Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/5915c8-003c-4d98-8243-cfdadbdc48ec/1/x93bKrRZri2yzIi9t2-W_rLx_Gc.roa
File: x93bKrRZri2yzIi9t2-W_rLx_Gc.roa (raw, json)
Hash identifier: koVZ6/rVynKDFH5kXhtC4MZklEQo9nEWSS2zCgRfr/4=
Subject key identifier: C7:DD:DB:2A:B4:59:AE:2D:B2:CC:88:BD:B7:6F:96:FE:B2:F1:FC:67
Certificate issuer: /CN=d5dcde2125f04058ad4f478e178884142cf2dad0
Certificate serial: 0185727A23AE476F4C37F680DDC47542CC89
Authority key identifier: D5:DC:DE:21:25:F0:40:58:AD:4F:47:8E:17:88:84:14:2C:F2:DA:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1dzeISXwQFitT0eOF4iEFCzy2tA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/5915c8-003c-4d98-8243-cfdadbdc48ec/1/x93bKrRZri2yzIi9t2-W_rLx_Gc.roa
Signing time: Mon 02 Jan 2023 12:34:45 +0000
ROA not before: Mon 02 Jan 2023 12:34:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31543
IP address blocks: 94.198.136.0/21 maxlen: 24
176.121.56.0/22 maxlen: 24
176.104.224.0/20 maxlen: 24
83.218.160.0/19 maxlen: 24
2a00:15c0::/29 maxlen: 48
Validation: Failed, certificate revoked on Tue 31 Oct 2023 07:41:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:7a:23:ae:47:6f:4c:37:f6:80:dd:c4:75:42:cc:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5dcde2125f04058ad4f478e178884142cf2dad0
Validity
Not Before: Jan 2 12:34:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c7dddb2ab459ae2db2cc88bdb76f96feb2f1fc67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:34:ca:e5:ea:2c:a8:0f:f2:a0:04:2c:15:fe:
01:15:69:40:7f:dc:57:d7:8f:3e:68:a0:a0:1a:09:
8f:f0:31:4c:79:1b:ac:03:6c:19:c7:2d:a0:ab:41:
57:ac:be:c6:28:03:d4:f1:11:71:8a:ab:f9:80:ee:
71:69:6a:01:0b:0e:f4:6d:b1:90:97:c3:ed:9a:bc:
35:a7:a3:36:5d:e7:03:cf:04:62:1e:d4:0c:b0:e7:
21:1f:a3:4e:b8:2c:d7:fc:12:83:af:ac:4b:e3:8c:
d4:67:68:0e:13:2f:16:09:e9:14:7a:07:d9:b8:cf:
29:a6:29:bb:64:2e:77:a3:b0:dc:77:ad:ba:75:80:
1c:07:69:fc:d6:3e:a8:73:a7:85:9b:4b:10:89:02:
c7:d9:fe:20:81:b0:3f:a8:ca:e6:73:4e:49:dc:cf:
4a:9f:23:34:7b:16:38:35:be:4e:23:93:28:7e:35:
01:7b:64:bf:f6:4f:f9:af:cb:1e:8f:ef:ce:89:4e:
33:85:11:b9:19:f0:be:06:1f:25:16:e8:43:b1:d2:
d3:12:d2:4d:67:72:46:8a:8b:f8:fe:d2:73:2e:24:
4f:bc:af:56:8e:0a:ae:9f:3d:4c:b2:49:c5:13:48:
05:76:0e:19:b9:92:50:21:78:5e:64:e5:c1:4e:85:
30:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:DD:DB:2A:B4:59:AE:2D:B2:CC:88:BD:B7:6F:96:FE:B2:F1:FC:67
X509v3 Authority Key Identifier:
keyid:D5:DC:DE:21:25:F0:40:58:AD:4F:47:8E:17:88:84:14:2C:F2:DA:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1dzeISXwQFitT0eOF4iEFCzy2tA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5915c8-003c-4d98-8243-cfdadbdc48ec/1/x93bKrRZri2yzIi9t2-W_rLx_Gc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5915c8-003c-4d98-8243-cfdadbdc48ec/1/1dzeISXwQFitT0eOF4iEFCzy2tA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.218.160.0/19
