Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/d654be-174e-41f7-9cfb-937e27ee1b5b/1/eOfauJPOkAZPPhurt6Li1-sGqgM.roa
File: eOfauJPOkAZPPhurt6Li1-sGqgM.roa (raw, json)
Hash identifier: zSB5O3vFrMV3oXFQZ9a5hvHGx8a6SP0AHUE/SGibjB4=
Subject key identifier: 78:E7:DA:B8:93:CE:90:06:4F:3E:1B:AB:B7:A2:E2:D7:EB:06:AA:03
Certificate issuer: /CN=2378a4a9c52325a85920809ba1a4d89e21c02f17
Certificate serial: 0187BD50CBC84E7C251BD93A6733ACAB4CD6
Authority key identifier: 23:78:A4:A9:C5:23:25:A8:59:20:80:9B:A1:A4:D8:9E:21:C0:2F:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I3ikqcUjJahZIICboaTYniHALxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/d654be-174e-41f7-9cfb-937e27ee1b5b/1/eOfauJPOkAZPPhurt6Li1-sGqgM.roa
Signing time: Wed 26 Apr 2023 11:26:41 +0000
ROA not before: Wed 26 Apr 2023 11:26:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6846
IP address blocks: 212.1.64.0/18 maxlen: 24
212.1.96.0/22 maxlen: 22
195.230.128.0/19 maxlen: 24
2a02:f1c0::/29 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:32:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:bd:50:cb:c8:4e:7c:25:1b:d9:3a:67:33:ac:ab:4c:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2378a4a9c52325a85920809ba1a4d89e21c02f17
Validity
Not Before: Apr 26 11:26:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=78e7dab893ce90064f3e1babb7a2e2d7eb06aa03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a8:55:af:ba:34:77:f4:e2:8f:25:c0:1b:59:
a4:9e:4d:b1:35:75:3d:f0:fe:39:4b:09:e1:3b:8e:
27:c2:bb:73:1e:df:cb:3d:be:69:95:d3:56:1a:4b:
d5:44:f3:af:56:27:0a:59:cc:a2:d4:1e:15:6e:45:
e0:85:c2:af:b4:a4:c3:93:79:0b:30:d0:fa:9c:f5:
bb:cc:8e:54:91:dd:d4:29:a2:67:a4:2f:49:c5:9c:
3c:10:57:20:fd:cd:7b:2c:39:06:ec:f1:b8:82:ec:
28:6b:1e:36:56:86:08:ff:a7:41:36:2d:d2:0b:f1:
ec:a0:36:47:5a:55:3d:a9:01:61:d4:72:46:16:f2:
6d:85:3c:0a:79:4b:68:1a:14:29:fa:97:8a:40:14:
a7:6e:06:d0:b5:f8:50:30:2a:d4:da:b3:e8:ca:86:
b4:11:d5:0c:d0:82:51:a9:26:38:2f:68:07:d0:1e:
16:2d:fd:f3:49:e4:19:40:98:21:91:8c:e2:5a:02:
cc:eb:12:81:0f:c9:4e:7e:dd:23:6b:b8:79:d7:72:
4a:da:e1:63:d2:b5:48:a8:a0:89:7b:60:54:d1:c4:
8e:5a:4c:b9:50:35:67:fc:e8:3d:03:81:60:ba:2e:
b7:84:d6:00:38:8c:db:9d:18:ee:2e:e1:a3:3f:79:
b4:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:E7:DA:B8:93:CE:90:06:4F:3E:1B:AB:B7:A2:E2:D7:EB:06:AA:03
X509v3 Authority Key Identifier:
keyid:23:78:A4:A9:C5:23:25:A8:59:20:80:9B:A1:A4:D8:9E:21:C0:2F:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I3ikqcUjJahZIICboaTYniHALxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d654be-174e-41f7-9cfb-937e27ee1b5b/1/eOfauJPOkAZPPhurt6Li1-sGqgM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d654be-174e-41f7-9cfb-937e27ee1b5b/1/I3ikqcUjJahZIICboaTYniHALxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.230.128.0/19
