Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/73OdQuP2S4CSbdP1MOpYqXQmicA.roa
File: 73OdQuP2S4CSbdP1MOpYqXQmicA.roa (raw, json)
Hash identifier: P/yOW7heMplkge09t3QG44e8/WQP1SIKvBeGfb0bhs0=
Subject key identifier: EF:73:9D:42:E3:F6:4B:80:92:6D:D3:F5:30:EA:58:A9:74:26:89:C0
Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a
Certificate serial: 01896E9CF34CEA417E72A8FC029F3F7848A9
Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/73OdQuP2S4CSbdP1MOpYqXQmicA.roa
Signing time: Wed 19 Jul 2023 14:45:26 +0000
ROA not before: Wed 19 Jul 2023 14:45:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49505
IP address blocks: 212.192.56.0/22 maxlen: 24
212.192.60.0/22 maxlen: 24
195.19.172.0/22 maxlen: 24
195.19.168.0/22 maxlen: 24
195.208.80.0/22 maxlen: 24
195.208.88.0/22 maxlen: 24
195.208.86.0/23 maxlen: 24
195.208.92.0/22 maxlen: 24
193.232.204.0/23 maxlen: 24
62.76.164.0/24 maxlen: 24
212.193.184.0/22 maxlen: 24
212.193.188.0/22 maxlen: 24
212.192.195.0/24 maxlen: 24
212.192.196.0/22 maxlen: 24
193.232.88.0/22 maxlen: 24
193.232.220.0/23 maxlen: 24
193.232.222.0/24 maxlen: 24
194.190.210.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 20 Jul 2023 08:34:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:6e:9c:f3:4c:ea:41:7e:72:a8:fc:02:9f:3f:78:48:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a
Validity
Not Before: Jul 19 14:45:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ef739d42e3f64b80926dd3f530ea58a9742689c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:5f:d3:e2:86:aa:1d:3c:97:4f:da:c7:ad:38:
74:93:85:0f:2e:c3:b5:ca:e2:4b:f7:45:b1:a9:c6:
42:74:bf:4d:33:d1:69:c9:31:c9:c6:c3:a2:63:cf:
18:3f:b8:60:49:02:f5:a7:7a:7e:24:4f:d0:3d:13:
b8:8e:1d:cf:4f:15:51:1b:fd:e4:6a:5f:6d:9c:d8:
7f:d8:e4:66:18:da:ec:e1:55:42:0d:db:14:37:e6:
d1:e0:d8:1d:d0:3f:90:fa:81:ff:ab:e7:e9:9e:0b:
9a:7e:ed:0d:cf:53:e7:ce:b2:13:55:78:d1:0a:17:
d6:fc:49:6c:72:77:2b:5a:95:d9:a8:08:f0:fd:f1:
4d:54:79:a5:cd:23:7d:e2:80:03:f5:44:dd:45:d2:
e0:82:5a:69:79:d7:d0:f6:72:70:05:c8:b0:69:0e:
3d:d1:49:12:f2:5d:30:b5:55:ba:d4:cd:23:ca:d6:
e4:c9:e8:45:d2:e2:85:44:87:46:9a:04:2c:a5:bf:
48:48:06:dd:88:e7:50:34:b9:8f:9d:17:f2:18:51:
4a:f1:60:93:cb:30:6d:00:4c:de:4e:03:62:a5:0b:
8b:ef:45:c9:1b:3f:95:03:b8:68:51:6b:6a:5f:1f:
31:c6:a7:5d:a5:fb:20:ea:54:dc:08:92:4c:64:4c:
f8:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:73:9D:42:E3:F6:4B:80:92:6D:D3:F5:30:EA:58:A9:74:26:89:C0
X509v3 Authority Key Identifier:
keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/73OdQuP2S4CSbdP1MOpYqXQmicA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.164.0/24
193.232.88.0/22
193.232.204.0/23
193.232.220.0-193.232.222.255
194.190.210.0/23
195.19.168.0/21
195.208.80.0/22
195.208.86.0-195.208.95.255
212.192.56.0/21
