Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/d37bf0-adae-44c5-9438-f345ed3b6016/1/AR33O1sspdvQq-PnbWsgAdD3q-8.roa
File: AR33O1sspdvQq-PnbWsgAdD3q-8.roa (raw, json)
Hash identifier: 8E6n1d4DknBpwLCF120y6YrS5Io0uGhUtOjvRk3cDVg=
Subject key identifier: 01:1D:F7:3B:5B:2C:A5:DB:D0:AB:E3:E7:6D:6B:20:01:D0:F7:AB:EF
Certificate issuer: /CN=f3ea162a492ac2b47e796e9a3c1d51858383fb12
Certificate serial: 018CC424DACB9AFBE10A38B6AF64AE36F464
Authority key identifier: F3:EA:16:2A:49:2A:C2:B4:7E:79:6E:9A:3C:1D:51:85:83:83:FB:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8-oWKkkqwrR-eW6aPB1RhYOD-xI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/d37bf0-adae-44c5-9438-f345ed3b6016/1/AR33O1sspdvQq-PnbWsgAdD3q-8.roa
Signing time: Mon 01 Jan 2024 08:29:58 +0000
ROA not before: Mon 01 Jan 2024 08:29:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34177
IP address blocks: 81.161.58.0/24 maxlen: 24
194.88.246.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 27 May 2024 09:25:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:da:cb:9a:fb:e1:0a:38:b6:af:64:ae:36:f4:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3ea162a492ac2b47e796e9a3c1d51858383fb12
Validity
Not Before: Jan 1 08:29:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=011df73b5b2ca5dbd0abe3e76d6b2001d0f7abef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:51:e2:05:8a:d0:b9:f6:be:71:8f:63:dc:e5:
df:1c:33:c3:f9:07:a3:b6:67:3b:a3:98:31:29:44:
5f:53:0d:dd:56:9f:d9:55:49:03:ef:dc:1f:dc:01:
11:db:63:1c:2a:2e:2b:ac:db:25:32:ee:e5:56:47:
74:2b:8b:29:40:ea:95:d6:16:dc:d9:45:6d:27:cc:
fe:ab:1f:9a:00:cf:82:6a:8e:0e:7f:18:3b:c6:a4:
d9:97:a8:11:8a:84:96:4c:51:51:a9:e9:f3:53:42:
c1:b8:3e:81:90:54:1c:83:43:46:89:eb:76:02:70:
85:55:fa:7d:b4:57:99:5a:a2:a5:7e:63:d6:9e:07:
76:0b:eb:ef:e4:f9:e5:a3:37:f8:e1:75:1c:4d:a8:
58:db:b1:05:7c:45:09:05:fd:48:c4:1b:9c:a9:b4:
d9:ca:6d:74:32:fd:49:d3:d4:fc:4f:dd:a8:0d:ca:
fd:cd:56:eb:d4:17:f0:03:b8:d1:17:1c:24:e4:d3:
12:c4:c5:e4:f4:01:0d:33:46:7a:9d:09:cb:87:44:
2f:12:21:5b:a6:c0:e0:9e:b2:7a:6e:4e:03:f2:96:
3d:74:d1:07:7c:9c:a1:cf:3b:2f:e2:da:3b:e9:8b:
78:70:cc:15:f1:88:b1:c4:96:c7:f2:b1:32:06:59:
73:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:1D:F7:3B:5B:2C:A5:DB:D0:AB:E3:E7:6D:6B:20:01:D0:F7:AB:EF
X509v3 Authority Key Identifier:
keyid:F3:EA:16:2A:49:2A:C2:B4:7E:79:6E:9A:3C:1D:51:85:83:83:FB:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8-oWKkkqwrR-eW6aPB1RhYOD-xI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/d37bf0-adae-44c5-9438-f345ed3b6016/1/AR33O1sspdvQq-PnbWsgAdD3q-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/d37bf0-adae-44c5-9438-f345ed3b6016/1/8-oWKkkqwrR-eW6aPB1RhYOD-xI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.161.58.0/24
