Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/aApgJJmvQzdB37q8KE0vbHokS-E.roa
File: aApgJJmvQzdB37q8KE0vbHokS-E.roa (raw, json)
Hash identifier: 5Z1QXwOS1zAKd8gxVSNgwWQKcY5sU1Ey/10Lz3I/qf0=
Subject key identifier: 68:0A:60:24:99:AF:43:37:41:DF:BA:BC:28:4D:2F:6C:7A:24:4B:E1
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01856F14E3B5FDF822FBD089D3C66B9ABCEF
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/aApgJJmvQzdB37q8KE0vbHokS-E.roa
Signing time: Sun 01 Jan 2023 20:45:17 +0000
ROA not before: Sun 01 Jan 2023 20:45:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5606
IP address blocks: 217.156.46.0/24 maxlen: 24
217.156.47.0/24 maxlen: 24
85.120.19.0/24 maxlen: 24
85.120.18.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 11 Jan 2023 13:39:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:14:e3:b5:fd:f8:22:fb:d0:89:d3:c6:6b:9a:bc:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 20:45:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=680a602499af433741dfbabc284d2f6c7a244be1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:fd:14:34:c5:2a:9b:53:2d:91:0b:d9:b3:f3:
bd:a7:2f:b9:c6:08:15:25:50:2b:29:75:52:c1:56:
b7:61:b7:01:ac:d5:58:4e:f0:f6:f3:b1:84:f9:66:
9d:91:9f:32:70:ed:3d:66:06:b6:78:25:d1:ad:ca:
ef:58:a2:97:d1:6a:d6:d1:a2:2d:ea:4b:fc:03:ca:
5f:b8:24:79:a4:a7:30:db:92:a2:c1:10:b1:b9:29:
bd:ad:22:d5:34:86:c6:0e:97:1c:8a:14:e1:bf:70:
34:9b:9a:3d:51:e1:cc:61:82:ff:a1:42:81:60:3d:
56:3f:da:e3:6b:78:6d:5b:87:9a:23:8b:85:a9:21:
0d:bf:c0:be:3a:b8:6f:b8:e9:88:c1:1f:a2:c6:8c:
b0:4f:6b:93:c3:f9:1f:a5:55:81:1a:df:94:1e:9b:
21:75:b2:66:98:36:71:47:15:dc:20:ee:6d:5e:ec:
da:03:5a:c7:6d:39:46:83:b2:90:93:2c:97:6b:cc:
55:4f:0a:bc:28:d1:20:f4:7a:56:20:21:d1:b8:cf:
17:5e:79:95:9d:ec:fa:67:e4:63:64:86:b0:fa:22:
58:79:e0:a7:72:e7:70:f3:48:2b:40:9d:6a:fb:1c:
39:51:8b:29:0b:5a:b2:9a:f1:b9:be:47:bf:ef:4e:
ce:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:0A:60:24:99:AF:43:37:41:DF:BA:BC:28:4D:2F:6C:7A:24:4B:E1
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/aApgJJmvQzdB37q8KE0vbHokS-E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.120.18.0/23
217.156.46.0/23
Signature Algorithm: sha256WithRSAEncryption
7e:57:a3:65:1f:08:ff:58:d8:e4:22:d4:2f:0a:5c:4d:49:e2:
2e:5f:dc:91:ec:78:ea:f2:8c:5f:f0:d0:86:ae:c9:5e:2d:e7:
b6:a1:c7:04:b4:5f:60:d6:69:47:17:c8:ea:e0:cc:29:17:58:
95:51:eb:26:c3:8e:3d:02:9b:ad:80:31:0f:c4:a4:a6:24:4b:
86:30:22:71:3f:1d:e4:d8:6e:a0:6f:52:0e:a9:25:48:3f:60:
2d:1c:dd:b8:0d:04:8a:9d:af:9b:8a:fb:87:2a:73:39:f0:a5:
3f:69:56:7e:46:38:9d:b8:24:d7:22:fe:7c:dd:6e:28:65:1c:
9b:04:25:81:33:7c:fc:ed:c3:4c:0c:7e:d7:70:57:03:b6:74:
9d:4a:cd:40:5b:36:dc:07:97:dd:e3:3a:84:96:a9:cd:06:e4:
4c:1b:70:f1:14:ed:00:b2:07:6e:45:0f:8c:e7:d3:42:af:56:
d6:da:c5:1d:82:f2:31:02:b4:8e:2b:92:8b:5d:e7:09:aa:1f:
2a:26:46:64:fe:16:5a:ba:ef:26:bb:c3:27:4c:17:11:8c:14:
81:d9:1d:81:01:bc:cf:59:49:2b:8b:c8:4a:0d:a6:4c:ee:37:
e3:af:86:10:77:bd:1b:72:5c:64:55:a2:9a:06:fb:cf:6d:3a:
83:40:c2:e4
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVvFOO1/fgi+9CJ08ZrmrzvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh
MTU3MjIwHhcNMjMwMTAxMjA0NTE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ODBhNjAyNDk5YWY0MzM3NDFkZmJhYmMyODRkMmY2YzdhMjQ0YmUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuf0UNMUqm1MtkQvZs/O9py+5xggV
JVArKXVSwVa3YbcBrNVYTvD287GE+WadkZ8ycO09Zga2eCXRrcrvWKKX0WrW0aIt
6kv8A8pfuCR5pKcw25KiwRCxuSm9rSLVNIbGDpccihThv3A0m5o9UeHMYYL/oUKB
YD1WP9rja3htW4eaI4uFqSENv8C+OrhvuOmIwR+ixoywT2uTw/kfpVWBGt+UHpsh
dbJmmDZxRxXcIO5tXuzaA1rHbTlGg7KQkyyXa8xVTwq8KNEg9HpWICHRuM8XXnmV
nez6Z+RjZIaw+iJYeeCncudw80grQJ1q+xw5UYspC1qymvG5vke/707OOwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGgKYCSZr0M3Qd+6vChNL2x6JEvhMB8GA1UdIwQY
MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt
ZjUyYzQ3YzIyNWRiLzEvYUFwZ0pKbXZRemRCMzdxOEtFMHZiSG9rUy1FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi
LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBVXgSAwQB
2ZwuMA0GCSqGSIb3DQEBCwUAA4IBAQB+V6NlHwj/WNjkItQvClxNSeIuX9yR7Hjq
8oxf8NCGrsleLee2occEtF9g1mlHF8jq4MwpF1iVUesmw449AputgDEPxKSmJEuG
MCJxPx3k2G6gb1IOqSVIP2AtHN24DQSKna+bivuHKnM58KU/aVZ+RjiduCTXIv58
3W4oZRybBCWBM3z87cNMDH7XcFcDtnSdSs1AWzbcB5fd4zqElqnNBuRMG3DxFO0A
sgduRQ+M59NCr1bW2sUdgvIxArSOK5KLXecJqh8qJkZk/hZauu8mu8MnTBcRjBSB
2R2BAbzPWUkri8hKDaZM7jfjr4YQd70bclxkVaKaBvvPbTqDQMLk
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:22 2024 by rpki-client on console-fra.rpki-client.org