Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/2f97fc-5fa3-4083-9515-cd9da2d92e8d/1/4TbVf2Cwf1itab65Rf6VjYURom8.roa
File: 4TbVf2Cwf1itab65Rf6VjYURom8.roa (raw, json)
Hash identifier: N6+OXAvuJyP9DNUkHnIzxCZtwpIQ+NIRP2GFmVxW5RQ=
Subject key identifier: E1:36:D5:7F:60:B0:7F:58:AD:69:BE:B9:45:FE:95:8D:85:11:A2:6F
Certificate issuer: /CN=29a39ebb4e57ff34853c76b0f5877ae8ab3c7cf6
Certificate serial: 01856D4ADC39B00D708A9630F75C069FEECF
Authority key identifier: 29:A3:9E:BB:4E:57:FF:34:85:3C:76:B0:F5:87:7A:E8:AB:3C:7C:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KaOeu05X_zSFPHaw9Yd66Ks8fPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/2f97fc-5fa3-4083-9515-cd9da2d92e8d/1/4TbVf2Cwf1itab65Rf6VjYURom8.roa
Signing time: Sun 01 Jan 2023 12:25:00 +0000
ROA not before: Sun 01 Jan 2023 12:25:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51164
IP address blocks: 178.217.128.0/21 maxlen: 21
185.93.48.0/22 maxlen: 22
2a0b:8880::/29 maxlen: 29
2001:67c:224::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:4a:dc:39:b0:0d:70:8a:96:30:f7:5c:06:9f:ee:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29a39ebb4e57ff34853c76b0f5877ae8ab3c7cf6
Validity
Not Before: Jan 1 12:25:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e136d57f60b07f58ad69beb945fe958d8511a26f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:5c:03:71:74:06:f4:73:b9:9c:cf:ea:40:39:
b2:83:0c:8a:35:d4:16:7e:35:b9:ec:71:ec:82:7b:
05:14:3b:bf:18:47:5d:c0:45:5d:a8:43:90:42:d4:
a2:5d:78:ab:30:b4:32:5c:bc:4a:8b:2c:5b:d7:08:
1d:14:bf:92:c9:8f:22:67:ef:99:46:7d:81:00:bd:
d2:46:f3:e7:39:8b:95:12:b0:b5:9e:43:1f:56:04:
6f:8d:40:ad:84:a4:15:e0:4f:12:8f:19:a9:2a:62:
a2:7a:5a:01:09:58:c8:63:70:2f:ee:0d:96:e5:33:
7d:7f:03:af:91:15:4d:8c:4e:e2:bd:5c:58:40:f9:
8c:db:c4:85:e8:5c:bd:f7:bd:78:03:41:ed:1e:5c:
7d:88:f6:38:c9:58:ea:96:a5:90:8f:a0:88:d5:00:
dd:a3:12:f5:62:7c:80:61:b3:f5:e3:01:d6:d1:57:
c2:91:ec:78:d0:3c:a3:bc:5b:59:a8:64:50:9f:ed:
17:41:16:7a:c9:5a:62:f0:69:ad:03:7b:5f:d8:ba:
0f:35:d8:6e:84:f8:6c:b5:5d:a3:15:a0:63:14:47:
bf:18:57:c9:d8:86:2a:8c:da:64:a3:e3:80:7c:92:
ab:bb:18:ab:91:7e:76:b0:ae:b0:66:79:33:1c:c7:
8c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:36:D5:7F:60:B0:7F:58:AD:69:BE:B9:45:FE:95:8D:85:11:A2:6F
X509v3 Authority Key Identifier:
keyid:29:A3:9E:BB:4E:57:FF:34:85:3C:76:B0:F5:87:7A:E8:AB:3C:7C:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KaOeu05X_zSFPHaw9Yd66Ks8fPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2f97fc-5fa3-4083-9515-cd9da2d92e8d/1/4TbVf2Cwf1itab65Rf6VjYURom8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2f97fc-5fa3-4083-9515-cd9da2d92e8d/1/KaOeu05X_zSFPHaw9Yd66Ks8fPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.217.128.0/21
