Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/8UU36kNKI6iGf9Bx3Ste5xZlGpU.roa
File: 8UU36kNKI6iGf9Bx3Ste5xZlGpU.roa (raw, json)
Hash identifier: or88WneZRjH4zc6ns9PFeSKGEwCktyo7oyVdC+cwsTU=
Subject key identifier: F1:45:37:EA:43:4A:23:A8:86:7F:D0:71:DD:2B:5E:E7:16:65:1A:95
Certificate issuer: /CN=3919f2ad91584baff0467447bac8fb978d1f9dd3
Certificate serial: 018988BA204EB0CC20578A4DD08FB2EB55B9
Authority key identifier: 39:19:F2:AD:91:58:4B:AF:F0:46:74:47:BA:C8:FB:97:8D:1F:9D:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/8UU36kNKI6iGf9Bx3Ste5xZlGpU.roa
Signing time: Mon 24 Jul 2023 16:27:26 +0000
ROA not before: Mon 24 Jul 2023 16:27:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7155
IP address blocks: 90.159.208.0/20 maxlen: 20
90.159.224.0/21 maxlen: 21
90.159.224.0/20 maxlen: 20
90.159.220.0/24 maxlen: 24
90.159.232.0/22 maxlen: 22
90.159.236.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:88:ba:20:4e:b0:cc:20:57:8a:4d:d0:8f:b2:eb:55:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3919f2ad91584baff0467447bac8fb978d1f9dd3
Validity
Not Before: Jul 24 16:27:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f14537ea434a23a8867fd071dd2b5ee716651a95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:82:ce:7b:09:44:e1:7c:57:27:ac:3a:58:4a:
c5:61:c3:90:16:40:75:46:7d:4e:9d:f5:f7:15:27:
5b:89:5a:27:eb:81:5c:1d:fe:a8:f2:66:ab:b9:3d:
4a:97:e3:f7:ff:41:54:d3:b6:c0:47:07:a6:b8:df:
08:56:b0:f5:2d:d9:e7:05:93:78:a3:db:33:c3:1d:
16:7e:4d:a6:6b:42:67:fa:8b:55:16:e5:c5:30:c5:
1c:b4:dc:3c:8d:e7:52:79:6f:9e:9b:08:79:fc:c0:
5b:32:c0:6c:76:c4:f3:80:f0:61:8a:5f:14:0f:bb:
c5:7f:17:fc:24:f1:50:7e:d1:3c:b6:4d:53:8e:80:
de:cc:27:a7:5f:ec:7e:93:f9:b9:09:52:0a:6d:fb:
bb:5b:46:4e:3c:7f:f5:33:0c:1a:75:cc:4c:97:9b:
25:90:30:6f:c4:46:de:f5:cc:37:46:bc:78:90:f7:
5a:c9:12:7e:b6:5f:65:2c:35:83:27:ae:3c:39:01:
0b:a8:5a:26:ee:a5:78:82:aa:59:4a:1e:67:d4:ca:
c3:70:bd:2e:53:0e:af:64:46:7c:75:75:61:e7:3c:
b6:f8:1b:61:ac:93:9a:92:99:57:56:a8:7a:ca:5a:
d7:3d:5d:dc:fb:30:9c:71:e1:9a:a3:cf:67:29:df:
fe:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:45:37:EA:43:4A:23:A8:86:7F:D0:71:DD:2B:5E:E7:16:65:1A:95
X509v3 Authority Key Identifier:
keyid:39:19:F2:AD:91:58:4B:AF:F0:46:74:47:BA:C8:FB:97:8D:1F:9D:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/8UU36kNKI6iGf9Bx3Ste5xZlGpU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
90.159.208.0-90.159.239.255
Signature Algorithm: sha256WithRSAEncryption
5b:f1:de:af:a7:20:f4:23:e6:33:41:70:af:ef:24:16:70:5f:
