Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/ps79d7t3saWu45M5O1ZSclHReIk.roa
File: ps79d7t3saWu45M5O1ZSclHReIk.roa (raw, json)
Hash identifier: /axAB/mZS9CGjVURVGOHUnYJaCjn6dYh/7xzgyBivUI=
Subject key identifier: A6:CE:FD:77:BB:77:B1:A5:AE:E3:93:39:3B:56:52:72:51:D1:78:89
Certificate issuer: /CN=9ba94bc14937bb0b3632374355a446724104a981
Certificate serial: 018CC492ED6F16A6FB21131395DAC232BA14
Authority key identifier: 9B:A9:4B:C1:49:37:BB:0B:36:32:37:43:55:A4:46:72:41:04:A9:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m6lLwUk3uws2MjdDVaRGckEEqYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/ps79d7t3saWu45M5O1ZSclHReIk.roa
Signing time: Mon 01 Jan 2024 10:30:12 +0000
ROA not before: Mon 01 Jan 2024 10:30:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31480
IP address blocks: 193.151.109.0/24 maxlen: 24
193.151.108.0/22 maxlen: 22
193.151.108.0/24 maxlen: 24
193.151.110.0/24 maxlen: 24
91.196.32.0/22 maxlen: 22
185.59.136.0/24 maxlen: 24
2a0c:1d80::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 26 Mar 2024 09:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:ed:6f:16:a6:fb:21:13:13:95:da:c2:32:ba:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ba94bc14937bb0b3632374355a446724104a981
Validity
Not Before: Jan 1 10:30:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a6cefd77bb77b1a5aee393393b56527251d17889
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:af:86:8c:32:b5:be:a5:5a:fb:51:b8:49:3d:
77:f8:53:3d:43:09:e1:8e:ee:f8:2b:cb:b1:d1:53:
bf:c1:f3:b4:f1:35:54:32:c2:68:ba:24:20:6e:71:
66:29:2e:bd:e8:e8:59:96:7c:df:63:94:eb:18:69:
1d:03:83:7a:0c:2f:c8:c4:71:04:04:a9:48:57:dd:
05:c0:49:2a:2b:8c:08:67:a0:d2:66:6e:13:62:50:
4e:df:f5:1c:b4:ed:82:76:5d:b0:ba:50:fc:18:49:
e3:60:2c:dd:31:0f:8d:11:72:44:45:f6:a0:48:6a:
ae:71:47:ec:34:6f:2f:09:fa:96:a1:3f:2e:60:3c:
49:cf:ff:a0:a2:e7:79:92:0d:7a:99:c6:d5:77:54:
ef:06:4c:30:d9:e1:11:d5:85:89:49:db:38:4e:38:
30:9b:17:39:97:b0:df:61:d4:52:0f:c7:3b:5e:07:
57:00:35:63:f3:f5:60:b4:59:14:f3:71:dd:77:bf:
e3:f0:6c:c7:3f:24:e9:79:f2:d5:07:41:cd:78:d7:
2e:eb:75:e5:67:96:92:58:03:ff:bb:59:5e:c2:0d:
2a:b8:89:57:58:84:5b:0c:9b:f8:91:2b:35:2e:95:
14:1d:7b:37:47:ae:05:55:51:6d:11:d8:4a:bc:f7:
e1:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:CE:FD:77:BB:77:B1:A5:AE:E3:93:39:3B:56:52:72:51:D1:78:89
X509v3 Authority Key Identifier:
keyid:9B:A9:4B:C1:49:37:BB:0B:36:32:37:43:55:A4:46:72:41:04:A9:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m6lLwUk3uws2MjdDVaRGckEEqYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/ps79d7t3saWu45M5O1ZSclHReIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/m6lLwUk3uws2MjdDVaRGckEEqYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.196.32.0/22
