Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/5d20f4-2977-4e06-9e72-ac4549977901/1/ieaMbYWJEg_pe2BWiGb1NC9_dk4.roa
File: ieaMbYWJEg_pe2BWiGb1NC9_dk4.roa (raw, json)
Hash identifier: tdeIyGjiDIN/q96ACUYuTAXpmRwPm7mNXcNN57fGcy4=
Subject key identifier: 89:E6:8C:6D:85:89:12:0F:E9:7B:60:56:88:66:F5:34:2F:7F:76:4E
Certificate issuer: /CN=56aa1eed990ed031ee17b0b13da8f83e0efba2b0
Certificate serial: 01856E38DC23E69479840E581AF34A24CD7C
Authority key identifier: 56:AA:1E:ED:99:0E:D0:31:EE:17:B0:B1:3D:A8:F8:3E:0E:FB:A2:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vqoe7ZkO0DHuF7CxPaj4Pg77orA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/5d20f4-2977-4e06-9e72-ac4549977901/1/ieaMbYWJEg_pe2BWiGb1NC9_dk4.roa
Signing time: Sun 01 Jan 2023 16:44:58 +0000
ROA not before: Sun 01 Jan 2023 16:44:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201198
IP address blocks: 185.53.252.0/22 maxlen: 24
176.223.189.0/24 maxlen: 24
31.14.233.0/24 maxlen: 24
94.177.114.0/23 maxlen: 24
2a01:7c60::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:38:dc:23:e6:94:79:84:0e:58:1a:f3:4a:24:cd:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56aa1eed990ed031ee17b0b13da8f83e0efba2b0
Validity
Not Before: Jan 1 16:44:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=89e68c6d8589120fe97b60568866f5342f7f764e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:3b:04:94:aa:e2:19:23:29:e7:c3:91:c6:66:
8a:fd:ed:ef:3b:05:a9:fb:35:21:90:ca:28:32:5c:
ee:eb:82:75:5a:38:8d:49:99:ed:0f:3b:d3:41:fd:
b6:65:ab:1b:57:cb:21:5e:fc:f3:a7:5d:e7:f9:fc:
ba:60:a1:56:1b:02:31:03:f3:23:43:2a:80:a1:0f:
e8:c5:27:4d:66:66:34:2a:e9:e0:18:30:79:9a:83:
34:12:8f:26:cc:c0:38:aa:19:8d:34:a9:e3:d7:cf:
99:a4:8e:da:c4:98:93:c1:8d:7a:14:25:b9:59:e6:
92:db:87:22:a9:4f:60:55:c2:26:75:85:9e:8a:1a:
3c:f0:d4:39:ca:c6:7f:3b:11:91:79:c4:73:41:4f:
f8:44:59:96:2a:9e:17:5f:4f:37:08:46:68:e6:24:
eb:23:79:d2:26:1d:35:e1:21:db:4d:ab:f3:55:cb:
31:46:99:23:e9:9e:d5:a1:6c:7f:7f:11:37:aa:d3:
b0:fe:6c:5a:12:0e:94:af:1a:e9:7b:8d:85:74:bd:
fa:86:c8:ce:99:c7:e2:15:66:85:51:fb:9f:a5:8b:
99:a9:36:75:c9:b4:6d:57:86:c8:9d:81:6c:ed:e5:
c0:7a:52:36:27:5d:62:3d:b8:d3:64:06:93:16:54:
c3:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:E6:8C:6D:85:89:12:0F:E9:7B:60:56:88:66:F5:34:2F:7F:76:4E
X509v3 Authority Key Identifier:
keyid:56:AA:1E:ED:99:0E:D0:31:EE:17:B0:B1:3D:A8:F8:3E:0E:FB:A2:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vqoe7ZkO0DHuF7CxPaj4Pg77orA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/5d20f4-2977-4e06-9e72-ac4549977901/1/ieaMbYWJEg_pe2BWiGb1NC9_dk4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/5d20f4-2977-4e06-9e72-ac4549977901/1/Vqoe7ZkO0DHuF7CxPaj4Pg77orA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.233.0/24
