Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/k4sZBVwNPFYJ8xV_Xb6YP7wvY4c.roa
File: k4sZBVwNPFYJ8xV_Xb6YP7wvY4c.roa (raw, json)
Hash identifier: a1+DsA2V5hAZ0/M4pnxvEmfe0x2IXZi0BX9Brop2tjg=
Subject key identifier: 93:8B:19:05:5C:0D:3C:56:09:F3:15:7F:5D:BE:98:3F:BC:2F:63:87
Certificate issuer: /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Certificate serial: 0190351CBE576AF034E49131E9A9EE642C62
Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/k4sZBVwNPFYJ8xV_Xb6YP7wvY4c.roa
Signing time: Thu 20 Jun 2024 10:06:34 +0000
ROA not before: Thu 20 Jun 2024 10:06:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199614
IP address blocks: 80.93.192.0/24 maxlen: 24
80.93.194.0/24 maxlen: 24
80.93.195.0/24 maxlen: 24
80.93.196.0/24 maxlen: 24
80.93.197.0/24 maxlen: 24
80.93.201.0/24 maxlen: 24
80.93.202.0/24 maxlen: 24
80.93.204.0/24 maxlen: 24
80.93.205.0/24 maxlen: 24
80.93.206.0/24 maxlen: 24
80.93.207.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 14 Aug 2024 13:21:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:35:1c:be:57:6a:f0:34:e4:91:31:e9:a9:ee:64:2c:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Validity
Not Before: Jun 20 10:06:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=938b19055c0d3c5609f3157f5dbe983fbc2f6387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:29:02:0b:1c:9b:0b:30:94:08:9b:e4:ab:4e:
63:1d:b7:b4:1b:28:14:19:b9:8a:8f:eb:8a:82:27:
f1:b7:76:9d:6b:5f:1f:ef:13:cd:d2:aa:c8:aa:09:
4e:97:5d:1a:9c:ad:92:f1:9f:71:11:b9:61:3e:58:
19:83:2b:5e:26:6d:38:93:3b:83:17:bb:87:49:35:
b5:c3:fd:e4:21:6a:53:fe:be:ac:78:19:4f:35:53:
da:3c:91:67:6f:49:23:66:2a:ea:af:1e:70:c5:22:
f1:e8:ef:54:00:77:fb:3b:c1:83:5f:cd:2d:8e:6d:
89:e1:12:08:c7:9f:8c:72:ea:c0:06:ec:5c:1f:c1:
1d:7d:42:55:a5:83:1f:28:0f:db:97:d5:e1:13:cb:
0c:cf:f8:12:90:a6:eb:ca:f4:f2:24:4e:8a:76:0c:
bb:39:a9:74:aa:4e:ef:15:4a:04:40:87:21:92:91:
8e:bc:7d:86:2d:a1:6a:09:5f:f1:c3:e8:75:4a:32:
d2:31:f0:15:03:b1:de:d2:11:47:42:53:14:eb:01:
f4:bc:59:db:92:32:b9:fa:d1:46:aa:57:d0:ec:2c:
5a:fd:af:a1:cb:54:89:f9:57:18:19:77:00:77:c3:
ec:8f:5c:f4:00:c4:99:ad:0d:81:1b:72:62:4a:5a:
32:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:8B:19:05:5C:0D:3C:56:09:F3:15:7F:5D:BE:98:3F:BC:2F:63:87
X509v3 Authority Key Identifier:
keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/k4sZBVwNPFYJ8xV_Xb6YP7wvY4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.93.192.0/24
80.93.194.0-80.93.197.255
80.93.201.0-80.93.202.255
80.93.204.0/22
Signature Algorithm: sha256WithRSAEncryption
