Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/7hxWFg5D-DYO5QjdtD6H3pTiYvg.roa
File: 7hxWFg5D-DYO5QjdtD6H3pTiYvg.roa (raw, json)
Hash identifier: IUYJNnRdS1mJAiu+pmJ5BL+yWC1TXue6SWLbNxJt2zo=
Subject key identifier: EE:1C:56:16:0E:43:F8:36:0E:E5:08:DD:B4:3E:87:DE:94:E2:62:F8
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 018A8A704E624849ADBB11995B37DFD97078
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/7hxWFg5D-DYO5QjdtD6H3pTiYvg.roa
Signing time: Tue 12 Sep 2023 17:28:50 +0000
ROA not before: Tue 12 Sep 2023 17:28:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 399130
IP address blocks: 195.138.109.0/24 maxlen: 24
195.138.110.0/24 maxlen: 24
195.138.117.0/24 maxlen: 24
195.138.115.0/24 maxlen: 24
195.138.113.0/24 maxlen: 24
195.138.125.0/24 maxlen: 24
195.138.123.0/24 maxlen: 24
195.138.124.0/24 maxlen: 24
195.138.119.0/24 maxlen: 24
195.138.121.0/24 maxlen: 24
195.138.126.0/24 maxlen: 24
195.138.127.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:8a:70:4e:62:48:49:ad:bb:11:99:5b:37:df:d9:70:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Sep 12 17:28:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ee1c56160e43f8360ee508ddb43e87de94e262f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:43:68:14:3e:a0:25:64:18:e3:18:ca:62:df:
ac:0c:40:d0:ee:a1:6a:be:84:f6:3f:d6:1b:c5:2a:
cd:b8:d7:2d:6e:2f:70:f4:45:49:99:d7:bf:ff:e4:
cd:82:41:ef:17:c5:56:21:97:f2:56:1f:98:94:08:
3b:67:6a:0a:32:a7:69:f6:5b:4c:ef:1c:08:0c:77:
16:11:f6:b1:53:67:52:21:19:e9:34:3a:48:66:93:
89:76:0b:ce:d0:33:4d:27:27:51:0a:3f:cf:a4:ec:
69:f8:6e:d3:9d:04:d7:f2:5b:9d:dd:92:49:6e:c2:
ba:94:55:7a:24:f3:af:d1:1d:9e:df:5e:32:fd:e5:
84:c4:2a:39:2c:92:28:fc:c0:0c:d5:e3:12:4a:76:
7a:20:3c:73:01:db:5c:8c:d0:02:4a:50:63:9f:b1:
9a:e7:a2:fe:19:23:fc:cb:aa:32:c1:88:8d:17:69:
4d:57:a0:09:fa:56:60:dc:7a:d9:10:3e:d4:56:28:
b2:7e:1e:e5:f7:49:4f:9a:ff:a0:f7:1b:d6:a5:27:
7d:68:29:19:7a:cd:17:28:ca:7c:80:51:97:39:14:
0b:c9:27:8a:c3:73:d7:b7:42:95:2f:80:b7:41:a3:
e3:8c:91:b8:08:f7:5c:aa:e7:f0:e0:b4:dd:a0:69:
12:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:1C:56:16:0E:43:F8:36:0E:E5:08:DD:B4:3E:87:DE:94:E2:62:F8
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/7hxWFg5D-DYO5QjdtD6H3pTiYvg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.138.109.0-195.138.110.255
195.138.113.0/24
195.138.115.0/24
195.138.117.0/24
195.138.119.0/24
195.138.121.0/24
195.138.123.0-195.138.127.255
Signature Algorithm: sha256WithRSAEncryption
