Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/h3y8HNnNXy96NvRWBxei2WmBr2Y.roa
File: h3y8HNnNXy96NvRWBxei2WmBr2Y.roa (raw, json)
Hash identifier: gkNB/Ur5Gb1adV4OGljw4wnAzMM0GR0qWTF3iHlCjsc=
Subject key identifier: 87:7C:BC:1C:D9:CD:5F:2F:7A:36:F4:56:07:17:A2:D9:69:81:AF:66
Certificate issuer: /CN=a0cef1caa3459b8b039c217813648dcabce8c2d3
Certificate serial: 018C52205504C75143A2363F7FB0F48787E0
Authority key identifier: A0:CE:F1:CA:A3:45:9B:8B:03:9C:21:78:13:64:8D:CA:BC:E8:C2:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oM7xyqNFm4sDnCF4E2SNyrzowtM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/h3y8HNnNXy96NvRWBxei2WmBr2Y.roa
Signing time: Sun 10 Dec 2023 05:08:19 +0000
ROA not before: Sun 10 Dec 2023 05:08:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59475
IP address blocks: 81.161.120.0/21 maxlen: 21
193.0.168.0/23 maxlen: 23
109.197.162.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:31:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:52:20:55:04:c7:51:43:a2:36:3f:7f:b0:f4:87:87:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0cef1caa3459b8b039c217813648dcabce8c2d3
Validity
Not Before: Dec 10 05:08:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=877cbc1cd9cd5f2f7a36f4560717a2d96981af66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:dd:1d:9d:82:56:24:74:fb:78:a6:f3:20:54:
70:e4:96:50:cd:77:a7:b8:3d:cd:18:5c:b2:90:1e:
46:fb:dd:ab:ea:80:4d:0b:1a:f8:c1:88:1b:fa:b7:
48:ff:17:67:ce:7c:29:35:de:40:06:39:c7:b3:69:
96:bd:dd:b6:2f:de:03:9c:e7:17:3a:d3:46:ba:37:
7c:f2:a7:77:18:1e:14:06:ef:21:85:f5:0e:63:e0:
8a:c0:26:db:a9:46:7f:40:07:21:ae:91:ea:a4:3f:
83:26:bd:cc:b7:42:fc:25:4a:70:10:2f:29:b5:32:
c2:f8:8f:b5:70:b9:b1:9f:b3:5a:46:d6:2a:b6:61:
97:d6:7f:97:30:86:44:17:16:f1:a9:22:df:49:f3:
a0:13:55:cc:3d:73:d7:b7:80:07:59:72:6c:ae:49:
62:de:17:7b:1e:6b:0e:56:06:40:3d:54:b8:06:e5:
97:a4:ab:45:25:a0:ff:89:98:92:89:04:bb:b7:a3:
02:eb:51:ce:4b:d0:3e:22:ce:de:2b:ba:a4:1b:1e:
11:ca:d7:5c:64:2d:8b:2d:e9:14:01:4e:ab:b3:57:
fd:13:f4:8f:1c:65:da:34:84:36:cd:1b:60:2a:bf:
9f:c7:83:1d:04:96:af:d0:ce:ca:34:4c:71:e2:db:
9a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:7C:BC:1C:D9:CD:5F:2F:7A:36:F4:56:07:17:A2:D9:69:81:AF:66
X509v3 Authority Key Identifier:
keyid:A0:CE:F1:CA:A3:45:9B:8B:03:9C:21:78:13:64:8D:CA:BC:E8:C2:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oM7xyqNFm4sDnCF4E2SNyrzowtM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/h3y8HNnNXy96NvRWBxei2WmBr2Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.161.120.0/21
109.197.162.0/23
193.0.168.0/23