185.59.136.0/24
193.151.108.0/22
IPv6:
2a0c:1d80::/29
Signature Algorithm: sha256WithRSAEncryption
4c:ff:9f:4b:61:89:ad:49:83:de:a4:1f:91:6a:b0:08:ef:61:
04:b4:c1:56:63:34:90:f7:db:8b:90:61:98:8a:74:ff:f0:df:
02:b0:f2:c1:2e:00:a1:76:59:a3:be:46:42:1a:ed:2a:83:79:
38:d0:43:db:f5:bd:75:99:0f:b0:31:35:fe:b4:d0:f8:17:39:
23:6e:11:09:e1:08:a2:58:da:3b:64:6b:2d:7b:1c:2f:c3:9b:
d4:7f:ed:49:bf:48:6c:b2:b1:b3:49:e6:82:89:f7:15:6d:60:
88:db:3c:2c:8b:d1:16:15:20:69:06:30:5a:bd:73:54:ae:9a:
9a:0e:62:8a:35:96:8d:2e:01:d2:32:bb:da:f4:35:f2:87:2e:
7b:49:75:ab:b2:dd:86:9b:9d:ec:ce:8d:57:39:04:d7:e2:e6:
f2:9a:6f:63:32:e7:ef:30:dd:a6:8f:37:94:4f:6a:6d:9d:12:
60:78:1c:d8:e3:2c:df:0a:f6:a1:d0:db:d8:cf:49:66:c5:28:
9f:f7:10:84:54:59:6c:46:55:ee:7c:68:0e:9e:48:a9:cf:8a:
ba:88:99:a9:0d:a3:f3:3f:27:14:b7:d4:5e:8b:2e:b3:c5:97:
ad:e5:f9:ed:36:73:b1:5e:31:c1:b7:29:b5:40:c3:a2:57:5c:
4e:b9:8d:28
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAYzEku1vFqb7IRMTldrCMroUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliYTk0YmMxNDkzN2JiMGIzNjMyMzc0MzU1YTQ0NjcyNDEw
NGE5ODEwHhcNMjQwMTAxMTAzMDEyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNmNlZmQ3N2JiNzdiMWE1YWVlMzkzMzkzYjU2NTI3MjUxZDE3ODg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAha+GjDK1vqVa+1G4ST13+FM9Qwnh
ju74K8ux0VO/wfO08TVUMsJouiQgbnFmKS696OhZlnzfY5TrGGkdA4N6DC/IxHEE
BKlIV90FwEkqK4wIZ6DSZm4TYlBO3/UctO2Cdl2wulD8GEnjYCzdMQ+NEXJERfag
SGqucUfsNG8vCfqWoT8uYDxJz/+goud5kg16mcbVd1TvBkww2eER1YWJSds4Tjgw
mxc5l7DfYdRSD8c7XgdXADVj8/VgtFkU83Hdd7/j8GzHPyTpefLVB0HNeNcu63Xl
Z5aSWAP/u1lewg0quIlXWIRbDJv4kSs1LpUUHXs3R64FVVFtEdhKvPfhKQIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFKbO/Xe7d7GlruOTOTtWUnJR0XiJMB8GA1UdIwQY
MBaAFJupS8FJN7sLNjI3Q1WkRnJBBKmBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTZsTHdVazN1d3MyTWpkRFZhUkdja0VFcVlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9jYzc4NDMtZDEzNi00ZmZiLThiOTkt
ODM2YzMxMmFjOGMyLzEvcHM3OWQ3dDNzYVd1NDVNNU8xWlNjbEhSZUlrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS9jYzc4NDMtZDEzNi00ZmZiLThiOTktODM2YzMxMmFjOGMy
LzEvbTZsTHdVazN1d3MyTWpkRFZhUkdja0VFcVlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCW8QgAwQA
uTuIAwQCwZdsMA0EAgACMAcDBQMqDB2AMA0GCSqGSIb3DQEBCwUAA4IBAQBM/59L
YYmtSYPepB+RarAI72EEtMFWYzSQ99uLkGGYinT/8N8CsPLBLgChdlmjvkZCGu0q
g3k40EPb9b11mQ+wMTX+tND4FzkjbhEJ4QiiWNo7ZGstexwvw5vUf+1Jv0hssrGz
SeaCifcVbWCI2zwsi9EWFSBpBjBavXNUrpqaDmKKNZaNLgHSMrva9DXyhy57SXWr
st2Gm53szo1XOQTX4ubymm9jMufvMN2mjzeUT2ptnRJgeBzY4yzfCvah0NvYz0lm
xSif9xCEVFlsRlXufGgOnkipz4q6iJmpDaPzPycUt9Reiy6zxZet5fntNnOxXjHB
tym1QMOiV1xOuY0o
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:56:41 2024 by rpki-client on console-ams.rpki-client.org