Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/XDYNGpDyiYdWuHL9_CXmdF3eRwY.roa
File: XDYNGpDyiYdWuHL9_CXmdF3eRwY.roa (raw, json)
Hash identifier: 4rLsDUoF3BmjfZElU/ZfPjWiPh6KeWowe+ZJGDjsw/E=
Subject key identifier: 5C:36:0D:1A:90:F2:89:87:56:B8:72:FD:FC:25:E6:74:5D:DE:47:06
Certificate issuer: /CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Certificate serial: 01856DEF69AA18E32CB8DEDB0277D70960C2
Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/XDYNGpDyiYdWuHL9_CXmdF3eRwY.roa
Signing time: Sun 01 Jan 2023 15:24:44 +0000
ROA not before: Sun 01 Jan 2023 15:24:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34826
IP address blocks: 195.187.130.0/24 maxlen: 24
195.187.142.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:32:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:ef:69:aa:18:e3:2c:b8:de:db:02:77:d7:09:60:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Validity
Not Before: Jan 1 15:24:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5c360d1a90f2898756b872fdfc25e6745dde4706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:05:25:bf:6a:0a:06:fd:f1:55:a2:69:b0:1f:
a8:b8:dc:bb:c9:e1:92:a9:cd:ab:bf:1a:7f:42:fd:
45:cc:6d:ed:d7:66:09:cf:41:a9:60:8b:bb:ad:ed:
98:b6:71:46:3e:d5:21:af:d5:eb:f1:f4:f5:41:15:
5a:0c:1b:5d:e7:9e:87:7a:4c:a6:94:46:ff:fd:70:
09:c3:9b:00:24:26:27:df:0f:3c:c3:74:b2:60:6e:
4d:e3:00:89:ce:9b:04:3e:13:ab:39:8c:66:6f:92:
94:34:d0:e8:f9:61:48:68:53:d2:d1:9b:c8:01:07:
47:2d:07:13:ce:71:d9:1f:0d:1d:8b:78:c4:b1:94:
11:79:be:68:b9:d1:12:cd:d8:90:3d:e5:bc:79:1a:
bb:2e:0a:5e:08:8e:24:60:ce:97:2b:3a:f7:de:06:
a7:fa:7e:9b:0c:c0:ed:f4:32:8d:f4:7d:97:61:bc:
df:1b:65:b7:f2:ed:c9:23:74:74:56:c1:f2:65:ae:
2d:ce:b8:66:c3:c0:ff:e8:98:47:d1:76:c5:9e:66:
03:a5:57:b9:1c:89:ee:f1:1c:92:77:c7:82:06:1c:
ab:97:70:bf:2e:57:b2:83:e0:73:7b:88:90:bd:d4:
ce:34:40:20:b6:63:60:12:c4:65:28:50:a7:6e:91:
5f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:36:0D:1A:90:F2:89:87:56:B8:72:FD:FC:25:E6:74:5D:DE:47:06
X509v3 Authority Key Identifier:
keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/XDYNGpDyiYdWuHL9_CXmdF3eRwY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.187.130.0/24
195.187.142.0/24
Signature Algorithm: sha256WithRSAEncryption
13:51:9a:08:e5:b5:40:5b:84:ef:72:64:e5:a8:8d:86:9d:25:
29:9d:24:b3:7f:8d:62:8c:27:33:69:08:d8:a8:55:c5:52:81:
3f:f2:77:88:04:8e:33:3f:f0:03:8b:be:e1:2f:27:11:d4:97:
46:f5:6b:76:7f:6c:99:ac:a4:60:92:ab:83:fa:e8:be:ad:55:
62:57:92:29:c2:d7:48:fe:b6:bb:ce:42:83:85:0c:02:a4:72:
71:4b:9e:29:32:31:91:b3:37:02:1d:84:7b:15:f9:14:6f:f9:
6a:79:b3:5b:11:f9:8c:63:06:ea:ea:d9:2f:d1:87:e3:ce:1b:
6d:a5:3c:27:6b:2e:f9:6b:0d:1f:af:bf:a1:ec:24:63:4c:49:
61:6b:7a:ca:fc:4c:be:18:65:2d:ee:c3:8b:06:4c:5b:12:03:
81:be:bf:67:2e:09:0c:bb:e9:61:24:25:a9:df:0f:38:ba:7c:
73:3e:fa:99:d5:84:29:ba:95:65:96:44:9b:69:ca:10:9a:ec:
92:92:0d:6b:ad:f4:e9:a7:c1:38:a3:a9:24:68:33:ae:c6:3c:
89:6a:bd:3e:21:47:c5:d0:01:f1:56:61:93:73:6d:15:6b:4d:
1c:bb:69:97:6d:ea:2a:ea:a1:8a:af:3e:d7:cd:84:90:41:4f:
7a:df:ae:9f
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVt72mqGOMsuN7bAnfXCWDCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwYzQwOTYxM2ZlYTBhMmI0NDJjZTExMmU5Y2JkYjQ4NWUw
MTE4OGYwHhcNMjMwMTAxMTUyNDQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YzM2MGQxYTkwZjI4OTg3NTZiODcyZmRmYzI1ZTY3NDVkZGU0NzA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQUlv2oKBv3xVaJpsB+ouNy7yeGS
qc2rvxp/Qv1FzG3t12YJz0GpYIu7re2YtnFGPtUhr9Xr8fT1QRVaDBtd556Hekym
lEb//XAJw5sAJCYn3w88w3SyYG5N4wCJzpsEPhOrOYxmb5KUNNDo+WFIaFPS0ZvI
AQdHLQcTznHZHw0di3jEsZQReb5oudESzdiQPeW8eRq7LgpeCI4kYM6XKzr33gan
+n6bDMDt9DKN9H2XYbzfG2W38u3JI3R0VsHyZa4tzrhmw8D/6JhH0XbFnmYDpVe5
HInu8RySd8eCBhyrl3C/Lleyg+Bze4iQvdTONEAgtmNgEsRlKFCnbpFfIwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFw2DRqQ8omHVrhy/fwl5nRd3kcGMB8GA1UdIwQY
MBaAFDDECWE/6gorRCzhEunL20heARiPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTU1RSllUX3FDaXRFTE9FUzZjdmJTRjRCR0k4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9iNzhmYjUtYWZjYS00ZGI3LTg4ODYt
YzA2NzFiZjRjZjNlLzEvWERZTkdwRHlpWWRXdUhMOV9DWG1kRjNlUndZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9iNzhmYjUtYWZjYS00ZGI3LTg4ODYtYzA2NzFiZjRjZjNl
LzEvTU1RSllUX3FDaXRFTE9FUzZjdmJTRjRCR0k4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAw7uCAwQA
w7uOMA0GCSqGSIb3DQEBCwUAA4IBAQATUZoI5bVAW4TvcmTlqI2GnSUpnSSzf41i
jCczaQjYqFXFUoE/8neIBI4zP/ADi77hLycR1JdG9Wt2f2yZrKRgkquD+ui+rVVi
V5IpwtdI/ra7zkKDhQwCpHJxS54pMjGRszcCHYR7FfkUb/lqebNbEfmMYwbq6tkv
0YfjzhttpTwnay75aw0fr7+h7CRjTElha3rK/Ey+GGUt7sOLBkxbEgOBvr9nLgkM
u+lhJCWp3w84unxzPvqZ1YQpupVllkSbacoQmuySkg1rrfTpp8E4o6kkaDOuxjyJ
ar0+IUfF0AHxVmGTc20Va00cu2mXbeoq6qGKrz7XzYSQQU96366f
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:40 2024 by rpki-client on console-fra.rpki-client.org