Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/aWvlgXz9OZTRGe4GZWpUVlhHVik.roa
File: aWvlgXz9OZTRGe4GZWpUVlhHVik.roa (raw, json)
Hash identifier: vyelNE0UKf1oaHkUyj53eanzTLYj+Kv3cXH3CwUY9V4=
Subject key identifier: 69:6B:E5:81:7C:FD:39:94:D1:19:EE:06:65:6A:54:56:58:47:56:29
Certificate issuer: /CN=9e4b3281b08e6b5ec1fdeb0d0440528ed934dc3f
Certificate serial: 018CC64AD45BAAE9D5BC2B97ACCD7A900C53
Authority key identifier: 9E:4B:32:81:B0:8E:6B:5E:C1:FD:EB:0D:04:40:52:8E:D9:34:DC:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/aWvlgXz9OZTRGe4GZWpUVlhHVik.roa
Signing time: Mon 01 Jan 2024 18:30:41 +0000
ROA not before: Mon 01 Jan 2024 18:30:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29447
IP address blocks: 78.208.0.0/12 maxlen: 12
81.56.0.0/15 maxlen: 17
2a01:e10::/30 maxlen: 30
2a01:e11::/32 maxlen: 32
2a01:e09::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 14 Feb 2024 11:56:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:d4:5b:aa:e9:d5:bc:2b:97:ac:cd:7a:90:0c:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e4b3281b08e6b5ec1fdeb0d0440528ed934dc3f
Validity
Not Before: Jan 1 18:30:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=696be5817cfd3994d119ee06656a545658475629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:30:b0:eb:56:f3:c0:51:fe:22:dd:e0:dd:d7:
0c:38:be:ba:b6:a3:73:26:d4:1f:31:4e:c1:08:c0:
2f:da:df:e8:cb:8f:e3:43:1d:71:72:7f:99:c0:2e:
2a:b5:2a:74:2a:37:9f:d6:73:0e:be:70:a9:24:c6:
0d:de:a3:ee:85:63:a0:f5:08:25:85:d9:d6:67:da:
f0:00:86:47:21:c2:d5:eb:02:21:a7:ec:e4:8e:7b:
68:d9:5a:c7:6d:1b:23:be:a4:c1:55:49:c8:81:98:
fe:e1:b3:00:a5:12:49:9c:2c:61:3d:a3:bb:eb:a9:
20:e0:d7:b1:74:a8:94:a0:79:c9:f3:c1:f3:3b:cc:
a0:cc:77:d5:cf:4e:c5:03:43:05:2d:ff:90:4f:b1:
4c:7b:be:fd:a2:2c:fc:1a:f1:a4:c2:05:b4:db:30:
4c:83:21:9d:c6:71:92:48:3d:3b:e2:71:f0:2b:b5:
4e:93:8e:bd:89:9e:c7:2d:9b:74:15:6c:b8:0d:3f:
f4:d5:10:3c:5c:df:0f:6d:ef:0b:dd:79:a6:fb:dd:
55:56:64:78:70:d5:aa:34:c9:8e:14:4f:c6:9c:a6:
e9:ad:9e:ea:f2:7c:03:12:15:5d:0f:a2:99:2d:90:
45:99:50:30:a4:54:4a:47:85:e6:1b:49:eb:8d:52:
d0:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:6B:E5:81:7C:FD:39:94:D1:19:EE:06:65:6A:54:56:58:47:56:29
X509v3 Authority Key Identifier:
keyid:9E:4B:32:81:B0:8E:6B:5E:C1:FD:EB:0D:04:40:52:8E:D9:34:DC:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/aWvlgXz9OZTRGe4GZWpUVlhHVik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.208.0.0/12
81.56.0.0/15
IPv6:
2a01:e09::/32
2a01:e10::/30
Signature Algorithm: sha256WithRSAEncryption
41:ef:33:c2:cb:ea:3d:9e:4e:ff:6d:63:94:bd:70:d2:10:3f:
