Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/38c198-0f1b-4c59-81fe-1c8ce7c33ac0/1/x3aDdKzZAdph75HU7tBuhlLn7Bc.roa
File: x3aDdKzZAdph75HU7tBuhlLn7Bc.roa (raw, json)
Hash identifier: TfU9kFwNAWy1CeodmkzNyH89FGS4/R9E5KYfzXFi1No=
Subject key identifier: C7:76:83:74:AC:D9:01:DA:61:EF:91:D4:EE:D0:6E:86:52:E7:EC:17
Certificate issuer: /CN=461207a3eef2b44f8e2731b7b0ac7d1716e355c5
Certificate serial: 018B381425CAE7D12FEBE096E80F68D365B0
Authority key identifier: 46:12:07:A3:EE:F2:B4:4F:8E:27:31:B7:B0:AC:7D:17:16:E3:55:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RhIHo-7ytE-OJzG3sKx9FxbjVcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/38c198-0f1b-4c59-81fe-1c8ce7c33ac0/1/x3aDdKzZAdph75HU7tBuhlLn7Bc.roa
Signing time: Mon 16 Oct 2023 10:42:06 +0000
ROA not before: Mon 16 Oct 2023 10:42:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207851
IP address blocks: 193.105.250.0/24 maxlen: 24
193.106.239.0/24 maxlen: 24
193.105.208.0/24 maxlen: 24
193.105.217.0/24 maxlen: 24
2a0f:8b40::/29 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:31:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:38:14:25:ca:e7:d1:2f:eb:e0:96:e8:0f:68:d3:65:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=461207a3eef2b44f8e2731b7b0ac7d1716e355c5
Validity
Not Before: Oct 16 10:42:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c7768374acd901da61ef91d4eed06e8652e7ec17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1f:c1:41:97:ce:3e:c7:b2:a4:0a:f0:8a:fa:
00:06:97:07:42:bb:f8:2c:37:0a:b9:f4:82:00:24:
b2:53:ea:2c:5c:e5:cc:1f:8e:a1:49:21:77:60:4c:
63:6d:2f:7d:a3:b1:c2:40:f9:e8:4c:19:07:da:59:
9b:63:36:09:07:46:67:03:42:cc:c1:54:14:a3:14:
09:7a:0f:b8:28:3f:87:94:4e:70:bd:c0:6d:11:22:
a9:58:23:a1:92:31:f9:7a:aa:98:ce:f3:45:ae:c1:
64:96:ef:fe:a9:03:cc:07:e4:81:f1:cb:0d:1c:6c:
b7:90:89:99:77:3c:f1:cc:03:78:ed:21:f7:4a:09:
5e:0a:ca:8e:ef:57:0b:a9:90:8f:b2:a6:04:62:5b:
55:de:18:f8:f8:71:f3:48:a9:d8:56:5d:c2:aa:21:
8c:30:55:a2:e7:1b:22:8f:c9:fe:59:82:fc:27:f5:
69:83:ad:a5:fc:af:7e:e4:68:c4:69:2e:d5:ce:ff:
5b:66:5f:70:6f:26:ea:27:1e:ed:9f:7b:39:31:1b:
6a:a1:fc:bd:d9:d2:be:f1:a8:cc:a2:42:6b:ec:24:
a0:e3:27:91:a6:d8:12:93:57:e7:7e:eb:24:ec:af:
47:1e:93:ee:d1:67:e6:e4:83:2d:fb:02:e8:d1:5d:
b7:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:76:83:74:AC:D9:01:DA:61:EF:91:D4:EE:D0:6E:86:52:E7:EC:17
X509v3 Authority Key Identifier:
keyid:46:12:07:A3:EE:F2:B4:4F:8E:27:31:B7:B0:AC:7D:17:16:E3:55:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RhIHo-7ytE-OJzG3sKx9FxbjVcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/38c198-0f1b-4c59-81fe-1c8ce7c33ac0/1/x3aDdKzZAdph75HU7tBuhlLn7Bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/38c198-0f1b-4c59-81fe-1c8ce7c33ac0/1/RhIHo-7ytE-OJzG3sKx9FxbjVcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.208.0/24