212.1.64.0/18
IPv6:
2a02:f1c0::/29
Signature Algorithm: sha256WithRSAEncryption
3b:d4:30:cb:8f:36:3e:0a:83:78:f9:a0:76:de:90:13:c7:c1:
4f:1c:97:64:c1:79:bb:bc:39:56:0e:40:f6:f7:eb:6b:4e:9e:
0d:c9:48:bd:19:db:b2:c0:56:ee:bc:9d:61:2c:7f:17:66:66:
7a:cf:14:e8:d5:85:19:2c:87:b2:d2:c2:f3:23:37:9f:83:1c:
ac:5f:91:48:ea:c5:33:0b:89:aa:e0:e3:48:92:f4:9b:91:84:
27:c5:3e:6b:ba:59:e3:3f:37:91:fb:af:b6:c4:e7:76:34:ce:
3e:26:25:9a:af:5e:78:ba:80:c2:98:ba:e3:b2:45:d9:85:0f:
55:90:c6:e4:62:01:0f:2a:38:c4:ec:cf:83:44:e3:2b:e3:54:
b8:a2:09:dc:87:26:c5:66:cb:91:a8:b9:eb:e5:b4:11:ec:0d:
2a:5c:c5:50:a7:c2:e8:c0:8d:b6:95:fa:42:b7:60:8e:96:b2:
6c:3f:df:32:40:fd:29:d2:fc:5b:fd:21:8d:d9:46:09:a3:07:
55:9a:e4:08:9a:b6:c4:63:08:dd:b1:29:1a:04:dd:ec:73:10:
52:73:93:6c:07:02:ae:ab:00:1d:6f:c8:b7:8d:53:f3:cf:a1:
c8:ff:8b:d4:7e:f5:db:e6:f1:53:20:80:77:82:91:e4:e4:e0:
f5:21:15:78
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYe9UMvITnwlG9k6ZzOsq0zWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzNzhhNGE5YzUyMzI1YTg1OTIwODA5YmExYTRkODllMjFj
MDJmMTcwHhcNMjMwNDI2MTEyNjQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OGU3ZGFiODkzY2U5MDA2NGYzZTFiYWJiN2EyZTJkN2ViMDZhYTAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKhVr7o0d/TijyXAG1mknk2xNXU9
8P45SwnhO44nwrtzHt/LPb5pldNWGkvVRPOvVicKWcyi1B4VbkXghcKvtKTDk3kL
MND6nPW7zI5Ukd3UKaJnpC9JxZw8EFcg/c17LDkG7PG4guwoax42VoYI/6dBNi3S
C/HsoDZHWlU9qQFh1HJGFvJthTwKeUtoGhQp+peKQBSnbgbQtfhQMCrU2rPoyoa0
EdUM0IJRqSY4L2gH0B4WLf3zSeQZQJghkYziWgLM6xKBD8lOft0ja7h513JK2uFj
0rVIqKCJe2BU0cSOWky5UDVn/Og9A4Fgui63hNYAOIzbnRjuLuGjP3m0UQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFHjn2riTzpAGTz4bq7ei4tfrBqoDMB8GA1UdIwQY
MBaAFCN4pKnFIyWoWSCAm6Gk2J4hwC8XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTNpa3FjVWpKYWhaSUlDYm9hVFluaUhBTHhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9kNjU0YmUtMTc0ZS00MWY3LTljZmIt
OTM3ZTI3ZWUxYjViLzEvZU9mYXVKUE9rQVpQUGh1cnQ2TGkxLXNHcWdNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC9kNjU0YmUtMTc0ZS00MWY3LTljZmItOTM3ZTI3ZWUxYjVi
LzEvSTNpa3FjVWpKYWhaSUlDYm9hVFluaUhBTHhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQFw+aAAwQG
1AFAMA0EAgACMAcDBQMqAvHAMA0GCSqGSIb3DQEBCwUAA4IBAQA71DDLjzY+CoN4
+aB23pATx8FPHJdkwXm7vDlWDkD29+trTp4NyUi9GduywFbuvJ1hLH8XZmZ6zxTo
1YUZLIey0sLzIzefgxysX5FI6sUzC4mq4ONIkvSbkYQnxT5rulnjPzeR+6+2xOd2
NM4+JiWar154uoDCmLrjskXZhQ9VkMbkYgEPKjjE7M+DROMr41S4ognchybFZsuR
qLnr5bQR7A0qXMVQp8LowI22lfpCt2COlrJsP98yQP0p0vxb/SGN2UYJowdVmuQI
mrbEYwjdsSkaBN3scxBSc5NsBwKuqwAdb8i3jVPzz6HI/4vUfvXb5vFTIIB3gpHk
5OD1IRV4
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:47 2024 by rpki-client on console-fra.rpki-client.org