Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/1-WhSBgzzZgLfB6Aa1mJm4-uVrUU.roa
File: 1-WhSBgzzZgLfB6Aa1mJm4-uVrUU.roa (raw, json)
Hash identifier: JDNqipAgcCYXZt9bRZkvWceS2Oul0qxZhyhLkpT8EkE=
Subject key identifier: F9:68:52:06:0C:F3:66:02:DF:07:A0:1A:D6:62:66:E3:EB:95:AD:45
Certificate issuer: /CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2
Certificate serial: 018582183301FE3D11E498B265F30FC897F2
Authority key identifier: ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/1-WhSBgzzZgLfB6Aa1mJm4-uVrUU.roa
Signing time: Thu 05 Jan 2023 13:21:42 +0000
ROA not before: Thu 05 Jan 2023 13:21:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 217.145.236.0/22 maxlen: 24
79.110.168.0/22 maxlen: 24
139.28.204.0/22 maxlen: 24
2a06:1e80::/29 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:82:18:33:01:fe:3d:11:e4:98:b2:65:f3:0f:c8:97:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2
Validity
Not Before: Jan 5 13:21:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f96852060cf36602df07a01ad66266e3eb95ad45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:27:b3:a7:03:c7:17:d6:cf:16:31:03:9c:ed:
ab:ed:85:1e:30:69:11:a6:3c:9f:96:45:ab:eb:5a:
9b:b8:65:1e:d0:c1:bf:8f:3f:1e:d3:50:c5:d0:b1:
fa:28:ad:3e:ae:4b:4b:1e:ac:96:c1:95:3c:3a:d4:
bf:4c:63:02:b2:05:88:5f:84:46:63:c4:15:7f:1c:
75:96:b9:11:31:b1:3d:0c:0a:0a:34:71:88:07:82:
70:af:6e:5a:27:f6:d7:0b:25:c1:89:7a:8b:9d:f3:
b9:e2:7d:1e:e3:98:41:27:4c:a1:af:fb:97:19:a4:
da:90:95:01:ea:35:e8:a7:2f:e4:95:7c:55:8f:ae:
90:1d:e2:5b:aa:1f:2f:91:20:e4:7a:81:7c:fb:56:
9f:91:15:6d:5a:bc:1f:b6:54:55:23:69:bc:da:e7:
f2:d0:bf:ac:46:33:d2:d4:4a:5e:59:18:4d:bb:57:
a0:25:52:d2:92:68:94:e5:4d:c6:c0:96:a9:59:dd:
b2:2c:ab:9b:75:25:73:e5:84:56:d1:44:c7:e2:2a:
c0:4a:4f:6b:d7:85:7e:32:93:c4:b6:0a:cd:98:5c:
5a:a9:b5:c3:ca:56:42:b7:1c:8c:ef:87:f8:ac:22:
88:a6:6b:86:b2:47:97:a6:10:d3:f6:ae:0c:3a:3b:
f7:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:68:52:06:0C:F3:66:02:DF:07:A0:1A:D6:62:66:E3:EB:95:AD:45
X509v3 Authority Key Identifier:
keyid:ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/1-WhSBgzzZgLfB6Aa1mJm4-uVrUU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.110.168.0/22
139.28.204.0/22
217.145.236.0/22
IPv6:
2a06:1e80::/29
Signature Algorithm: sha256WithRSAEncryption
64:32:6f:d7:1b:a6:7b:1d:55:24:05:54:b6:42:11:e6:c6:d2:
08:d4:08:65:85:41:9c:e5:90:7f:03:07:39:24:07:d5:c1:99:
