Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/N7835bYazVSOpdmbIyWH1K-e2Ko.roa
File: N7835bYazVSOpdmbIyWH1K-e2Ko.roa (raw, json)
Hash identifier: mXN1JJaVpMwDB/4dwGyJHvDUlpiYSY0L5x6ESQz+4hw=
Subject key identifier: 37:BF:37:E5:B6:1A:CD:54:8E:A5:D9:9B:23:25:87:D4:AF:9E:D8:AA
Certificate issuer: /CN=391a0ecc2b9beaba9eb76d5519fe787b4033fc12
Certificate serial: 018571B0D4378B717370F96938A53E42E67E
Authority key identifier: 39:1A:0E:CC:2B:9B:EA:BA:9E:B7:6D:55:19:FE:78:7B:40:33:FC:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORoOzCub6rqet21VGf54e0Az_BI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/N7835bYazVSOpdmbIyWH1K-e2Ko.roa
Signing time: Mon 02 Jan 2023 08:54:52 +0000
ROA not before: Mon 02 Jan 2023 08:54:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212221
IP address blocks: 91.132.4.0/23 maxlen: 23
89.45.206.0/23 maxlen: 23
89.45.200.0/23 maxlen: 23
89.45.203.0/24 maxlen: 24
89.45.200.0/21 maxlen: 21
89.45.204.0/23 maxlen: 23
89.45.202.0/23 maxlen: 23
212.102.106.0/24 maxlen: 24
2a09:b780::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 06 Feb 2023 20:18:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:b0:d4:37:8b:71:73:70:f9:69:38:a5:3e:42:e6:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=391a0ecc2b9beaba9eb76d5519fe787b4033fc12
Validity
Not Before: Jan 2 08:54:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=37bf37e5b61acd548ea5d99b232587d4af9ed8aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5f:0e:e6:32:31:59:80:ba:2d:77:9b:47:02:
52:48:e0:00:ec:53:65:e7:29:c2:40:81:ce:8b:82:
77:aa:74:29:06:d0:f5:0b:4d:55:07:29:dc:ef:63:
32:62:12:0b:96:4d:67:76:2e:ea:2f:4d:04:ac:d4:
2f:19:95:b2:ee:6a:58:c1:9f:6d:73:79:47:27:13:
b7:cd:ec:db:36:ca:b1:be:9a:9b:bd:11:64:5c:51:
64:b5:49:a9:07:86:50:fb:1f:44:a7:c7:cc:e5:d0:
a2:6a:18:3a:e9:2f:2c:50:54:d7:36:dc:3d:b5:db:
43:c8:7d:36:22:a5:ab:ea:b8:4c:34:93:02:4a:bb:
53:1c:93:45:da:dc:40:0d:b7:0f:70:67:b6:42:e6:
91:0e:2b:ca:e4:aa:b1:f0:29:87:b5:81:e7:fe:4b:
27:06:1d:4e:ea:b0:c0:49:d7:c1:9f:f7:a5:ed:22:
3b:38:d2:69:90:77:94:d5:70:a8:d0:de:94:0f:ac:
d1:9a:41:0f:c0:94:cd:f1:df:37:c2:b3:16:e7:5b:
cc:95:6c:1a:06:88:1d:33:2d:ee:78:30:b7:4a:4f:
ac:ce:93:3d:50:39:a5:44:00:72:8a:72:7e:bc:e4:
ae:85:cd:ec:79:36:66:3d:4d:77:6a:9f:f6:ee:aa:
1b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:BF:37:E5:B6:1A:CD:54:8E:A5:D9:9B:23:25:87:D4:AF:9E:D8:AA
X509v3 Authority Key Identifier:
keyid:39:1A:0E:CC:2B:9B:EA:BA:9E:B7:6D:55:19:FE:78:7B:40:33:FC:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORoOzCub6rqet21VGf54e0Az_BI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/N7835bYazVSOpdmbIyWH1K-e2Ko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.45.200.0/21
