Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/3394e3-736e-4879-b8db-89aaea36285e/1/1-4JYymDQvb4LZIkbowa9bcssQ-U.roa
File: 1-4JYymDQvb4LZIkbowa9bcssQ-U.roa (raw, json)
Hash identifier: GnNlhPwojfHda2OyJYW0OHtY0if4zribS6JEWNiiXjQ=
Subject key identifier: FB:82:58:CA:60:D0:BD:BE:0B:64:89:1B:A3:06:BD:6D:CB:2C:43:E5
Certificate issuer: /CN=e85b83c87c4a3d8315025379f72987520bb5d046
Certificate serial: 019016671C60D100FE7D023ADDA6CC953AEF
Authority key identifier: E8:5B:83:C8:7C:4A:3D:83:15:02:53:79:F7:29:87:52:0B:B5:D0:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6FuDyHxKPYMVAlN59ymHUgu10EY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/3394e3-736e-4879-b8db-89aaea36285e/1/1-4JYymDQvb4LZIkbowa9bcssQ-U.roa
Signing time: Fri 14 Jun 2024 10:59:34 +0000
ROA not before: Fri 14 Jun 2024 10:59:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6830
IP address blocks: 80.255.224.0/20 maxlen: 20
89.191.120.0/22 maxlen: 22
91.123.64.0/20 maxlen: 20
185.7.237.0/24 maxlen: 24
185.7.238.0/24 maxlen: 24
185.7.239.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 26 Jun 2024 07:56:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:16:67:1c:60:d1:00:fe:7d:02:3a:dd:a6:cc:95:3a:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e85b83c87c4a3d8315025379f72987520bb5d046
Validity
Not Before: Jun 14 10:59:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fb8258ca60d0bdbe0b64891ba306bd6dcb2c43e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ce:39:98:30:aa:9d:62:bb:c4:87:70:77:4a:
22:55:d7:3f:39:c0:c0:ac:a3:fd:98:93:fe:0d:2d:
ab:b9:33:35:63:ec:01:d8:66:e0:e1:ad:48:d0:1d:
72:f0:08:2c:72:5c:94:ba:ae:e0:24:0e:b3:f0:3a:
c1:e8:a5:b5:ac:d7:0f:df:eb:d9:03:45:44:24:8c:
ba:e5:fe:6a:e2:a6:9a:02:26:9a:d6:ad:db:0a:8d:
b4:92:45:b5:ba:eb:a3:80:ab:c9:0c:8f:98:5c:91:
2b:86:4b:a9:76:e8:dd:99:49:76:64:12:99:06:b4:
25:fe:d6:84:f7:20:4a:35:03:9e:19:98:cb:c4:01:
ba:b1:cc:dc:74:df:48:25:0b:3d:4c:4b:db:22:9d:
5d:1a:fd:98:61:8d:ad:0d:f8:a4:3e:aa:b8:73:f2:
bf:86:06:a2:04:55:10:76:54:b0:2e:5c:23:05:7a:
b9:22:53:13:8f:01:c1:87:44:29:48:52:56:83:ea:
9e:ee:71:6a:27:a5:66:59:e1:1c:b5:37:53:1d:84:
1e:c9:8b:23:a0:e0:01:50:10:e9:f9:78:a5:17:47:
e8:2c:f2:b9:c8:93:3f:4f:f9:27:85:82:82:64:d1:
e8:a6:ce:01:b3:52:5a:49:60:0a:a2:e4:13:68:65:
8a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:82:58:CA:60:D0:BD:BE:0B:64:89:1B:A3:06:BD:6D:CB:2C:43:E5
X509v3 Authority Key Identifier:
keyid:E8:5B:83:C8:7C:4A:3D:83:15:02:53:79:F7:29:87:52:0B:B5:D0:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6FuDyHxKPYMVAlN59ymHUgu10EY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3394e3-736e-4879-b8db-89aaea36285e/1/1-4JYymDQvb4LZIkbowa9bcssQ-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3394e3-736e-4879-b8db-89aaea36285e/1/6FuDyHxKPYMVAlN59ymHUgu10EY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.255.224.0/20
