Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/eebdcd-896f-4675-a246-5dcbbde35dcd/1/E6H4tXErjbMtzTK7vHts67u4V0A.roa
File: E6H4tXErjbMtzTK7vHts67u4V0A.roa (raw, json)
Hash identifier: zgUO71DxnN5Sm+N9lkDKtX1bz4jiLSCFQccK8OLmiQ8=
Subject key identifier: 13:A1:F8:B5:71:2B:8D:B3:2D:CD:32:BB:BC:7B:6C:EB:BB:B8:57:40
Certificate issuer: /CN=2fbd3c7e9c77f9a8894905650d7f5a439a07265d
Certificate serial: 01856FE70BD494FFCCF1F10BE24988102CAD
Authority key identifier: 2F:BD:3C:7E:9C:77:F9:A8:89:49:05:65:0D:7F:5A:43:9A:07:26:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L708fpx3-aiJSQVlDX9aQ5oHJl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/eebdcd-896f-4675-a246-5dcbbde35dcd/1/E6H4tXErjbMtzTK7vHts67u4V0A.roa
Signing time: Mon 02 Jan 2023 00:34:50 +0000
ROA not before: Mon 02 Jan 2023 00:34:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204581
IP address blocks: 194.59.157.0/24 maxlen: 24
194.59.168.0/24 maxlen: 24
185.239.228.0/22 maxlen: 24
194.59.176.0/24 maxlen: 24
194.59.181.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:e7:0b:d4:94:ff:cc:f1:f1:0b:e2:49:88:10:2c:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fbd3c7e9c77f9a8894905650d7f5a439a07265d
Validity
Not Before: Jan 2 00:34:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=13a1f8b5712b8db32dcd32bbbc7b6cebbbb85740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1a:89:f5:57:4d:a1:4b:03:b1:b6:e5:5d:4d:
75:20:3c:a4:17:fe:bd:cc:de:cd:25:a2:dc:92:a9:
a8:87:ee:2f:f9:42:a1:b1:ae:11:81:a6:7a:dc:54:
f0:40:38:06:2c:fe:82:3d:c4:d9:f6:62:e9:44:62:
2c:85:25:1c:b3:57:a0:c4:82:95:a4:22:42:fc:d2:
9b:5b:fb:c0:56:61:69:3f:49:ec:c7:cb:c9:bb:ef:
12:06:89:f9:b4:52:fb:e0:6e:ad:53:18:48:19:81:
06:1a:f9:9d:08:0b:4f:43:e5:c8:8c:9b:52:99:aa:
5f:ca:7b:fb:01:0a:6d:f4:03:f9:12:1d:ff:ed:e8:
21:f5:2d:13:0d:3b:e0:39:50:83:8b:d1:35:d6:52:
58:c9:71:73:40:90:4c:79:6f:21:66:b1:b0:d3:30:
ce:0a:74:ed:85:2a:c8:51:85:22:f5:60:66:7a:a1:
3e:1b:07:7e:dc:c4:db:90:df:45:e0:4b:62:33:da:
fa:5e:60:2a:4b:de:13:9b:0f:49:b9:3c:6e:d4:5d:
7b:31:cc:fa:46:73:84:10:df:18:22:01:83:be:e1:
0f:27:e4:13:98:9e:6a:3d:ca:10:aa:af:45:18:9c:
ee:19:b5:a1:2d:70:dc:da:c0:a7:09:23:ff:d6:00:
65:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:A1:F8:B5:71:2B:8D:B3:2D:CD:32:BB:BC:7B:6C:EB:BB:B8:57:40
X509v3 Authority Key Identifier:
keyid:2F:BD:3C:7E:9C:77:F9:A8:89:49:05:65:0D:7F:5A:43:9A:07:26:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L708fpx3-aiJSQVlDX9aQ5oHJl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/eebdcd-896f-4675-a246-5dcbbde35dcd/1/E6H4tXErjbMtzTK7vHts67u4V0A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/eebdcd-896f-4675-a246-5dcbbde35dcd/1/L708fpx3-aiJSQVlDX9aQ5oHJl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.239.228.0/22
