Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/cp7CsREjtrTf5uLWvJfmKLk7434.roa
File: cp7CsREjtrTf5uLWvJfmKLk7434.roa (raw, json)
Hash identifier: +en1gq/UaMm+/1pOM4x7oYuohYYp2YwAKGXhirTD6HI=
Subject key identifier: 72:9E:C2:B1:11:23:B6:B4:DF:E6:E2:D6:BC:97:E6:28:B9:3B:E3:7E
Certificate issuer: /CN=b9b8139993be665f3b5d0f6909ef058fa8f97922
Certificate serial: 0185E31710760869429B5A1EEA7268A97C09
Authority key identifier: B9:B8:13:99:93:BE:66:5F:3B:5D:0F:69:09:EF:05:8F:A8:F9:79:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/cp7CsREjtrTf5uLWvJfmKLk7434.roa
Signing time: Tue 24 Jan 2023 09:23:37 +0000
ROA not before: Tue 24 Jan 2023 09:23:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39707
IP address blocks: 213.234.31.0/24 maxlen: 24
213.234.25.0/24 maxlen: 24
213.234.26.0/24 maxlen: 24
213.234.29.0/24 maxlen: 24
213.234.30.0/24 maxlen: 24
213.234.27.0/24 maxlen: 24
213.234.28.0/24 maxlen: 24
92.39.98.0/24 maxlen: 24
92.39.96.0/24 maxlen: 24
92.39.97.0/24 maxlen: 24
92.39.103.0/24 maxlen: 24
92.39.99.0/24 maxlen: 24
92.39.101.0/24 maxlen: 24
92.39.102.0/24 maxlen: 24
92.39.100.0/24 maxlen: 24
213.234.23.0/24 maxlen: 24
213.234.24.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e3:17:10:76:08:69:42:9b:5a:1e:ea:72:68:a9:7c:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9b8139993be665f3b5d0f6909ef058fa8f97922
Validity
Not Before: Jan 24 09:23:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=729ec2b11123b6b4dfe6e2d6bc97e628b93be37e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:6a:08:15:74:36:27:f9:f3:f0:81:ee:7b:6b:
61:11:11:39:ac:6f:e4:4a:4d:72:fd:81:9c:44:fd:
44:de:52:dc:e5:3b:90:89:63:45:4b:64:1a:de:8a:
c7:f1:6a:04:a6:8b:93:b2:9a:05:e3:ba:c7:b4:5e:
49:54:af:3e:85:b4:40:af:c7:74:25:6d:b9:1f:8b:
fd:a8:b8:7b:19:4a:a3:09:1f:d8:3c:15:21:79:b2:
86:ad:12:c0:28:66:2b:9d:a5:e6:16:9e:37:8e:7d:
db:42:2a:a7:77:8c:4b:e0:e2:96:7d:21:24:57:40:
a2:92:17:57:b7:6e:47:66:5d:cc:cc:56:99:30:51:
5b:39:3c:ce:12:38:0d:21:bc:69:e0:77:f7:df:60:
bd:cd:9f:18:69:90:18:4b:1a:19:3e:7b:6e:3d:2c:
fb:1f:a5:10:3f:96:e2:e1:a5:3a:b8:c2:f9:15:b4:
67:36:88:48:8b:dc:c1:06:cf:82:6d:9a:30:bf:ff:
ce:fb:b6:80:81:49:fc:9f:de:b4:39:44:f4:0a:40:
6f:fe:57:0b:2f:50:4d:3d:70:2b:19:66:9b:8d:b9:
9c:73:62:d7:39:4c:30:60:25:13:2c:60:dc:69:9a:
bc:85:dc:59:bd:55:1c:6e:94:4d:36:d6:b5:58:3c:
e1:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:9E:C2:B1:11:23:B6:B4:DF:E6:E2:D6:BC:97:E6:28:B9:3B:E3:7E
X509v3 Authority Key Identifier:
keyid:B9:B8:13:99:93:BE:66:5F:3B:5D:0F:69:09:EF:05:8F:A8:F9:79:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/cp7CsREjtrTf5uLWvJfmKLk7434.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.39.96.0/21