91:f7:e6:b8:08:f0:d1:d1:59:c1:11:37:53:59:89:56:5e:a8:
47:1e:1b:80:8c:47:df:c5:7a:0c:a3:dc:d4:2d:14:62:20:fc:
87:2a:04:b6:2a:e6:f2:f9:60:a6:9c:5c:66:e5:d6:1b:18:01:
88:d4:7b:cc:e3:09:b0:02:85:63:e0:08:33:7a:09:ce:ee:1d:
ea:0b:f4:5d:81:16:69:12:bf:ab:ce:79:59:91:b3:da:0e:d3:
8f:57:0e:10:2e:a8:75:75:87:fb:0d:2e:ec:c5:e0:c9:a8:06:
0a:2c:8d:2a:2f:a9:0e:35:8b:25:cd:3b:a0:39:2d:18:b5:36:
36:17:82:3d:f4:2e:56:05:d1:eb:24:66:13:ae:4f:ec:78:ad:
c9:35:3f:65:b7:17:8b:d5:79:c8:0b:98:48:fa:1d:f4:1a:c9:
1a:8b:b4:ff:e7:d7:d8:b1:bf:90:5e:df:a7:31:f6:c0:72:a1:
a9:61:0b:24:96:30:03:05:b6:4d:45:32:1c:bf:9f:27:15:22:
33:d6:2c:71:69:82:ed:f4:1a:94:99:7e:83:3b:98:54:35:bd:
7a:a8:d1:cc:af:65:2b:8b:98:6c:50:ac:70:5b:b2:e5:34:4e:
29:3d:d9:1a:a4:c8:4a:e5:df:51:f4:ff:ce:91:d5:35:ad:cf:
01:78:34:30
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgISAYqKcE5iSEmtuxGZWzff2XB4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiYWIzMDY4Mzg1OWVjN2UwMjA2ZmU5MjY1MzYzZThlMzk3
MWE5YTgwHhcNMjMwOTEyMTcyODUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZTFjNTYxNjBlNDNmODM2MGVlNTA4ZGRiNDNlODdkZTk0ZTI2MmY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkENoFD6gJWQY4xjKYt+sDEDQ7qFq
voT2P9YbxSrNuNctbi9w9EVJmde//+TNgkHvF8VWIZfyVh+YlAg7Z2oKMqdp9ltM
7xwIDHcWEfaxU2dSIRnpNDpIZpOJdgvO0DNNJydRCj/PpOxp+G7TnQTX8lud3ZJJ
bsK6lFV6JPOv0R2e314y/eWExCo5LJIo/MAM1eMSSnZ6IDxzAdtcjNACSlBjn7Ga
56L+GSP8y6oywYiNF2lNV6AJ+lZg3HrZED7UViiyfh7l90lPmv+g9xvWpSd9aCkZ
es0XKMp8gFGXORQLySeKw3PXt0KVL4C3QaPjjJG4CPdcqufw4LTdoGkSuQIDAQAB
o4ICPTCCAjkwHQYDVR0OBBYEFO4cVhYOQ/g2DuUI3bQ+h96U4mL4MB8GA1UdIwQY
MBaAFIurMGg4Wex+Agb+kmU2Po45camoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQt
M2FjOWU1NmMzMDg5LzEvN2h4V0ZnNUQtRFlPNVFqZHRENkgzcFRpWXZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQtM2FjOWU1NmMzMDg5
LzEvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFMGCCsGAQUFBwEHAQH/BEQwQjBABAIAATA6MAwDBADDim0D
BADDim4DBADDinEDBADDinMDBADDinUDBADDincDBADDinkwDAMEAMOKewMEB8OK
ADANBgkqhkiG9w0BAQsFAAOCAQEAkffmuAjw0dFZwRE3U1mJVl6oRx4bgIxH38V6
DKPc1C0UYiD8hyoEtirm8vlgppxcZuXWGxgBiNR7zOMJsAKFY+AIM3oJzu4d6gv0
XYEWaRK/q855WZGz2g7Tj1cOEC6odXWH+w0u7MXgyagGCiyNKi+pDjWLJc07oDkt
GLU2NheCPfQuVgXR6yRmE65P7HityTU/ZbcXi9V5yAuYSPod9BrJGou0/+fX2LG/
kF7fpzH2wHKhqWELJJYwAwW2TUUyHL+fJxUiM9YscWmC7fQalJl+gzuYVDW9eqjR
zK9lK4uYbFCscFuy5TROKT3ZGqTISuXfUfT/zpHVNa3PAXg0MA==
-----END CERTIFICATE-----
Generated at Fri Nov 3 16:21:43 2023 by rpki-client on console-ams.rpki-client.org