Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Pf6rBJMoB6oBNhKPlGtQoyKl0KM.roa
File: Pf6rBJMoB6oBNhKPlGtQoyKl0KM.roa (raw, json)
Hash identifier: AL67lbP6Vb4XBg4ifNlHrYndfPl6eMLT/tZ5S5JvL5c=
Subject key identifier: 3D:FE:AB:04:93:28:07:AA:01:36:12:8F:94:6B:50:A3:22:A5:D0:A3
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0186081E5AF412C818610EFDEAF7BB51FA6D
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Pf6rBJMoB6oBNhKPlGtQoyKl0KM.roa
Signing time: Tue 31 Jan 2023 13:57:32 +0000
ROA not before: Tue 31 Jan 2023 13:57:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 17447
IP address blocks: 84.54.51.0/24 maxlen: 24
147.78.103.0/24 maxlen: 24
185.246.220.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 14 Feb 2023 10:14:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:08:1e:5a:f4:12:c8:18:61:0e:fd:ea:f7:bb:51:fa:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 31 13:57:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3dfeab04932807aa0136128f946b50a322a5d0a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:92:1a:34:6b:6d:98:d5:c6:e5:a4:40:0c:34:
96:b6:0a:e1:15:26:16:6b:7c:7e:d3:a5:d9:9f:d1:
de:6d:b3:50:49:fb:1b:55:91:23:9b:ac:b8:5b:93:
04:66:ee:68:c4:fe:77:36:0c:23:cf:b2:fc:e7:a0:
19:ff:81:96:c1:5a:09:59:5b:f4:5b:a5:02:82:b7:
65:29:22:68:4a:84:2d:1b:40:4f:25:c5:c1:77:4e:
50:c9:9a:12:32:62:df:55:a0:d3:66:10:56:7b:de:
d2:47:39:50:f8:75:a8:8e:84:ad:3f:b7:80:e6:14:
6e:cf:23:5b:c8:9f:fa:28:f7:2c:04:0c:38:86:c5:
9a:56:fa:01:1b:84:93:84:13:fd:64:0b:dc:71:0e:
79:99:8a:be:63:13:f7:0a:f4:28:e8:91:11:75:f0:
01:8c:dd:d1:0f:04:c4:4a:00:11:ea:db:78:b4:b0:
9a:6f:50:a3:d7:33:60:7e:67:80:ff:ae:2d:97:97:
9d:d8:50:b2:52:4e:21:87:d3:de:ff:66:a5:37:42:
66:00:81:6b:82:ff:46:fa:4a:e8:83:3a:e4:6e:1a:
51:e8:be:63:29:4f:0a:e1:5b:eb:d4:f5:cb:bf:58:
2a:9c:9b:54:03:42:e6:d6:eb:97:6a:62:4d:ac:b7:
b3:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:FE:AB:04:93:28:07:AA:01:36:12:8F:94:6B:50:A3:22:A5:D0:A3
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Pf6rBJMoB6oBNhKPlGtQoyKl0KM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.54.51.0/24
147.78.103.0/24
185.246.220.0/24
Signature Algorithm: sha256WithRSAEncryption
39:26:02:d6:c6:0f:e0:dc:f1:24:40:a6:5a:53:07:6d:84:f2:
d6:cf:7d:d2:f9:59:1d:f0:04:e8:82:39:60:91:98:e5:20:40:
69:e0:21:55:8f:ab:c9:3a:a1:98:d2:ea:29:fc:55:0f:b6:96:
26:b5:d5:36:bf:42:85:65:dc:bf:a3:7c:f1:cb:2a:0e:ee:3d:
26:f3:f4:82:31:cb:c5:8b:06:41:d3:8a:d6:a6:44:73:e9:2d:
e0:b8:e3:4a:cb:db:d0:aa:79:f6:68:73:4e:f4:53:6b:57:86:
05:e3:f9:31:56:a0:a2:fb:3b:95:ab:96:b9:cc:61:c2:cf:6b:
3b:4e:44:25:ce:5a:23:39:8c:5a:00:f2:7e:4a:83:45:38:a6:
2e:cc:fd:e1:39:cc:7a:51:b3:5d:a4:89:c6:1c:30:af:97:c1:
9f:3d:1a:d4:0d:c8:1d:29:fa:8c:6b:91:5a:84:54:39:7c:d4:
2e:4d:b8:91:1a:a7:c3:56:3c:f3:83:02:02:1e:18:6d:d6:2f:
8d:c4:67:ac:e5:22:b6:8c:27:74:1e:db:80:1d:2e:d4:74:e1:
98:47:5d:e3:25:43:9d:71:bd:01:51:e0:3d:2f:39:45:9d:c2:
0a:4f:06:1f:dd:0a:9f:1a:2d:e3:fa:a0:46:da:a6:e5:15:5f:
77:d9:65:dc
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYYIHlr0EsgYYQ796ve7UfptMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjMwMTMxMTM1NzMyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZGZlYWIwNDkzMjgwN2FhMDEzNjEyOGY5NDZiNTBhMzIyYTVkMGEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJIaNGttmNXG5aRADDSWtgrhFSYW
a3x+06XZn9HebbNQSfsbVZEjm6y4W5MEZu5oxP53Ngwjz7L856AZ/4GWwVoJWVv0
W6UCgrdlKSJoSoQtG0BPJcXBd05QyZoSMmLfVaDTZhBWe97SRzlQ+HWojoStP7eA
5hRuzyNbyJ/6KPcsBAw4hsWaVvoBG4SThBP9ZAvccQ55mYq+YxP3CvQo6JERdfAB
jN3RDwTESgAR6tt4tLCab1Cj1zNgfmeA/64tl5ed2FCyUk4hh9Pe/2alN0JmAIFr
gv9G+krogzrkbhpR6L5jKU8K4Vvr1PXLv1gqnJtUA0Lm1uuXamJNrLez7wIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFD3+qwSTKAeqATYSj5RrUKMipdCjMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvUGY2ckJKTW9CNm9CTmhLUGxHdFFveUtsMEtNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAVDYzAwQA
k05nAwQAufbcMA0GCSqGSIb3DQEBCwUAA4IBAQA5JgLWxg/g3PEkQKZaUwdthPLW
z33S+Vkd8ATogjlgkZjlIEBp4CFVj6vJOqGY0uop/FUPtpYmtdU2v0KFZdy/o3zx
yyoO7j0m8/SCMcvFiwZB04rWpkRz6S3guONKy9vQqnn2aHNO9FNrV4YF4/kxVqCi
+zuVq5a5zGHCz2s7TkQlzlojOYxaAPJ+SoNFOKYuzP3hOcx6UbNdpInGHDCvl8Gf
PRrUDcgdKfqMa5FahFQ5fNQuTbiRGqfDVjzzgwICHhht1i+NxGes5SK2jCd0HtuA
HS7UdOGYR13jJUOdcb0BUeA9LzlFncIKTwYf3QqfGi3j+qBG2qblFV932WXc
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:06 2024 by rpki-client on console-fra.rpki-client.org