Signature Algorithm: sha256WithRSAEncryption
82:75:82:f7:76:56:77:c5:4a:6c:4f:53:e7:60:a5:24:84:b1:
6f:71:b6:99:07:ad:9a:ca:32:c1:ca:0f:1a:7a:77:69:28:5e:
b0:a8:6c:28:3c:ff:b1:89:b1:46:9a:49:7d:0e:c2:6a:c7:70:
60:84:25:8b:e5:e7:1c:5e:ea:c7:36:77:68:53:00:47:77:b9:
49:60:43:d2:bb:e1:18:8e:af:04:dd:76:de:a4:d7:94:66:f7:
2a:f5:04:f9:52:a0:a4:73:90:ee:4a:0b:a8:ca:a3:a7:c7:47:
ea:20:9d:3f:1a:7b:58:8d:5e:56:45:cf:0d:98:cb:cb:e6:1c:
d2:07:07:08:ab:5f:45:a1:93:e2:17:32:96:06:4e:c2:0b:de:
bb:5a:54:1e:b9:d6:ea:20:d4:c8:38:52:d5:a3:8f:68:71:6a:
9c:31:e0:94:71:8c:bf:3b:f3:de:6d:b7:92:35:59:12:7f:b6:
44:73:3b:62:e0:16:a0:c5:0d:0f:9d:69:83:1e:9a:fd:ce:94:
e4:49:ef:02:45:26:29:5a:fd:6f:50:de:71:e9:1e:27:90:ce:
4d:fd:bf:fe:bb:56:a2:95:1e:1e:dd:cd:0b:76:3f:1a:72:e0:
0c:6c:fa:98:51:7e:52:5d:20:14:b4:3c:5f:cc:9c:0e:2f:26:
34:e7:67:8c
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYxSIFUEx1FDojY/f7D0h4fgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwY2VmMWNhYTM0NTliOGIwMzljMjE3ODEzNjQ4ZGNhYmNl
OGMyZDMwHhcNMjMxMjEwMDUwODE5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NzdjYmMxY2Q5Y2Q1ZjJmN2EzNmY0NTYwNzE3YTJkOTY5ODFhZjY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi90dnYJWJHT7eKbzIFRw5JZQzXen
uD3NGFyykB5G+92r6oBNCxr4wYgb+rdI/xdnznwpNd5ABjnHs2mWvd22L94DnOcX
OtNGujd88qd3GB4UBu8hhfUOY+CKwCbbqUZ/QAchrpHqpD+DJr3Mt0L8JUpwEC8p
tTLC+I+1cLmxn7NaRtYqtmGX1n+XMIZEFxbxqSLfSfOgE1XMPXPXt4AHWXJsrkli
3hd7HmsOVgZAPVS4BuWXpKtFJaD/iZiSiQS7t6MC61HOS9A+Is7eK7qkGx4Rytdc
ZC2LLekUAU6rs1f9E/SPHGXaNIQ2zRtgKr+fx4MdBJav0M7KNExx4tuaWwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFId8vBzZzV8vejb0VgcXotlpga9mMB8GA1UdIwQY
MBaAFKDO8cqjRZuLA5wheBNkjcq86MLTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb003eHlxTkZtNHNEbkNGNEUyU055cnpvd3RNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy84NThlZDgtNzMxYS00NzYxLTgyYzAt
NmIwMTc5ZWUxZGQ5LzEvaDN5OEhObk5YeTk2TnZSV0J4ZWkyV21CcjJZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy84NThlZDgtNzMxYS00NzYxLTgyYzAtNmIwMTc5ZWUxZGQ5
LzEvb003eHlxTkZtNHNEbkNGNEUyU055cnpvd3RNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDUaF4AwQB
bcWiAwQBwQCoMA0GCSqGSIb3DQEBCwUAA4IBAQCCdYL3dlZ3xUpsT1PnYKUkhLFv
cbaZB62ayjLByg8aendpKF6wqGwoPP+xibFGmkl9DsJqx3BghCWL5eccXurHNndo
UwBHd7lJYEPSu+EYjq8E3XbepNeUZvcq9QT5UqCkc5DuSguoyqOnx0fqIJ0/GntY
jV5WRc8NmMvL5hzSBwcIq19FoZPiFzKWBk7CC967WlQeudbqINTIOFLVo49ocWqc
MeCUcYy/O/PebbeSNVkSf7ZEczti4BagxQ0PnWmDHpr9zpTkSe8CRSYpWv1vUN5x
6R4nkM5N/b/+u1ailR4e3c0Ldj8acuAMbPqYUX5SXSAUtDxfzJwOLyY052eM
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:33 2024 by rpki-client on console-fra.rpki-client.org