212.192.195.0-212.192.199.255
212.193.184.0/21
Signature Algorithm: sha256WithRSAEncryption
9d:14:0b:e4:35:6a:dd:46:7f:9e:b7:d9:74:ca:99:03:18:65:
db:dd:cd:14:f5:d9:7f:f3:f9:90:f9:1d:f9:c8:14:c7:1a:a3:
f6:38:9a:a5:f5:e9:82:17:b7:be:64:f9:be:75:c6:9e:b8:3f:
59:bd:b8:5a:bb:d1:ad:32:9f:45:6a:f0:27:ff:ff:c9:28:11:
3a:90:1d:2c:82:7b:ec:61:f9:b2:26:56:42:e1:34:6a:ef:88:
c3:2f:94:52:f8:24:6f:9f:77:99:37:8f:25:86:79:51:e3:05:
a1:b2:d8:9e:88:f4:93:5b:88:62:fc:38:08:82:bd:35:b7:13:
7d:f7:b6:44:37:54:27:54:b9:33:1a:ba:5c:4f:e1:ed:a6:07:
03:02:bb:84:41:81:51:d6:9a:e0:bf:02:c3:d9:65:1d:d8:1e:
37:54:0c:ca:9f:9f:bc:ba:4d:0f:25:60:38:f2:c2:ff:fe:8d:
40:98:7f:fd:db:6a:bf:15:54:7c:3e:d6:86:8f:f8:bc:cf:88:
a3:78:7f:e1:e6:b2:11:c8:b1:4f:b8:2d:64:70:90:7b:71:5f:
2d:02:0a:eb:3e:ca:fa:65:22:2a:de:72:bb:0a:20:44:b5:b0:
aa:65:1d:9d:58:73:b4:78:59:2c:d8:e2:f5:42:c7:71:52:c8:
96:74:7c:91
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgISAYlunPNM6kF+cqj8Ap8/eEipMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1M2EzYjVmNTE4MDgxNjhjMjEyYzA5NGEyYmFhZmYzOGUx
NjQ2NGEwHhcNMjMwNzE5MTQ0NTI2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZjczOWQ0MmUzZjY0YjgwOTI2ZGQzZjUzMGVhNThhOTc0MjY4OWMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1/T4oaqHTyXT9rHrTh0k4UPLsO1
yuJL90WxqcZCdL9NM9FpyTHJxsOiY88YP7hgSQL1p3p+JE/QPRO4jh3PTxVRG/3k
al9tnNh/2ORmGNrs4VVCDdsUN+bR4Ngd0D+Q+oH/q+fpnguafu0Nz1PnzrITVXjR
ChfW/ElscncrWpXZqAjw/fFNVHmlzSN94oAD9UTdRdLgglppedfQ9nJwBciwaQ49
0UkS8l0wtVW61M0jytbkyehF0uKFRIdGmgQspb9ISAbdiOdQNLmPnRfyGFFK8WCT
yzBtAEzeTgNipQuL70XJGz+VA7hoUWtqXx8xxqddpfsg6lTcCJJMZEz4IQIDAQAB
o4ICXTCCAlkwHQYDVR0OBBYEFO9znULj9kuAkm3T9TDqWKl0JonAMB8GA1UdIwQY
MBaAFCU6O19RgIFowhLAlKK6r/OOFkZKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlRvN1gxR0FnV2pDRXNDVW9ycXY4NDRXUmtvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS85NzQ3NGMtMWRjMi00NjJjLWFhZGQt
OWU5YTFlMDM3MzhlLzEvNzNPZFF1UDJTNENTYmRQMU1PcFlxWFFtaWNBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS85NzQ3NGMtMWRjMi00NjJjLWFhZGQtOWU5YTFlMDM3Mzhl
LzEvSlRvN1gxR0FnV2pDRXNDVW9ycXY4NDRXUmtvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHMGCCsGAQUFBwEHAQH/BGQwYjBgBAIAATBaAwQAPkykAwQC
wehYAwQBwejMMAwDBALB6NwDBADB6N4DBAHCvtIDBAPDE6gDBALD0FAwDAMEAcPQ
VgMEBcPQQAMEA9TAODAMAwQA1MDDAwQD1MDAAwQD1MG4MA0GCSqGSIb3DQEBCwUA
A4IBAQCdFAvkNWrdRn+et9l0ypkDGGXb3c0U9dl/8/mQ+R35yBTHGqP2OJql9emC
F7e+ZPm+dcaeuD9Zvbhau9GtMp9FavAn///JKBE6kB0sgnvsYfmyJlZC4TRq74jD
L5RS+CRvn3eZN48lhnlR4wWhstieiPSTW4hi/DgIgr01txN997ZEN1QnVLkzGrpc
T+HtpgcDAruEQYFR1prgvwLD2WUd2B43VAzKn5+8uk0PJWA48sL//o1AmH/922q/
FVR8PtaGj/i8z4ijeH/h5rIRyLFPuC1kcJB7cV8tAgrrPsr6ZSIq3nK7CiBEtbCq
ZR2dWHO0eFks2OL1QsdxUsiWdHyR
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:56 2024 by rpki-client on console-fra.rpki-client.org