Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3f2003-9210-44bb-8a27-db3ec75fa20c/1/mACu_8_E3r9Vgv9klVDC-juC8mY.roa
File: mACu_8_E3r9Vgv9klVDC-juC8mY.roa (raw, json)
Hash identifier: FmpVx9HvqZ7fKg8vsmNkuiT9rC1ipuT8aaa+yS9pYlo=
Subject key identifier: 98:00:AE:FF:CF:C4:DE:BF:55:82:FF:64:95:50:C2:FA:3B:82:F2:66
Certificate issuer: /CN=a9cad9a977bf8b6b40f0b8e998e5787c6ae641c0
Certificate serial: 018D894325A687CE55241D4F45C304EA231E
Authority key identifier: A9:CA:D9:A9:77:BF:8B:6B:40:F0:B8:E9:98:E5:78:7C:6A:E6:41:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qcrZqXe_i2tA8LjpmOV4fGrmQcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/3f2003-9210-44bb-8a27-db3ec75fa20c/1/mACu_8_E3r9Vgv9klVDC-juC8mY.roa
Signing time: Thu 08 Feb 2024 15:08:15 +0000
ROA not before: Thu 08 Feb 2024 15:08:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9080
IP address blocks: 79.127.128.0/18 maxlen: 24
85.132.140.0/22 maxlen: 24
85.132.160.0/20 maxlen: 24
85.132.176.0/21 maxlen: 24
212.71.128.0/18 maxlen: 24
213.168.160.0/20 maxlen: 24
2001:ae8::/32 maxlen: 48
Validation: Failed, certificate revoked on Mon 12 Feb 2024 13:07:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:89:43:25:a6:87:ce:55:24:1d:4f:45:c3:04:ea:23:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9cad9a977bf8b6b40f0b8e998e5787c6ae641c0
Validity
Not Before: Feb 8 15:08:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9800aeffcfc4debf5582ff649550c2fa3b82f266
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:93:06:50:0c:87:8b:b8:6c:09:85:55:31:9f:
2e:e6:b1:01:53:a9:e9:64:8c:4d:c3:9c:c6:3e:37:
f1:9f:31:54:64:5c:c4:ac:aa:e5:a1:52:68:40:2e:
7d:fc:86:6b:4b:ac:6e:8a:80:66:14:1e:79:84:7e:
22:93:c9:69:0e:6c:75:8f:dc:6b:7a:4f:85:d7:ef:
9e:a0:c4:c0:01:2a:b2:46:67:8d:62:7c:3c:08:71:
6e:0c:38:d5:c5:eb:ca:98:d7:c5:3b:8a:80:3f:7f:
15:94:64:d6:66:24:d7:f2:b5:88:01:55:e2:37:f9:
65:18:1f:53:40:96:b2:d1:c1:79:3a:3d:35:45:29:
92:9e:f7:d8:23:8e:35:f1:ce:49:ee:a4:ba:c5:e8:
cb:58:53:39:5c:40:0c:a8:e1:f3:51:c9:f6:bd:02:
33:69:24:03:39:26:98:42:71:ac:df:ef:9b:10:4c:
4e:a1:ad:dd:6c:21:28:c6:66:7a:87:1d:46:f5:aa:
fd:a5:13:30:7a:4c:21:20:97:d3:bb:e3:bf:b9:94:
48:11:76:95:c5:e1:9a:8f:2b:d6:43:74:86:74:6f:
02:92:e6:a5:8e:a4:49:31:b0:71:61:bd:32:4a:47:
13:02:c9:68:47:aa:b0:cf:d8:01:9f:40:96:3d:1e:
52:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:00:AE:FF:CF:C4:DE:BF:55:82:FF:64:95:50:C2:FA:3B:82:F2:66
X509v3 Authority Key Identifier:
keyid:A9:CA:D9:A9:77:BF:8B:6B:40:F0:B8:E9:98:E5:78:7C:6A:E6:41:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qcrZqXe_i2tA8LjpmOV4fGrmQcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3f2003-9210-44bb-8a27-db3ec75fa20c/1/mACu_8_E3r9Vgv9klVDC-juC8mY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3f2003-9210-44bb-8a27-db3ec75fa20c/1/qcrZqXe_i2tA8LjpmOV4fGrmQcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.127.128.0/18
