Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/63gAwvAgPe1a32oiBCJmtUrXef8.roa
File: 63gAwvAgPe1a32oiBCJmtUrXef8.roa (raw, json)
Hash identifier: 6APqUsMftSkwIO4N3vHRs6m4/2ITJL3QsiHHstDFaQU=
Subject key identifier: EB:78:00:C2:F0:20:3D:ED:5A:DF:6A:22:04:22:66:B5:4A:D7:79:FF
Certificate issuer: /CN=d766fc6f1b8e2b604f7fb73c29fd5d689a0ea81d
Certificate serial: 018986D97A050632376EA00184ED6B1FE66B
Authority key identifier: D7:66:FC:6F:1B:8E:2B:60:4F:7F:B7:3C:29:FD:5D:68:9A:0E:A8:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12b8bxuOK2BPf7c8Kf1daJoOqB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/63gAwvAgPe1a32oiBCJmtUrXef8.roa
Signing time: Mon 24 Jul 2023 07:42:26 +0000
ROA not before: Mon 24 Jul 2023 07:42:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48135
IP address blocks: 151.89.128.0/17 maxlen: 17
193.111.46.0/24 maxlen: 24
94.127.84.0/22 maxlen: 22
94.127.83.0/24 maxlen: 24
94.127.80.0/22 maxlen: 22
94.127.81.0/24 maxlen: 24
94.127.86.0/24 maxlen: 24
94.127.86.0/23 maxlen: 23
94.127.87.0/24 maxlen: 24
151.89.232.0/22 maxlen: 22
151.89.55.0/24 maxlen: 24
151.89.56.0/24 maxlen: 24
151.89.54.0/24 maxlen: 24
185.51.12.0/24 maxlen: 24
151.89.0.0/17 maxlen: 17
151.89.0.0/16 maxlen: 16
Validation: Failed, certificate revoked on Fri 15 Sep 2023 20:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:86:d9:7a:05:06:32:37:6e:a0:01:84:ed:6b:1f:e6:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d766fc6f1b8e2b604f7fb73c29fd5d689a0ea81d
Validity
Not Before: Jul 24 07:42:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eb7800c2f0203ded5adf6a22042266b54ad779ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:3c:ae:77:31:0d:5b:44:ee:02:2b:bd:48:e5:
6e:38:1d:6d:31:3b:75:fa:ef:04:2d:19:83:bf:64:
1f:bb:d2:4d:8a:58:3b:40:aa:dd:49:56:6c:27:71:
2b:34:77:4e:0d:e2:84:a0:03:eb:1f:18:83:22:e2:
b4:39:55:68:cc:fa:02:8a:fa:1b:01:7b:c1:f4:ce:
47:41:b7:32:97:ab:97:14:c1:58:0e:37:05:bc:3e:
e2:49:40:04:81:d0:06:88:1f:ec:bc:37:84:11:19:
c4:f0:b5:5c:c7:8c:dc:37:1a:d8:c2:cc:fb:1e:2c:
d7:27:61:c5:24:30:ca:53:42:38:a2:be:58:2d:9f:
f6:0c:b5:b0:2f:90:71:ec:4f:c2:08:57:98:37:ec:
25:7f:6b:25:9d:40:94:b2:11:9e:df:fe:3d:ce:b6:
0c:8a:e0:20:06:0f:db:30:c7:c8:b4:00:11:6c:1c:
b7:87:62:76:cc:40:d6:60:e0:bf:91:47:cf:6f:f0:
f1:4f:e8:19:18:eb:26:32:b4:43:69:fa:b4:2f:7e:
20:2d:4f:e3:d6:6b:ef:b7:69:84:24:fb:47:3e:20:
be:ad:36:4c:51:02:f6:c4:78:44:00:a5:78:29:d9:
4c:cf:7b:0d:6a:a4:2c:fb:56:fe:d5:05:50:0d:d5:
55:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:78:00:C2:F0:20:3D:ED:5A:DF:6A:22:04:22:66:B5:4A:D7:79:FF
X509v3 Authority Key Identifier:
keyid:D7:66:FC:6F:1B:8E:2B:60:4F:7F:B7:3C:29:FD:5D:68:9A:0E:A8:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12b8bxuOK2BPf7c8Kf1daJoOqB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/63gAwvAgPe1a32oiBCJmtUrXef8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.127.80.0/21