91.132.4.0/23
212.102.106.0/24
IPv6:
2a09:b780::/48
Signature Algorithm: sha256WithRSAEncryption
8d:ee:fb:b1:38:c7:79:c8:1f:79:ed:08:05:1a:0c:15:76:ac:
57:64:d0:71:90:86:55:29:5b:03:18:94:e3:0c:56:aa:c9:24:
a0:e9:f4:1f:b6:fb:d6:1a:28:51:e4:de:53:a2:ff:e0:25:9f:
44:43:b0:ba:64:1b:6e:51:0c:69:05:8d:c5:fa:b6:4e:11:c1:
bb:dc:26:b7:9a:77:3c:e3:6e:2a:58:a0:66:81:83:57:8b:b4:
f8:89:15:12:83:c2:d9:5b:5f:91:b8:9c:6f:50:d6:cb:d0:0e:
6c:05:c9:f7:fa:86:f3:df:1d:e1:99:c3:54:fa:32:00:64:54:
76:75:e0:7c:89:ff:c8:f7:52:5a:82:c7:13:1f:69:8b:85:87:
ae:8c:91:50:bf:b0:2b:e0:6b:c9:68:31:5b:99:0c:d7:70:11:
b9:99:5e:b4:11:6c:c5:c7:13:b8:d1:02:27:ce:e4:cf:35:06:
a8:8b:c2:e7:a1:c9:37:f1:b1:6b:7e:19:7a:8d:c2:ed:2b:39:
62:98:56:f3:65:ca:ee:ee:68:23:81:fe:d7:e0:ba:a7:98:d8:
ea:3e:53:9f:de:65:0e:f0:d0:5f:b5:bf:45:4f:5e:57:fa:6d:
5b:89:39:f4:1c:ec:79:ca:c0:d1:a6:26:5b:66:d1:b6:fd:77:
aa:f0:7a:61
-----BEGIN CERTIFICATE-----
MIIFGjCCBAKgAwIBAgISAYVxsNQ3i3FzcPlpOKU+QuZ+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5MWEwZWNjMmI5YmVhYmE5ZWI3NmQ1NTE5ZmU3ODdiNDAz
M2ZjMTIwHhcNMjMwMTAyMDg1NDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzN2JmMzdlNWI2MWFjZDU0OGVhNWQ5OWIyMzI1ODdkNGFmOWVkOGFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtV8O5jIxWYC6LXebRwJSSOAA7FNl
5ynCQIHOi4J3qnQpBtD1C01VBync72MyYhILlk1ndi7qL00ErNQvGZWy7mpYwZ9t
c3lHJxO3zezbNsqxvpqbvRFkXFFktUmpB4ZQ+x9Ep8fM5dCiahg66S8sUFTXNtw9
tdtDyH02IqWr6rhMNJMCSrtTHJNF2txADbcPcGe2QuaRDivK5Kqx8CmHtYHn/ksn
Bh1O6rDASdfBn/el7SI7ONJpkHeU1XCo0N6UD6zRmkEPwJTN8d83wrMW51vMlWwa
BogdMy3ueDC3Sk+szpM9UDmlRAByinJ+vOSuhc3seTZmPU13ap/27qobCQIDAQAB
o4ICJjCCAiIwHQYDVR0OBBYEFDe/N+W2Gs1UjqXZmyMlh9SvntiqMB8GA1UdIwQY
MBaAFDkaDswrm+q6nrdtVRn+eHtAM/wSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1JvT3pDdWI2cnFldDIxVkdmNTRlMEF6X0JJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9jMjdjZDEtNTcwYi00N2QxLWIyNTYt
MTgxNDIyM2Q5MmNlLzEvTjc4MzViWWF6VlNPcGRtYkl5V0gxSy1lMktvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9jMjdjZDEtNTcwYi00N2QxLWIyNTYtMTgxNDIyM2Q5MmNl
LzEvT1JvT3pDdWI2cnFldDIxVkdmNTRlMEF6X0JJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAYBAIAATASAwQDWS3IAwQB
W4QEAwQA1GZqMA8EAgACMAkDBwAqCbeAAAAwDQYJKoZIhvcNAQELBQADggEBAI3u
+7E4x3nIH3ntCAUaDBV2rFdk0HGQhlUpWwMYlOMMVqrJJKDp9B+2+9YaKFHk3lOi
/+Aln0RDsLpkG25RDGkFjcX6tk4RwbvcJreadzzjbipYoGaBg1eLtPiJFRKDwtlb
X5G4nG9Q1svQDmwFyff6hvPfHeGZw1T6MgBkVHZ14HyJ/8j3UlqCxxMfaYuFh66M
kVC/sCvga8loMVuZDNdwEbmZXrQRbMXHE7jRAifO5M81BqiLwuehyTfxsWt+GXqN
wu0rOWKYVvNlyu7uaCOB/tfguqeY2Oo+U5/eZQ7w0F+1v0VPXlf6bVuJOfQc7HnK
wNGmJltm0bb9d6rwemE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:44 2024 by rpki-client on console-fra.rpki-client.org