213.234.23.0-213.234.31.255
Signature Algorithm: sha256WithRSAEncryption
04:07:5c:e2:eb:0e:b0:0b:e7:cc:61:c2:a0:d8:98:77:14:17:
1f:e6:5f:0b:d3:5b:57:0e:3e:e5:59:e8:21:58:d3:0c:a6:43:
e0:b8:1d:a4:ee:d8:9e:22:33:e8:2b:ab:b2:42:fc:d9:a6:02:
24:1b:73:d3:ca:37:26:73:00:f2:13:fb:26:73:3c:f5:d2:36:
32:0e:84:a2:65:77:75:df:03:60:b8:a1:0e:e4:f5:9a:0b:1a:
30:d3:74:b5:65:63:05:f8:6f:b5:27:41:ab:ce:ce:0b:d8:a9:
86:c4:4a:be:ce:a2:73:47:a4:a3:b3:fb:d0:f2:f1:24:60:d6:
61:08:34:52:04:cd:17:32:4b:dd:51:7f:b5:e0:b5:c3:44:e9:
c8:0e:1a:50:42:e4:15:9c:ca:c8:f1:5b:f2:d0:ba:4e:20:b2:
a3:eb:5a:63:b4:90:43:37:3b:74:d7:f6:16:5a:60:b1:2a:82:
19:39:57:2c:4c:1b:47:9d:d2:cf:10:46:e0:7d:f6:c0:43:da:
45:b5:c9:e2:a7:55:b0:09:98:1e:ec:85:46:41:a6:9b:64:4f:
95:7f:de:90:46:c9:e2:c7:a7:6a:81:fb:5c:74:81:e4:64:f9:
52:97:32:a2:7f:94:4c:75:46:d8:3d:3f:3d:c5:7c:61:f3:a2:
43:e0:5e:a9
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAYXjFxB2CGlCm1oe6nJoqXwJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5YjgxMzk5OTNiZTY2NWYzYjVkMGY2OTA5ZWYwNThmYThm
OTc5MjIwHhcNMjMwMTI0MDkyMzM3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MjllYzJiMTExMjNiNmI0ZGZlNmUyZDZiYzk3ZTYyOGI5M2JlMzdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7GoIFXQ2J/nz8IHue2thERE5rG/k
Sk1y/YGcRP1E3lLc5TuQiWNFS2Qa3orH8WoEpouTspoF47rHtF5JVK8+hbRAr8d0
JW25H4v9qLh7GUqjCR/YPBUhebKGrRLAKGYrnaXmFp43jn3bQiqnd4xL4OKWfSEk
V0CikhdXt25HZl3MzFaZMFFbOTzOEjgNIbxp4Hf332C9zZ8YaZAYSxoZPntuPSz7
H6UQP5bi4aU6uML5FbRnNohIi9zBBs+CbZowv//O+7aAgUn8n960OUT0CkBv/lcL
L1BNPXArGWabjbmcc2LXOUwwYCUTLGDcaZq8hdxZvVUcbpRNNta1WDzhRQIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFHKewrERI7a03+bi1ryX5ii5O+N+MB8GA1UdIwQY
MBaAFLm4E5mTvmZfO10PaQnvBY+o+XkiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWJnVG1aTy1abDg3WFE5cENlOEZqNmo1ZVNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC80NDEyNGQtOGIxNS00NWIyLWE1YzEt
N2JjNzNlZWUxNDQ3LzEvY3A3Q3NSRWp0clRmNXVMV3ZKZm1LTGs3NDM0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC80NDEyNGQtOGIxNS00NWIyLWE1YzEtN2JjNzNlZWUxNDQ3
LzEvdWJnVG1aTy1abDg3WFE5cENlOEZqNmo1ZVNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQDXCdgMAwD
BADV6hcDBAXV6gAwDQYJKoZIhvcNAQELBQADggEBAAQHXOLrDrAL58xhwqDYmHcU
Fx/mXwvTW1cOPuVZ6CFY0wymQ+C4HaTu2J4iM+grq7JC/NmmAiQbc9PKNyZzAPIT
+yZzPPXSNjIOhKJld3XfA2C4oQ7k9ZoLGjDTdLVlYwX4b7UnQavOzgvYqYbESr7O
onNHpKOz+9Dy8SRg1mEINFIEzRcyS91Rf7XgtcNE6cgOGlBC5BWcysjxW/LQuk4g
sqPrWmO0kEM3O3TX9hZaYLEqghk5VyxMG0ed0s8QRuB99sBD2kW1yeKnVbAJmB7s
hUZBpptkT5V/3pBGyeLHp2qB+1x0geRk+VKXMqJ/lEx1Rtg9Pz3FfGHzokPgXqk=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:18 2024 by rpki-client on console-fra.rpki-client.org