Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/a7ddf6-2394-48d3-bfa1-6d655cd94468/1/1-yXnnVdraeZDbz_7nhvMJR45clo.roa
File: 1-yXnnVdraeZDbz_7nhvMJR45clo.roa (raw, json)
Hash identifier: 8RgGqAXGRs5dum9j9FdHqVJdL2lApp1uBuFbPkLloTc=
Subject key identifier: FB:25:E7:9D:57:6B:69:E6:43:6F:3F:FB:9E:1B:CC:25:1E:39:72:5A
Certificate issuer: /CN=d513872512f1f2d037b401c2603ca8994e721e55
Certificate serial: 0189307486DEEBD96BB847863F36F594292E
Authority key identifier: D5:13:87:25:12:F1:F2:D0:37:B4:01:C2:60:3C:A8:99:4E:72:1E:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ROHJRLx8tA3tAHCYDyomU5yHlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/a7ddf6-2394-48d3-bfa1-6d655cd94468/1/1-yXnnVdraeZDbz_7nhvMJR45clo.roa
Signing time: Fri 07 Jul 2023 13:04:50 +0000
ROA not before: Fri 07 Jul 2023 13:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202613
IP address blocks: 185.8.196.0/22 maxlen: 24
83.136.110.0/23 maxlen: 24
2a02:29e1::/32 maxlen: 48
Validation: Failed, certificate revoked on Fri 20 Oct 2023 15:19:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:30:74:86:de:eb:d9:6b:b8:47:86:3f:36:f5:94:29:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d513872512f1f2d037b401c2603ca8994e721e55
Validity
Not Before: Jul 7 13:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fb25e79d576b69e6436f3ffb9e1bcc251e39725a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:09:3d:cb:c9:2b:76:84:bd:da:f5:70:8e:98:
81:b9:e4:7c:f5:e7:0d:f6:cb:36:40:ce:da:14:e0:
43:37:e7:e7:25:f7:37:c5:d6:39:0c:ae:6b:53:03:
69:c1:6a:50:ba:47:44:dc:d3:57:8a:85:15:94:19:
d2:ef:98:66:8a:1e:a5:ac:66:e6:74:0c:81:02:db:
42:bd:01:61:f1:9d:cd:23:16:b8:4f:32:a5:c8:54:
9e:3e:f8:d6:14:47:72:2c:43:88:ac:c5:53:a1:e0:
02:e6:a8:f7:cf:be:62:3d:aa:9c:f1:cc:3f:cb:a1:
2d:82:50:d0:c0:d1:ef:e2:2f:d0:20:32:24:3b:ef:
df:36:60:70:3c:6b:15:63:ce:f9:85:bd:58:38:31:
06:29:4d:2b:2d:36:cd:25:53:be:59:7f:c0:40:4e:
ba:ef:55:61:21:fc:16:ec:b9:20:f5:e9:1b:75:15:
4e:33:72:31:4d:c7:52:28:d9:6a:fa:dd:a2:5a:f2:
11:56:f1:e2:7b:60:21:eb:d9:7a:c3:01:a0:f8:ef:
ae:0a:4f:3e:28:e7:41:ac:82:4d:d2:5a:65:2c:89:
00:00:29:73:e3:cc:98:31:a3:83:cd:6d:42:a7:97:
02:8c:81:59:67:c1:8f:4e:a4:d9:c5:a3:56:a1:fb:
c3:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:25:E7:9D:57:6B:69:E6:43:6F:3F:FB:9E:1B:CC:25:1E:39:72:5A
X509v3 Authority Key Identifier:
keyid:D5:13:87:25:12:F1:F2:D0:37:B4:01:C2:60:3C:A8:99:4E:72:1E:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ROHJRLx8tA3tAHCYDyomU5yHlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/a7ddf6-2394-48d3-bfa1-6d655cd94468/1/1-yXnnVdraeZDbz_7nhvMJR45clo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/a7ddf6-2394-48d3-bfa1-6d655cd94468/1/1ROHJRLx8tA3tAHCYDyomU5yHlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.136.110.0/23