94.198.136.0/21
176.104.224.0/20
176.121.56.0/22
IPv6:
2a00:15c0::/29
Signature Algorithm: sha256WithRSAEncryption
98:e6:76:dd:c8:a9:88:bc:b5:06:47:69:d1:0a:b5:64:2a:7d:
33:b1:99:70:d3:d0:9d:ca:25:c4:b5:f7:4c:c0:1f:e4:21:07:
c1:b7:7b:16:d2:61:af:ee:cd:96:09:51:4f:0f:90:1d:ec:3e:
25:b6:2d:9c:6d:b2:95:48:78:7f:34:db:06:5d:6c:7d:33:f6:
13:1b:b9:a1:ea:0c:be:78:71:7e:1d:1c:bd:07:62:12:21:b2:
02:4c:2e:ef:e8:38:25:57:48:eb:d0:e3:9a:05:a6:22:fe:5d:
c2:9d:ad:c2:42:ca:68:ae:b0:00:14:14:74:27:ce:e7:6d:72:
3a:63:b6:1f:48:f1:f8:2c:96:d8:04:ee:bd:14:ca:00:3e:d4:
98:8c:5d:f5:82:e3:36:50:0c:91:75:b9:b0:66:57:b9:d0:cf:
ab:52:61:64:43:ef:d1:e7:15:d3:59:5f:95:d8:84:ff:22:d7:
14:c1:f0:dc:91:14:7d:e2:2b:42:48:de:9d:ca:c3:9f:01:b0:
bb:ad:ae:71:da:6d:a9:22:e6:58:5a:a5:38:43:6b:70:de:78:
b5:64:0b:a9:c5:09:8c:90:b3:24:29:df:73:53:1a:7c:f0:2d:
db:cc:7d:ce:93:29:13:19:b3:2f:09:5a:8a:0d:a6:f6:42:93:
eb:e1:69:e2
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAYVyeiOuR29MN/aA3cR1QsyJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1ZGNkZTIxMjVmMDQwNThhZDRmNDc4ZTE3ODg4NDE0MmNm
MmRhZDAwHhcNMjMwMTAyMTIzNDQ1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjN2RkZGIyYWI0NTlhZTJkYjJjYzg4YmRiNzZmOTZmZWIyZjFmYzY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzTK5eosqA/yoAQsFf4BFWlAf9xX
148+aKCgGgmP8DFMeRusA2wZxy2gq0FXrL7GKAPU8RFxiqv5gO5xaWoBCw70bbGQ
l8Ptmrw1p6M2XecDzwRiHtQMsOchH6NOuCzX/BKDr6xL44zUZ2gOEy8WCekUegfZ
uM8ppim7ZC53o7Dcd626dYAcB2n81j6oc6eFm0sQiQLH2f4ggbA/qMrmc05J3M9K
nyM0exY4Nb5OI5MofjUBe2S/9k/5r8sej+/OiU4zhRG5GfC+Bh8lFuhDsdLTEtJN
Z3JGiov4/tJzLiRPvK9Wjgqunz1MsknFE0gFdg4ZuZJQIXheZOXBToUw+wIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFMfd2yq0Wa4tssyIvbdvlv6y8fxnMB8GA1UdIwQY
MBaAFNXc3iEl8EBYrU9HjheIhBQs8trQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWR6ZUlTWHdRRml0VDBlT0Y0aUVGQ3p5MnRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy81OTE1YzgtMDAzYy00ZDk4LTgyNDMt
Y2ZkYWRiZGM0OGVjLzEveDkzYktyUlpyaTJ5eklpOXQyLVdfckx4X0djLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy81OTE1YzgtMDAzYy00ZDk4LTgyNDMtY2ZkYWRiZGM0OGVj
LzEvMWR6ZUlTWHdRRml0VDBlT0Y0aUVGQ3p5MnRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQFU9qgAwQD
XsaIAwQEsGjgAwQCsHk4MA0EAgACMAcDBQMqABXAMA0GCSqGSIb3DQEBCwUAA4IB
AQCY5nbdyKmIvLUGR2nRCrVkKn0zsZlw09CdyiXEtfdMwB/kIQfBt3sW0mGv7s2W
CVFPD5Ad7D4lti2cbbKVSHh/NNsGXWx9M/YTG7mh6gy+eHF+HRy9B2ISIbICTC7v
6DglV0jr0OOaBaYi/l3Cna3CQsporrAAFBR0J87nbXI6Y7YfSPH4LJbYBO69FMoA
PtSYjF31guM2UAyRdbmwZle50M+rUmFkQ+/R5xXTWV+V2IT/ItcUwfDckRR94itC
SN6dysOfAbC7ra5x2m2pIuZYWqU4Q2tw3ni1ZAupxQmMkLMkKd9zUxp88C3bzH3O
kykTGbMvCVqKDab2QpPr4Wni
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:10 2024 by rpki-client on console-ams.rpki-client.org