Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/OszwfoTZXsj6NHHU5gCoMY376w8.roa
File: OszwfoTZXsj6NHHU5gCoMY376w8.roa (raw, json)
Hash identifier: MLAUq+Z90WxU4hKhnVSVTp9ZYkE8zhV6veOCPbqNZ3A=
Subject key identifier: 3A:CC:F0:7E:84:D9:5E:C8:FA:34:71:D4:E6:00:A8:31:8D:FB:EB:0F
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 0188AA3D1FF4B62B2458F098897DE768FDA7
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/OszwfoTZXsj6NHHU5gCoMY376w8.roa
Signing time: Sun 11 Jun 2023 11:35:12 +0000
ROA not before: Sun 11 Jun 2023 11:35:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 109.122.44.0/24 maxlen: 24
109.122.43.0/24 maxlen: 24
91.226.59.0/24 maxlen: 24
89.251.23.0/24 maxlen: 24
89.251.22.0/24 maxlen: 24
89.251.20.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 12 Jun 2023 10:34:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:aa:3d:1f:f4:b6:2b:24:58:f0:98:89:7d:e7:68:fd:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Jun 11 11:35:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3accf07e84d95ec8fa3471d4e600a8318dfbeb0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:08:15:14:2c:2e:2a:ea:85:67:52:a8:07:2e:
01:83:ce:a1:06:5f:95:56:fc:5a:32:34:a8:99:56:
17:42:60:11:ad:7d:cb:4e:73:9e:a9:fb:5a:62:4d:
98:31:5e:2e:0f:68:db:a8:f7:04:f4:0c:03:3c:e9:
cd:be:b3:72:a9:67:82:68:85:37:d8:0e:f1:8f:ca:
52:4f:cd:62:27:73:cf:e3:1a:b8:fc:5a:f6:ad:56:
73:21:68:e8:c4:20:f3:a9:1e:87:c1:e8:c6:59:9b:
7f:13:d1:da:ef:fa:e3:63:10:15:1d:21:d2:e1:9d:
53:d4:56:42:96:d0:74:83:30:94:55:4a:47:64:65:
42:86:d9:fe:82:75:bf:76:b4:2b:be:2c:ce:d7:4e:
08:ce:ec:d8:24:41:31:56:fd:34:52:5d:ad:20:f2:
3e:21:4e:9d:a2:c2:ab:ca:6c:54:9e:3c:cb:87:ff:
3e:34:19:28:fe:78:68:c7:9a:ea:be:9e:4b:49:f3:
4f:a0:bb:73:34:21:c4:21:29:f7:3a:b5:80:de:e9:
6c:e7:36:fc:b9:57:89:08:89:7c:f8:e9:58:9f:3c:
6e:15:05:7d:5a:7b:8e:25:5f:6c:ae:6c:8d:24:a5:
c7:e0:87:b8:45:84:a7:9e:f3:b6:0a:95:3c:a0:77:
20:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:CC:F0:7E:84:D9:5E:C8:FA:34:71:D4:E6:00:A8:31:8D:FB:EB:0F
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/OszwfoTZXsj6NHHU5gCoMY376w8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.251.20.0/24
89.251.22.0/23
91.226.59.0/24
109.122.43.0-109.122.44.255
Signature Algorithm: sha256WithRSAEncryption
43:0d:3e:07:1d:30:a6:cb:86:ad:95:a1:30:9d:32:00:e8:64:
c4:95:4e:d0:9f:8c:c5:6e:79:4e:9e:f0:7b:42:30:b2:3b:9b:
39:dc:f7:79:c4:54:1d:53:7b:04:db:ad:2d:b5:ac:22:8c:2d:
68:71:70:73:24:c5:a9:0b:26:64:7e:5e:36:8d:c5:f8:f5:19:
18:d0:eb:e5:4b:10:8a:70:10:c4:26:9c:b7:55:98:43:7e:80:
40:f8:fd:8d:12:c8:11:e0:e9:9e:07:61:0d:26:46:33:d7:07:
e1:3a:07:14:a0:af:3f:ce:a6:85:54:cd:fb:92:98:63:a6:76:
34:60:00:f0:42:9d:40:69:0a:59:e3:88:49:69:eb:4d:e8:9d:
6c:29:16:81:1a:73:2f:9f:3a:f1:c7:92:1f:7e:38:ed:e0:a6:
5d:fd:ec:a2:b2:aa:82:f1:ae:b7:ea:1a:16:6d:ad:8a:79:a8:
ad:89:a9:9a:59:15:07:3c:d7:03:1c:89:f1:82:de:7b:fa:2e:
1e:57:ed:f2:44:f1:39:73:d4:77:de:37:85:4f:41:75:36:a2:
19:4e:09:6b:be:15:9c:af:b9:cc:f6:9e:27:ab:f0:f5:f6:37:
b5:2f:b1:34:da:62:52:5c:4b:4f:22:24:6a:30:01:29:85:96:
81:30:9b:e6
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAYiqPR/0tiskWPCYiX3naP2nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzM2UzZjVlZjgyNTU1NmIwMTRhMDg1ZDMyNTY1YmIwY2Jj
NWFjOGQwHhcNMjMwNjExMTEzNTEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYWNjZjA3ZTg0ZDk1ZWM4ZmEzNDcxZDRlNjAwYTgzMThkZmJlYjBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQgVFCwuKuqFZ1KoBy4Bg86hBl+V
VvxaMjSomVYXQmARrX3LTnOeqftaYk2YMV4uD2jbqPcE9AwDPOnNvrNyqWeCaIU3
2A7xj8pST81iJ3PP4xq4/Fr2rVZzIWjoxCDzqR6HwejGWZt/E9Ha7/rjYxAVHSHS
4Z1T1FZCltB0gzCUVUpHZGVChtn+gnW/drQrvizO104IzuzYJEExVv00Ul2tIPI+
IU6dosKrymxUnjzLh/8+NBko/nhox5rqvp5LSfNPoLtzNCHEISn3OrWA3uls5zb8
uVeJCIl8+OlYnzxuFQV9WnuOJV9srmyNJKXH4Ie4RYSnnvO2CpU8oHcgvQIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFDrM8H6E2V7I+jRx1OYAqDGN++sPMB8GA1UdIwQY
MBaAFIM+P174JVVrAUoIXTJWW7DLxayNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAt
MzE4YTI2ZDRhOGM5LzEvT3N6d2ZvVFpYc2o2TkhIVTVnQ29NWTM3Nnc4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAtMzE4YTI2ZDRhOGM5
LzEvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQAWfsUAwQB
WfsWAwQAW+I7MAwDBABteisDBABteiwwDQYJKoZIhvcNAQELBQADggEBAEMNPgcd
MKbLhq2VoTCdMgDoZMSVTtCfjMVueU6e8HtCMLI7mznc93nEVB1TewTbrS21rCKM
LWhxcHMkxakLJmR+XjaNxfj1GRjQ6+VLEIpwEMQmnLdVmEN+gED4/Y0SyBHg6Z4H
YQ0mRjPXB+E6BxSgrz/OpoVUzfuSmGOmdjRgAPBCnUBpClnjiElp603onWwpFoEa
cy+fOvHHkh9+OO3gpl397KKyqoLxrrfqGhZtrYp5qK2JqZpZFQc81wMcifGC3nv6
Lh5X7fJE8Tlz1HfeN4VPQXU2ohlOCWu+FZyvucz2nier8PX2N7UvsTTaYlJcS08i
JGowASmFloEwm+Y=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:06 2024 by rpki-client on console-ams.rpki-client.org