d7:8d:d9:09:8a:0b:8b:4e:9f:ba:3c:fc:8c:d4:62:55:27:e0:
22:df:6b:61:c0:7b:49:d8:94:41:fc:a3:c2:e4:d9:2f:3f:64:
f4:f8:8d:25:d2:67:be:7e:47:91:d1:cb:9d:aa:4f:c1:6a:90:
7a:3c:d1:25:2e:b4:de:df:98:0d:1c:8f:7e:96:73:16:d0:8e:
03:24:7c:1c:7c:2f:70:27:3c:f0:39:9e:4c:8b:d2:68:1a:fa:
89:c4:33:ce:86:11:dc:19:64:cc:44:e2:df:2e:3f:5f:cd:e3:
45:3d:fe:27:ff:81:5a:4b:cf:2f:e7:3e:78:3e:15:c2:cf:15:
fd:c5:d4:17:be:c2:00:ce:24:9f:6e:cd:40:20:ab:85:f3:ae:
4d:c8:35:e7:7c:42:2e:7a:5a:32:60:c9:26:3b:e0:2c:eb:c1:
cd:e2:53:cf:86:8d:0e:73:86:7d:62:2a:38:67:bc:e8:33:ac:
32:a9:56:b4:0d:3d:cf:fe:86:e0:39:f1:11:5c:13:2a:7c:d7:
7a:6c:15:69:64:b4:2c:10:ba:16:ff:c7:b1:ac:49:aa:ca:cd:
2b:02:d0:80:6c:12:57:fe:71:c2:70:4c:ea:00:57:81:c7:29:
ba:a4:18:dd
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAYzGStRbqunVvCuXrM16kAxTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllNGIzMjgxYjA4ZTZiNWVjMWZkZWIwZDA0NDA1MjhlZDkz
NGRjM2YwHhcNMjQwMTAxMTgzMDQxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OTZiZTU4MTdjZmQzOTk0ZDExOWVlMDY2NTZhNTQ1NjU4NDc1NjI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTCw61bzwFH+It3g3dcMOL66tqNz
JtQfMU7BCMAv2t/oy4/jQx1xcn+ZwC4qtSp0Kjef1nMOvnCpJMYN3qPuhWOg9Qgl
hdnWZ9rwAIZHIcLV6wIhp+zkjnto2VrHbRsjvqTBVUnIgZj+4bMApRJJnCxhPaO7
66kg4NexdKiUoHnJ88HzO8ygzHfVz07FA0MFLf+QT7FMe779oiz8GvGkwgW02zBM
gyGdxnGSSD074nHwK7VOk469iZ7HLZt0FWy4DT/01RA8XN8Pbe8L3Xmm+91VVmR4
cNWqNMmOFE/GnKbprZ7q8nwDEhVdD6KZLZBFmVAwpFRKR4XmG0nrjVLQEwIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFGlr5YF8/TmU0RnuBmVqVFZYR1YpMB8GA1UdIwQY
MBaAFJ5LMoGwjmtewf3rDQRAUo7ZNNw/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmtzeWdiQ09hMTdCX2VzTkJFQlNqdGswM0Q4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9mZjdkMzMtZTRmNy00M2MwLTkyNGIt
NmIyZDQ2OTI0YzZmLzEvYVd2bGdYejlPWlRSR2U0R1pXcFVWbGhIVmlrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9mZjdkMzMtZTRmNy00M2MwLTkyNGItNmIyZDQ2OTI0YzZm
LzEvbmtzeWdiQ09hMTdCX2VzTkJFQlNqdGswM0Q4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAQBAIAATAKAwMETtADAwFR
ODAUBAIAAjAOAwUAKgEOCQMFAioBDhAwDQYJKoZIhvcNAQELBQADggEBAEHvM8LL
6j2eTv9tY5S9cNIQP9eN2QmKC4tOn7o8/IzUYlUn4CLfa2HAe0nYlEH8o8Lk2S8/
ZPT4jSXSZ75+R5HRy52qT8FqkHo80SUutN7fmA0cj36WcxbQjgMkfBx8L3AnPPA5
nkyL0mga+onEM86GEdwZZMxE4t8uP1/N40U9/if/gVpLzy/nPng+FcLPFf3F1Be+
wgDOJJ9uzUAgq4Xzrk3INed8Qi56WjJgySY74Czrwc3iU8+GjQ5zhn1iKjhnvOgz
rDKpVrQNPc/+huA58RFcEyp813psFWlktCwQuhb/x7GsSarKzSsC0IBsElf+ccJw
TOoAV4HHKbqkGN0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:31 2024 by rpki-client on console-fra.rpki-client.org