85.132.140.0/22
85.132.160.0-85.132.183.255
212.71.128.0/18
213.168.160.0/20
IPv6:
2001:ae8::/32
Signature Algorithm: sha256WithRSAEncryption
63:06:ce:d3:65:51:6a:e1:51:0b:62:f7:0f:85:aa:66:03:84:
5b:13:ae:81:b2:3d:e9:45:b4:2f:83:e8:50:1a:42:14:08:80:
ac:41:db:bf:25:8e:16:70:5d:7e:a5:f9:10:4e:09:5a:d5:12:
58:fb:16:37:8d:63:01:b9:e6:e6:fb:8f:9e:3e:6b:6c:af:a3:
76:82:a5:2b:c4:a9:da:a6:43:88:0f:5a:40:a2:c1:a9:45:9a:
32:2c:68:45:ad:cb:ad:9b:fa:de:6a:6c:d6:00:11:27:2f:91:
79:86:8c:30:6a:b9:d5:e8:d6:9e:2a:98:9e:a9:29:0c:e7:c1:
f9:19:e3:40:53:44:5e:7e:ea:cd:86:a6:bb:8c:79:60:a5:24:
68:d7:b0:16:d3:e8:78:22:56:f8:16:88:a9:73:26:5c:78:0a:
f3:11:e3:e4:05:a1:e5:08:d6:f1:e8:19:b4:47:b1:b7:5e:92:
0c:96:09:89:1e:85:e5:ab:db:fb:29:fd:b5:c2:b6:29:fe:88:
32:cb:61:20:81:78:56:82:8c:fc:9b:c1:43:71:ea:0b:ae:ee:
42:47:5d:17:ba:37:bc:0d:e4:ba:65:b1:26:eb:05:0b:2c:7a:
71:f1:c6:bc:31:a5:38:42:88:21:bf:2f:c1:81:5c:1a:bc:14:
75:fd:44:5a
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgISAY2JQyWmh85VJB1PRcME6iMeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5Y2FkOWE5NzdiZjhiNmI0MGYwYjhlOTk4ZTU3ODdjNmFl
NjQxYzAwHhcNMjQwMjA4MTUwODE1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ODAwYWVmZmNmYzRkZWJmNTU4MmZmNjQ5NTUwYzJmYTNiODJmMjY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZMGUAyHi7hsCYVVMZ8u5rEBU6np
ZIxNw5zGPjfxnzFUZFzErKrloVJoQC59/IZrS6xuioBmFB55hH4ik8lpDmx1j9xr
ek+F1++eoMTAASqyRmeNYnw8CHFuDDjVxevKmNfFO4qAP38VlGTWZiTX8rWIAVXi
N/llGB9TQJay0cF5Oj01RSmSnvfYI4418c5J7qS6xejLWFM5XEAMqOHzUcn2vQIz
aSQDOSaYQnGs3++bEExOoa3dbCEoxmZ6hx1G9ar9pRMwekwhIJfTu+O/uZRIEXaV
xeGajyvWQ3SGdG8CkualjqRJMbBxYb0ySkcTAsloR6qwz9gBn0CWPR5StwIDAQAB
o4ICODCCAjQwHQYDVR0OBBYEFJgArv/PxN6/VYL/ZJVQwvo7gvJmMB8GA1UdIwQY
MBaAFKnK2al3v4trQPC46ZjleHxq5kHAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWNyWnFYZV9pMnRBOExqcG1PVjRmR3JtUWNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8zZjIwMDMtOTIxMC00NGJiLThhMjct
ZGIzZWM3NWZhMjBjLzEvbUFDdV84X0UzcjlWZ3Y5a2xWREMtanVDOG1ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8zZjIwMDMtOTIxMC00NGJiLThhMjctZGIzZWM3NWZhMjBj
LzEvcWNyWnFYZV9pMnRBOExqcG1PVjRmR3JtUWNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME4GCCsGAQUFBwEHAQH/BD8wPTAsBAIAATAmAwQGT3+AAwQC
VYSMMAwDBAVVhKADBANVhLADBAbUR4ADBATVqKAwDQQCAAIwBwMFACABCugwDQYJ
KoZIhvcNAQELBQADggEBAGMGztNlUWrhUQti9w+FqmYDhFsTroGyPelFtC+D6FAa
QhQIgKxB278ljhZwXX6l+RBOCVrVElj7FjeNYwG55ub7j54+a2yvo3aCpSvEqdqm
Q4gPWkCiwalFmjIsaEWty62b+t5qbNYAEScvkXmGjDBqudXo1p4qmJ6pKQznwfkZ
40BTRF5+6s2GpruMeWClJGjXsBbT6HgiVvgWiKlzJlx4CvMR4+QFoeUI1vHoGbRH
sbdekgyWCYkeheWr2/sp/bXCtin+iDLLYSCBeFaCjPybwUNx6guu7kJHXRe6N7wN
5LplsSbrBQssenHxxrwxpThCiCG/L8GBXBq8FHX9RFo=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:29 2024 by rpki-client on console-fra.rpki-client.org