Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/DFxunv_qQWUYKOW9-xKr276rIYc.roa
File: DFxunv_qQWUYKOW9-xKr276rIYc.roa (raw, json)
Hash identifier: 6jw3tNcC9fLUFY57q/zRoYJWdD/rK3siI6cFrO77Ihk=
Subject key identifier: 0C:5C:6E:9E:FF:EA:41:65:18:28:E5:BD:FB:12:AB:DB:BE:AB:21:87
Certificate issuer: /CN=92f4b1c0bfbad46b811eee568a18fbaa14a9d687
Certificate serial: 01856C9CD449B1880B723CCC32B0A9ED0790
Authority key identifier: 92:F4:B1:C0:BF:BA:D4:6B:81:1E:EE:56:8A:18:FB:AA:14:A9:D6:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kvSxwL-61GuBHu5Wihj7qhSp1oc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/DFxunv_qQWUYKOW9-xKr276rIYc.roa
Signing time: Sun 01 Jan 2023 09:14:55 +0000
ROA not before: Sun 01 Jan 2023 09:14:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201250
IP address blocks: 213.59.158.0/24 maxlen: 24
213.59.155.0/24 maxlen: 24
217.107.197.0/24 maxlen: 24
217.107.198.0/24 maxlen: 24
217.107.196.0/22 maxlen: 22
213.59.132.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:30:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:9c:d4:49:b1:88:0b:72:3c:cc:32:b0:a9:ed:07:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92f4b1c0bfbad46b811eee568a18fbaa14a9d687
Validity
Not Before: Jan 1 09:14:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0c5c6e9effea41651828e5bdfb12abdbbeab2187
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:7a:6d:68:7f:6b:66:11:4f:d5:86:24:88:ca:
a4:10:73:bc:af:5d:e8:9d:34:72:96:0f:63:3f:af:
b8:59:f7:97:a9:e0:af:eb:1e:d9:ac:2c:80:e1:21:
98:2c:95:5e:fd:97:5e:49:4b:d4:e8:02:2f:0d:0b:
8c:97:64:16:df:fa:92:e1:8a:f9:79:94:b2:9d:37:
3d:16:91:0e:c3:72:fc:72:b1:db:9b:c0:a4:bf:ef:
41:d5:d2:75:b1:92:fc:70:c5:3e:45:db:71:8f:9a:
26:8b:41:3d:27:75:e1:bf:ec:da:7c:d3:65:d2:1e:
93:d2:c9:a1:59:50:4f:ec:8f:2c:bb:ba:63:b1:a9:
d0:d6:af:1c:e3:ef:51:51:4f:5d:a8:46:33:e0:3b:
bb:fe:5f:2e:07:6f:ad:0a:de:d7:60:20:73:2c:33:
00:8a:30:aa:58:39:20:a6:81:9a:db:0e:9c:97:55:
ca:94:3e:84:c2:88:4c:d6:15:48:60:fb:e3:5d:36:
d7:34:02:d9:27:a0:55:05:03:37:e5:97:2a:48:05:
34:ab:ff:0f:94:2c:5e:62:a2:4e:63:09:72:5f:a7:
84:50:a0:8e:bb:91:0a:5a:05:b3:c2:95:11:0a:5d:
ff:b7:54:59:cf:3a:7d:02:46:ff:f5:50:5f:53:df:
49:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:5C:6E:9E:FF:EA:41:65:18:28:E5:BD:FB:12:AB:DB:BE:AB:21:87
X509v3 Authority Key Identifier:
keyid:92:F4:B1:C0:BF:BA:D4:6B:81:1E:EE:56:8A:18:FB:AA:14:A9:D6:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvSxwL-61GuBHu5Wihj7qhSp1oc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/DFxunv_qQWUYKOW9-xKr276rIYc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/kvSxwL-61GuBHu5Wihj7qhSp1oc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.59.132.0/22
