Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/9a6638-c8fd-43cf-b1c4-b071c7efd915/1/lT_i_4ITGZU9s1Ukfwo97_9cQb4.roa
File: lT_i_4ITGZU9s1Ukfwo97_9cQb4.roa (raw, json)
Hash identifier: NOw+SLcmjI3xjJnHzP2WVA08P3BGyEEvCSge45XKBD8=
Subject key identifier: 95:3F:E2:FF:82:13:19:95:3D:B3:55:24:7F:0A:3D:EF:FF:5C:41:BE
Certificate issuer: /CN=51cf732a8a7439e9280f23ef57849814af195ae0
Certificate serial: 01856F795B75D9219EA649FEBA0B005E8618
Authority key identifier: 51:CF:73:2A:8A:74:39:E9:28:0F:23:EF:57:84:98:14:AF:19:5A:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uc9zKop0OekoDyPvV4SYFK8ZWuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/9a6638-c8fd-43cf-b1c4-b071c7efd915/1/lT_i_4ITGZU9s1Ukfwo97_9cQb4.roa
Signing time: Sun 01 Jan 2023 22:35:02 +0000
ROA not before: Sun 01 Jan 2023 22:35:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47622
IP address blocks: 91.246.26.0/23 maxlen: 24
185.169.120.0/22 maxlen: 24
5.199.0.0/17 maxlen: 24
212.74.32.0/19 maxlen: 24
2a00:17f8::/32 maxlen: 64
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:79:5b:75:d9:21:9e:a6:49:fe:ba:0b:00:5e:86:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51cf732a8a7439e9280f23ef57849814af195ae0
Validity
Not Before: Jan 1 22:35:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=953fe2ff821319953db355247f0a3defff5c41be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:d2:47:8b:52:da:eb:db:b8:a9:f3:f9:e1:13:
dd:87:2c:e6:51:82:75:78:94:5c:62:72:0f:10:8e:
08:70:79:51:32:cd:bd:94:11:16:7a:46:78:b7:50:
c6:72:85:b0:ae:38:ba:f0:25:2b:db:75:5e:bc:03:
23:2c:22:9c:42:a9:2d:47:6a:8c:bf:98:3d:8f:34:
96:c4:14:c4:b1:d9:b2:bf:a3:36:8b:8b:e1:b8:98:
91:87:f5:6e:5d:d2:b2:f8:e2:24:02:06:55:2f:fa:
6d:2b:07:4d:d6:9c:e5:0f:30:ac:5a:fe:ab:e4:3d:
11:ac:e6:c6:0a:ee:e6:67:ad:8c:9f:bb:29:c6:d1:
b8:29:7a:de:2b:58:0d:b7:91:21:d4:94:89:cc:60:
2e:b5:f2:e0:d7:b7:db:4b:a5:33:30:38:9b:5a:81:
22:a6:9d:c0:e1:66:3e:58:ac:3b:5b:73:e0:ad:31:
8a:55:97:dc:37:6d:8e:c3:3f:63:d2:2b:34:bf:e6:
3e:a0:63:9f:9c:ea:c5:6b:31:5f:1b:d2:b0:3d:a9:
c9:d5:c8:b9:b2:de:16:e3:80:c9:13:00:f8:75:29:
e6:66:1f:2a:1e:2d:c0:fa:69:ce:29:7e:20:c2:cf:
a2:19:78:f0:ba:d6:fd:fd:14:c0:c5:d5:eb:f2:fb:
3b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:3F:E2:FF:82:13:19:95:3D:B3:55:24:7F:0A:3D:EF:FF:5C:41:BE
X509v3 Authority Key Identifier:
keyid:51:CF:73:2A:8A:74:39:E9:28:0F:23:EF:57:84:98:14:AF:19:5A:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uc9zKop0OekoDyPvV4SYFK8ZWuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/9a6638-c8fd-43cf-b1c4-b071c7efd915/1/lT_i_4ITGZU9s1Ukfwo97_9cQb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/9a6638-c8fd-43cf-b1c4-b071c7efd915/1/Uc9zKop0OekoDyPvV4SYFK8ZWuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.199.0.0/17