194.88.246.0/23
Signature Algorithm: sha256WithRSAEncryption
d8:27:ac:8f:42:10:96:42:e3:a4:9e:fc:b4:0a:0a:b3:20:af:
48:cd:7d:0a:7e:e4:9a:d1:22:e4:f0:ac:b7:2b:9f:ef:8e:54:
b3:7d:b3:aa:de:1d:bf:4a:d7:1e:a3:31:cb:72:5b:44:2c:7c:
40:97:14:4b:71:d4:6e:af:c8:8d:74:cd:63:13:7f:76:08:33:
73:e3:96:09:41:b1:0f:1a:1f:f8:9a:dc:f5:db:c7:f8:8a:d7:
c1:62:37:33:9c:f2:a9:f9:89:56:dc:91:6b:fb:f6:d2:e3:f3:
36:fd:0f:4a:00:b3:7c:1a:16:cb:d9:47:60:7a:da:76:92:f8:
0f:60:06:a1:4c:61:bb:a7:94:ee:53:15:68:0b:f7:fc:83:8a:
15:7d:6b:b0:cc:cf:7f:61:97:ce:74:c8:fc:89:31:a3:e3:cb:
17:e7:e5:15:ce:93:e3:a1:8a:e3:63:ce:84:b7:79:db:b6:7b:
4f:6d:95:5d:ac:6f:59:10:84:32:05:e6:5a:29:69:f6:f9:52:
b4:aa:9d:76:ec:d4:f5:ef:b7:c3:d7:c7:2d:74:d9:c7:68:db:
d9:b1:09:e9:ab:30:6a:40:81:53:b7:8d:9e:c6:e8:5b:f6:e5:
df:34:a1:99:56:3c:68:f8:9a:7a:15:f4:27:3e:36:a6:27:91:
9e:d3:ad:ef
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzEJNrLmvvhCji2r2SuNvRkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzZWExNjJhNDkyYWMyYjQ3ZTc5NmU5YTNjMWQ1MTg1ODM4
M2ZiMTIwHhcNMjQwMTAxMDgyOTU4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMTFkZjczYjViMmNhNWRiZDBhYmUzZTc2ZDZiMjAwMWQwZjdhYmVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFHiBYrQufa+cY9j3OXfHDPD+Qej
tmc7o5gxKURfUw3dVp/ZVUkD79wf3AER22McKi4rrNslMu7lVkd0K4spQOqV1hbc
2UVtJ8z+qx+aAM+Cao4Ofxg7xqTZl6gRioSWTFFRqenzU0LBuD6BkFQcg0NGiet2
AnCFVfp9tFeZWqKlfmPWngd2C+vv5Pnlozf44XUcTahY27EFfEUJBf1IxBucqbTZ
ym10Mv1J09T8T92oDcr9zVbr1BfwA7jRFxwk5NMSxMXk9AENM0Z6nQnLh0QvEiFb
psDgnrJ6bk4D8pY9dNEHfJyhzzsv4to76Yt4cMwV8YixxJbH8rEyBllzVQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFAEd9ztbLKXb0Kvj521rIAHQ96vvMB8GA1UdIwQY
MBaAFPPqFipJKsK0fnlumjwdUYWDg/sSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOC1vV0tra3F3clItZVc2YVBCMVJoWU9ELXhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9kMzdiZjAtYWRhZS00NGM1LTk0Mzgt
ZjM0NWVkM2I2MDE2LzEvQVIzM08xc3NwZHZRcS1QbmJXc2dBZEQzcS04LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9kMzdiZjAtYWRhZS00NGM1LTk0MzgtZjM0NWVkM2I2MDE2
LzEvOC1vV0tra3F3clItZVc2YVBCMVJoWU9ELXhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUaE6AwQB
wlj2MA0GCSqGSIb3DQEBCwUAA4IBAQDYJ6yPQhCWQuOknvy0CgqzIK9IzX0KfuSa
0SLk8Ky3K5/vjlSzfbOq3h2/StceozHLcltELHxAlxRLcdRur8iNdM1jE392CDNz
45YJQbEPGh/4mtz128f4itfBYjcznPKp+YlW3JFr+/bS4/M2/Q9KALN8GhbL2Udg
etp2kvgPYAahTGG7p5TuUxVoC/f8g4oVfWuwzM9/YZfOdMj8iTGj48sX5+UVzpPj
oYrjY86Et3nbtntPbZVdrG9ZEIQyBeZaKWn2+VK0qp127NT177fD18ctdNnHaNvZ
sQnpqzBqQIFTt42exuhb9uXfNKGZVjxo+Jp6FfQnPjamJ5Ge063v
-----END CERTIFICATE-----
Generated at Mon May 27 13:52:21 2024 by rpki-client on console-ams.rpki-client.org