Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/tuEZjjct4XkomLkPk9wIhZZuavs.roa
File: tuEZjjct4XkomLkPk9wIhZZuavs.roa (raw, json)
Hash identifier: 5Vw94Mncl5nztP40VMWn3eZkD/PbLUzPb8sPY/3hcdE=
Subject key identifier: B6:E1:19:8E:37:2D:E1:79:28:98:B9:0F:93:DC:08:85:96:6E:6A:FB
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 018B468338A0DA0E3D0E8BC3C6585AF7BD38
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/tuEZjjct4XkomLkPk9wIhZZuavs.roa
Signing time: Thu 19 Oct 2023 05:58:06 +0000
ROA not before: Thu 19 Oct 2023 05:58:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47771
IP address blocks: 213.91.215.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:46:83:38:a0:da:0e:3d:0e:8b:c3:c6:58:5a:f7:bd:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Oct 19 05:58:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b6e1198e372de1792898b90f93dc0885966e6afb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:97:b2:bc:c5:3f:e0:4d:01:ab:23:54:01:59:
dc:79:e4:bc:e9:82:56:3d:94:c2:d8:ff:39:fe:a4:
48:74:38:b4:e1:2b:c2:19:ae:3c:64:e6:90:35:32:
a3:fa:bf:99:7c:dc:05:11:84:b6:f7:eb:f8:3e:96:
37:8e:3e:9f:54:fd:f0:e5:f9:d9:a7:03:05:bb:85:
22:b1:bd:96:05:33:6f:35:05:a2:20:5f:16:11:78:
03:a7:f6:18:da:c6:e5:50:e8:7a:02:ed:50:7d:64:
ea:6d:67:35:26:10:3a:66:f1:18:1f:4b:4b:1f:da:
51:98:f1:a6:eb:ba:85:96:fe:ce:3a:3f:1b:24:6d:
6e:b8:7a:da:22:76:50:90:2d:c6:c5:ea:5c:1c:7a:
7b:ff:95:09:90:8c:84:4c:8c:60:a0:34:b7:98:99:
41:e1:a2:0d:04:d5:22:b9:5c:cf:8c:38:10:be:7a:
24:1f:6d:ca:89:cd:d8:f9:06:ea:a0:e4:5c:95:c9:
b9:c2:d7:ff:86:a4:05:be:0d:19:99:b8:16:9f:40:
21:47:6b:00:33:83:ae:19:7e:be:95:a5:66:d8:b8:
9e:f8:52:99:7b:92:d7:42:07:66:53:65:f0:90:ff:
8e:26:00:36:52:36:c7:25:3e:69:15:b0:09:5a:eb:
54:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:E1:19:8E:37:2D:E1:79:28:98:B9:0F:93:DC:08:85:96:6E:6A:FB
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/tuEZjjct4XkomLkPk9wIhZZuavs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.91.215.0/24
Signature Algorithm: sha256WithRSAEncryption
70:51:1c:93:2e:54:57:f1:1d:3a:5f:02:9b:db:c0:eb:68:d6:
09:85:5e:35:2a:2b:c4:eb:d3:91:93:5f:d1:fc:3f:54:4f:0b:
2e:b9:0d:c6:bf:88:54:a8:27:a2:60:63:64:d1:9c:ff:f9:ef:
8e:b1:cd:55:9f:6c:d1:c0:a9:98:75:3f:71:3e:56:33:59:9a:
47:d3:6d:24:8b:44:a7:91:64:72:e3:7a:5e:b8:2d:f6:71:26:
e3:07:2c:58:25:f0:d7:2a:16:3b:7d:a6:61:59:91:1b:d9:09:
3f:f3:6f:fe:05:98:67:fa:28:e9:ea:7b:b1:10:fa:1a:46:fd:
2c:db:71:5d:b5:18:8e:94:9e:30:47:36:7a:49:a4:ae:05:e0:
c4:ed:27:1c:a5:2a:71:cd:a8:6b:33:d2:f1:a5:6a:4f:95:f9:
28:14:6f:89:f9:85:61:cd:03:92:e7:0b:6a:ab:90:81:3e:90:
ec:81:cd:95:50:70:f6:56:44:99:9e:32:03:3d:69:cb:35:49:
31:ef:19:87:b1:65:24:76:8a:ce:19:72:98:58:47:a4:89:e7:
a9:ad:28:8e:35:d2:c0:c1:35:45:ef:02:3c:c8:7b:64:22:e3:
2e:35:d4:cb:33:1a:cb:4b:f4:74:6f:ff:47:c0:30:82:f3:ed:
d5:ad:d3:b9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYtGgzig2g49DovDxlha9704MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0YjJmNGZhNTE2M2FmOTYxNjhlODhmYmY5Y2I0ZWQxZWQ4
ZmI0YzQwHhcNMjMxMDE5MDU1ODA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNmUxMTk4ZTM3MmRlMTc5Mjg5OGI5MGY5M2RjMDg4NTk2NmU2YWZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZeyvMU/4E0BqyNUAVnceeS86YJW
PZTC2P85/qRIdDi04SvCGa48ZOaQNTKj+r+ZfNwFEYS29+v4PpY3jj6fVP3w5fnZ
pwMFu4Uisb2WBTNvNQWiIF8WEXgDp/YY2sblUOh6Au1QfWTqbWc1JhA6ZvEYH0tL
H9pRmPGm67qFlv7OOj8bJG1uuHraInZQkC3GxepcHHp7/5UJkIyETIxgoDS3mJlB
4aINBNUiuVzPjDgQvnokH23Kic3Y+QbqoORclcm5wtf/hqQFvg0ZmbgWn0AhR2sA
M4OuGX6+laVm2Lie+FKZe5LXQgdmU2XwkP+OJgA2UjbHJT5pFbAJWutU4QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLbhGY43LeF5KJi5D5PcCIWWbmr7MB8GA1UdIwQY
MBaAFISy9PpRY6+WFo6I+/nLTtHtj7TEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDct
ODcyYmEyZDlmNDRjLzEvdHVFWmpqY3Q0WGtvbUxrUGs5d0loWlp1YXZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDctODcyYmEyZDlmNDRj
LzEvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1VvXMA0G
CSqGSIb3DQEBCwUAA4IBAQBwURyTLlRX8R06XwKb28DraNYJhV41KivE69ORk1/R
/D9UTwsuuQ3Gv4hUqCeiYGNk0Zz/+e+Osc1Vn2zRwKmYdT9xPlYzWZpH020ki0Sn
kWRy43peuC32cSbjByxYJfDXKhY7faZhWZEb2Qk/82/+BZhn+ijp6nuxEPoaRv0s
23FdtRiOlJ4wRzZ6SaSuBeDE7SccpSpxzahrM9LxpWpPlfkoFG+J+YVhzQOS5wtq
q5CBPpDsgc2VUHD2VkSZnjIDPWnLNUkx7xmHsWUkdorOGXKYWEekieeprSiONdLA
wTVF7wI8yHtkIuMuNdTLMxrLS/R0b/9HwDCC8+3VrdO5
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:05 2024 by rpki-client on console-fra.rpki-client.org