91.246.26.0/23
185.169.120.0/22
212.74.32.0/19
IPv6:
2a00:17f8::/32
Signature Algorithm: sha256WithRSAEncryption
98:88:d2:f7:b0:e9:06:d1:54:1d:23:6a:94:58:ba:fb:02:99:
11:90:6f:99:4d:a5:d9:3a:3b:34:8f:52:a6:90:6c:94:0d:5c:
fe:b6:e1:54:90:be:7e:ab:00:89:fc:c7:aa:97:dd:09:f1:b0:
dd:67:e2:4b:70:cb:45:0b:e9:07:e9:15:e0:21:27:4f:38:50:
9e:97:e1:f9:f6:50:93:80:c7:32:e4:a0:01:1c:e4:40:f5:30:
ee:23:63:bd:1c:a1:bb:07:8b:cb:43:55:1e:bb:9a:df:2f:63:
58:72:7a:c1:47:18:2f:6d:ad:d0:9b:54:03:4f:19:74:32:16:
65:7f:97:1d:07:af:8d:08:54:5b:68:b8:0d:73:b1:9f:2e:18:
bf:2d:ef:d2:a5:16:86:10:60:44:83:e7:bb:8d:17:7f:23:89:
31:04:56:28:85:19:8e:5a:94:41:ae:4d:70:fc:49:d0:6e:3b:
f8:10:23:9c:df:43:18:78:eb:94:84:0b:cb:86:db:cd:19:18:
7d:63:8a:11:1f:5e:19:9f:a0:16:91:45:28:da:00:56:8c:ed:
e5:3a:8c:a3:6f:92:16:07:6a:7f:da:cb:a1:f6:af:d0:4f:ce:
98:18:ad:4d:a6:ec:75:65:52:b0:8b:56:61:4a:30:b1:96:d9:
ec:77:7d:ad
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAYVveVt12SGepkn+ugsAXoYYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxY2Y3MzJhOGE3NDM5ZTkyODBmMjNlZjU3ODQ5ODE0YWYx
OTVhZTAwHhcNMjMwMTAxMjIzNTAyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NTNmZTJmZjgyMTMxOTk1M2RiMzU1MjQ3ZjBhM2RlZmZmNWM0MWJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8NJHi1La69u4qfP54RPdhyzmUYJ1
eJRcYnIPEI4IcHlRMs29lBEWekZ4t1DGcoWwrji68CUr23VevAMjLCKcQqktR2qM
v5g9jzSWxBTEsdmyv6M2i4vhuJiRh/VuXdKy+OIkAgZVL/ptKwdN1pzlDzCsWv6r
5D0RrObGCu7mZ62Mn7spxtG4KXreK1gNt5Eh1JSJzGAutfLg17fbS6UzMDibWoEi
pp3A4WY+WKw7W3PgrTGKVZfcN22Owz9j0is0v+Y+oGOfnOrFazFfG9KwPanJ1ci5
st4W44DJEwD4dSnmZh8qHi3A+mnOKX4gws+iGXjwutb9/RTAxdXr8vs7pQIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFJU/4v+CExmVPbNVJH8KPe//XEG+MB8GA1UdIwQY
MBaAFFHPcyqKdDnpKA8j71eEmBSvGVrgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWM5ektvcDBPZWtvRHlQdlY0U1lGSzhaV3VBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy85YTY2MzgtYzhmZC00M2NmLWIxYzQt
YjA3MWM3ZWZkOTE1LzEvbFRfaV80SVRHWlU5czFVa2Z3bzk3XzljUWI0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy85YTY2MzgtYzhmZC00M2NmLWIxYzQtYjA3MWM3ZWZkOTE1
LzEvVWM5ektvcDBPZWtvRHlQdlY0U1lGSzhaV3VBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQHBccAAwQB
W/YaAwQCual4AwQF1EogMA0EAgACMAcDBQAqABf4MA0GCSqGSIb3DQEBCwUAA4IB
AQCYiNL3sOkG0VQdI2qUWLr7ApkRkG+ZTaXZOjs0j1KmkGyUDVz+tuFUkL5+qwCJ
/Meql90J8bDdZ+JLcMtFC+kH6RXgISdPOFCel+H59lCTgMcy5KABHORA9TDuI2O9
HKG7B4vLQ1Ueu5rfL2NYcnrBRxgvba3Qm1QDTxl0MhZlf5cdB6+NCFRbaLgNc7Gf
Lhi/Le/SpRaGEGBEg+e7jRd/I4kxBFYohRmOWpRBrk1w/EnQbjv4ECOc30MYeOuU
hAvLhtvNGRh9Y4oRH14Zn6AWkUUo2gBWjO3lOoyjb5IWB2p/2suh9q/QT86YGK1N
pux1ZVKwi1ZhSjCxltnsd32t
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:04 2024 by rpki-client on console-fra.rpki-client.org