Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/eT0qdCtsing2OHUGwnjyfKO-lwY.roa
File: eT0qdCtsing2OHUGwnjyfKO-lwY.roa (raw, json)
Hash identifier: H+K5uYvWB2FXAul45R25LjH3hXGuxq7Q23N0Dk2be44=
Subject key identifier: 79:3D:2A:74:2B:6C:8A:78:36:38:75:06:C2:78:F2:7C:A3:BE:97:06
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018C352DADDD8B0FD52457890DA83C518A45
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/eT0qdCtsing2OHUGwnjyfKO-lwY.roa
Signing time: Mon 04 Dec 2023 14:13:55 +0000
ROA not before: Mon 04 Dec 2023 14:13:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 193.30.241.0/24 maxlen: 24
77.83.39.0/24 maxlen: 24
85.209.120.0/23 maxlen: 24
193.57.41.0/24 maxlen: 24
45.94.171.0/24 maxlen: 24
195.177.95.0/24 maxlen: 24
45.88.139.0/24 maxlen: 24
45.81.113.0/24 maxlen: 24
45.81.115.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:35:2d:ad:dd:8b:0f:d5:24:57:89:0d:a8:3c:51:8a:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Dec 4 14:13:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=793d2a742b6c8a7836387506c278f27ca3be9706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:98:d9:16:4c:98:0f:18:d9:58:00:64:0f:e6:
c7:06:81:dd:69:4c:b8:cb:ae:df:51:14:f9:5e:0f:
53:4d:a4:f4:75:e7:8c:18:6f:f0:3f:55:e4:80:8f:
77:52:a1:ad:4c:7f:3a:73:00:81:56:66:a8:11:fd:
c2:cf:83:63:95:b0:85:90:fd:05:1e:e5:8f:22:f2:
bb:fc:d1:4a:d1:21:ff:21:d4:73:16:57:fe:06:95:
6c:35:63:2a:89:c8:a5:99:b8:1b:f1:fa:02:66:92:
02:42:ed:b0:cc:f1:ec:10:b8:9b:29:b7:46:c4:a0:
c8:ee:73:89:0f:31:4f:fa:f9:a2:0f:08:f2:50:c0:
dc:a9:98:1d:8b:51:ca:df:cb:fc:9d:e1:6e:b7:cf:
49:55:62:9f:c2:25:a7:96:9b:0e:45:ee:3b:cb:ec:
ed:1b:3a:b9:92:61:a1:08:52:56:97:92:c4:25:cb:
47:50:c6:30:d1:d0:24:df:f6:cf:b1:00:ff:ed:49:
10:73:c0:3f:c4:f5:45:4b:6b:d8:7b:f1:37:2b:93:
81:cc:4f:9a:7b:14:6d:15:85:e3:e5:b3:96:5a:3e:
7f:f3:d9:9b:ad:fe:cc:f8:3c:88:4b:e4:f7:fb:56:
f0:16:41:94:83:7d:b9:c1:e6:ac:05:15:17:c9:90:
10:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:3D:2A:74:2B:6C:8A:78:36:38:75:06:C2:78:F2:7C:A3:BE:97:06
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/eT0qdCtsing2OHUGwnjyfKO-lwY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.113.0/24
45.81.115.0/24
45.88.139.0/24
45.94.171.0/24
77.83.39.0/24
85.209.120.0/23
193.30.241.0/24
193.57.41.0/24
