c9:6e:31:21:
df:bc:04:8d:12:45:7d:6b:fd:45:5d:ea:f4:d9:f6:
7d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:CF:89:3E:8E:CA:DB:EC:06:97:FC:0C:80:DB:46:7B:CF:33:D2:50
X509v3 Authority Key Identifier:
keyid:F0:F1:4E:D1:24:F9:A2:F3:DE:AB:10:06:F1:84:CF:4F:B8:0A:3A:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8PFO0ST5ovPeqxAG8YTPT7gKOuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/O8-JPo7K2-wGl_wMgNtGe88z0lA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/8PFO0ST5ovPeqxAG8YTPT7gKOuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.37.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:17:99:3b:c5:cb:5e:9a:3f:b9:e9:e0:95:22:39:39:85:c5:
e6:59:bd:fa:2a:df:4c:87:05:47:ce:91:a9:17:7b:c3:c3:8b:
87:58:19:53:4e:e9:61:6b:18:4f:8b:2b:b9:ff:4c:06:e3:55:
4e:13:d9:8a:6d:1d:e3:28:e7:38:f0:79:f7:09:45:09:98:50:
a2:70:90:74:e2:09:57:e9:48:73:e6:cf:4c:fb:67:ab:94:d5:
35:57:6b:2b:ea:71:4d:d2:2c:17:be:d0:29:ff:5d:d7:ac:88:
03:e0:a7:0d:db:68:00:60:2b:91:c3:fb:97:d5:1d:3a:78:a2:
33:fe:aa:75:15:da:70:bb:44:60:0a:b3:f7:d8:c7:00:be:92:
88:39:0c:ca:00:87:f5:33:0c:1a:e8:ba:9b:95:e8:30:2b:c1:
d5:07:f1:54:d0:ec:d1:dc:42:fd:94:43:f6:43:bf:36:b0:ee:
4a:55:4e:c4:c1:03:82:ba:da:24:cd:a4:75:54:21:be:d6:9d:
29:a7:20:dc:17:b5:4c:75:26:a4:df:99:4f:2b:02:02:0f:ec:
13:50:9a:3a:82:f6:fc:db:09:d3:37:50:0f:74:8f:8a:69:8c:
dd:98:c1:3b:f7:cd:76:cb:ef:0f:20:f8:a1:92:77:49:f9:6b:
54:c9:f3:14
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYZzytFdxFoCyXpleIRYwn3XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwZjE0ZWQxMjRmOWEyZjNkZWFiMTAwNmYxODRjZjRmYjgw
YTNhZWMwHhcNMjMwMjIxMTE0NTE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYmNmODkzZThlY2FkYmVjMDY5N2ZjMGM4MGRiNDY3YmNmMzNkMjUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyXIWe495cteBHSORxozlwS4+722F
crpWM8nob2s1qEFOJCFJiNqEuNjP3HP/zZ0Z8Yi2imjlJoDAadgUhsVPlfQtDqjN
rqkWC9FdWiJMpXGdL3mEJYkEvAmlTUdTYP2Edc+plaQIMuZ1V44aBaMsC+8WB62S
MaRYzeZsgVmAtJH2mEysOuknwYL7QNIZmhz0OfqRNcF4VX6ie204xG+x5GDTu+JX
hlpLb412aPNVDH7TlBLoxQI/n1kqfb/pom2XW0n/rvGxknVM+jDW3GkPqvGTC1eZ
ZzmF4um6dX4vEZgRMTe1gdJRY8vsEsluMSHfvASNEkV9a/1FXer02fZ9WwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDvPiT6OytvsBpf8DIDbRnvPM9JQMB8GA1UdIwQY
MBaAFPDxTtEk+aLz3qsQBvGEz0+4CjrsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFBGTzBTVDVvdlBlcXhBRzhZVFBUN2dLT3V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9jNzljZjMtYTA3MC00ZDViLTllZTQt
NDM2MTJlN2Q5Y2MxLzEvTzgtSlBvN0syLXdHbF93TWdOdEdlODh6MGxBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9jNzljZjMtYTA3MC00ZDViLTllZTQtNDM2MTJlN2Q5Y2Mx
LzEvOFBGTzBTVDVvdlBlcXhBRzhZVFBUN2dLT3V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVcwlMA0G
CSqGSIb3DQEBCwUAA4IBAQALF5k7xctemj+56eCVIjk5hcXmWb36Kt9MhwVHzpGp
F3vDw4uHWBlTTulhaxhPiyu5/0wG41VOE9mKbR3jKOc48Hn3CUUJmFCicJB04glX
6Uhz5s9M+2erlNU1V2sr6nFN0iwXvtAp/13XrIgD4KcN22gAYCuRw/uX1R06eKIz
/qp1Fdpwu0RgCrP32McAvpKIOQzKAIf1Mwwa6LqblegwK8HVB/FU0OzR3EL9lEP2
Q782sO5KVU7EwQOCutokzaR1VCG+1p0ppyDcF7VMdSak35lPKwICD+wTUJo6gvb8
2wnTN1APdI+KaYzdmME79812y+8PIPihkndJ+WtUyfMU
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:49 2023 by rpki-client on console-ams.rpki-client.org