94.177.114.0/23
176.223.189.0/24
185.53.252.0/22
IPv6:
2a01:7c60::/32
Signature Algorithm: sha256WithRSAEncryption
a9:3a:67:3f:bb:27:c3:68:d7:ed:d9:10:ed:5e:c8:b8:2a:bc:
57:01:9c:b5:ec:f4:08:8b:36:5e:ac:d1:70:e3:14:32:d2:a3:
93:7e:d8:0a:19:49:99:cc:9d:7f:2f:02:37:7f:92:a3:7a:73:
cc:55:d0:e0:94:08:18:f2:91:c3:4d:9f:9f:34:1a:a0:b7:e4:
27:fb:69:f8:e4:de:52:ae:32:9e:12:d5:03:1b:3b:97:db:0f:
94:79:d9:83:4b:e1:3e:3a:63:1a:56:30:61:40:75:57:e7:c0:
40:ed:7d:25:4e:a0:7e:ac:6b:93:f2:dc:1d:8f:4b:af:3f:a4:
92:4b:0f:e2:67:e3:ba:d7:d7:ba:ba:f0:37:81:4f:69:1e:04:
76:6e:d9:41:19:40:53:af:ec:c2:10:52:ea:46:2f:c4:c6:78:
3e:70:d5:de:1c:98:cf:ce:d3:20:61:66:31:54:6d:60:b0:8b:
4c:97:ca:ab:7a:79:22:1f:12:5e:7d:f2:50:14:8e:87:2d:05:
20:17:75:98:e4:63:77:cd:d6:59:ce:70:50:f1:8c:8b:fb:db:
07:fb:52:91:34:05:fd:ae:9b:1e:66:97:4a:cf:91:f6:39:17:
ac:65:d8:44:45:c6:1f:91:71:3d:62:eb:61:71:ac:e0:e4:bb:
aa:78:d9:cb
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAYVuONwj5pR5hA5YGvNKJM18MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2YWExZWVkOTkwZWQwMzFlZTE3YjBiMTNkYThmODNlMGVm
YmEyYjAwHhcNMjMwMTAxMTY0NDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OWU2OGM2ZDg1ODkxMjBmZTk3YjYwNTY4ODY2ZjUzNDJmN2Y3NjRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjsElKriGSMp58ORxmaK/e3vOwWp
+zUhkMooMlzu64J1WjiNSZntDzvTQf22ZasbV8shXvzzp13n+fy6YKFWGwIxA/Mj
QyqAoQ/oxSdNZmY0KungGDB5moM0Eo8mzMA4qhmNNKnj18+ZpI7axJiTwY16FCW5
WeaS24ciqU9gVcImdYWeiho88NQ5ysZ/OxGRecRzQU/4RFmWKp4XX083CEZo5iTr
I3nSJh014SHbTavzVcsxRpkj6Z7VoWx/fxE3qtOw/mxaEg6Urxrpe42FdL36hsjO
mcfiFWaFUfufpYuZqTZ1ybRtV4bInYFs7eXAelI2J11iPbjTZAaTFlTDUQIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFInmjG2FiRIP6XtgVohm9TQvf3ZOMB8GA1UdIwQY
MBaAFFaqHu2ZDtAx7hewsT2o+D4O+6KwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnFvZTdaa08wREh1RjdDeFBhajRQZzc3b3JBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi81ZDIwZjQtMjk3Ny00ZTA2LTllNzIt
YWM0NTQ5OTc3OTAxLzEvaWVhTWJZV0pFZ19wZTJCV2lHYjFOQzlfZGs0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi81ZDIwZjQtMjk3Ny00ZTA2LTllNzItYWM0NTQ5OTc3OTAx
LzEvVnFvZTdaa08wREh1RjdDeFBhajRQZzc3b3JBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQAHw7pAwQB
XrFyAwQAsN+9AwQCuTX8MA0EAgACMAcDBQAqAXxgMA0GCSqGSIb3DQEBCwUAA4IB
AQCpOmc/uyfDaNft2RDtXsi4KrxXAZy17PQIizZerNFw4xQy0qOTftgKGUmZzJ1/
LwI3f5KjenPMVdDglAgY8pHDTZ+fNBqgt+Qn+2n45N5SrjKeEtUDGzuX2w+UedmD
S+E+OmMaVjBhQHVX58BA7X0lTqB+rGuT8twdj0uvP6SSSw/iZ+O619e6uvA3gU9p
HgR2btlBGUBTr+zCEFLqRi/Exng+cNXeHJjPztMgYWYxVG1gsItMl8qrenkiHxJe
ffJQFI6HLQUgF3WY5GN3zdZZznBQ8YyL+9sH+1KRNAX9rpseZpdKz5H2OResZdhE
RcYfkXE9Yuthcazg5LuqeNnL
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:11 2024 by rpki-client on console-fra.rpki-client.org