0f:67:d2:14:94:fe:fa:dd:86:a0:79:4d:dd:a1:0f:4f:48:90:
8e:44:e3:db:af:ab:57:1d:d8:1b:ca:16:e9:e6:bb:84:25:7a:
35:7e:47:58:f3:4e:da:7a:ac:48:8e:c9:16:e9:df:a4:6d:00:
4f:fe:69:b9:85:ae:6c:85:39:51:f4:dd:54:c0:75:df:d9:3e:
bf:74:17:72:a8:34:a0:f1:f2:2f:41:29:6a:ba:17:d3:90:f8:
10:a6:41:fa:75:01:95:8f:48:50:2c:92:d1:5b:16:ea:a5:e1:
85:eb:43:dd:b1:86:a7:f6:ba:be:ec:53:75:b0:12:c9:fc:a2:
9b:f9:a0:fa:25:ed:7a:0a:91:b5:0d:fb:2e:0f:bc:bc:12:1d:
76:f5:61:aa:db:d2:3f:54:7d:98:e8:72:28:4e:38:7e:dd:e1:
58:3b:75:0c:e9:14:f9:d3:90:16:69:fe:0c:88:c9:18:94:26:
db:af:5c:12:80:a8:e6:05:83:a4:4f:80:47:bb:9e:f1:9e:98:
c9:49:46:4e:37:7c:f5:ea:a1:a5:f6:85:38:55:d7:52:2d:24:
14:e9:26:81:3b:e8:14:78:de:cc:c1:38:8c:fa:6b:91:20:97:
28:4f:17:14
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYmIuiBOsMwgV4pN0I+y61W5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5MTlmMmFkOTE1ODRiYWZmMDQ2NzQ0N2JhYzhmYjk3OGQx
ZjlkZDMwHhcNMjMwNzI0MTYyNzI2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMTQ1MzdlYTQzNGEyM2E4ODY3ZmQwNzFkZDJiNWVlNzE2NjUxYTk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4LOewlE4XxXJ6w6WErFYcOQFkB1
Rn1OnfX3FSdbiVon64FcHf6o8maruT1Kl+P3/0FU07bARwemuN8IVrD1LdnnBZN4
o9szwx0Wfk2ma0Jn+otVFuXFMMUctNw8jedSeW+emwh5/MBbMsBsdsTzgPBhil8U
D7vFfxf8JPFQftE8tk1TjoDezCenX+x+k/m5CVIKbfu7W0ZOPH/1MwwadcxMl5sl
kDBvxEbe9cw3Rrx4kPdayRJ+tl9lLDWDJ648OQELqFom7qV4gqpZSh5n1MrDcL0u
Uw6vZEZ8dXVh5zy2+BthrJOakplXVqh6ylrXPV3c+zCcceGao89nKd/+UQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFPFFN+pDSiOohn/Qcd0rXucWZRqVMB8GA1UdIwQY
MBaAFDkZ8q2RWEuv8EZ0R7rI+5eNH53TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1JueXJaRllTNl93Um5SSHVzajdsNDBmbmRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS85MTE4ZTItYWU3NC00YzI0LWE3NzUt
MzJhYTY3MzFjMjkxLzEvOFVVMzZrTktJNmlHZjlCeDNTdGU1eFpsR3BVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS85MTE4ZTItYWU3NC00YzI0LWE3NzUtMzJhYTY3MzFjMjkx
LzEvT1JueXJaRllTNl93Um5SSHVzajdsNDBmbmRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBARan9AD
BARan+AwDQYJKoZIhvcNAQELBQADggEBAFvx3q+nIPQj5jNBcK/vJBZwXw9n0hSU
/vrdhqB5Td2hD09IkI5E49uvq1cd2BvKFunmu4QlejV+R1jzTtp6rEiOyRbp36Rt
AE/+abmFrmyFOVH03VTAdd/ZPr90F3KoNKDx8i9BKWq6F9OQ+BCmQfp1AZWPSFAs
ktFbFuql4YXrQ92xhqf2ur7sU3WwEsn8opv5oPol7XoKkbUN+y4PvLwSHXb1Yarb
0j9UfZjocihOOH7d4Vg7dQzpFPnTkBZp/gyIyRiUJtuvXBKAqOYFg6RPgEe7nvGe
mMlJRk43fPXqoaX2hThV11ItJBTpJoE76BR43szBOIz6a5EglyhPFxQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:16 2024 by rpki-client on console-ams.rpki-client.org