213.59.155.0/24
213.59.158.0/24
217.107.196.0/22
Signature Algorithm: sha256WithRSAEncryption
42:1f:4d:83:0f:be:0e:04:00:ac:e5:11:83:48:93:d7:a3:cc:
d1:88:88:a7:a5:a2:1d:47:4c:a9:1a:7e:2b:38:8f:86:4d:c6:
ab:38:f7:3e:43:11:32:82:05:13:25:27:86:6b:d9:87:1c:2e:
d3:f3:0a:8c:90:68:bc:a3:fd:30:74:0d:d7:92:8d:6e:cf:15:
ad:f1:ac:21:33:f8:57:f4:e6:31:64:bd:e2:70:c5:f6:f5:0b:
d4:12:8b:34:7b:c5:96:32:4a:62:d4:b0:93:7a:29:7f:41:eb:
0f:e4:46:25:da:f0:f0:75:32:c9:1e:a4:b5:44:bf:47:78:32:
8b:43:65:a4:91:dd:52:84:84:af:0a:a4:b6:96:df:44:d3:fd:
a6:84:e4:aa:8b:ac:0c:02:be:42:96:2e:34:de:93:2a:83:c1:
27:ca:ff:45:d2:97:dd:a7:b4:5a:76:90:a0:fd:0f:1e:e2:1e:
0b:05:a8:46:f2:9b:52:28:bc:1c:f1:a4:84:b0:a3:eb:4b:27:
bf:92:89:92:6d:fd:49:d7:53:cb:79:27:b3:ba:6c:c7:fb:c0:
e0:af:b4:28:c1:48:7e:9a:d4:00:d4:23:a5:92:14:41:69:16:
cb:9e:16:2e:15:b0:f3:d8:30:b8:50:b7:d9:b5:04:f9:6f:f7:
4d:4f:d6:22
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYVsnNRJsYgLcjzMMrCp7QeQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZjRiMWMwYmZiYWQ0NmI4MTFlZWU1NjhhMThmYmFhMTRh
OWQ2ODcwHhcNMjMwMTAxMDkxNDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYzVjNmU5ZWZmZWE0MTY1MTgyOGU1YmRmYjEyYWJkYmJlYWIyMTg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3ptaH9rZhFP1YYkiMqkEHO8r13o
nTRylg9jP6+4WfeXqeCv6x7ZrCyA4SGYLJVe/ZdeSUvU6AIvDQuMl2QW3/qS4Yr5
eZSynTc9FpEOw3L8crHbm8Ckv+9B1dJ1sZL8cMU+Rdtxj5omi0E9J3Xhv+zafNNl
0h6T0smhWVBP7I8su7pjsanQ1q8c4+9RUU9dqEYz4Du7/l8uB2+tCt7XYCBzLDMA
ijCqWDkgpoGa2w6cl1XKlD6EwohM1hVIYPvjXTbXNALZJ6BVBQM35ZcqSAU0q/8P
lCxeYqJOYwlyX6eEUKCOu5EKWgWzwpURCl3/t1RZzzp9Akb/9VBfU99JgwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFAxcbp7/6kFlGCjlvfsSq9u+qyGHMB8GA1UdIwQY
MBaAFJL0scC/utRrgR7uVooY+6oUqdaHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3ZTeHdMLTYxR3VCSHU1V2loajdxaFNwMW9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi80Zjg1MTQtMmUyMC00OTM1LTk5NWMt
YTA4NGY3NmM4ZTJiLzEvREZ4dW52X3FRV1VZS09XOS14S3IyNzZySVljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi80Zjg1MTQtMmUyMC00OTM1LTk5NWMtYTA4NGY3NmM4ZTJi
LzEva3ZTeHdMLTYxR3VCSHU1V2loajdxaFNwMW9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQC1TuEAwQA
1TubAwQA1TueAwQC2WvEMA0GCSqGSIb3DQEBCwUAA4IBAQBCH02DD74OBACs5RGD
SJPXo8zRiIinpaIdR0ypGn4rOI+GTcarOPc+QxEyggUTJSeGa9mHHC7T8wqMkGi8
o/0wdA3Xko1uzxWt8awhM/hX9OYxZL3icMX29QvUEos0e8WWMkpi1LCTeil/QesP
5EYl2vDwdTLJHqS1RL9HeDKLQ2Wkkd1ShISvCqS2lt9E0/2mhOSqi6wMAr5Cli40
3pMqg8Enyv9F0pfdp7RadpCg/Q8e4h4LBahG8ptSKLwc8aSEsKPrSye/komSbf1J
11PLeSezumzH+8Dgr7QowUh+mtQA1COlkhRBaRbLnhYuFbDz2DC4ULfZtQT5b/dN
T9Yi
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:13 2024 by rpki-client on console-ams.rpki-client.org