6a:3f:bb:c2:0b:d2:d3:69:b1:05:42:95:91:57:ea:42:70:6e:
44:c5:bb:a6:04:c2:0d:cf:02:70:c4:01:60:51:a1:5d:08:e9:
96:20:47:c2:72:bf:4e:02:fb:bd:00:1c:72:d1:ce:d7:3d:fe:
c4:9b:fc:d7:c3:4d:57:90:fa:41:bc:05:f1:9b:cc:78:ef:53:
94:6d:9d:6e:cc:d4:de:e1:e2:48:97:45:af:f0:61:c2:41:10:
64:76:94:57:8c:d8:af:8c:25:3c:87:05:79:fb:de:32:f7:fd:
be:c1:cd:44:d8:41:db:98:fc:65:a0:19:d4:14:f6:d9:62:1b:
5f:a1:1d:87:bc:f3:1b:5f:e4:a7:e6:80:a7:9a:26:af:35:05:
8a:05:c9:ca:ae:2b:93:0d:4e:76:50:16:81:42:69:1e:e5:7b:
33:b2:aa:aa:81:f8:01:e0:8a:79:45:74:88:55:b6:e6:5a:96:
79:de:83:61:cd:d4:a3:37:3c:6d:e0:19:6b:23:e0:c9:83:09:
48:59:eb:33:bc:37:0c:e1:38:b1:82:e5:96:16:d3:f4:94:f2:
ea:44:8a:80:89:65:5b:5a:f3:e8:a8:cc:55:f8:01:1b:86:f9:
99:21:5c:1a:b6:0d:82:68:db:43:97:48:cf:84:7b:26:6b:3f:
1e:f8:23:5c
-----BEGIN CERTIFICATE-----
MIIFHzCCBAegAwIBAgISAZA1HL5XavA05JEx6anuZCxiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5OGY3YmEzNGJjNjU2N2JkMzYxNmQ1NzRmNzI4NWRkNzU1
NmRiZmQwHhcNMjQwNjIwMTAwNjM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MzhiMTkwNTVjMGQzYzU2MDlmMzE1N2Y1ZGJlOTgzZmJjMmY2Mzg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlikCCxybCzCUCJvkq05jHbe0GygU
GbmKj+uKgifxt3ada18f7xPN0qrIqglOl10anK2S8Z9xEblhPlgZgyteJm04kzuD
F7uHSTW1w/3kIWpT/r6seBlPNVPaPJFnb0kjZirqrx5wxSLx6O9UAHf7O8GDX80t
jm2J4RIIx5+McurABuxcH8EdfUJVpYMfKA/bl9XhE8sMz/gSkKbryvTyJE6Kdgy7
Oal0qk7vFUoEQIchkpGOvH2GLaFqCV/xw+h1SjLSMfAVA7He0hFHQlMU6wH0vFnb
kjK5+tFGqlfQ7Cxa/a+hy1SJ+VcYGXcAd8Psj1z0AMSZrQ2BG3JiSloyvQIDAQAB
o4ICKzCCAicwHQYDVR0OBBYEFJOLGQVcDTxWCfMVf12+mD+8L2OHMB8GA1UdIwQY
MBaAFAmPe6NLxlZ702FtV09yhd11Vtv9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1k5N28wdkdWbnZUWVcxWFQzS0YzWFZXMl8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8zOGM1YWMtYjdlNy00MGRkLTk4ZDMt
ZTIxNjZhZDc0ZTNmLzEvazRzWkJWd05QRllKOHhWX1hiNllQN3d2WTRjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC8zOGM1YWMtYjdlNy00MGRkLTk4ZDMtZTIxNjZhZDc0ZTNm
LzEvQ1k5N28wdkdWbnZUWVcxWFQzS0YzWFZXMl8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAATAoAwQAUF3AMAwD
BAFQXcIDBAFQXcQwDAMEAFBdyQMEAFBdygMEAlBdzDANBgkqhkiG9w0BAQsFAAOC
AQEAaj+7wgvS02mxBUKVkVfqQnBuRMW7pgTCDc8CcMQBYFGhXQjpliBHwnK/TgL7
vQAcctHO1z3+xJv818NNV5D6QbwF8ZvMeO9TlG2dbszU3uHiSJdFr/BhwkEQZHaU
V4zYr4wlPIcFefveMvf9vsHNRNhB25j8ZaAZ1BT22WIbX6Edh7zzG1/kp+aAp5om
rzUFigXJyq4rkw1OdlAWgUJpHuV7M7KqqoH4AeCKeUV0iFW25lqWed6DYc3Uozc8
beAZayPgyYMJSFnrM7w3DOE4sYLllhbT9JTy6kSKgIllW1rz6KjMVfgBG4b5mSFc
GrYNgmjbQ5dIz4R7Jms/HvgjXA==
-----END CERTIFICATE-----
Generated at Wed Aug 14 19:41:55 2024 by rpki-client on console-fra.rpki-client.org