Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/k9UuOZT2WsqLzK6xNNf3AFNUz20.roa
File: k9UuOZT2WsqLzK6xNNf3AFNUz20.roa (raw, json)
Hash identifier: uQXXrEk7RTeEz2ARIBi82yfYO+XAiBZoP/0LvPZF49M=
Subject key identifier: 93:D5:2E:39:94:F6:5A:CA:8B:CC:AE:B1:34:D7:F7:00:53:54:CF:6D
Certificate issuer: /CN=9d210f2259093aaf45285922a588e9a661aba9fa
Certificate serial: 01856D819FE0A81F46C02E382B78B9E5C2DE
Authority key identifier: 9D:21:0F:22:59:09:3A:AF:45:28:59:22:A5:88:E9:A6:61:AB:A9:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/k9UuOZT2WsqLzK6xNNf3AFNUz20.roa
Signing time: Sun 01 Jan 2023 13:24:49 +0000
ROA not before: Sun 01 Jan 2023 13:24:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6854
IP address blocks: 217.196.16.0/20 maxlen: 20
77.245.96.0/20 maxlen: 20
93.185.64.0/20 maxlen: 20
95.141.128.0/20 maxlen: 20
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:81:9f:e0:a8:1f:46:c0:2e:38:2b:78:b9:e5:c2:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d210f2259093aaf45285922a588e9a661aba9fa
Validity
Not Before: Jan 1 13:24:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=93d52e3994f65aca8bccaeb134d7f7005354cf6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:07:77:66:d7:af:12:0b:7d:1f:92:41:1b:34:
c9:d0:8f:a2:00:91:7e:5a:cc:bf:ac:ae:08:37:f6:
e9:ff:c5:9c:63:26:07:22:a9:a2:cd:72:13:3a:f0:
fe:07:e1:33:e0:04:3a:42:91:83:3a:0f:a7:97:e6:
e3:1e:32:d6:81:db:26:d1:a1:b6:a8:6f:16:59:9e:
e2:ad:05:d6:e2:0a:d0:4f:c5:d8:2d:71:c4:99:6a:
51:95:77:1f:c5:f1:12:6e:33:e8:5a:6d:58:d3:9c:
bc:88:b3:36:d2:4d:58:45:9a:ef:ec:95:7c:bf:79:
fd:e7:53:ec:78:60:ac:97:44:d4:29:df:46:84:2a:
d8:f5:a8:95:46:44:ef:af:c7:19:6a:16:01:eb:12:
f2:a9:f3:d2:67:a7:16:d8:07:b0:c2:7f:e2:02:c7:
03:b7:5e:61:b6:a7:c5:43:e7:e5:01:e0:1a:23:9b:
c3:4f:c7:4b:c9:0c:84:31:b4:0c:87:b9:db:95:52:
ad:b1:67:9d:bb:e1:3e:1e:18:31:2c:8e:2b:af:8d:
96:52:f2:ee:4b:d7:9b:03:e4:eb:40:1b:71:07:dd:
7b:53:52:36:62:e3:64:b5:f0:76:19:a1:60:f5:68:
3c:dd:cd:17:13:ce:99:fb:ac:b4:5c:65:af:cb:20:
75:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:D5:2E:39:94:F6:5A:CA:8B:CC:AE:B1:34:D7:F7:00:53:54:CF:6D
X509v3 Authority Key Identifier:
keyid:9D:21:0F:22:59:09:3A:AF:45:28:59:22:A5:88:E9:A6:61:AB:A9:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/k9UuOZT2WsqLzK6xNNf3AFNUz20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.245.96.0/20
93.185.64.0/20
95.141.128.0/20
217.196.16.0/20
Signature Algorithm: sha256WithRSAEncryption
1f:ca:8d:21:d3:27:63:cb:16:18:aa:04:cc:5c:b4:6d:b5:26:
