Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/6f4230-05e6-4c00-a4ab-06b8dfe498bd/1/AB2a1LCPvO3KUCnvrVI36tUD0B4.roa
File: AB2a1LCPvO3KUCnvrVI36tUD0B4.roa (raw, json)
Hash identifier: ue+oePNh67VatAZQSCqIW4wPsCRGpFr5GJ/84CiSKqc=
Subject key identifier: 00:1D:9A:D4:B0:8F:BC:ED:CA:50:29:EF:AD:52:37:EA:D5:03:D0:1E
Certificate issuer: /CN=fe29bd8bb49a80996b460f5028ed52a8e057c0b1
Certificate serial: 018570799E1BD7BCAE1F2307E060FF52819F
Authority key identifier: FE:29:BD:8B:B4:9A:80:99:6B:46:0F:50:28:ED:52:A8:E0:57:C0:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_im9i7SagJlrRg9QKO1SqOBXwLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/6f4230-05e6-4c00-a4ab-06b8dfe498bd/1/AB2a1LCPvO3KUCnvrVI36tUD0B4.roa
Signing time: Mon 02 Jan 2023 03:14:56 +0000
ROA not before: Mon 02 Jan 2023 03:14:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34554
IP address blocks: 185.196.128.0/22 maxlen: 22
80.75.112.0/20 maxlen: 20
2a01:6a8::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:79:9e:1b:d7:bc:ae:1f:23:07:e0:60:ff:52:81:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe29bd8bb49a80996b460f5028ed52a8e057c0b1
Validity
Not Before: Jan 2 03:14:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=001d9ad4b08fbcedca5029efad5237ead503d01e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:da:28:4d:ed:cf:31:8f:82:6c:2a:3a:f3:db:
23:5b:c7:31:b3:6a:e9:04:2f:1e:52:1b:9f:7b:0c:
8b:92:3a:7e:1c:38:83:f2:c5:a7:51:ba:7e:05:cd:
12:36:c3:2e:53:d4:35:25:b4:72:6e:19:31:03:d1:
f1:59:9e:28:2c:35:13:b4:93:a5:fd:aa:3d:16:16:
89:54:76:06:2f:84:aa:7d:6c:b0:7e:ba:06:3c:da:
9e:7b:e5:f2:a4:6d:85:5c:0c:be:2e:13:60:0f:42:
23:da:75:86:f7:45:e4:70:2e:f0:23:92:9e:c2:73:
bd:b0:e0:16:3a:cd:36:f8:9a:90:75:36:38:e2:2f:
6e:0e:e4:46:df:ad:3e:2f:a5:2b:b6:d5:1a:6b:ab:
7a:74:44:78:7d:38:0b:19:07:3b:44:16:fe:64:b5:
1a:4e:2d:1e:f9:33:a7:b1:00:79:a5:b5:a5:51:8e:
ce:52:30:c4:dd:77:86:79:62:16:19:79:5b:f6:fc:
62:ae:93:42:12:f7:db:d1:3e:41:3e:bd:f1:03:fd:
0c:80:7b:ae:4c:7c:6f:95:64:b4:15:95:da:01:d4:
de:80:0b:f8:d0:b7:b2:8c:58:73:d1:c6:b9:80:3d:
8f:4c:f2:2d:63:24:87:8c:9e:af:50:6f:15:f5:65:
f6:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:1D:9A:D4:B0:8F:BC:ED:CA:50:29:EF:AD:52:37:EA:D5:03:D0:1E
X509v3 Authority Key Identifier:
keyid:FE:29:BD:8B:B4:9A:80:99:6B:46:0F:50:28:ED:52:A8:E0:57:C0:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_im9i7SagJlrRg9QKO1SqOBXwLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6f4230-05e6-4c00-a4ab-06b8dfe498bd/1/AB2a1LCPvO3KUCnvrVI36tUD0B4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6f4230-05e6-4c00-a4ab-06b8dfe498bd/1/_im9i7SagJlrRg9QKO1SqOBXwLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.75.112.0/20
