Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/0ffb64-efcb-49f5-8342-f9fb38c77c55/1/65dfwTquc_A8W_kwnq6zUmwGSWg.roa
File: 65dfwTquc_A8W_kwnq6zUmwGSWg.roa (raw, json)
Hash identifier: /3X/MIrdywxTH2OfRLgzQMtlPDuMn0BNv32KFunMa6Y=
Subject key identifier: EB:97:5F:C1:3A:AE:73:F0:3C:5B:F9:30:9E:AE:B3:52:6C:06:49:68
Certificate issuer: /CN=b30e3011a0fb3111fbe8493c1230974aef532704
Certificate serial: 01891C6DE16F92B9E6E6D38717088388C5FA
Authority key identifier: B3:0E:30:11:A0:FB:31:11:FB:E8:49:3C:12:30:97:4A:EF:53:27:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/0ffb64-efcb-49f5-8342-f9fb38c77c55/1/65dfwTquc_A8W_kwnq6zUmwGSWg.roa
Signing time: Mon 03 Jul 2023 15:45:10 +0000
ROA not before: Mon 03 Jul 2023 15:45:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208951
IP address blocks: 94.141.97.0/24 maxlen: 24
94.141.96.0/24 maxlen: 24
94.141.98.0/24 maxlen: 24
94.141.99.0/24 maxlen: 24
109.207.169.0/24 maxlen: 24
109.207.172.0/24 maxlen: 24
109.207.168.0/24 maxlen: 24
109.207.171.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 13 Jul 2023 09:48:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:1c:6d:e1:6f:92:b9:e6:e6:d3:87:17:08:83:88:c5:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b30e3011a0fb3111fbe8493c1230974aef532704
Validity
Not Before: Jul 3 15:45:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eb975fc13aae73f03c5bf9309eaeb3526c064968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:bc:82:25:80:62:54:2e:12:dd:5f:c9:b6:52:
df:86:30:06:63:60:b9:48:58:1d:49:e4:e8:db:29:
19:b1:73:31:3a:e9:5c:d7:4e:e7:af:05:63:ff:8e:
a6:90:6c:b9:81:dc:e5:4c:29:c6:d0:2d:d7:d7:41:
75:d7:d7:19:5b:87:79:3c:12:a8:d5:65:4f:76:20:
60:3b:61:71:ed:ae:4b:17:03:19:1f:34:d8:cb:36:
6c:7b:a1:9b:a7:9b:93:8e:2b:2c:06:c1:3c:37:5f:
22:76:30:3a:ee:d4:d5:69:9d:48:d3:8c:90:46:da:
0b:93:22:cb:51:6f:54:74:05:b6:e0:a9:6f:99:8f:
33:23:0e:19:08:be:25:76:3d:62:59:92:6f:bf:4f:
b1:c4:05:a6:14:93:65:86:13:ee:bf:6e:e3:31:ee:
02:03:65:57:9f:7f:f7:d8:16:ba:c4:b6:c4:b1:b1:
c6:bc:40:e1:a9:08:ef:d0:ac:3b:f2:99:d0:bf:12:
40:d9:7d:b3:a9:40:9f:c5:64:31:d7:de:78:92:ec:
2d:f1:cc:46:3b:ee:76:a5:7d:1d:68:f9:3e:bc:14:
0f:ee:a3:b6:03:fc:b1:a7:ae:94:34:f0:50:48:93:
8a:8a:d0:cd:83:b7:f3:c8:a1:16:fd:cf:eb:29:4c:
88:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:97:5F:C1:3A:AE:73:F0:3C:5B:F9:30:9E:AE:B3:52:6C:06:49:68
X509v3 Authority Key Identifier:
keyid:B3:0E:30:11:A0:FB:31:11:FB:E8:49:3C:12:30:97:4A:EF:53:27:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0ffb64-efcb-49f5-8342-f9fb38c77c55/1/65dfwTquc_A8W_kwnq6zUmwGSWg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0ffb64-efcb-49f5-8342-f9fb38c77c55/1/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.141.96.0/22