89.191.120.0/22
91.123.64.0/20
185.7.237.0-185.7.239.255
Signature Algorithm: sha256WithRSAEncryption
78:58:bd:d3:19:5b:d5:38:71:e5:05:d2:c1:bc:c3:52:80:e6:
74:1d:83:b4:08:ec:70:c0:83:80:6a:0a:fb:f4:31:e0:1b:08:
fa:b0:1f:97:34:4e:d3:e6:86:9b:15:dc:a7:4f:14:0b:11:56:
9a:69:04:6c:ff:ef:15:c3:49:8a:73:c9:40:ae:b3:ea:70:8d:
c3:2d:0e:09:8e:06:b4:29:58:71:04:4a:5d:9f:37:22:c1:9c:
d0:46:b0:b2:a6:ea:95:1e:13:f0:48:86:27:60:d2:9c:ab:f0:
01:a7:89:7e:d4:e0:a9:d5:39:2b:a3:82:11:79:97:81:58:fd:
ba:5e:ff:1e:7b:30:aa:90:4e:e6:86:ca:c4:72:71:09:69:74:
87:af:4b:b5:3c:56:05:7f:c4:fe:9c:21:77:3f:b6:a9:18:b3:
90:26:8f:7a:b2:56:b1:73:dd:24:25:d7:a5:68:97:92:4b:2d:
b1:eb:89:04:b0:b2:06:78:e3:58:c6:52:09:a3:c5:c6:70:d4:
f7:23:ec:b0:cb:48:fe:2b:48:9e:16:46:c9:01:d2:74:c3:92:
51:70:fc:9a:fe:3e:27:4d:f9:a6:34:5f:9e:e0:9d:c2:4f:16:
f2:bb:6b:04:99:2f:b0:9f:2c:9a:64:1d:e3:bc:87:80:52:16:
41:c7:0b:a9
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAZAWZxxg0QD+fQI63abMlTrvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4NWI4M2M4N2M0YTNkODMxNTAyNTM3OWY3Mjk4NzUyMGJi
NWQwNDYwHhcNMjQwNjE0MTA1OTM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYjgyNThjYTYwZDBiZGJlMGI2NDg5MWJhMzA2YmQ2ZGNiMmM0M2U1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwc45mDCqnWK7xIdwd0oiVdc/OcDA
rKP9mJP+DS2ruTM1Y+wB2Gbg4a1I0B1y8AgsclyUuq7gJA6z8DrB6KW1rNcP3+vZ
A0VEJIy65f5q4qaaAiaa1q3bCo20kkW1uuujgKvJDI+YXJErhkupdujdmUl2ZBKZ
BrQl/taE9yBKNQOeGZjLxAG6sczcdN9IJQs9TEvbIp1dGv2YYY2tDfikPqq4c/K/
hgaiBFUQdlSwLlwjBXq5IlMTjwHBh0QpSFJWg+qe7nFqJ6VmWeEctTdTHYQeyYsj
oOABUBDp+XilF0foLPK5yJM/T/knhYKCZNHops4Bs1JaSWAKouQTaGWK6QIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFPuCWMpg0L2+C2SJG6MGvW3LLEPlMB8GA1UdIwQY
MBaAFOhbg8h8Sj2DFQJTefcph1ILtdBGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkZ1RHlIeEtQWU1WQWxONTl5bUhVZ3UxMEVZLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8zMzk0ZTMtNzM2ZS00ODc5LWI4ZGIt
ODlhYWVhMzYyODVlLzEvMS00Sll5bURRdmI0TFpJa2Jvd2E5YmNzc1EtVS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMDQvMzM5NGUzLTczNmUtNDg3OS1iOGRiLTg5YWFlYTM2Mjg1
ZS8xLzZGdUR5SHhLUFlNVkFsTjU5eW1IVWd1MTBFWS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjA5BggrBgEFBQcBBwEB/wQqMCgwJgQCAAEwIAMEBFD/4AME
Alm/eAMEBFt7QDAMAwQAuQftAwQEuQfgMA0GCSqGSIb3DQEBCwUAA4IBAQB4WL3T
GVvVOHHlBdLBvMNSgOZ0HYO0COxwwIOAagr79DHgGwj6sB+XNE7T5oabFdynTxQL
EVaaaQRs/+8Vw0mKc8lArrPqcI3DLQ4Jjga0KVhxBEpdnzciwZzQRrCypuqVHhPw
SIYnYNKcq/ABp4l+1OCp1Tkro4IReZeBWP26Xv8eezCqkE7mhsrEcnEJaXSHr0u1
PFYFf8T+nCF3P7apGLOQJo96slaxc90kJdelaJeSSy2x64kEsLIGeONYxlIJo8XG
cNT3I+ywy0j+K0ieFkbJAdJ0w5JRcPya/j4nTfmmNF+e4J3CTxbyu2sEmS+wnyya
ZB3jvIeAUhZBxwup
-----END CERTIFICATE-----
Generated at Wed Jun 26 14:22:48 2024 by rpki-client on console-ams.rpki-client.org