Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/hF-A0ad9Qgr1ozLcA4Xim-6Bp1c.roa
File: hF-A0ad9Qgr1ozLcA4Xim-6Bp1c.roa (raw, json)
Hash identifier: GJP4RBP1QXtDbe0RR9VG6XDErEUnZcoIgzLwsyhcjns=
Subject key identifier: 84:5F:80:D1:A7:7D:42:0A:F5:A3:32:DC:03:85:E2:9B:EE:81:A7:57
Certificate issuer: /CN=53d9c969675a27d515d8fab2c63cde0ed056491e
Certificate serial: 018CC7272DA49C3896772611656AD706279B
Authority key identifier: 53:D9:C9:69:67:5A:27:D5:15:D8:FA:B2:C6:3C:DE:0E:D0:56:49:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/hF-A0ad9Qgr1ozLcA4Xim-6Bp1c.roa
Signing time: Mon 01 Jan 2024 22:31:22 +0000
ROA not before: Mon 01 Jan 2024 22:31:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207786
IP address blocks: 195.85.218.0/24 maxlen: 24
195.85.226.0/24 maxlen: 24
195.85.223.0/24 maxlen: 24
195.85.244.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 May 2024 17:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:2d:a4:9c:38:96:77:26:11:65:6a:d7:06:27:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53d9c969675a27d515d8fab2c63cde0ed056491e
Validity
Not Before: Jan 1 22:31:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=845f80d1a77d420af5a332dc0385e29bee81a757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:bf:24:70:2f:07:63:d0:40:6b:aa:87:90:f9:
eb:2a:14:2a:3a:54:b5:72:67:cb:50:6f:2a:63:c0:
c4:ba:69:78:5a:13:e2:3d:72:10:02:31:2e:d2:0e:
68:9c:49:44:42:24:03:57:50:a7:42:c1:5f:4b:07:
08:5f:b2:87:f0:9d:b9:de:d8:4c:85:ed:11:be:0a:
e1:2c:a4:80:d6:f5:58:4c:23:61:74:b3:1d:58:1d:
c8:d5:77:ee:5a:08:1b:69:52:bc:54:90:31:a6:49:
3a:3c:1b:93:5b:6a:ed:a5:70:d8:d6:9f:3e:0a:92:
c6:ce:af:a1:c6:6c:98:2d:f8:82:95:c0:ab:4a:35:
21:78:cc:80:e1:39:c9:9e:f5:e2:39:38:06:bc:5f:
1e:ac:67:fc:c3:db:f3:aa:77:a5:18:ec:df:ce:5c:
6e:00:91:2e:18:2c:84:a0:b0:37:40:52:3a:39:65:
cc:f1:02:fc:b0:e1:b7:dd:25:8d:90:02:d1:9c:28:
f7:3a:66:80:98:1e:6e:76:5a:7e:0b:b8:ae:a5:13:
d8:1c:f6:52:a2:0e:00:e2:18:1f:39:c8:00:3a:82:
9a:55:5c:f8:6f:9f:89:21:f3:d1:a3:70:4b:77:5e:
ea:25:80:78:f1:ce:e5:d5:c1:59:c7:ec:7c:5a:2c:
d7:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:5F:80:D1:A7:7D:42:0A:F5:A3:32:DC:03:85:E2:9B:EE:81:A7:57
X509v3 Authority Key Identifier:
keyid:53:D9:C9:69:67:5A:27:D5:15:D8:FA:B2:C6:3C:DE:0E:D0:56:49:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/hF-A0ad9Qgr1ozLcA4Xim-6Bp1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.85.218.0/24
195.85.223.0/24
195.85.226.0/24
195.85.244.0/24
Signature Algorithm: sha256WithRSAEncryption
43:d3:66:81:3f:6e:fc:0d:8e:c5:e3:29:ab:e7:26:ab:eb:17:
76:2a:a8:c8:98:b1:c9:99:49:3e:9b:68:ca:a6:16:f7:d1:c5:
59:5f:3d:7b:54:11:94:27:bb:c4:ae:e0:71:f1:a0:48:8a:ce:
b9:cc:70:9e:65:9f:49:89:b7:7f:37:1c:6a:f7:1a:3f:5a:8f:
da:24:d6:d9:a7:6b:dd:bf:8f:11:41:5a:71:50:02:6c:a1:b7:
7e:4c:3a:8d:a4:2a:83:a2:b7:64:c4:21:cb:f2:73:5c:5c:23:
2c:f0:b0:66:88:d3:d5:5d:26:f1:e2:f6:59:a3:88:a9:9d:36:
cd:98:64:a0:df:c5:8e:68:76:88:6b:51:76:c0:20:44:49:35:
69:25:23:ad:85:23:fc:a1:39:c9:ae:5b:8c:88:0b:c4:56:28:
7b:d1:62:4d:11:92:65:88:a5:df:81:78:0a:5a:7c:3a:1d:ba:
6e:6a:81:b0:33:5e:08:69:5d:7b:be:cd:a1:6b:77:57:4a:16:
4c:06:32:e6:48:ab:e1:d9:40:fc:a9:2f:2b:76:5f:d9:cb:91:
ec:05:13:09:0d:bf:c9:30:88:c9:b2:c0:85:65:af:99:6c:3c:
df:8a:f6:f4:c5:aa:16:b2:a8:11:d6:71:d2:1c:8b:f5:06:9f:
38:01:01:38
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYzHJy2knDiWdyYRZWrXBiebMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzZDljOTY5Njc1YTI3ZDUxNWQ4ZmFiMmM2M2NkZTBlZDA1
NjQ5MWUwHhcNMjQwMTAxMjIzMTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NDVmODBkMWE3N2Q0MjBhZjVhMzMyZGMwMzg1ZTI5YmVlODFhNzU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmL8kcC8HY9BAa6qHkPnrKhQqOlS1
cmfLUG8qY8DEuml4WhPiPXIQAjEu0g5onElEQiQDV1CnQsFfSwcIX7KH8J253thM
he0RvgrhLKSA1vVYTCNhdLMdWB3I1XfuWggbaVK8VJAxpkk6PBuTW2rtpXDY1p8+
CpLGzq+hxmyYLfiClcCrSjUheMyA4TnJnvXiOTgGvF8erGf8w9vzqnelGOzfzlxu
AJEuGCyEoLA3QFI6OWXM8QL8sOG33SWNkALRnCj3OmaAmB5udlp+C7iupRPYHPZS
og4A4hgfOcgAOoKaVVz4b5+JIfPRo3BLd17qJYB48c7l1cFZx+x8WizXfwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFIRfgNGnfUIK9aMy3AOF4pvugadXMB8GA1UdIwQY
MBaAFFPZyWlnWifVFdj6ssY83g7QVkkeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTluSmFXZGFKOVVWMlBxeXhqemVEdEJXU1I0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC85OTEwN2EtM2IxYi00YjVlLWFlMTUt
Zjk1YzYwYjQ2NmEwLzEvaEYtQTBhZDlRZ3Ixb3pMY0E0WGltLTZCcDFjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC85OTEwN2EtM2IxYi00YjVlLWFlMTUtZjk1YzYwYjQ2NmEw
LzEvVTluSmFXZGFKOVVWMlBxeXhqemVEdEJXU1I0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAw1XaAwQA
w1XfAwQAw1XiAwQAw1X0MA0GCSqGSIb3DQEBCwUAA4IBAQBD02aBP278DY7F4ymr
5yar6xd2KqjImLHJmUk+m2jKphb30cVZXz17VBGUJ7vEruBx8aBIis65zHCeZZ9J
ibd/Nxxq9xo/Wo/aJNbZp2vdv48RQVpxUAJsobd+TDqNpCqDordkxCHL8nNcXCMs
8LBmiNPVXSbx4vZZo4ipnTbNmGSg38WOaHaIa1F2wCBESTVpJSOthSP8oTnJrluM
iAvEVih70WJNEZJliKXfgXgKWnw6HbpuaoGwM14IaV17vs2ha3dXShZMBjLmSKvh
2UD8qS8rdl/Zy5HsBRMJDb/JMIjJssCFZa+ZbDzfivb0xaoWsqgR1nHSHIv1Bp84
AQE4
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:14 2024 by rpki-client on console-fra.rpki-client.org