Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/16d5ce-184a-4366-8d75-aaab25894d5e/1/ebP1ClA2JkeldIthI4gpGXliFQU.roa
File: ebP1ClA2JkeldIthI4gpGXliFQU.roa (raw, json)
Hash identifier: sfnCQvUnTyqXJCZYEXphY3stAHrc3CijW8lHiW6gDQo=
Subject key identifier: 79:B3:F5:0A:50:36:26:47:A5:74:8B:61:23:88:29:19:79:62:15:05
Certificate issuer: /CN=34b0c5a403e2dad3c47b791fda2042cf715009cf
Certificate serial: 018CC86EF1CA731760FAE6D4266CA6A2E84A
Authority key identifier: 34:B0:C5:A4:03:E2:DA:D3:C4:7B:79:1F:DA:20:42:CF:71:50:09:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NLDFpAPi2tPEe3kf2iBCz3FQCc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/16d5ce-184a-4366-8d75-aaab25894d5e/1/ebP1ClA2JkeldIthI4gpGXliFQU.roa
Signing time: Tue 02 Jan 2024 04:29:23 +0000
ROA not before: Tue 02 Jan 2024 04:29:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48314
IP address blocks: 193.135.10.0/24 maxlen: 24
185.245.96.0/24 maxlen: 24
91.210.224.0/24 maxlen: 24
88.218.227.0/24 maxlen: 24
185.248.140.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 15 Feb 2024 13:43:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6e:f1:ca:73:17:60:fa:e6:d4:26:6c:a6:a2:e8:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34b0c5a403e2dad3c47b791fda2042cf715009cf
Validity
Not Before: Jan 2 04:29:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=79b3f50a50362647a5748b612388291979621505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3f:0e:bb:d0:fd:b6:a8:76:ff:f4:1f:b3:40:
45:e0:3e:5f:6c:9d:70:81:40:3d:2d:97:e8:73:0b:
0b:95:21:c2:43:8e:40:c1:cc:65:19:78:5c:f7:66:
c2:96:a5:92:8a:d4:dc:6c:0e:20:76:c3:96:52:86:
23:f9:45:1c:e9:2e:c8:bf:78:c4:a7:d7:48:a0:3c:
61:34:62:7b:71:f1:e6:d6:fd:9a:92:2e:f0:7d:4a:
24:c1:c2:98:bb:c4:c1:6a:bb:9b:8b:4d:6b:ae:91:
51:be:3a:46:a9:39:97:16:c4:d7:7e:1b:8c:04:ac:
a7:f5:00:eb:e2:4a:6d:0b:d9:84:eb:d8:ea:56:69:
d0:96:94:e1:93:22:d2:de:b9:5b:1f:3d:f2:cb:37:
57:85:d3:01:36:7b:71:37:ce:40:f6:d0:a1:b4:2d:
dc:3b:e5:e4:86:4d:32:0d:c4:5e:c7:83:6f:0c:c3:
bf:b0:11:ea:8a:09:3f:19:56:9b:5a:73:c5:3c:07:
a1:16:fc:c3:a2:dd:bd:15:c9:07:7b:19:7f:98:34:
36:95:46:26:3e:35:fa:c6:60:ce:17:9e:6c:98:cd:
94:53:73:f7:cf:d4:26:09:d9:7d:0d:e7:3f:2d:fe:
75:7b:e5:3d:d5:66:0c:2e:21:d7:32:9f:28:23:8f:
3e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:B3:F5:0A:50:36:26:47:A5:74:8B:61:23:88:29:19:79:62:15:05
X509v3 Authority Key Identifier:
keyid:34:B0:C5:A4:03:E2:DA:D3:C4:7B:79:1F:DA:20:42:CF:71:50:09:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NLDFpAPi2tPEe3kf2iBCz3FQCc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/16d5ce-184a-4366-8d75-aaab25894d5e/1/ebP1ClA2JkeldIthI4gpGXliFQU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/16d5ce-184a-4366-8d75-aaab25894d5e/1/NLDFpAPi2tPEe3kf2iBCz3FQCc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.227.0/24