151.89.0.0/16
185.51.12.0/24
193.111.46.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:b4:48:06:b8:c9:fc:a4:53:1a:bc:ae:1e:a1:b2:24:e9:0b:
2a:67:fb:b0:b3:8e:b6:9e:35:da:53:59:ba:25:d9:05:c6:0c:
dd:c2:1e:7a:1c:a2:ac:54:21:49:57:c2:14:d2:dd:8b:b6:d3:
8f:e2:0d:51:44:bc:98:14:2d:9d:bd:96:82:97:92:1a:96:b3:
c7:e2:14:48:02:e3:ed:c6:4c:80:fd:6e:09:f6:e1:61:54:24:
07:ec:10:31:e9:25:12:74:cf:cb:31:8d:0f:bd:ec:0b:18:64:
90:84:3f:c7:7a:a7:ab:01:7c:9c:17:20:e5:91:c3:2e:c7:58:
7f:74:3a:ec:b5:b8:74:36:29:c1:8e:9e:a8:69:2c:cb:1e:5c:
ba:b4:be:7b:64:a2:05:21:31:88:13:ff:8a:61:48:1a:fd:9c:
c4:0b:97:50:7d:90:a6:a8:86:66:43:a0:46:2e:f8:22:ac:4b:
7a:af:43:8a:76:c8:2e:f9:ea:48:74:32:1e:dd:ac:dc:25:59:
ed:c2:a6:b1:b6:47:12:37:e3:46:bb:f4:52:26:7a:ed:d6:20:
5b:95:dd:ea:aa:c6:ef:e3:e2:5a:32:13:14:ff:69:3f:c3:44:
46:59:50:cc:66:a4:ff:2f:43:67:e2:a1:74:a8:0c:af:a2:c1:
aa:83:ab:11
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYmG2XoFBjI3bqABhO1rH+ZrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3NjZmYzZmMWI4ZTJiNjA0ZjdmYjczYzI5ZmQ1ZDY4OWEw
ZWE4MWQwHhcNMjMwNzI0MDc0MjI2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYjc4MDBjMmYwMjAzZGVkNWFkZjZhMjIwNDIyNjZiNTRhZDc3OWZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljyudzENW0TuAiu9SOVuOB1tMTt1
+u8ELRmDv2Qfu9JNilg7QKrdSVZsJ3ErNHdODeKEoAPrHxiDIuK0OVVozPoCivob
AXvB9M5HQbcyl6uXFMFYDjcFvD7iSUAEgdAGiB/svDeEERnE8LVcx4zcNxrYwsz7
HizXJ2HFJDDKU0I4or5YLZ/2DLWwL5Bx7E/CCFeYN+wlf2slnUCUshGe3/49zrYM
iuAgBg/bMMfItAARbBy3h2J2zEDWYOC/kUfPb/DxT+gZGOsmMrRDafq0L34gLU/j
1mvvt2mEJPtHPiC+rTZMUQL2xHhEAKV4KdlMz3sNaqQs+1b+1QVQDdVVVwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFOt4AMLwID3tWt9qIgQiZrVK13n/MB8GA1UdIwQY
MBaAFNdm/G8bjitgT3+3PCn9XWiaDqgdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTJiOGJ4dU9LMkJQZjdjOEtmMWRhSm9PcUIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9mMzgyOWEtOTUyNy00NDRiLWJkNzIt
M2VmM2ZkOTY5OTU3LzEvNjNnQXd2QWdQZTFhMzJvaUJDSm10VXJYZWY4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My9mMzgyOWEtOTUyNy00NDRiLWJkNzItM2VmM2ZkOTY5OTU3
LzEvMTJiOGJ4dU9LMkJQZjdjOEtmMWRhSm9PcUIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAdBAIAATAXAwQDXn9QAwMA
l1kDBAC5MwwDBADBby4wDQYJKoZIhvcNAQELBQADggEBAMS0SAa4yfykUxq8rh6h
siTpCypn+7CzjraeNdpTWbol2QXGDN3CHnocoqxUIUlXwhTS3Yu204/iDVFEvJgU
LZ29loKXkhqWs8fiFEgC4+3GTID9bgn24WFUJAfsEDHpJRJ0z8sxjQ+97AsYZJCE
P8d6p6sBfJwXIOWRwy7HWH90Ouy1uHQ2KcGOnqhpLMseXLq0vntkogUhMYgT/4ph
SBr9nMQLl1B9kKaohmZDoEYu+CKsS3qvQ4p2yC756kh0Mh7drNwlWe3CprG2RxI3
40a79FImeu3WIFuV3eqqxu/j4loyExT/aT/DREZZUMxmpP8vQ2fioXSoDK+iwaqD
qxE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:59 2024 by rpki-client on console-fra.rpki-client.org