Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/VOphIvgihwez1bMRVbAu82_L6Og.roa
File: VOphIvgihwez1bMRVbAu82_L6Og.roa (raw, json)
Hash identifier: RXNn/cf873tq54tXSy87TeemtEJiFiQCseyqWiyVu0o=
Subject key identifier: 54:EA:61:22:F8:22:87:07:B3:D5:B3:11:55:B0:2E:F3:6F:CB:E8:E8
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01905C3079254B075D72623E9A8BF91C0359
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/VOphIvgihwez1bMRVbAu82_L6Og.roa
Signing time: Fri 28 Jun 2024 00:13:18 +0000
ROA not before: Fri 28 Jun 2024 00:13:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 79.110.48.0/24 maxlen: 24
87.120.68.0/23 maxlen: 24
93.123.74.0/23 maxlen: 24
93.123.119.0/24 maxlen: 24
185.252.160.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 03 Jul 2024 07:27:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:5c:30:79:25:4b:07:5d:72:62:3e:9a:8b:f9:1c:03:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jun 28 00:13:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=54ea6122f8228707b3d5b31155b02ef36fcbe8e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:de:bf:66:6a:db:ab:90:30:b9:dd:7d:cf:19:
f7:83:1e:da:ef:7b:49:cf:99:20:e5:d8:b5:dc:5a:
c0:33:d4:b1:19:15:9b:76:8d:77:02:45:d3:38:04:
f0:eb:50:86:95:30:eb:88:09:3f:c9:78:21:59:71:
15:68:89:3b:c6:86:11:cf:18:0c:2c:4e:f5:d9:5a:
e3:5d:2e:7f:98:51:fb:8f:15:e6:16:67:d1:02:8c:
d8:a7:93:e6:8b:c5:17:22:ce:29:2b:95:89:b8:1a:
e9:e3:37:a1:34:40:dd:73:1d:78:4c:f4:30:f9:1e:
70:83:0b:77:73:66:61:ee:dc:25:93:ac:db:eb:97:
e7:00:5c:1d:27:3c:fe:dd:c0:28:dc:c8:e8:4d:93:
b0:a7:c8:33:7f:eb:15:74:7d:53:80:82:6c:69:18:
28:fd:e3:75:5c:a8:52:85:da:86:d5:02:cb:28:64:
dc:65:d9:4e:80:36:fc:54:41:c8:19:0c:ef:b9:de:
20:02:96:1b:c9:bf:ed:58:c2:33:c8:a8:00:db:3a:
64:ac:d3:53:f6:7d:8b:0d:c3:bd:2d:5f:2e:fd:51:
ca:f4:33:cc:01:a1:de:0d:95:fc:38:65:e7:c1:09:
37:61:42:b8:c5:ff:6b:22:54:3e:ef:03:7d:ad:fc:
07:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:EA:61:22:F8:22:87:07:B3:D5:B3:11:55:B0:2E:F3:6F:CB:E8:E8
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/VOphIvgihwez1bMRVbAu82_L6Og.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.110.48.0/24
87.120.68.0/23
93.123.74.0/23
93.123.119.0/24
185.252.160.0/23
Signature Algorithm: sha256WithRSAEncryption
40:e2:3d:fc:7c:c5:bf:91:2d:90:24:65:a3:c7:18:3a:d4:60:
b8:96:35:7b:e1:de:20:e6:eb:1f:a6:6c:56:3a:e6:3a:25:7d:
37:72:39:27:66:b3:1e:10:ab:57:22:f1:7b:23:6c:09:00:23:
16:13:df:f6:d2:b8:72:bb:27:7c:7e:58:dd:90:a5:1c:43:7e:
e4:b3:28:02:96:25:bb:7e:07:54:7c:4b:71:2b:cc:4a:c0:dd:
c9:b9:2e:8c:64:e7:36:4a:5f:e1:ea:35:d4:8c:89:bd:0a:d8:
4b:fc:20:ef:0a:06:c1:d6:66:a0:49:9f:81:4c:18:d0:44:20:
ad:c7:74:24:20:a8:3f:30:64:3d:be:ab:07:3d:cd:31:09:db:
ec:a8:3f:16:d1:1c:73:a7:42:b5:1f:df:c0:d6:ef:bd:cb:26:
78:20:ef:49:b1:ac:1a:5d:c7:7c:82:c9:cc:a7:07:c5:72:62:
1e:3c:7c:32:23:04:3a:d2:9a:e9:3d:0e:e9:41:d8:f1:c1:42:
df:27:a5:c9:21:76:75:53:e3:af:90:56:25:a8:c7:80:c6:52:
95:92:87:74:19:6f:0b:f4:43:8e:e9:f2:7d:2e:6b:80:13:a8:
41:cc:9c:b5:b6:9b:b5:ce:aa:3d:63:1f:23:3e:61:59:1e:5d:
17:69:89:9e
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZBcMHklSwddcmI+mov5HANZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjQwNjI4MDAxMzE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NGVhNjEyMmY4MjI4NzA3YjNkNWIzMTE1NWIwMmVmMzZmY2JlOGU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtN6/Zmrbq5Awud19zxn3gx7a73tJ
z5kg5di13FrAM9SxGRWbdo13AkXTOATw61CGlTDriAk/yXghWXEVaIk7xoYRzxgM
LE712VrjXS5/mFH7jxXmFmfRAozYp5Pmi8UXIs4pK5WJuBrp4zehNEDdcx14TPQw
+R5wgwt3c2Zh7twlk6zb65fnAFwdJzz+3cAo3MjoTZOwp8gzf+sVdH1TgIJsaRgo
/eN1XKhShdqG1QLLKGTcZdlOgDb8VEHIGQzvud4gApYbyb/tWMIzyKgA2zpkrNNT
9n2LDcO9LV8u/VHK9DPMAaHeDZX8OGXnwQk3YUK4xf9rIlQ+7wN9rfwHKQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFFTqYSL4IocHs9WzEVWwLvNvy+joMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvVk9waEl2Z2lod2V6MWJNUlZiQXU4Ml9MNk9nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAT24wAwQB
V3hEAwQBXXtKAwQAXXt3AwQBufygMA0GCSqGSIb3DQEBCwUAA4IBAQBA4j38fMW/
kS2QJGWjxxg61GC4ljV74d4g5usfpmxWOuY6JX03cjknZrMeEKtXIvF7I2wJACMW
E9/20rhyuyd8fljdkKUcQ37ksygCliW7fgdUfEtxK8xKwN3JuS6MZOc2Sl/h6jXU
jIm9CthL/CDvCgbB1magSZ+BTBjQRCCtx3QkIKg/MGQ9vqsHPc0xCdvsqD8W0Rxz
p0K1H9/A1u+9yyZ4IO9JsawaXcd8gsnMpwfFcmIePHwyIwQ60prpPQ7pQdjxwULf
J6XJIXZ1U+OvkFYlqMeAxlKVkod0GW8L9EOO6fJ9LmuAE6hBzJy1tpu1zqo9Yx8j
PmFZHl0XaYme
-----END CERTIFICATE-----
Generated at Wed Jul 3 08:36:45 2024 by rpki-client on console-fra.rpki-client.org