79:de:b9:b6:c3:b4:0b:91:88:f6:80:91:44:f5:3b:95:cf:d0:
e1:e9:74:fa:26:85:05:09:02:c5:47:42:e3:a8:73:82:47:10:
11:a3:49:bb:2f:81:0f:4b:a5:89:4e:1e:f1:97:fa:fb:b0:ca:
db:86:37:e4:22:27:58:b6:d9:a0:f3:5a:25:2d:6d:8b:c6:43:
35:96:8f:ae:80:08:b7:a2:95:2b:bb:cd:74:17:b5:54:9b:04:
65:d5:8f:d1:75:6c:ae:f3:0a:b2:10:89:ec:da:6a:dc:e1:7c:
41:68:23:1d:1b:3a:e8:96:41:3a:09:47:69:73:51:7e:7e:b7:
d2:03:79:30:0a:3f:02:13:7e:03:cb:e0:fc:49:e8:6c:e8:d8:
3f:c1:ed:bd:41:d5:ba:e2:8e:f2:6d:d8:63:d9:d1:75:73:d7:
03:95:34:f8:fc:61:87:08:d6:a3:91:37:ae:7a:7f:31:b8:59:
b6:d7:9e:9f:ad:64:b9:69:40:0d:08:63:b1:28:e9:2a:17:f9:
87:cc:61:5a:34:5f:08:f1:30:e7:fb:8c:54:07:79:b3:54:d8:
a0:1d:15:cc
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAYWCGDMB/j0R5JiyZfMPyJfyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkNzdlNmI5MjViM2I3YTdhYmI5Mjg4NWQ1NWQ3MzNkYzVm
YTYyZDIwHhcNMjMwMTA1MTMyMTQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOTY4NTIwNjBjZjM2NjAyZGYwN2EwMWFkNjYyNjZlM2ViOTVhZDQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxyezpwPHF9bPFjEDnO2r7YUeMGkR
pjyflkWr61qbuGUe0MG/jz8e01DF0LH6KK0+rktLHqyWwZU8OtS/TGMCsgWIX4RG
Y8QVfxx1lrkRMbE9DAoKNHGIB4Jwr25aJ/bXCyXBiXqLnfO54n0e45hBJ0yhr/uX
GaTakJUB6jXopy/klXxVj66QHeJbqh8vkSDkeoF8+1afkRVtWrwftlRVI2m82ufy
0L+sRjPS1EpeWRhNu1egJVLSkmiU5U3GwJapWd2yLKubdSVz5YRW0UTH4irASk9r
14V+MpPEtgrNmFxaqbXDylZCtxyM74f4rCKIpmuGskeXphDT9q4MOjv3iwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFPloUgYM82YC3wegGtZiZuPrla1FMB8GA1UdIwQY
MBaAFO135rkls7enq7kohdVdcz3F+mLSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMt
OTI4MTlkZThhMDM2LzEvMS1XaFNCZ3p6WmdMZkI2QWExbUptNC11VnJVVS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMGMvZDgzNzc3LTViYTgtNGYxZS04NTFjLTkyODE5ZGU4YTAz
Ni8xLzdYZm11U1d6dDZlcnVTaUYxVjF6UGNYNll0SS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjA6BggrBgEFBQcBBwEB/wQrMCkwGAQCAAEwEgMEAk9uqAME
AosczAMEAtmR7DANBAIAAjAHAwUDKgYegDANBgkqhkiG9w0BAQsFAAOCAQEAZDJv
1xumex1VJAVUtkIR5sbSCNQIZYVBnOWQfwMHOSQH1cGZed65tsO0C5GI9oCRRPU7
lc/Q4el0+iaFBQkCxUdC46hzgkcQEaNJuy+BD0uliU4e8Zf6+7DK24Y35CInWLbZ
oPNaJS1ti8ZDNZaProAIt6KVK7vNdBe1VJsEZdWP0XVsrvMKshCJ7Npq3OF8QWgj
HRs66JZBOglHaXNRfn630gN5MAo/AhN+A8vg/EnobOjYP8HtvUHVuuKO8m3YY9nR
dXPXA5U0+PxhhwjWo5E3rnp/MbhZtteen61kuWlADQhjsSjpKhf5h8xhWjRfCPEw
5/uMVAd5s1TYoB0VzA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:35 2024 by rpki-client on console-ams.rpki-client.org