Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/4s5yk6YeP2cE8pDGabczPK5KDeQ.roa
File: 4s5yk6YeP2cE8pDGabczPK5KDeQ.roa (raw, json)
Hash identifier: 4w8BN/9bGoO0AIJKWr+N3OyqR8skGOm0bULdgESV/1o=
Subject key identifier: E2:CE:72:93:A6:1E:3F:67:04:F2:90:C6:69:B7:33:3C:AE:4A:0D:E4
Certificate issuer: /CN=7c835498f35199a1571964d855c3877751681ab9
Certificate serial: 018B4761AE09148343688DD869729B3DC541
Authority key identifier: 7C:83:54:98:F3:51:99:A1:57:19:64:D8:55:C3:87:77:51:68:1A:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fINUmPNRmaFXGWTYVcOHd1FoGrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/4s5yk6YeP2cE8pDGabczPK5KDeQ.roa
Signing time: Thu 19 Oct 2023 10:01:05 +0000
ROA not before: Thu 19 Oct 2023 10:01:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61207
IP address blocks: 185.15.120.0/22 maxlen: 22
87.237.208.0/21 maxlen: 21
195.35.82.0/23 maxlen: 23
89.221.240.0/23 maxlen: 23
89.221.243.0/24 maxlen: 24
89.221.248.0/21 maxlen: 21
89.221.247.0/24 maxlen: 24
185.215.196.0/22 maxlen: 22
185.215.196.0/24 maxlen: 24
2a02:fc00::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:35:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:47:61:ae:09:14:83:43:68:8d:d8:69:72:9b:3d:c5:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c835498f35199a1571964d855c3877751681ab9
Validity
Not Before: Oct 19 10:01:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e2ce7293a61e3f6704f290c669b7333cae4a0de4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b5:13:af:26:47:1b:8e:94:04:8a:40:6f:81:
58:30:52:9d:61:ec:d3:c1:a5:cb:06:d9:6a:ee:fc:
7a:0a:22:2f:8b:52:7e:a0:f0:00:75:f7:b2:79:b4:
a5:98:42:db:f8:c5:a8:2c:90:c1:3f:7b:f4:62:e2:
6e:22:fd:3a:7a:5c:7d:f1:46:85:96:04:0d:d7:d0:
1f:95:22:cc:b1:cc:cb:38:45:52:fe:d9:27:db:c4:
c9:c2:34:47:c8:4c:44:77:86:3b:16:b4:2c:a9:4c:
0a:78:4a:b5:b4:3b:6e:cb:df:9d:9f:0b:16:f2:e4:
b8:89:e6:d8:8b:0c:8f:ab:0c:2b:50:8a:9f:2a:40:
e0:24:22:43:25:6f:51:bd:46:e4:db:ff:52:d7:6c:
9a:09:f2:6b:44:e1:32:a7:66:7e:6f:da:a0:a1:78:
39:d1:fd:b3:67:6c:4a:8e:99:7a:37:35:d5:3b:27:
86:51:7a:ba:0b:c6:55:c9:b0:49:59:13:2c:03:c8:
37:98:b4:b2:18:f4:1d:91:9a:41:13:a2:8b:d0:29:
e1:eb:84:bb:d5:5b:43:96:e4:65:3e:d7:66:f4:45:
1d:1e:84:9d:ab:84:28:97:66:cd:3e:40:80:52:84:
62:eb:ce:c4:c8:31:85:86:0e:cc:56:a9:58:29:e5:
35:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:CE:72:93:A6:1E:3F:67:04:F2:90:C6:69:B7:33:3C:AE:4A:0D:E4
X509v3 Authority Key Identifier:
keyid:7C:83:54:98:F3:51:99:A1:57:19:64:D8:55:C3:87:77:51:68:1A:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fINUmPNRmaFXGWTYVcOHd1FoGrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/4s5yk6YeP2cE8pDGabczPK5KDeQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.237.208.0/21
89.221.240.0/23
89.221.243.0/24
