Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/2SUYlfwJnUAVJ4GR24V2TpikoOQ.roa
File: 2SUYlfwJnUAVJ4GR24V2TpikoOQ.roa (raw, json)
Hash identifier: Q0yMRomroWJJx9kcxPesojflqpA67uv9ob3azsUqzrw=
Subject key identifier: D9:25:18:95:FC:09:9D:40:15:27:81:91:DB:85:76:4E:98:A4:A0:E4
Certificate issuer: /CN=dc899c28664ee8194a64048e46c60c6e5f190c53
Certificate serial: 0185711E617D2ADBED5B479346D276D03212
Authority key identifier: DC:89:9C:28:66:4E:E8:19:4A:64:04:8E:46:C6:0C:6E:5F:19:0C:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ImcKGZO6BlKZASORsYMbl8ZDFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/2SUYlfwJnUAVJ4GR24V2TpikoOQ.roa
Signing time: Mon 02 Jan 2023 06:14:54 +0000
ROA not before: Mon 02 Jan 2023 06:14:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60492
IP address blocks: 213.167.75.0/24 maxlen: 24
213.167.81.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:1e:61:7d:2a:db:ed:5b:47:93:46:d2:76:d0:32:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc899c28664ee8194a64048e46c60c6e5f190c53
Validity
Not Before: Jan 2 06:14:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d9251895fc099d4015278191db85764e98a4a0e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:34:3b:12:8f:f8:cc:7f:76:4d:55:56:b8:1c:
d7:92:c3:ed:ac:3f:38:0a:2f:44:9b:06:54:2f:96:
50:b0:50:31:bd:8c:43:3b:76:41:23:17:76:70:ff:
bf:1e:e9:21:69:fd:f3:2d:01:6e:07:d3:35:23:27:
78:02:6a:cb:dd:a1:f3:2a:6b:9f:68:0c:15:9a:09:
9b:c5:67:bc:b6:e3:5f:2a:5e:4f:b0:93:d3:95:4b:
5d:ea:67:24:18:52:b4:09:fb:25:3a:7f:24:8a:98:
01:03:d3:62:5e:e5:e7:c1:fc:d6:f5:25:1a:7a:2e:
7f:47:70:3e:a1:38:09:6d:77:0f:90:f4:f8:98:e6:
8c:6c:0c:6e:0b:71:cb:f1:f0:f3:59:69:6a:c5:f4:
d9:38:5e:93:2d:e4:ff:f8:fe:eb:f8:91:5f:6c:00:
f8:ea:ef:61:6b:05:c4:a4:97:c4:a3:5d:3e:80:ce:
5c:6e:47:9a:d0:f5:62:3d:a6:9d:9d:c2:7a:8c:8f:
6b:81:a5:d4:93:16:12:a2:3b:d4:e4:33:4d:10:72:
d2:eb:6c:f6:19:e4:01:29:5b:7d:51:8e:20:98:26:
79:7b:1c:b0:5e:d0:a5:18:c1:19:7a:e8:b3:42:cd:
7f:26:52:4b:69:27:e7:82:8e:2f:65:2d:1d:09:70:
43:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:25:18:95:FC:09:9D:40:15:27:81:91:DB:85:76:4E:98:A4:A0:E4
X509v3 Authority Key Identifier:
keyid:DC:89:9C:28:66:4E:E8:19:4A:64:04:8E:46:C6:0C:6E:5F:19:0C:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ImcKGZO6BlKZASORsYMbl8ZDFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/2SUYlfwJnUAVJ4GR24V2TpikoOQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.167.75.0/24
213.167.81.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:21:71:f9:d3:38:d1:e5:62:25:c6:5d:1b:84:bf:50:72:a7:
