Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/59da50-aedb-4906-af19-090fe3da2433/1/CSwjCRyyP0UPflNFjHD9Y1P98QI.roa
File: CSwjCRyyP0UPflNFjHD9Y1P98QI.roa (raw, json)
Hash identifier: dmGNAeGoA/1eQHyi5d0Yv2j9OsAOrMrvuOzE3OHugT0=
Subject key identifier: 09:2C:23:09:1C:B2:3F:45:0F:7E:53:45:8C:70:FD:63:53:FD:F1:02
Certificate issuer: /CN=9280d3e4672968f86e8955db620cb765db9d7142
Certificate serial: 018CAFF2DE38B6ED0FB9582F1AF07B459D6B
Authority key identifier: 92:80:D3:E4:67:29:68:F8:6E:89:55:DB:62:0C:B7:65:DB:9D:71:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/koDT5GcpaPhuiVXbYgy3ZdudcUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/59da50-aedb-4906-af19-090fe3da2433/1/CSwjCRyyP0UPflNFjHD9Y1P98QI.roa
Signing time: Thu 28 Dec 2023 10:22:58 +0000
ROA not before: Thu 28 Dec 2023 10:22:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29119
IP address blocks: 84.54.26.0/23 maxlen: 23
178.212.72.0/24 maxlen: 24
84.54.24.0/23 maxlen: 23
84.54.24.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 29 Dec 2023 10:38:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:af:f2:de:38:b6:ed:0f:b9:58:2f:1a:f0:7b:45:9d:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9280d3e4672968f86e8955db620cb765db9d7142
Validity
Not Before: Dec 28 10:22:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=092c23091cb23f450f7e53458c70fd6353fdf102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:47:a9:bc:1b:c3:dd:43:04:7b:ed:39:a3:b7:
62:22:4a:3a:f3:e3:b4:95:6b:64:7d:c3:9b:32:91:
d4:ae:85:b2:ea:cf:8e:c1:d8:66:c2:74:18:b5:d5:
a8:c3:d6:ef:c1:e7:91:26:89:26:86:a8:8d:0c:27:
46:2f:ff:67:41:0e:58:9c:cc:41:b8:28:54:77:f6:
56:46:00:e8:40:9b:21:0c:18:95:20:60:98:5c:ed:
b4:93:9a:90:ce:6c:29:c3:9b:a6:3c:44:95:2e:c0:
2c:12:44:5a:1d:13:83:6c:46:0c:84:da:57:6d:e9:
2d:2a:7b:d3:59:84:65:78:d8:af:57:97:54:a9:a0:
43:a1:d2:b3:4a:e6:7d:c2:f3:eb:e2:3c:85:4a:f8:
21:c0:44:60:2a:d5:5c:84:79:c1:66:06:e4:b5:39:
df:1e:58:54:98:ba:72:ad:3e:b4:a1:54:64:9c:c4:
97:e8:ea:23:f2:bd:4e:b8:e0:3a:d4:8f:4f:b7:ae:
17:13:91:8c:2e:d1:03:39:f8:85:46:ab:2b:a1:2c:
61:ec:ef:fd:9d:1a:11:11:e2:5e:6e:0d:38:63:8b:
af:1d:20:0f:8d:d2:69:4e:98:fd:24:09:bc:0a:28:
e5:16:d2:36:aa:52:da:f9:9b:45:80:03:20:d0:ef:
bf:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:2C:23:09:1C:B2:3F:45:0F:7E:53:45:8C:70:FD:63:53:FD:F1:02
X509v3 Authority Key Identifier:
keyid:92:80:D3:E4:67:29:68:F8:6E:89:55:DB:62:0C:B7:65:DB:9D:71:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/koDT5GcpaPhuiVXbYgy3ZdudcUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/59da50-aedb-4906-af19-090fe3da2433/1/CSwjCRyyP0UPflNFjHD9Y1P98QI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/59da50-aedb-4906-af19-090fe3da2433/1/koDT5GcpaPhuiVXbYgy3ZdudcUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.54.24.0/22
