Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/hVQ79aq2ddLiCwcUIRhD6O8oDA4.roa
File: hVQ79aq2ddLiCwcUIRhD6O8oDA4.roa (raw, json)
Hash identifier: 0TYza3w55rhp+BKGfC4yazheHN94IS/b5vVzCTVIfSE=
Subject key identifier: 85:54:3B:F5:AA:B6:75:D2:E2:0B:07:14:21:18:43:E8:EF:28:0C:0E
Certificate issuer: /CN=5e8d07b45f7d83124c9f8c0fac03bec02468b37e
Certificate serial: 01889B382275060BC89D6C750D2D6C4DFC68
Authority key identifier: 5E:8D:07:B4:5F:7D:83:12:4C:9F:8C:0F:AC:03:BE:C0:24:68:B3:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xo0HtF99gxJMn4wPrAO-wCRos34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/hVQ79aq2ddLiCwcUIRhD6O8oDA4.roa
Signing time: Thu 08 Jun 2023 13:35:27 +0000
ROA not before: Thu 08 Jun 2023 13:35:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8330
IP address blocks: 91.198.81.0/24 maxlen: 24
5.57.88.0/21 maxlen: 21
193.203.5.0/24 maxlen: 24
195.35.120.0/24 maxlen: 24
2001:7f8:17::/48 maxlen: 48
2a00:eb20:abcd::/48 maxlen: 48
2a00:eb20::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 13 Jun 2023 12:36:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:9b:38:22:75:06:0b:c8:9d:6c:75:0d:2d:6c:4d:fc:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e8d07b45f7d83124c9f8c0fac03bec02468b37e
Validity
Not Before: Jun 8 13:35:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=85543bf5aab675d2e20b0714211843e8ef280c0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:55:31:81:1a:50:63:74:61:d7:50:55:95:fe:
8b:44:5d:c4:d3:83:cb:9e:22:d2:dd:3a:db:83:18:
c5:60:d8:b9:aa:29:d0:3f:fc:2d:45:63:f1:b3:51:
fa:97:40:2c:75:c7:53:bc:cd:9d:6c:24:b6:29:98:
26:3a:eb:12:9f:6c:27:b9:85:2f:df:69:00:a5:66:
e0:4d:08:81:cf:a2:8b:4c:14:f8:d0:e7:a6:79:78:
87:96:b0:05:92:32:bc:82:8c:3a:3f:79:99:0c:08:
ea:4b:a2:d7:24:26:d7:cd:cc:09:23:4e:dd:59:c0:
8b:10:57:c4:ce:b6:fd:66:fd:1b:4a:7f:2e:ab:76:
04:03:ce:b5:c7:6c:30:8a:e2:58:5c:00:17:b5:10:
e8:70:1a:f2:68:80:94:12:a1:d2:2e:a4:33:21:f0:
29:10:41:41:8d:dd:b0:2f:9f:98:66:25:17:f1:b6:
b2:91:07:ca:a1:88:15:12:55:07:92:f5:d0:5e:cf:
fb:e2:d3:5a:da:27:41:a6:91:9b:76:3d:91:fe:63:
4f:1a:18:70:15:a7:74:4d:30:37:b7:d2:eb:88:d6:
55:26:78:db:48:32:4d:78:38:e5:08:c2:14:39:5e:
c7:96:08:91:ee:01:34:1d:29:0b:e1:1c:97:e0:5d:
7e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:54:3B:F5:AA:B6:75:D2:E2:0B:07:14:21:18:43:E8:EF:28:0C:0E
X509v3 Authority Key Identifier:
keyid:5E:8D:07:B4:5F:7D:83:12:4C:9F:8C:0F:AC:03:BE:C0:24:68:B3:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xo0HtF99gxJMn4wPrAO-wCRos34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/hVQ79aq2ddLiCwcUIRhD6O8oDA4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.57.88.0/21
91.198.81.0/24
193.203.5.0/24