91.210.224.0/24
185.245.96.0/24
185.248.140.0/24
193.135.10.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:84:d3:da:91:1b:a9:f4:22:d7:8c:09:69:a6:e9:62:3b:8e:
6a:97:aa:61:e9:cc:3b:7f:51:9a:a5:fc:bb:75:7b:17:fd:09:
38:50:30:9b:e4:6e:bc:24:24:c4:38:16:39:3d:89:1c:58:5e:
f7:80:68:27:ae:33:20:b8:f1:80:2a:df:71:f8:30:de:21:a8:
69:9a:c1:84:24:d0:9a:dc:a7:f9:e4:84:e9:c7:ed:32:0d:8c:
eb:33:46:0a:3b:ba:d3:dd:fb:6e:94:96:fa:98:5d:32:27:d3:
9f:2f:07:da:20:0b:b1:8e:95:2c:0d:7f:dd:10:10:6c:d1:f2:
2b:39:11:b8:30:a2:a1:ed:97:ea:30:d0:6d:cd:d0:6f:0c:6e:
03:a6:00:99:c9:43:24:75:81:17:83:97:e3:e8:ac:5f:da:1f:
4b:8d:fc:f3:1e:6b:ca:50:63:4f:24:49:8f:eb:d0:4b:3c:95:
13:9d:c0:45:78:6e:71:69:db:93:b7:96:9f:fb:d5:d0:2d:78:
b0:87:e1:ad:a9:51:fe:24:da:af:d0:27:93:7d:10:b0:b3:f2:
da:11:a0:c5:17:bb:50:16:82:82:f9:82:bf:71:b0:19:af:e7:
6f:38:93:cb:d8:8a:9d:2f:90:e0:45:ff:41:d4:6b:9b:a2:7f:
1e:5b:bb:3f
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYzIbvHKcxdg+ubUJmymouhKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0YjBjNWE0MDNlMmRhZDNjNDdiNzkxZmRhMjA0MmNmNzE1
MDA5Y2YwHhcNMjQwMTAyMDQyOTIzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OWIzZjUwYTUwMzYyNjQ3YTU3NDhiNjEyMzg4MjkxOTc5NjIxNTA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApj8Ou9D9tqh2//Qfs0BF4D5fbJ1w
gUA9LZfocwsLlSHCQ45AwcxlGXhc92bClqWSitTcbA4gdsOWUoYj+UUc6S7Iv3jE
p9dIoDxhNGJ7cfHm1v2aki7wfUokwcKYu8TBarubi01rrpFRvjpGqTmXFsTXfhuM
BKyn9QDr4kptC9mE69jqVmnQlpThkyLS3rlbHz3yyzdXhdMBNntxN85A9tChtC3c
O+Xkhk0yDcRex4NvDMO/sBHqigk/GVabWnPFPAehFvzDot29FckHexl/mDQ2lUYm
PjX6xmDOF55smM2UU3P3z9QmCdl9Dec/Lf51e+U91WYMLiHXMp8oI48+/wIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFHmz9QpQNiZHpXSLYSOIKRl5YhUFMB8GA1UdIwQY
MBaAFDSwxaQD4trTxHt5H9ogQs9xUAnPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkxERnBBUGkydFBFZTNrZjJpQkN6M0ZRQ2M4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi8xNmQ1Y2UtMTg0YS00MzY2LThkNzUt
YWFhYjI1ODk0ZDVlLzEvZWJQMUNsQTJKa2VsZEl0aEk0Z3BHWGxpRlFVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi8xNmQ1Y2UtMTg0YS00MzY2LThkNzUtYWFhYjI1ODk0ZDVl
LzEvTkxERnBBUGkydFBFZTNrZjJpQkN6M0ZRQ2M4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAWNrjAwQA
W9LgAwQAufVgAwQAufiMAwQAwYcKMA0GCSqGSIb3DQEBCwUAA4IBAQB8hNPakRup
9CLXjAlppuliO45ql6ph6cw7f1Gapfy7dXsX/Qk4UDCb5G68JCTEOBY5PYkcWF73
gGgnrjMguPGAKt9x+DDeIahpmsGEJNCa3Kf55ITpx+0yDYzrM0YKO7rT3ftulJb6
mF0yJ9OfLwfaIAuxjpUsDX/dEBBs0fIrORG4MKKh7ZfqMNBtzdBvDG4DpgCZyUMk
dYEXg5fj6Kxf2h9LjfzzHmvKUGNPJEmP69BLPJUTncBFeG5xaduTt5af+9XQLXiw
h+GtqVH+JNqv0CeTfRCws/LaEaDFF7tQFoKC+YK/cbAZr+dvOJPL2IqdL5DgRf9B
1Gubon8eW7s/
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:22 2024 by rpki-client on console-fra.rpki-client.org