185.196.128.0/22
IPv6:
2a01:6a8::/32
Signature Algorithm: sha256WithRSAEncryption
1f:81:54:c5:22:fb:f0:6c:fc:e1:8f:79:f1:24:e3:23:79:15:
b2:0c:8e:ad:a9:9f:3b:ea:de:96:91:00:44:55:9e:e4:e3:79:
3c:b1:1b:5b:c2:32:58:9e:21:43:4e:ba:f6:e9:a9:8d:01:29:
90:7b:6f:88:08:00:82:55:be:15:59:15:81:28:56:22:b5:e4:
f3:77:3d:49:91:4d:99:89:85:a6:e7:41:23:47:67:64:61:c9:
f8:d5:69:6c:10:64:f2:34:5d:e1:72:e3:c7:e9:60:98:64:95:
e8:9e:34:02:3c:da:81:53:10:98:37:4b:83:7f:57:a9:09:4e:
29:47:57:33:5f:94:c3:a9:9a:50:ae:0a:26:10:86:ed:4a:8a:
92:62:11:57:e8:90:40:62:df:9d:cc:f7:f9:14:3c:0e:1c:6b:
c4:b1:6d:30:28:de:58:65:6f:c4:18:b7:1c:70:ff:bc:f3:f0:
1d:00:4d:86:2c:03:0d:fd:03:6d:c3:77:f3:f6:2b:fc:82:c3:
f4:70:85:7b:f3:f4:53:01:c3:a2:f0:ac:26:be:97:c7:75:fe:
fa:76:a9:31:92:8f:ee:3e:39:95:ba:a0:1e:9b:d2:e8:9b:d3:
bf:5f:ad:4f:5a:28:6c:9b:11:5c:cc:90:79:06:ae:13:69:e6:
38:44:3a:74
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYVweZ4b17yuHyMH4GD/UoGfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlMjliZDhiYjQ5YTgwOTk2YjQ2MGY1MDI4ZWQ1MmE4ZTA1
N2MwYjEwHhcNMjMwMTAyMDMxNDU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMDFkOWFkNGIwOGZiY2VkY2E1MDI5ZWZhZDUyMzdlYWQ1MDNkMDFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdooTe3PMY+CbCo689sjW8cxs2rp
BC8eUhufewyLkjp+HDiD8sWnUbp+Bc0SNsMuU9Q1JbRybhkxA9HxWZ4oLDUTtJOl
/ao9FhaJVHYGL4SqfWywfroGPNqee+XypG2FXAy+LhNgD0Ij2nWG90XkcC7wI5Ke
wnO9sOAWOs02+JqQdTY44i9uDuRG360+L6UrttUaa6t6dER4fTgLGQc7RBb+ZLUa
Ti0e+TOnsQB5pbWlUY7OUjDE3XeGeWIWGXlb9vxirpNCEvfb0T5BPr3xA/0MgHuu
THxvlWS0FZXaAdTegAv40LeyjFhz0ca5gD2PTPItYySHjJ6vUG8V9WX2QQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFAAdmtSwj7ztylAp761SN+rVA9AeMB8GA1UdIwQY
MBaAFP4pvYu0moCZa0YPUCjtUqjgV8CxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2ltOWk3U2FnSmxyUmc5UUtPMVNxT0JYd0xFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi82ZjQyMzAtMDVlNi00YzAwLWE0YWIt
MDZiOGRmZTQ5OGJkLzEvQUIyYTFMQ1B2TzNLVUNudnJWSTM2dFVEMEI0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi82ZjQyMzAtMDVlNi00YzAwLWE0YWItMDZiOGRmZTQ5OGJk
LzEvX2ltOWk3U2FnSmxyUmc5UUtPMVNxT0JYd0xFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQEUEtwAwQC
ucSAMA0EAgACMAcDBQAqAQaoMA0GCSqGSIb3DQEBCwUAA4IBAQAfgVTFIvvwbPzh
j3nxJOMjeRWyDI6tqZ876t6WkQBEVZ7k43k8sRtbwjJYniFDTrr26amNASmQe2+I
CACCVb4VWRWBKFYiteTzdz1JkU2ZiYWm50EjR2dkYcn41WlsEGTyNF3hcuPH6WCY
ZJXonjQCPNqBUxCYN0uDf1epCU4pR1czX5TDqZpQrgomEIbtSoqSYhFX6JBAYt+d
zPf5FDwOHGvEsW0wKN5YZW/EGLcccP+88/AdAE2GLAMN/QNtw3fz9iv8gsP0cIV7
8/RTAcOi8KwmvpfHdf76dqkxko/uPjmVuqAem9Lom9O/X61PWihsmxFczJB5Bq4T
aeY4RDp0
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:12 2024 by rpki-client on console-fra.rpki-client.org