195.35.120.0/24
IPv6:
2001:7f8:17::/48
2a00:eb20::/32
Signature Algorithm: sha256WithRSAEncryption
81:13:93:09:ee:a3:cd:5b:17:c5:2d:21:5e:32:71:51:fe:90:
c0:5a:03:51:b9:2d:f5:2e:64:be:83:0e:84:32:8c:85:56:6c:
c1:cb:e9:1a:50:87:7b:a4:12:f8:2c:2f:62:bc:6e:42:54:de:
4c:12:71:26:4a:38:c9:70:1c:a9:3c:f9:47:25:ba:5a:b6:69:
23:00:02:36:87:0e:19:37:d9:76:d3:f6:55:fa:5a:ae:2f:3a:
51:5d:a2:21:a7:2a:d4:4b:f0:3e:29:59:5c:a6:41:a9:e9:ac:
85:59:5b:e5:e0:86:86:0f:e9:9a:ed:9c:d8:d2:93:6b:df:df:
9a:3c:e5:ca:ac:1e:5b:67:61:c3:07:e9:8b:60:1c:17:dc:38:
37:29:aa:5b:62:b7:cd:b0:2b:97:a9:07:1d:5e:03:78:13:ce:
c4:2a:a4:eb:dc:5b:6c:ed:76:13:66:f4:10:6a:e7:55:82:e0:
8a:6f:66:9f:1b:54:d5:2a:d9:28:41:37:a9:7f:27:f4:41:56:
21:4a:5b:e6:ed:c6:a4:66:02:af:21:89:1c:e1:60:80:d7:86:
b9:ad:ae:09:f4:ec:f7:e4:28:a3:dd:0f:cf:4c:7d:01:8f:34:
65:9c:e2:01:6e:43:37:e7:20:4d:d6:94:2a:7e:ab:0f:34:3e:
a4:1a:44:b0
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgISAYibOCJ1BgvInWx1DS1sTfxoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlOGQwN2I0NWY3ZDgzMTI0YzlmOGMwZmFjMDNiZWMwMjQ2
OGIzN2UwHhcNMjMwNjA4MTMzNTI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NTU0M2JmNWFhYjY3NWQyZTIwYjA3MTQyMTE4NDNlOGVmMjgwYzBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA01UxgRpQY3Rh11BVlf6LRF3E04PL
niLS3TrbgxjFYNi5qinQP/wtRWPxs1H6l0AsdcdTvM2dbCS2KZgmOusSn2wnuYUv
32kApWbgTQiBz6KLTBT40OemeXiHlrAFkjK8gow6P3mZDAjqS6LXJCbXzcwJI07d
WcCLEFfEzrb9Zv0bSn8uq3YEA861x2wwiuJYXAAXtRDocBryaICUEqHSLqQzIfAp
EEFBjd2wL5+YZiUX8baykQfKoYgVElUHkvXQXs/74tNa2idBppGbdj2R/mNPGhhw
Fad0TTA3t9LriNZVJnjbSDJNeDjlCMIUOV7HlgiR7gE0HSkL4RyX4F1+WwIDAQAB
o4ICMzCCAi8wHQYDVR0OBBYEFIVUO/WqtnXS4gsHFCEYQ+jvKAwOMB8GA1UdIwQY
MBaAFF6NB7RffYMSTJ+MD6wDvsAkaLN+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWG8wSHRGOTlneEpNbjR3UHJBTy13Q1JvczM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9hMTY4ZTktZDA3MC00NGUwLTk0YTQt
NmM4ZmQ4NGJiNWY1LzEvaFZRNzlhcTJkZExpQ3djVUlSaEQ2TzhvREE0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi9hMTY4ZTktZDA3MC00NGUwLTk0YTQtNmM4ZmQ4NGJiNWY1
LzEvWG8wSHRGOTlneEpNbjR3UHJBTy13Q1JvczM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODAeBAIAATAYAwQDBTlYAwQA
W8ZRAwQAwcsFAwQAwyN4MBYEAgACMBADBwAgAQf4ABcDBQAqAOsgMA0GCSqGSIb3
DQEBCwUAA4IBAQCBE5MJ7qPNWxfFLSFeMnFR/pDAWgNRuS31LmS+gw6EMoyFVmzB
y+kaUId7pBL4LC9ivG5CVN5MEnEmSjjJcBypPPlHJbpatmkjAAI2hw4ZN9l20/ZV
+lquLzpRXaIhpyrUS/A+KVlcpkGp6ayFWVvl4IaGD+ma7ZzY0pNr39+aPOXKrB5b
Z2HDB+mLYBwX3Dg3KapbYrfNsCuXqQcdXgN4E87EKqTr3Fts7XYTZvQQaudVguCK
b2afG1TVKtkoQTepfyf0QVYhSlvm7cakZgKvIYkc4WCA14a5ra4J9Oz35Cij3Q/P
TH0BjzRlnOIBbkM35yBN1pQqfqsPND6kGkSw
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:16 2024 by rpki-client on console-ams.rpki-client.org