178.212.72.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:cf:7b:37:87:85:ba:e7:32:5b:40:0b:1d:cb:19:89:08:3a:
f0:ca:7a:34:26:bf:02:f1:77:eb:73:26:be:6f:be:fb:f9:c2:
0e:7a:dd:77:3b:35:a3:64:a1:b6:59:68:57:d7:4c:4e:44:57:
a7:e6:02:7d:ee:fa:9c:70:4b:2f:e7:85:e3:62:82:ea:3c:ad:
05:e9:1f:32:89:1b:07:40:f0:a5:3d:37:ab:eb:3e:7d:f3:1f:
74:0e:55:e9:41:97:d0:b8:09:05:4e:d9:d0:c0:22:2b:98:65:
bf:a4:0b:4d:a8:fb:58:3f:3a:35:98:67:02:e7:d6:7b:f5:a2:
46:76:e6:12:d5:3b:c1:47:eb:fe:7e:e8:ae:5d:22:3d:0f:64:
f3:30:0c:58:40:a0:74:11:d4:1e:c1:1f:12:4f:fd:8d:70:72:
6b:5b:97:e5:51:72:1e:72:1b:08:e9:94:a8:20:1b:98:27:f2:
89:74:f7:8f:cb:e9:e5:ad:51:05:b2:f9:51:5c:8f:23:4e:a1:
f2:52:e3:c6:5b:ed:60:be:a4:22:fb:df:e4:3d:c7:de:8b:c6:
ac:d2:f7:0e:85:cb:da:51:5b:04:cd:d2:d6:e1:92:1e:dc:1b:
26:37:7c:0a:0a:57:5a:b0:f7:a7:8d:62:6e:8b:11:d0:14:7f:
30:a3:11:43
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYyv8t44tu0PuVgvGvB7RZ1rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyODBkM2U0NjcyOTY4Zjg2ZTg5NTVkYjYyMGNiNzY1ZGI5
ZDcxNDIwHhcNMjMxMjI4MTAyMjU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOTJjMjMwOTFjYjIzZjQ1MGY3ZTUzNDU4YzcwZmQ2MzUzZmRmMTAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg0epvBvD3UMEe+05o7diIko68+O0
lWtkfcObMpHUroWy6s+OwdhmwnQYtdWow9bvweeRJokmhqiNDCdGL/9nQQ5YnMxB
uChUd/ZWRgDoQJshDBiVIGCYXO20k5qQzmwpw5umPESVLsAsEkRaHRODbEYMhNpX
bektKnvTWYRleNivV5dUqaBDodKzSuZ9wvPr4jyFSvghwERgKtVchHnBZgbktTnf
HlhUmLpyrT60oVRknMSX6Ooj8r1OuOA61I9Pt64XE5GMLtEDOfiFRqsroSxh7O/9
nRoREeJebg04Y4uvHSAPjdJpTpj9JAm8CijlFtI2qlLa+ZtFgAMg0O+/KwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFAksIwkcsj9FD35TRYxw/WNT/fECMB8GA1UdIwQY
MBaAFJKA0+RnKWj4bolV22IMt2XbnXFCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva29EVDVHY3BhUGh1aVZYYllneTNaZHVkY1VJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi81OWRhNTAtYWVkYi00OTA2LWFmMTkt
MDkwZmUzZGEyNDMzLzEvQ1N3akNSeXlQMFVQZmxORmpIRDlZMVA5OFFJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi81OWRhNTAtYWVkYi00OTA2LWFmMTktMDkwZmUzZGEyNDMz
LzEva29EVDVHY3BhUGh1aVZYYllneTNaZHVkY1VJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCVDYYAwQA
stRIMA0GCSqGSIb3DQEBCwUAA4IBAQB8z3s3h4W65zJbQAsdyxmJCDrwyno0Jr8C
8Xfrcya+b777+cIOet13OzWjZKG2WWhX10xORFen5gJ97vqccEsv54XjYoLqPK0F
6R8yiRsHQPClPTer6z598x90DlXpQZfQuAkFTtnQwCIrmGW/pAtNqPtYPzo1mGcC
59Z79aJGduYS1TvBR+v+fuiuXSI9D2TzMAxYQKB0EdQewR8ST/2NcHJrW5flUXIe
chsI6ZSoIBuYJ/KJdPePy+nlrVEFsvlRXI8jTqHyUuPGW+1gvqQi+9/kPcfei8as
0vcOhcvaUVsEzdLW4ZIe3BsmN3wKCldasPenjWJuixHQFH8woxFD
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:21 2024 by rpki-client on console-ams.rpki-client.org