Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/kW0w68gXZbEU0daRCJCOHJs3Em8.roa
File: kW0w68gXZbEU0daRCJCOHJs3Em8.roa (raw, json)
Hash identifier: gHdyfT2xZDNo4UiR7PdZQsHb/C3n59R/K905usY/XeU=
Subject key identifier: 91:6D:30:EB:C8:17:65:B1:14:D1:D6:91:08:90:8E:1C:9B:37:12:6F
Certificate issuer: /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Certificate serial: 0186CA6F3E3C3DCB5840B79B8CE773A77143
Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/kW0w68gXZbEU0daRCJCOHJs3Em8.roa
Signing time: Fri 10 Mar 2023 07:32:13 +0000
ROA not before: Fri 10 Mar 2023 07:32:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9121
IP address blocks: 195.87.92.0/24 maxlen: 24
212.133.164.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:31:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ca:6f:3e:3c:3d:cb:58:40:b7:9b:8c:e7:73:a7:71:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Validity
Not Before: Mar 10 07:32:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=916d30ebc81765b114d1d69108908e1c9b37126f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:27:58:22:67:61:b8:13:17:b2:bb:b5:b7:a3:
11:e3:1b:ec:3d:76:6e:74:e3:1a:fd:f8:32:ee:5b:
c0:66:f2:25:17:b4:c6:ef:f6:ae:88:84:02:eb:70:
a0:32:c7:57:97:9a:b9:ba:35:50:5a:99:95:78:a5:
6b:df:4c:3c:31:5a:d2:83:b9:5a:7a:a2:dc:61:bd:
b8:bc:ec:c4:61:69:2d:e5:4b:23:cf:1c:2a:c9:b4:
63:66:0b:63:3e:2c:62:49:36:9b:23:0f:73:39:f8:
64:84:4b:4d:b1:69:57:c0:70:42:49:6e:f4:a4:c3:
1a:87:c4:49:09:f2:22:0b:1a:3b:7d:04:ee:e3:d5:
ff:57:75:be:5c:67:a7:a3:49:66:64:7d:fe:08:97:
be:3e:ed:c1:4d:e3:5c:c3:19:7b:b8:b5:26:c3:f7:
0c:44:b4:06:1e:2a:ff:35:13:bb:7c:bc:0c:e4:8e:
88:cf:b6:78:66:1f:4e:b1:f7:e0:8d:34:23:f1:02:
1a:55:da:e0:fb:38:64:f4:b2:32:d6:e6:86:9e:02:
6e:33:b7:16:c2:71:20:2b:6a:49:23:1f:06:4b:d4:
38:7b:4c:cf:86:83:09:0a:cf:99:a3:de:c7:b3:4e:
ad:ac:26:d6:04:ce:55:10:e7:69:7c:69:3e:f5:a9:
c2:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:6D:30:EB:C8:17:65:B1:14:D1:D6:91:08:90:8E:1C:9B:37:12:6F
X509v3 Authority Key Identifier:
keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/kW0w68gXZbEU0daRCJCOHJs3Em8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.87.92.0/24
212.133.164.0/24
Signature Algorithm: sha256WithRSAEncryption
07:94:56:c8:d0:1e:27:c5:ba:bf:3b:39:d9:24:0b:8e:78:e6:
0a:8f:69:d4:ed:77:76:20:b8:c7:8c:73:cc:fd:1c:99:5e:89:
3e:d4:b5:bb:25:44:f1:3e:8e:86:8f:5b:df:e9:1e:9c:22:26:
2e:f3:a6:ad:a1:56:79:86:ca:9d:2e:92:d0:39:33:f4:37:ff:
0b:8d:37:c7:1c:16:02:ec:6a:2c:d7:5f:ea:d9:37:53:93:37:
5c:93:8a:37:5d:d4:40:63:38:07:f5:f5:43:d2:cb:dd:2f:5f:
60:0f:d2:31:a6:53:19:7c:2a:7f:b3:5c:2f:cd:ca:0c:73:0f:
e5:da:65:6e:b9:fa:80:b9:bc:dc:e4:6d:2f:de:35:c1:14:c9:
76:00:f9:b6:ba:7e:fb:27:df:13:1d:22:74:90:be:db:4a:90:
7a:37:51:2a:76:41:4b:e7:d6:15:9b:8c:43:d3:e8:59:44:72:
63:de:26:97:a1:3a:28:66:b5:c0:5b:d9:cf:91:2c:d5:42:35:
13:03:3d:45:e2:49:d1:3b:89:54:b1:2c:e1:c2:33:c9:9e:49:
f5:69:44:a5:95:df:cb:a5:6e:02:b8:e8:73:3d:61:cf:1b:b8:
07:13:be:77:db:f6:64:43:e0:48:48:48:51:22:e7:f0:68:c8:
05:fc:26:35
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYbKbz48PctYQLebjOdzp3FDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2OGZlMzVjYzk2MjYzM2EyNzU3YWYxMGEwZTZlOGFiNmQw
MWY0YzkwHhcNMjMwMzEwMDczMjEzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MTZkMzBlYmM4MTc2NWIxMTRkMWQ2OTEwODkwOGUxYzliMzcxMjZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCdYImdhuBMXsru1t6MR4xvsPXZu
dOMa/fgy7lvAZvIlF7TG7/auiIQC63CgMsdXl5q5ujVQWpmVeKVr30w8MVrSg7la
eqLcYb24vOzEYWkt5UsjzxwqybRjZgtjPixiSTabIw9zOfhkhEtNsWlXwHBCSW70
pMMah8RJCfIiCxo7fQTu49X/V3W+XGeno0lmZH3+CJe+Pu3BTeNcwxl7uLUmw/cM
RLQGHir/NRO7fLwM5I6Iz7Z4Zh9OsffgjTQj8QIaVdrg+zhk9LIy1uaGngJuM7cW
wnEgK2pJIx8GS9Q4e0zPhoMJCs+Zo97Hs06trCbWBM5VEOdpfGk+9anCWwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFJFtMOvIF2WxFNHWkQiQjhybNxJvMB8GA1UdIwQY
MBaAFFaP41zJYmM6J1evEKDm6KttAfTJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVm9falhNbGlZem9uVjY4UW9PYm9xMjBCOU1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8zN2ViZTYtOGJmZS00YzFmLWExODMt
ODNkNjQ4Zjc5NzQ2LzEva1cwdzY4Z1haYkVVMGRhUkNKQ09ISnMzRW04LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC8zN2ViZTYtOGJmZS00YzFmLWExODMtODNkNjQ4Zjc5NzQ2
LzEvVm9falhNbGlZem9uVjY4UW9PYm9xMjBCOU1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAw1dcAwQA
1IWkMA0GCSqGSIb3DQEBCwUAA4IBAQAHlFbI0B4nxbq/OznZJAuOeOYKj2nU7Xd2
ILjHjHPM/RyZXok+1LW7JUTxPo6Gj1vf6R6cIiYu86atoVZ5hsqdLpLQOTP0N/8L
jTfHHBYC7Gos11/q2TdTkzdck4o3XdRAYzgH9fVD0svdL19gD9IxplMZfCp/s1wv
zcoMcw/l2mVuufqAubzc5G0v3jXBFMl2APm2un77J98THSJ0kL7bSpB6N1EqdkFL
59YVm4xD0+hZRHJj3iaXoTooZrXAW9nPkSzVQjUTAz1F4knRO4lUsSzhwjPJnkn1
aUSlld/LpW4CuOhzPWHPG7gHE7532/ZkQ+BISEhRIufwaMgF/CY1
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:56 2024 by rpki-client on console-fra.rpki-client.org