71:11:bb:0d:a0:97:2e:f4:3e:08:31:6f:f1:29:b2:24:43:f4:
3a:aa:05:b2:53:da:d3:48:6a:5a:eb:64:c3:bd:73:82:2e:12:
f9:41:70:32:51:6f:d4:96:03:10:92:ea:53:e4:01:d7:bf:8a:
dc:54:79:a8:55:c3:ee:3f:65:7f:f0:9c:1e:da:1f:4d:20:2d:
a0:91:ca:a5:62:62:19:c9:a8:7d:02:d7:14:6a:b9:42:b1:28:
7f:ec:d9:3a:0e:d5:14:7b:bc:dc:43:64:e1:50:e6:a5:3b:bf:
54:09:d2:67:05:89:50:7a:28:b8:7f:32:1b:08:11:5e:28:a5:
cb:85:3e:2e:ae:6d:32:0b:e7:83:f5:73:6d:de:8b:9e:74:99:
a6:ce:7f:17:83:1f:b6:d8:dd:2c:ff:7d:ba:36:ab:78:fb:17:
41:4c:48:b4:5b:34:26:93:87:10:6e:3c:c2:97:9a:0b:e0:b2:
a0:d2:77:7a:c3:fc:f5:e0:47:a5:14:6c:a3:d5:43:a8:9a:69:
61:f4:39:6c:72:a7:1f:f4:eb:e7:57:e4:ba:6b:23:74:b6:e7:
44:a8:fd:c4:f5:0c:24:37:56:3f:ca:0e:e9:2a:8f:30:86:c1:
3d:1d:fe:75
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYVtgZ/gqB9GwC44K3i55cLeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMjEwZjIyNTkwOTNhYWY0NTI4NTkyMmE1ODhlOWE2NjFh
YmE5ZmEwHhcNMjMwMTAxMTMyNDQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5M2Q1MmUzOTk0ZjY1YWNhOGJjY2FlYjEzNGQ3ZjcwMDUzNTRjZjZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwd3ZtevEgt9H5JBGzTJ0I+iAJF+
Wsy/rK4IN/bp/8WcYyYHIqmizXITOvD+B+Ez4AQ6QpGDOg+nl+bjHjLWgdsm0aG2
qG8WWZ7irQXW4grQT8XYLXHEmWpRlXcfxfESbjPoWm1Y05y8iLM20k1YRZrv7JV8
v3n951PseGCsl0TUKd9GhCrY9aiVRkTvr8cZahYB6xLyqfPSZ6cW2Aewwn/iAscD
t15htqfFQ+flAeAaI5vDT8dLyQyEMbQMh7nblVKtsWedu+E+HhgxLI4rr42WUvLu
S9ebA+TrQBtxB917U1I2YuNktfB2GaFg9Wg83c0XE86Z+6y0XGWvyyB1MwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFJPVLjmU9lrKi8yusTTX9wBTVM9tMB8GA1UdIwQY
MBaAFJ0hDyJZCTqvRShZIqWI6aZhq6n6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNFUElsa0pPcTlGS0ZraXBZanBwbUdycWZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS85MzY4NmQtMTFmNS00ZTNlLWI1YzQt
NDM4NDNjMmU5NDNiLzEvazlVdU9aVDJXc3FMeks2eE5OZjNBRk5VejIwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS85MzY4NmQtMTFmNS00ZTNlLWI1YzQtNDM4NDNjMmU5NDNi
LzEvblNFUElsa0pPcTlGS0ZraXBZanBwbUdycWZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQETfVgAwQE
XblAAwQEX42AAwQE2cQQMA0GCSqGSIb3DQEBCwUAA4IBAQAfyo0h0ydjyxYYqgTM
XLRttSZxEbsNoJcu9D4IMW/xKbIkQ/Q6qgWyU9rTSGpa62TDvXOCLhL5QXAyUW/U
lgMQkupT5AHXv4rcVHmoVcPuP2V/8Jwe2h9NIC2gkcqlYmIZyah9AtcUarlCsSh/
7Nk6DtUUe7zcQ2ThUOalO79UCdJnBYlQeii4fzIbCBFeKKXLhT4urm0yC+eD9XNt
3ouedJmmzn8Xgx+22N0s/326Nqt4+xdBTEi0WzQmk4cQbjzCl5oL4LKg0nd6w/z1
4EelFGyj1UOommlh9Dlscqcf9OvnV+S6ayN0tudEqP3E9QwkN1Y/yg7pKo8whsE9
Hf51
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:17 2024 by rpki-client on console-fra.rpki-client.org