109.207.168.0/23
109.207.171.0-109.207.172.255
Signature Algorithm: sha256WithRSAEncryption
22:6c:d5:8d:d3:84:6e:2f:aa:71:f6:07:b7:18:96:fd:1a:f9:
d1:b3:4f:95:a7:98:6b:1a:23:00:96:fa:8f:44:b1:f0:d1:09:
e7:a2:90:69:0c:58:81:47:b0:4f:52:39:fc:42:b5:be:f1:31:
f3:7e:44:c8:86:84:a4:b7:b1:10:75:41:5a:28:2e:e1:46:4b:
c8:e5:e4:ba:cc:be:36:c1:88:1b:0e:97:63:d2:25:fe:ad:01:
06:84:5a:3f:ee:98:f8:51:47:c9:01:47:5a:db:84:41:19:1c:
e6:97:6c:18:a3:e9:aa:1d:ef:12:77:45:07:0c:f5:11:0c:03:
1a:79:ae:cc:87:68:46:96:99:b1:48:ac:d6:05:0c:fd:8e:3b:
17:07:ee:08:91:ab:9a:0d:39:b7:54:ad:24:b2:44:38:8d:42:
26:53:ad:34:07:84:f3:c1:54:6c:53:f6:b4:3c:f7:e3:ab:32:
e7:1a:83:28:31:39:52:cf:33:e4:f4:e8:5d:bc:ac:b8:8f:8d:
8a:a5:cb:18:b0:68:b0:1b:8a:2e:18:30:c5:cb:11:7d:57:96:
f3:06:83:62:c0:08:51:17:56:3d:36:07:97:f7:da:7d:85:06:
62:b5:45:3a:40:77:81:3a:4a:c6:28:86:98:56:07:94:80:ef:
63:4b:b1:54
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAYkcbeFvkrnm5tOHFwiDiMX6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzMGUzMDExYTBmYjMxMTFmYmU4NDkzYzEyMzA5NzRhZWY1
MzI3MDQwHhcNMjMwNzAzMTU0NTEwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYjk3NWZjMTNhYWU3M2YwM2M1YmY5MzA5ZWFlYjM1MjZjMDY0OTY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9byCJYBiVC4S3V/JtlLfhjAGY2C5
SFgdSeTo2ykZsXMxOulc107nrwVj/46mkGy5gdzlTCnG0C3X10F119cZW4d5PBKo
1WVPdiBgO2Fx7a5LFwMZHzTYyzZse6Gbp5uTjissBsE8N18idjA67tTVaZ1I04yQ
RtoLkyLLUW9UdAW24KlvmY8zIw4ZCL4ldj1iWZJvv0+xxAWmFJNlhhPuv27jMe4C
A2VXn3/32Ba6xLbEsbHGvEDhqQjv0Kw78pnQvxJA2X2zqUCfxWQx1954kuwt8cxG
O+52pX0daPk+vBQP7qO2A/yxp66UNPBQSJOKitDNg7fzyKEW/c/rKUyIbQIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFOuXX8E6rnPwPFv5MJ6us1JsBkloMB8GA1UdIwQY
MBaAFLMOMBGg+zER++hJPBIwl0rvUycEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3c0d0VhRDdNUkg3NkVrOEVqQ1hTdTlUSndRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8wZmZiNjQtZWZjYi00OWY1LTgzNDIt
ZjlmYjM4Yzc3YzU1LzEvNjVkZndUcXVjX0E4V19rd25xNnpVbXdHU1dnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS8wZmZiNjQtZWZjYi00OWY1LTgzNDItZjlmYjM4Yzc3YzU1
LzEvc3c0d0VhRDdNUkg3NkVrOEVqQ1hTdTlUSndRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQCXo1gAwQB
bc+oMAwDBABtz6sDBABtz6wwDQYJKoZIhvcNAQELBQADggEBACJs1Y3ThG4vqnH2
B7cYlv0a+dGzT5WnmGsaIwCW+o9EsfDRCeeikGkMWIFHsE9SOfxCtb7xMfN+RMiG
hKS3sRB1QVooLuFGS8jl5LrMvjbBiBsOl2PSJf6tAQaEWj/umPhRR8kBR1rbhEEZ
HOaXbBij6aod7xJ3RQcM9REMAxp5rsyHaEaWmbFIrNYFDP2OOxcH7giRq5oNObdU
rSSyRDiNQiZTrTQHhPPBVGxT9rQ89+OrMucagygxOVLPM+T06F28rLiPjYqlyxiw
aLAbii4YMMXLEX1XlvMGg2LACFEXVj02B5f32n2FBmK1RTpAd4E6SsYohphWB5SA
72NLsVQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:14 2024 by rpki-client on console-fra.rpki-client.org