185.8.196.0/22
IPv6:
2a02:29e1::/32
Signature Algorithm: sha256WithRSAEncryption
8d:aa:43:43:ab:3f:b6:28:e0:53:85:5f:1f:9c:13:70:c6:f3:
d7:cd:cc:db:fe:6b:47:da:1e:f6:c3:28:c5:9b:10:4e:d0:03:
c7:5b:60:aa:60:a0:78:fc:b9:4b:a6:b2:44:3d:68:12:bf:08:
2d:5b:26:4d:ab:e4:01:80:6a:75:90:ea:b2:2e:62:dd:88:d6:
a0:6b:31:e4:bd:7a:35:ff:ac:b3:85:ff:e0:23:c6:2f:1c:b8:
53:fd:cf:28:46:97:04:33:f8:f7:6b:62:01:2a:7e:5e:93:e8:
ff:06:26:3c:bf:d3:77:c1:6f:04:a4:ea:5c:f1:e6:03:96:93:
2b:19:53:58:86:8c:52:b6:09:d3:c7:d9:c1:d0:50:25:36:a2:
47:20:a7:af:00:50:0d:b2:8a:a8:30:40:02:45:a0:24:da:45:
4b:9e:4a:5e:f0:47:1f:e5:4c:4d:04:9b:ec:9d:ad:1c:72:25:
b6:76:87:d1:76:9b:ee:9d:b5:ae:5e:d9:83:c4:e1:59:8e:94:
6b:8c:9a:3d:99:a9:34:65:8b:25:19:a5:b7:a1:76:31:e5:c1:
c3:1d:1f:77:f1:bc:e6:80:c7:46:b4:35:82:37:53:c9:56:b1:
ae:f4:22:88:28:e5:84:72:7e:e2:70:60:86:24:35:a6:4e:c5:
aa:0b:76:62
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgISAYkwdIbe69lruEeGPzb1lCkuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1MTM4NzI1MTJmMWYyZDAzN2I0MDFjMjYwM2NhODk5NGU3
MjFlNTUwHhcNMjMwNzA3MTMwNDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYjI1ZTc5ZDU3NmI2OWU2NDM2ZjNmZmI5ZTFiY2MyNTFlMzk3MjVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwk9y8krdoS92vVwjpiBueR89ecN
9ss2QM7aFOBDN+fnJfc3xdY5DK5rUwNpwWpQukdE3NNXioUVlBnS75hmih6lrGbm
dAyBAttCvQFh8Z3NIxa4TzKlyFSePvjWFEdyLEOIrMVToeAC5qj3z75iPaqc8cw/
y6EtglDQwNHv4i/QIDIkO+/fNmBwPGsVY875hb1YODEGKU0rLTbNJVO+WX/AQE66
71VhIfwW7Lkg9ekbdRVOM3IxTcdSKNlq+t2iWvIRVvHie2Ah69l6wwGg+O+uCk8+
KOdBrIJN0lplLIkAAClz48yYMaODzW1Cp5cCjIFZZ8GPTqTZxaNWofvDJwIDAQAB
o4ICHzCCAhswHQYDVR0OBBYEFPsl551Xa2nmQ28/+54bzCUeOXJaMB8GA1UdIwQY
MBaAFNUThyUS8fLQN7QBwmA8qJlOch5VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVJPSEpSTHg4dEEzdEFIQ1lEeW9tVTV5SGxVLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9hN2RkZjYtMjM5NC00OGQzLWJmYTEt
NmQ2NTVjZDk0NDY4LzEvMS15WG5uVmRyYWVaRGJ6XzduaHZNSlI0NWNsby5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNWUvYTdkZGY2LTIzOTQtNDhkMy1iZmExLTZkNjU1Y2Q5NDQ2
OC8xLzFST0hKUkx4OHRBM3RBSENZRHlvbVU1eUhsVS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjA0BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEAVOIbgME
ArkIxDANBAIAAjAHAwUAKgIp4TANBgkqhkiG9w0BAQsFAAOCAQEAjapDQ6s/tijg
U4VfH5wTcMbz183M2/5rR9oe9sMoxZsQTtADx1tgqmCgePy5S6ayRD1oEr8ILVsm
TavkAYBqdZDqsi5i3YjWoGsx5L16Nf+ss4X/4CPGLxy4U/3PKEaXBDP492tiASp+
XpPo/wYmPL/Td8FvBKTqXPHmA5aTKxlTWIaMUrYJ08fZwdBQJTaiRyCnrwBQDbKK
qDBAAkWgJNpFS55KXvBHH+VMTQSb7J2tHHIltnaH0Xab7p21rl7Zg8ThWY6Ua4ya
PZmpNGWLJRmlt6F2MeXBwx0fd/G85oDHRrQ1gjdTyVaxrvQiiCjlhHJ+4nBghiQ1
pk7Fqgt2Yg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:56 2024 by rpki-client on console-fra.rpki-client.org