194.59.157.0/24
194.59.168.0/24
194.59.176.0/24
194.59.181.0/24
Signature Algorithm: sha256WithRSAEncryption
69:35:48:ba:b3:9a:fe:e5:b6:52:22:f3:1b:88:fc:fc:02:64:
df:46:57:d3:a5:c6:a2:da:67:b3:b7:37:98:0f:5a:ed:65:70:
da:21:5e:72:02:80:5b:34:f2:2c:35:4f:73:d4:09:fe:14:7c:
ea:ac:be:3f:55:d5:5e:96:4e:fc:d9:15:4a:db:03:ef:d4:b8:
80:64:2d:18:65:47:c2:f9:bc:1f:8f:f1:3f:ac:31:71:cd:53:
db:cd:b6:fa:b1:45:af:ca:ab:df:69:7f:41:0f:56:15:4b:2d:
c6:7f:cf:b0:f2:0b:45:09:d3:5e:e0:a5:19:f4:90:8a:ff:f3:
20:f1:d3:7c:98:5d:f8:df:5f:c6:cb:7f:a2:af:68:ea:74:fd:
98:0e:33:53:91:8d:ce:40:b2:61:b3:e7:f3:86:bd:99:37:68:
94:bb:5c:45:86:25:a7:1f:f4:2c:ab:40:88:63:c0:86:6f:37:
ab:2c:2d:ef:b6:12:f2:39:ef:1b:d9:5a:97:0a:cf:8e:1a:d0:
5e:36:9f:31:1a:0e:0b:ea:db:e1:4a:05:c0:e4:8d:d2:72:4a:
7a:9a:a7:2c:0e:33:a2:82:c5:10:a3:08:f6:49:09:cb:a5:cc:
93:28:d4:a0:ae:5a:8d:eb:63:34:64:36:99:5a:a4:83:45:49:
a6:ac:f3:3d
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYVv5wvUlP/M8fEL4kmIECytMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmYmQzYzdlOWM3N2Y5YTg4OTQ5MDU2NTBkN2Y1YTQzOWEw
NzI2NWQwHhcNMjMwMTAyMDAzNDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxM2ExZjhiNTcxMmI4ZGIzMmRjZDMyYmJiYzdiNmNlYmJiYjg1NzQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhqJ9VdNoUsDsbblXU11IDykF/69
zN7NJaLckqmoh+4v+UKhsa4RgaZ63FTwQDgGLP6CPcTZ9mLpRGIshSUcs1egxIKV
pCJC/NKbW/vAVmFpP0nsx8vJu+8SBon5tFL74G6tUxhIGYEGGvmdCAtPQ+XIjJtS
mapfynv7AQpt9AP5Eh3/7egh9S0TDTvgOVCDi9E11lJYyXFzQJBMeW8hZrGw0zDO
CnTthSrIUYUi9WBmeqE+Gwd+3MTbkN9F4EtiM9r6XmAqS94Tmw9JuTxu1F17Mcz6
RnOEEN8YIgGDvuEPJ+QTmJ5qPcoQqq9FGJzuGbWhLXDc2sCnCSP/1gBlxwIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFBOh+LVxK42zLc0yu7x7bOu7uFdAMB8GA1UdIwQY
MBaAFC+9PH6cd/moiUkFZQ1/WkOaByZdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDcwOGZweDMtYWlKU1FWbERYOWFRNW9ISmwwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9lZWJkY2QtODk2Zi00Njc1LWEyNDYt
NWRjYmJkZTM1ZGNkLzEvRTZINHRYRXJqYk10elRLN3ZIdHM2N3U0VjBBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9lZWJkY2QtODk2Zi00Njc1LWEyNDYtNWRjYmJkZTM1ZGNk
LzEvTDcwOGZweDMtYWlKU1FWbERYOWFRNW9ISmwwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQCue/kAwQA
wjudAwQAwjuoAwQAwjuwAwQAwju1MA0GCSqGSIb3DQEBCwUAA4IBAQBpNUi6s5r+
5bZSIvMbiPz8AmTfRlfTpcai2meztzeYD1rtZXDaIV5yAoBbNPIsNU9z1An+FHzq
rL4/VdVelk782RVK2wPv1LiAZC0YZUfC+bwfj/E/rDFxzVPbzbb6sUWvyqvfaX9B
D1YVSy3Gf8+w8gtFCdNe4KUZ9JCK//Mg8dN8mF3431/Gy3+ir2jqdP2YDjNTkY3O
QLJhs+fzhr2ZN2iUu1xFhiWnH/Qsq0CIY8CGbzerLC3vthLyOe8b2VqXCs+OGtBe
Np8xGg4L6tvhSgXA5I3Sckp6mqcsDjOigsUQowj2SQnLpcyTKNSgrlqN62M0ZDaZ
WqSDRUmmrPM9
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:38 2024 by rpki-client on console-ams.rpki-client.org