89.221.247.0-89.221.255.255
185.15.120.0/22
185.215.196.0/22
195.35.82.0/23
IPv6:
2a02:fc00::/29
Signature Algorithm: sha256WithRSAEncryption
01:5b:93:1d:19:e6:68:c7:cc:ec:83:ac:87:54:04:f1:85:d7:
ea:f0:8e:cd:af:7f:98:39:5c:71:b2:b1:67:00:ca:a4:dc:a6:
a0:c7:01:13:b4:d8:e3:81:47:fe:cd:4d:cb:63:39:cd:73:3a:
dd:74:c0:b1:91:8b:12:bf:80:fd:bd:77:07:d1:ec:fc:2e:57:
58:f3:bb:29:8b:10:05:6c:c7:f8:29:f2:d2:7a:53:83:54:57:
ad:6c:8d:14:40:d0:fe:1e:45:05:0e:a8:78:4f:5b:1a:fe:a4:
58:10:f6:4a:86:f2:26:c2:60:00:5a:f1:64:e7:76:7d:69:d8:
a7:03:e0:f2:92:c3:7a:fc:a4:89:ef:fc:d4:9f:b7:a1:4e:49:
f3:23:fa:5d:a1:78:99:7d:84:61:03:13:c6:74:e1:80:8f:da:
3f:ae:d5:18:25:c3:90:17:4d:05:47:62:90:c4:a7:46:5d:7f:
06:00:d1:b2:69:57:e6:08:bb:3c:d3:79:0e:71:a1:6c:e4:91:
a1:dc:1d:8e:04:76:74:35:99:dd:b3:88:a9:3c:9f:3c:07:61:
fe:e1:ae:e8:1b:31:39:13:7a:2f:22:9c:0a:c2:02:7a:e1:5d:
e0:3d:e1:27:5f:19:48:ee:9e:10:1a:36:a2:91:49:17:48:65:
6f:f2:3f:15
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgISAYtHYa4JFINDaI3YaXKbPcVBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjODM1NDk4ZjM1MTk5YTE1NzE5NjRkODU1YzM4Nzc3NTE2
ODFhYjkwHhcNMjMxMDE5MTAwMTA1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMmNlNzI5M2E2MWUzZjY3MDRmMjkwYzY2OWI3MzMzY2FlNGEwZGU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLUTryZHG46UBIpAb4FYMFKdYezT
waXLBtlq7vx6CiIvi1J+oPAAdfeyebSlmELb+MWoLJDBP3v0YuJuIv06elx98UaF
lgQN19AflSLMsczLOEVS/tkn28TJwjRHyExEd4Y7FrQsqUwKeEq1tDtuy9+dnwsW
8uS4iebYiwyPqwwrUIqfKkDgJCJDJW9RvUbk2/9S12yaCfJrROEyp2Z+b9qgoXg5
0f2zZ2xKjpl6NzXVOyeGUXq6C8ZVybBJWRMsA8g3mLSyGPQdkZpBE6KL0Cnh64S7
1VtDluRlPtdm9EUdHoSdq4Qol2bNPkCAUoRi687EyDGFhg7MVqlYKeU1VQIDAQAB
o4ICQzCCAj8wHQYDVR0OBBYEFOLOcpOmHj9nBPKQxmm3MzyuSg3kMB8GA1UdIwQY
MBaAFHyDVJjzUZmhVxlk2FXDh3dRaBq5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZklOVW1QTlJtYUZYR1dUWVZjT0hkMUZvR3JrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy85ZjhhZTItMGZiNS00YzA0LWFkOTMt
NGNlNDc3ZGJiNDA3LzEvNHM1eWs2WWVQMmNFOHBER2FiY3pQSzVLRGVRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy85ZjhhZTItMGZiNS00YzA0LWFkOTMtNGNlNDc3ZGJiNDA3
LzEvZklOVW1QTlJtYUZYR1dUWVZjT0hkMUZvR3JrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFkGCCsGAQUFBwEHAQH/BEowSDA3BAIAATAxAwQDV+3QAwQB
Wd3wAwQAWd3zMAsDBABZ3fcDAwFZ3AMEArkPeAMEArnXxAMEAcMjUjANBAIAAjAH
AwUDKgL8ADANBgkqhkiG9w0BAQsFAAOCAQEAAVuTHRnmaMfM7IOsh1QE8YXX6vCO
za9/mDlccbKxZwDKpNymoMcBE7TY44FH/s1Ny2M5zXM63XTAsZGLEr+A/b13B9Hs
/C5XWPO7KYsQBWzH+Cny0npTg1RXrWyNFEDQ/h5FBQ6oeE9bGv6kWBD2SobyJsJg
AFrxZOd2fWnYpwPg8pLDevykie/81J+3oU5J8yP6XaF4mX2EYQMTxnThgI/aP67V
GCXDkBdNBUdikMSnRl1/BgDRsmlX5gi7PNN5DnGhbOSRodwdjgR2dDWZ3bOIqTyf
PAdh/uGu6BsxORN6LyKcCsICeuFd4D3hJ18ZSO6eEBo2opFJF0hlb/I/FQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:31 2024 by rpki-client on console-ams.rpki-client.org