38:3c:dc:36:7e:08:40:ba:3d:1f:5b:71:74:b5:9c:72:0a:36:
eb:c7:d6:a1:b4:ad:89:5c:ba:ee:3c:a4:a6:17:cc:72:09:bd:
ba:6b:16:21:2e:a6:03:d2:39:75:9c:da:f0:83:5e:69:8c:9f:
cf:04:67:bb:77:4d:35:9c:ea:4d:08:da:0c:ff:27:80:ca:db:
6b:4c:3f:d2:29:fe:08:75:1c:66:b4:0f:a0:4f:a1:f8:95:b1:
ff:c1:8e:d2:7a:f2:cc:77:c1:01:d8:9c:98:a6:14:47:93:14:
3e:65:93:c2:a4:28:1d:83:fd:c3:41:45:66:74:74:6c:26:d2:
2f:f4:5c:9e:21:e8:73:69:f2:b2:bb:13:78:68:35:c7:c0:3e:
f8:50:1d:3e:bf:bd:68:c7:cc:5d:b7:2d:18:9d:2e:13:7e:04:
f9:0b:fd:f2:10:de:4d:5c:0f:f9:90:47:a3:c9:6e:d5:19:82:
e7:b9:d9:2c:fc:94:d2:af:30:4f:fa:7c:64:93:4b:47:bf:2e:
13:2d:b0:93:bf:82:db:3d:90:46:a3:be:34:58:28:04:94:f7:
9b:6b:f2:f9:40:d8:6d:d3:39:2e:34:06:a4:04:7d:74:9d:3e:
fa:39:15:06
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVxHmF9KtvtW0eTRtJ20DISMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjODk5YzI4NjY0ZWU4MTk0YTY0MDQ4ZTQ2YzYwYzZlNWYx
OTBjNTMwHhcNMjMwMTAyMDYxNDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOTI1MTg5NWZjMDk5ZDQwMTUyNzgxOTFkYjg1NzY0ZTk4YTRhMGU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDQ7Eo/4zH92TVVWuBzXksPtrD84
Ci9EmwZUL5ZQsFAxvYxDO3ZBIxd2cP+/Hukhaf3zLQFuB9M1Iyd4AmrL3aHzKmuf
aAwVmgmbxWe8tuNfKl5PsJPTlUtd6mckGFK0CfslOn8kipgBA9NiXuXnwfzW9SUa
ei5/R3A+oTgJbXcPkPT4mOaMbAxuC3HL8fDzWWlqxfTZOF6TLeT/+P7r+JFfbAD4
6u9hawXEpJfEo10+gM5cbkea0PViPaadncJ6jI9rgaXUkxYSojvU5DNNEHLS62z2
GeQBKVt9UY4gmCZ5exywXtClGMEZeuizQs1/JlJLaSfngo4vZS0dCXBD0QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFNklGJX8CZ1AFSeBkduFdk6YpKDkMB8GA1UdIwQY
MBaAFNyJnChmTugZSmQEjkbGDG5fGQxTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0ltY0tHWk82QmxLWkFTT1JzWU1ibDhaREZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny81NmQ2YTgtMDc1Mi00Y2JkLTg4NDUt
NTJmZTEwNTEzMTI5LzEvMlNVWWxmd0puVUFWSjRHUjI0VjJUcGlrb09RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny81NmQ2YTgtMDc1Mi00Y2JkLTg4NDUtNTJmZTEwNTEzMTI5
LzEvM0ltY0tHWk82QmxLWkFTT1JzWU1ibDhaREZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA1adLAwQA
1adRMA0GCSqGSIb3DQEBCwUAA4IBAQB/IXH50zjR5WIlxl0bhL9Qcqc4PNw2fghA
uj0fW3F0tZxyCjbrx9ahtK2JXLruPKSmF8xyCb26axYhLqYD0jl1nNrwg15pjJ/P
BGe7d001nOpNCNoM/yeAyttrTD/SKf4IdRxmtA+gT6H4lbH/wY7SevLMd8EB2JyY
phRHkxQ+ZZPCpCgdg/3DQUVmdHRsJtIv9FyeIehzafKyuxN4aDXHwD74UB0+v71o
x8xdty0YnS4TfgT5C/3yEN5NXA/5kEejyW7VGYLnudks/JTSrzBP+nxkk0tHvy4T
LbCTv4LbPZBGo740WCgElPeba/L5QNht0zkuNAakBH10nT76ORUG
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:30 2024 by rpki-client on console-fra.rpki-client.org