Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/oa_Bung36kTRutQ9kiDtpBwQSvU.roa
File: oa_Bung36kTRutQ9kiDtpBwQSvU.roa (raw, json)
Hash identifier: 03wbJmI9ZclzQTe+TMKEgZaBJTxZ2wy3yoWW8z/68XA=
Subject key identifier: A1:AF:C1:BA:78:37:EA:44:D1:BA:D4:3D:92:20:ED:A4:1C:10:4A:F5
Certificate issuer: /CN=874bf8070cee4305d1a389e910fb5102bbcc1941
Certificate serial: 01882845F0055675633C0D22E992D0DD5B35
Authority key identifier: 87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/oa_Bung36kTRutQ9kiDtpBwQSvU.roa
Signing time: Wed 17 May 2023 05:54:12 +0000
ROA not before: Wed 17 May 2023 05:54:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35053
IP address blocks: 85.237.69.0/24 maxlen: 24
85.237.68.0/24 maxlen: 24
85.237.70.0/24 maxlen: 24
85.237.72.0/21 maxlen: 21
85.237.84.0/22 maxlen: 22
85.237.64.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:28:45:f0:05:56:75:63:3c:0d:22:e9:92:d0:dd:5b:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=874bf8070cee4305d1a389e910fb5102bbcc1941
Validity
Not Before: May 17 05:54:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a1afc1ba7837ea44d1bad43d9220eda41c104af5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:8e:1b:0b:eb:d9:3f:b4:8c:4c:c3:d7:32:29:
3d:38:4c:ba:49:29:03:d9:a0:67:5c:2e:9d:81:84:
1c:ea:d5:bc:fc:59:1c:e0:76:dc:ce:94:03:18:24:
9c:1e:ce:d2:13:3f:46:a4:99:6f:62:58:c7:42:7b:
bc:f7:50:47:01:1a:e0:3c:71:75:98:ca:cb:29:6b:
59:42:5b:8d:ba:c4:22:df:b2:e4:6a:09:01:3d:59:
34:f8:b4:e6:2c:b5:75:bb:95:ea:f3:7b:aa:19:8a:
14:68:db:45:8f:8d:89:70:66:42:72:1d:09:f3:75:
0c:37:41:75:85:7f:dd:39:a5:24:65:e0:aa:33:e8:
27:14:70:e2:3b:04:3e:2c:7e:57:87:b8:b7:6f:84:
be:3c:ad:f4:36:b8:48:3b:82:c3:5c:ac:04:96:6b:
cf:cd:f5:27:4f:76:96:af:46:27:1e:04:16:01:58:
2b:8b:92:8f:22:d4:8f:14:27:02:9e:9a:d1:2f:20:
f1:cb:f5:13:8e:22:20:f6:75:0b:10:87:de:22:75:
d0:28:89:35:e5:62:21:8e:e7:30:79:56:93:a6:5e:
f4:3e:5e:be:e0:91:13:c2:e4:39:0a:b7:77:d6:36:
81:3b:95:93:ea:2d:c2:5f:72:46:a8:01:e5:77:06:
a8:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:AF:C1:BA:78:37:EA:44:D1:BA:D4:3D:92:20:ED:A4:1C:10:4A:F5
X509v3 Authority Key Identifier:
keyid:87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/oa_Bung36kTRutQ9kiDtpBwQSvU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.64.0-85.237.70.255
85.237.72.0/21
85.237.84.0/22
Signature Algorithm: sha256WithRSAEncryption
17:d2:88:a9:bb:e3:a5:3c:b2:d7:51:c5:90:e5:77:fc:94:3b:
31:1f:a6:44:68:f8:b1:f5:2e:53:53:47:46:70:a3:9c:93:d4:
c8:2c:de:f4:7b:6d:4d:e4:42:e1:9a:d7:37:56:5a:94:ba:54:
ca:da:be:86:d0:3b:a5:90:05:cf:cc:c6:5e:ec:55:38:9b:e5:
07:75:85:d4:93:09:87:60:3f:7a:b0:21:5c:a6:47:d9:92:a5:
6c:d1:2b:6d:90:c6:15:18:28:dd:a2:58:63:82:70:94:54:4d:
16:a0:42:9c:07:db:1f:30:c4:92:d6:2d:1b:92:6b:53:4d:77:
d9:13:81:91:e6:e3:c6:7f:cd:4a:68:66:63:f3:3a:54:ee:2c:
2e:95:6a:a5:87:ad:29:fb:28:b7:62:55:82:51:c4:11:ec:78:
12:39:d8:23:b4:f7:18:19:98:5c:1b:d8:cd:39:9d:ad:b1:94:
c8:a2:14:c4:4b:f8:f6:77:ea:4c:77:1c:bb:b8:59:77:c1:89:
2e:b8:86:cd:22:ef:80:36:c8:e3:a3:c9:75:56:5c:b6:60:1e:
6a:a8:b1:95:ad:b3:a5:6e:70:53:7a:c1:e9:fc:18:36:ff:78:
a6:67:e5:6a:b3:25:fd:92:9c:0f:1f:f2:0a:d6:91:6a:c0:9f:
68:28:03:76
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAYgoRfAFVnVjPA0i6ZLQ3Vs1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3NGJmODA3MGNlZTQzMDVkMWEzODllOTEwZmI1MTAyYmJj
YzE5NDEwHhcNMjMwNTE3MDU1NDEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMWFmYzFiYTc4MzdlYTQ0ZDFiYWQ0M2Q5MjIwZWRhNDFjMTA0YWY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyY4bC+vZP7SMTMPXMik9OEy6SSkD
2aBnXC6dgYQc6tW8/Fkc4HbczpQDGCScHs7SEz9GpJlvYljHQnu891BHARrgPHF1
mMrLKWtZQluNusQi37LkagkBPVk0+LTmLLV1u5Xq83uqGYoUaNtFj42JcGZCch0J
83UMN0F1hX/dOaUkZeCqM+gnFHDiOwQ+LH5Xh7i3b4S+PK30NrhIO4LDXKwElmvP
zfUnT3aWr0YnHgQWAVgri5KPItSPFCcCnprRLyDxy/UTjiIg9nULEIfeInXQKIk1
5WIhjucweVaTpl70Pl6+4JETwuQ5Crd31jaBO5WT6i3CX3JGqAHldwaomwIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFKGvwbp4N+pE0brUPZIg7aQcEEr1MB8GA1UdIwQY
MBaAFIdL+AcM7kMF0aOJ6RD7UQK7zBlBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDB2NEJ3enVRd1hSbzRucEVQdFJBcnZNR1VFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9lZWUxMzEtYmI4Yy00ODg3LTg2OWIt
NmZlNGQ4ZmVkMTYwLzEvb2FfQnVuZzM2a1RSdXRROWtpRHRwQndRU3ZVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9lZWUxMzEtYmI4Yy00ODg3LTg2OWItNmZlNGQ4ZmVkMTYw
LzEvaDB2NEJ3enVRd1hSbzRucEVQdFJBcnZNR1VFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBAZV7UAD
BABV7UYDBANV7UgDBAJV7VQwDQYJKoZIhvcNAQELBQADggEBABfSiKm746U8stdR
xZDld/yUOzEfpkRo+LH1LlNTR0Zwo5yT1Mgs3vR7bU3kQuGa1zdWWpS6VMravobQ
O6WQBc/Mxl7sVTib5Qd1hdSTCYdgP3qwIVymR9mSpWzRK22QxhUYKN2iWGOCcJRU
TRagQpwH2x8wxJLWLRuSa1NNd9kTgZHm48Z/zUpoZmPzOlTuLC6VaqWHrSn7KLdi
VYJRxBHseBI52CO09xgZmFwb2M05na2xlMiiFMRL+PZ36kx3HLu4WXfBiS64hs0i
74A2yOOjyXVWXLZgHmqosZWts6VucFN6wen8GDb/eKZn5WqzJf2SnA8f8grWkWrA
n2goA3Y=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:28 2023 by rpki-client on console.sobornost.net