193.105.217.0/24
193.105.250.0/24
193.106.239.0/24
IPv6:
2a0f:8b40::/29
Signature Algorithm: sha256WithRSAEncryption
9b:9a:35:3c:6c:27:db:79:17:10:d3:47:9c:3f:a2:2a:60:e8:
d2:86:61:a1:4f:e6:18:cd:74:96:99:56:23:49:af:ea:0f:f7:
25:e4:bb:4f:c5:1c:29:87:76:ca:50:48:ec:2a:4d:80:65:82:
21:16:7f:06:57:20:f5:48:e3:1f:22:5b:62:bd:88:aa:2c:41:
11:56:a7:4f:e3:03:d1:60:5e:3e:32:69:81:38:79:e2:5f:84:
c9:3c:5c:30:31:31:74:1e:4f:d7:5a:03:56:12:74:16:2e:68:
db:f2:63:b7:87:c9:dd:57:87:84:9a:c2:52:ba:98:e6:88:d3:
78:f7:8e:24:de:1d:71:03:11:54:1d:7f:d2:84:c4:54:65:29:
82:b4:1f:29:7a:62:41:60:d7:16:53:18:d3:e7:be:e3:0a:d6:
eb:51:2c:87:0b:b2:b1:fc:ce:d9:f5:d7:66:6e:21:19:3c:83:
df:a8:83:89:ea:c0:94:42:6f:89:3d:40:f5:6c:37:c9:28:d2:
7e:cc:86:04:6b:03:3d:af:f7:29:66:b1:c1:77:2e:6b:57:41:
ef:74:24:d6:eb:9d:9a:da:28:75:29:9d:4e:34:66:fd:83:04:
18:d3:b0:39:dd:f6:55:c9:fd:c7:4b:ef:4f:55:15:d9:f9:15:
36:1e:e6:5e
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAYs4FCXK59Ev6+CW6A9o02WwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2MTIwN2EzZWVmMmI0NGY4ZTI3MzFiN2IwYWM3ZDE3MTZl
MzU1YzUwHhcNMjMxMDE2MTA0MjA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNzc2ODM3NGFjZDkwMWRhNjFlZjkxZDRlZWQwNmU4NjUyZTdlYzE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArx/BQZfOPseypArwivoABpcHQrv4
LDcKufSCACSyU+osXOXMH46hSSF3YExjbS99o7HCQPnoTBkH2lmbYzYJB0ZnA0LM
wVQUoxQJeg+4KD+HlE5wvcBtESKpWCOhkjH5eqqYzvNFrsFklu/+qQPMB+SB8csN
HGy3kImZdzzxzAN47SH3SgleCsqO71cLqZCPsqYEYltV3hj4+HHzSKnYVl3CqiGM
MFWi5xsij8n+WYL8J/Vpg62l/K9+5GjEaS7Vzv9bZl9wbybqJx7tn3s5MRtqofy9
2dK+8ajMokJr7CSg4yeRptgSk1fnfusk7K9HHpPu0Wfm5IMt+wLo0V237wIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFMd2g3Ss2QHaYe+R1O7QboZS5+wXMB8GA1UdIwQY
MBaAFEYSB6Pu8rRPjicxt7CsfRcW41XFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmhJSG8tN3l0RS1PSnpHM3NLeDlGeGJqVmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8zOGMxOTgtMGYxYi00YzU5LTgxZmUt
MWM4Y2U3YzMzYWMwLzEveDNhRGRLelpBZHBoNzVIVTd0QnVobExuN0JjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC8zOGMxOTgtMGYxYi00YzU5LTgxZmUtMWM4Y2U3YzMzYWMw
LzEvUmhJSG8tN3l0RS1PSnpHM3NLeDlGeGJqVmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQAwWnQAwQA
wWnZAwQAwWn6AwQAwWrvMA0EAgACMAcDBQMqD4tAMA0GCSqGSIb3DQEBCwUAA4IB
AQCbmjU8bCfbeRcQ00ecP6IqYOjShmGhT+YYzXSWmVYjSa/qD/cl5LtPxRwph3bK
UEjsKk2AZYIhFn8GVyD1SOMfIltivYiqLEERVqdP4wPRYF4+MmmBOHniX4TJPFww
MTF0Hk/XWgNWEnQWLmjb8mO3h8ndV4eEmsJSupjmiNN4944k3h1xAxFUHX/ShMRU
ZSmCtB8pemJBYNcWUxjT577jCtbrUSyHC7Kx/M7Z9ddmbiEZPIPfqIOJ6sCUQm+J
PUD1bDfJKNJ+zIYEawM9r/cpZrHBdy5rV0HvdCTW652a2ih1KZ1ONGb9gwQY07A5
3fZVyf3HS+9PVRXZ+RU2HuZe
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:30 2024 by rpki-client on console-ams.rpki-client.org