185.93.48.0/22
IPv6:
2001:67c:224::/48
2a0b:8880::/29
Signature Algorithm: sha256WithRSAEncryption
83:2e:45:04:f2:df:c8:b7:5d:00:73:dc:e1:30:86:c8:02:91:
2d:1a:a4:75:1d:c1:eb:ba:b7:34:af:fc:ed:6d:63:23:31:e0:
0a:e4:1b:2b:26:6f:e4:68:6b:2c:a7:bd:53:f9:0c:00:b2:3f:
3a:48:e8:3a:a5:3d:1f:3d:50:7e:2f:9b:77:79:be:90:8f:f4:
20:4f:90:1d:11:e4:35:78:00:c6:8c:86:cc:73:c6:91:02:ff:
07:a9:e1:26:11:68:5d:8b:11:2f:72:db:f3:e3:07:60:0b:f1:
a9:c2:38:ff:2c:10:c9:f8:b4:93:5b:1d:e7:80:d0:3d:65:73:
75:77:bd:20:55:5a:ac:0b:2e:b5:85:22:9c:99:c5:f2:86:dc:
2b:20:5c:ee:91:2b:8c:ad:5e:c9:7f:b6:de:64:87:a8:52:a0:
31:6c:e8:f2:44:bc:10:e0:74:46:11:74:4b:41:1d:b1:a4:63:
5d:3f:e3:87:32:af:2c:ac:ea:a9:1b:92:0c:6d:01:45:a6:e3:
da:89:87:fb:40:ec:26:3d:28:e3:96:63:af:7e:5f:da:6a:ef:
28:64:5e:38:d9:f2:5e:1e:0d:8c:16:f2:dd:39:e0:1d:69:fb:
c5:4f:f2:b5:1d:97:6d:e9:78:96:90:7b:83:35:54:b7:67:4d:
81:9d:d1:cb
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAYVtStw5sA1wipYw91wGn+7PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5YTM5ZWJiNGU1N2ZmMzQ4NTNjNzZiMGY1ODc3YWU4YWIz
YzdjZjYwHhcNMjMwMTAxMTIyNTAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMTM2ZDU3ZjYwYjA3ZjU4YWQ2OWJlYjk0NWZlOTU4ZDg1MTFhMjZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVwDcXQG9HO5nM/qQDmygwyKNdQW
fjW57HHsgnsFFDu/GEddwEVdqEOQQtSiXXirMLQyXLxKiyxb1wgdFL+SyY8iZ++Z
Rn2BAL3SRvPnOYuVErC1nkMfVgRvjUCthKQV4E8SjxmpKmKieloBCVjIY3Av7g2W
5TN9fwOvkRVNjE7ivVxYQPmM28SF6Fy99714A0HtHlx9iPY4yVjqlqWQj6CI1QDd
oxL1YnyAYbP14wHW0VfCkex40DyjvFtZqGRQn+0XQRZ6yVpi8GmtA3tf2LoPNdhu
hPhstV2jFaBjFEe/GFfJ2IYqjNpko+OAfJKruxirkX52sK6wZnkzHMeMQQIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFOE21X9gsH9YrWm+uUX+lY2FEaJvMB8GA1UdIwQY
MBaAFCmjnrtOV/80hTx2sPWHeuirPHz2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2FPZXUwNVhfelNGUEhhdzlZZDY2S3M4ZlBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8yZjk3ZmMtNWZhMy00MDgzLTk1MTUt
Y2Q5ZGEyZDkyZThkLzEvNFRiVmYyQ3dmMWl0YWI2NVJmNlZqWVVSb204LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC8yZjk3ZmMtNWZhMy00MDgzLTk1MTUtY2Q5ZGEyZDkyZThk
LzEvS2FPZXUwNVhfelNGUEhhdzlZZDY2S3M4ZlBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDASBAIAATAMAwQDstmAAwQC
uV0wMBYEAgACMBADBwAgAQZ8AiQDBQMqC4iAMA0GCSqGSIb3DQEBCwUAA4IBAQCD
LkUE8t/It10Ac9zhMIbIApEtGqR1HcHrurc0r/ztbWMjMeAK5BsrJm/kaGssp71T
+QwAsj86SOg6pT0fPVB+L5t3eb6Qj/QgT5AdEeQ1eADGjIbMc8aRAv8HqeEmEWhd
ixEvctvz4wdgC/Gpwjj/LBDJ+LSTWx3ngNA9ZXN1d70gVVqsCy61hSKcmcXyhtwr
IFzukSuMrV7Jf7beZIeoUqAxbOjyRLwQ4HRGEXRLQR2xpGNdP+OHMq8srOqpG5IM
bQFFpuPaiYf7QOwmPSjjlmOvfl/aau8oZF442fJeHg2MFvLdOeAdafvFT/K1HZdt
6XiWkHuDNVS3Z02BndHL
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:38 2024 by rpki-client on console-ams.rpki-client.org