195.177.95.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:3f:ed:88:bf:e7:09:74:3c:23:4c:09:cd:8f:4e:8f:ab:9f:
54:1e:b8:4d:c6:ab:c4:6e:45:31:d2:32:1f:7f:18:3f:96:9c:
08:d2:a1:95:5c:3d:65:f1:54:33:32:32:24:9a:1a:07:bb:bf:
0b:74:21:03:5c:43:cf:62:bb:e2:9c:ed:66:1b:09:8c:b0:b3:
f3:59:d1:e7:6f:9c:4d:2e:9e:2b:ad:6d:32:e1:d6:c6:2b:1c:
4b:f8:99:b6:fd:3d:29:ed:21:1f:d1:9e:72:cf:0d:de:71:a8:
1d:f5:67:53:77:6e:10:c1:87:6c:75:d5:2f:3b:99:d5:9f:dd:
a7:5b:05:d6:41:d9:9d:b5:17:60:5a:89:83:95:9a:27:a6:c3:
c6:e6:7a:be:70:81:5f:5f:c0:9a:98:2b:dd:87:60:1a:f8:4e:
71:77:44:7d:2a:d5:21:f7:c6:26:c3:e3:6a:5d:da:f6:0e:2d:
1d:1c:15:4b:5f:76:7c:9a:37:46:60:66:8f:1a:c9:ce:77:d0:
ad:00:f5:57:ec:3b:95:cd:78:81:2d:35:74:90:6d:da:c1:70:
c4:b0:fd:1e:8a:f6:59:41:0b:f9:c1:2e:ca:46:8e:4f:ec:09:
d0:83:8d:0a:8b:30:15:44:25:3a:a8:13:e6:b6:73:48:71:13:
f0:61:7b:ef
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgISAYw1La3diw/VJFeJDag8UYpFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy
YTI4YTEwHhcNMjMxMjA0MTQxMzU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OTNkMmE3NDJiNmM4YTc4MzYzODc1MDZjMjc4ZjI3Y2EzYmU5NzA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgZjZFkyYDxjZWABkD+bHBoHdaUy4
y67fURT5Xg9TTaT0deeMGG/wP1XkgI93UqGtTH86cwCBVmaoEf3Cz4NjlbCFkP0F
HuWPIvK7/NFK0SH/IdRzFlf+BpVsNWMqicilmbgb8foCZpICQu2wzPHsELibKbdG
xKDI7nOJDzFP+vmiDwjyUMDcqZgdi1HK38v8neFut89JVWKfwiWnlpsORe47y+zt
Gzq5kmGhCFJWl5LEJctHUMYw0dAk3/bPsQD/7UkQc8A/xPVFS2vYe/E3K5OBzE+a
exRtFYXj5bOWWj5/89mbrf7M+DyIS+T3+1bwFkGUg325weasBRUXyZAQ9QIDAQAB
o4ICOTCCAjUwHQYDVR0OBBYEFHk9KnQrbIp4Njh1BsJ48nyjvpcGMB8GA1UdIwQY
MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt
ZWVmMzUxMWY2YzYwLzEvZVQwcWRDdHNpbmcyT0hVR3duanlmS08tbHdZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw
LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQALVFxAwQA
LVFzAwQALViLAwQALV6rAwQATVMnAwQBVdF4AwQAwR7xAwQAwTkpAwQAw7FfMA0G
CSqGSIb3DQEBCwUAA4IBAQA6P+2Iv+cJdDwjTAnNj06Pq59UHrhNxqvEbkUx0jIf
fxg/lpwI0qGVXD1l8VQzMjIkmhoHu78LdCEDXEPPYrvinO1mGwmMsLPzWdHnb5xN
Lp4rrW0y4dbGKxxL+Jm2/T0p7SEf0Z5yzw3ecagd9WdTd24QwYdsddUvO5nVn92n
WwXWQdmdtRdgWomDlZonpsPG5nq+cIFfX8CamCvdh2Aa+E5xd0R9KtUh98Ymw+Nq
Xdr2Di0dHBVLX3Z8mjdGYGaPGsnOd9CtAPVX7DuVzXiBLTV0kG3awXDEsP0eivZZ
QQv5wS7KRo5P7AnQg40KizAVRCU6qBPmtnNIcRPwYXvv
-----END CERTIFICATE-----
Generated at Wed Dec 6 14:00:21 2023 by rpki-client on console-fra.rpki-client.org