Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/vAsXf2r00iN7-6hYEeaz3O9W0QU.roa
File: vAsXf2r00iN7-6hYEeaz3O9W0QU.roa (raw, json)
Hash identifier: en+4ak/6b8C3osxCC4b1iRV1aULXS1gWIT9//+yiqKY=
Subject key identifier: BC:0B:17:7F:6A:F4:D2:23:7B:FB:A8:58:11:E6:B3:DC:EF:56:D1:05
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 018EE6BB707E091E5C7B38ED5FA1628B566A
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/vAsXf2r00iN7-6hYEeaz3O9W0QU.roa
Signing time: Tue 16 Apr 2024 11:47:07 +0000
ROA not before: Tue 16 Apr 2024 11:47:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13056
IP address blocks: 37.76.160.0/19 maxlen: 19
178.75.64.0/18 maxlen: 18
193.33.62.0/23 maxlen: 23
213.135.128.0/19 maxlen: 19
213.135.128.0/24 maxlen: 24
213.135.134.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 17 Apr 2024 06:49:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:e6:bb:70:7e:09:1e:5c:7b:38:ed:5f:a1:62:8b:56:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Apr 16 11:47:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bc0b177f6af4d2237bfba85811e6b3dcef56d105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b6:c5:28:cc:6a:89:4b:a9:10:e0:73:77:c3:
c8:93:b8:0c:30:92:fd:b8:97:be:20:ce:b5:08:31:
b8:d4:8b:2b:cc:1d:e9:01:c3:23:7b:7c:14:ab:e7:
50:70:e7:c0:1b:eb:6a:ef:24:db:78:b4:59:98:eb:
b6:d2:0f:4a:a4:5f:33:17:35:8a:1f:aa:a4:2d:1e:
38:a0:e8:56:fa:66:8b:48:af:f3:15:d3:3a:c1:f6:
a8:80:f7:64:df:16:f3:bf:34:90:7d:00:a2:51:86:
7c:af:5f:2b:ba:cb:54:1b:c1:8f:94:ed:d1:cb:d1:
a0:75:54:e6:df:a7:a2:44:d9:52:e5:cb:3e:75:54:
75:62:ee:b0:6e:f8:5c:36:c1:49:07:1c:60:d8:6d:
6e:56:70:40:cf:f5:12:82:0d:60:ee:7c:66:a8:5c:
bb:40:fc:bf:a0:88:37:73:6f:13:39:6c:97:b8:6d:
28:e0:ce:e4:34:88:03:ae:6d:5e:74:2e:a3:a9:9f:
38:68:02:3e:97:2c:ea:ce:e3:75:da:b0:f0:8c:de:
77:33:2a:49:7a:fc:23:13:15:97:9f:ba:8c:45:85:
57:e2:55:bd:9a:a7:93:af:46:49:4d:25:f0:b7:e9:
74:2f:8d:5e:ff:0d:cb:8b:87:90:af:cd:97:6e:3d:
ad:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:0B:17:7F:6A:F4:D2:23:7B:FB:A8:58:11:E6:B3:DC:EF:56:D1:05
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/vAsXf2r00iN7-6hYEeaz3O9W0QU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.76.160.0/19
178.75.64.0/18
193.33.62.0/23
213.135.128.0/19
Signature Algorithm: sha256WithRSAEncryption
3c:be:e7:26:22:28:3f:c4:63:99:d6:6b:f2:22:55:88:4f:25:
ae:3b:49:2f:8f:52:d5:b6:1b:7a:b7:86:89:63:26:33:46:9a:
ce:a8:69:dc:0c:17:d4:18:15:a8:3e:71:3d:cc:7e:7e:02:19:
82:6e:28:07:dd:a3:7c:2c:63:b4:dd:cb:9f:86:35:39:98:d7:
28:0c:ee:32:db:ff:04:2c:a2:7d:fc:bc:87:b3:6a:e3:24:05:
19:71:65:e5:db:a2:72:fc:e4:37:63:83:49:3b:40:d0:86:5c:
30:b2:40:60:d3:f0:ae:46:80:90:74:8c:80:39:a7:66:33:59:
5e:03:26:b0:d9:a5:b0:52:c2:a8:c0:de:28:38:83:fd:8c:c7:
96:b1:a8:ca:df:65:8c:c5:57:1a:ba:56:4e:f2:7c:99:9d:2c:
fb:41:de:77:52:d0:aa:94:3f:f1:11:b2:74:e1:1d:32:f8:28:
dc:da:0f:f6:4c:73:f4:96:47:78:27:aa:26:19:9f:9d:ec:2c:
4d:e5:64:93:d5:6d:89:29:d0:47:6b:83:45:2e:c8:b4:34:0a:
b0:32:e8:d1:46:a4:9e:3f:53:84:9e:74:b1:e1:10:d0:94:77:
79:d7:76:a1:c2:b0:e3:f2:29:75:c2:4e:07:6d:fa:21:c4:88:
96:d7:8d:d2
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAY7mu3B+CR5cezjtX6Fii1ZqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlZTUzMWI5YWMyOTkwZDY5YThhNWMzMDIzZTcyZTZkODQx
ZTZjMDkwHhcNMjQwNDE2MTE0NzA3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYzBiMTc3ZjZhZjRkMjIzN2JmYmE4NTgxMWU2YjNkY2VmNTZkMTA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7bFKMxqiUupEOBzd8PIk7gMMJL9
uJe+IM61CDG41IsrzB3pAcMje3wUq+dQcOfAG+tq7yTbeLRZmOu20g9KpF8zFzWK
H6qkLR44oOhW+maLSK/zFdM6wfaogPdk3xbzvzSQfQCiUYZ8r18rustUG8GPlO3R
y9GgdVTm36eiRNlS5cs+dVR1Yu6wbvhcNsFJBxxg2G1uVnBAz/USgg1g7nxmqFy7
QPy/oIg3c28TOWyXuG0o4M7kNIgDrm1edC6jqZ84aAI+lyzqzuN12rDwjN53MypJ
evwjExWXn7qMRYVX4lW9mqeTr0ZJTSXwt+l0L41e/w3Li4eQr82Xbj2t8QIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFLwLF39q9NIje/uoWBHms9zvVtEFMB8GA1UdIwQY
MBaAFF7lMbmsKZDWmopcMCPnLm2EHmwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQt
NWE4NmMyNzU3YzFlLzEvdkFzWGYycjAwaU43LTZoWUVlYXozTzlXMFFVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQtNWE4NmMyNzU3YzFl
LzEvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQFJUygAwQG
sktAAwQBwSE+AwQF1YeAMA0GCSqGSIb3DQEBCwUAA4IBAQA8vucmIig/xGOZ1mvy
IlWITyWuO0kvj1LVtht6t4aJYyYzRprOqGncDBfUGBWoPnE9zH5+AhmCbigH3aN8
LGO03cufhjU5mNcoDO4y2/8ELKJ9/LyHs2rjJAUZcWXl26Jy/OQ3Y4NJO0DQhlww
skBg0/CuRoCQdIyAOadmM1leAyaw2aWwUsKowN4oOIP9jMeWsajK32WMxVcaulZO
8nyZnSz7Qd53UtCqlD/xEbJ04R0y+Cjc2g/2THP0lkd4J6omGZ+d7CxN5WST1W2J
KdBHa4NFLsi0NAqwMujRRqSeP1OEnnSx4RDQlHd513ahwrDj8il1wk4HbfohxIiW
143S
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:26 2024 by rpki-client on console-ams.rpki-client.org