Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/kg376CAfIbiSpiyrFILRkBX6F7g.roa
File: kg376CAfIbiSpiyrFILRkBX6F7g.roa (raw, json)
Hash identifier: zi5tN6NdoCem1o1FZGjlQhzpjf/fjFslV3fcm0PEwwo=
Subject key identifier: 92:0D:FB:E8:20:1F:21:B8:92:A6:2C:AB:14:82:D1:90:15:FA:17:B8
Certificate issuer: /CN=ad5eda0a1e7479c4ca78fe41c58d17e9d13b67aa
Certificate serial: 0189BF5FDDDE4E3212F0E834DAB8B4E46757
Authority key identifier: AD:5E:DA:0A:1E:74:79:C4:CA:78:FE:41:C5:8D:17:E9:D1:3B:67:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/kg376CAfIbiSpiyrFILRkBX6F7g.roa
Signing time: Fri 04 Aug 2023 07:07:58 +0000
ROA not before: Fri 04 Aug 2023 07:07:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20850
IP address blocks: 193.189.96.0/23 maxlen: 24
95.69.248.0/22 maxlen: 23
95.69.250.0/23 maxlen: 24
188.230.118.0/23 maxlen: 24
188.230.120.0/22 maxlen: 23
188.230.124.0/24 maxlen: 24
188.230.125.0/24 maxlen: 24
188.230.126.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:bf:5f:dd:de:4e:32:12:f0:e8:34:da:b8:b4:e4:67:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad5eda0a1e7479c4ca78fe41c58d17e9d13b67aa
Validity
Not Before: Aug 4 07:07:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=920dfbe8201f21b892a62cab1482d19015fa17b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:95:6b:e3:d7:de:78:20:e8:94:b9:58:f8:8e:
c0:f1:7c:c6:16:e0:ca:e5:be:8f:e6:20:49:f3:28:
f1:a7:f3:5e:08:b3:5c:38:ee:e9:93:6e:07:e7:fc:
56:fd:bc:5e:2a:72:27:47:85:32:f9:2a:eb:d3:3e:
2e:35:b1:04:62:77:b2:aa:71:47:3d:cd:ba:26:2e:
09:99:f7:70:70:60:92:3d:9c:b1:ef:6d:b9:6b:92:
a3:3d:2b:34:41:d8:de:a8:d5:a8:43:b7:a3:79:e7:
1c:25:15:3e:c0:b3:6a:d9:1d:2a:57:11:f8:de:c6:
36:49:2d:f5:80:d5:20:fb:62:bc:e1:ce:a7:87:f7:
7e:22:f6:43:03:1a:a6:12:b2:e4:22:07:91:08:65:
32:ec:ce:61:66:0b:c3:20:c7:8a:b6:53:c9:cb:13:
1b:11:72:73:8c:5c:c5:3f:14:48:66:25:ef:9c:78:
2d:c0:7c:76:e3:fe:d7:df:ca:b1:85:e2:4e:72:97:
08:d1:e4:26:2a:a2:56:0f:18:dc:56:ed:0f:73:50:
8e:86:ea:33:4a:c5:ed:2c:eb:10:d2:1e:da:02:de:
bd:4c:3c:04:ed:67:86:09:11:7b:6d:f1:47:34:d2:
96:f1:79:c0:e2:ea:66:ca:b4:53:ba:3a:93:7b:79:
b4:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:0D:FB:E8:20:1F:21:B8:92:A6:2C:AB:14:82:D1:90:15:FA:17:B8
X509v3 Authority Key Identifier:
keyid:AD:5E:DA:0A:1E:74:79:C4:CA:78:FE:41:C5:8D:17:E9:D1:3B:67:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/kg376CAfIbiSpiyrFILRkBX6F7g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/rV7aCh50ecTKeP5BxY0X6dE7Z6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.69.248.0/22
188.230.118.0-188.230.127.255
193.189.96.0/23
Signature Algorithm: sha256WithRSAEncryption
4d:4b:f8:31:00:53:33:cc:f5:2d:e4:22:b5:ea:0b:eb:ee:18:
2c:7b:6c:7f:79:2a:97:bb:ec:59:5d:b4:ab:b2:34:7f:dc:d2:
3d:cd:9e:4e:8e:ff:82:07:3f:ee:4c:d5:0d:f9:35:77:c2:c2:
54:01:59:08:0b:fa:57:3d:74:90:37:0e:8e:d3:92:07:52:2c:
39:fb:20:4a:54:e2:02:80:f2:a6:6f:ec:fd:51:d1:5c:98:26:
cb:00:82:23:d1:5d:8c:a8:0a:99:bf:ea:10:4b:d2:43:75:9e:
2d:96:e8:fe:db:27:13:0b:94:43:3a:32:84:e9:26:0a:f1:5b:
0e:ea:c3:dc:39:3b:d9:0a:0a:87:7d:15:c1:df:2c:a2:65:12:
ea:74:d5:2c:62:02:67:18:c2:d8:bf:d3:4e:37:b0:fc:83:84:
ab:7e:6d:d3:dd:9d:70:1f:47:dd:ff:ba:84:dc:20:f6:59:6b:
d4:c4:93:7f:2a:87:dc:35:2c:51:b5:15:0a:f2:2e:c4:f1:63:
76:72:c9:da:50:be:dd:be:25:64:0a:fc:80:66:88:01:9f:e2:
4a:a6:5a:74:44:df:aa:64:f0:88:2d:41:0b:d8:10:af:0e:70:
3c:c5:a3:a8:5a:1b:05:d2:9c:d9:b0:7c:02:c7:98:2a:99:8a:
73:f1:4d:7c
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAYm/X93eTjIS8Og02ri05GdXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkNWVkYTBhMWU3NDc5YzRjYTc4ZmU0MWM1OGQxN2U5ZDEz
YjY3YWEwHhcNMjMwODA0MDcwNzU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MjBkZmJlODIwMWYyMWI4OTJhNjJjYWIxNDgyZDE5MDE1ZmExN2I4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJVr49feeCDolLlY+I7A8XzGFuDK
5b6P5iBJ8yjxp/NeCLNcOO7pk24H5/xW/bxeKnInR4Uy+Srr0z4uNbEEYneyqnFH
Pc26Ji4JmfdwcGCSPZyx7225a5KjPSs0QdjeqNWoQ7ejeeccJRU+wLNq2R0qVxH4
3sY2SS31gNUg+2K84c6nh/d+IvZDAxqmErLkIgeRCGUy7M5hZgvDIMeKtlPJyxMb
EXJzjFzFPxRIZiXvnHgtwHx24/7X38qxheJOcpcI0eQmKqJWDxjcVu0Pc1COhuoz
SsXtLOsQ0h7aAt69TDwE7WeGCRF7bfFHNNKW8XnA4upmyrRTujqTe3m0kQIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFJIN++ggHyG4kqYsqxSC0ZAV+he4MB8GA1UdIwQY
MBaAFK1e2goedHnEynj+QcWNF+nRO2eqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclY3YUNoNTBlY1RLZVA1QnhZMFg2ZEU3WjZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9mZWJiMTgtZTc4YS00ZDEyLTgwYTIt
OTQ0Y2U3ZWViMTU0LzEva2czNzZDQWZJYmlTcGl5ckZJTFJrQlg2RjdnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy9mZWJiMTgtZTc4YS00ZDEyLTgwYTItOTQ0Y2U3ZWViMTU0
LzEvclY3YUNoNTBlY1RLZVA1QnhZMFg2ZEU3WjZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQCX0X4MAwD
BAG85nYDBAe85gADBAHBvWAwDQYJKoZIhvcNAQELBQADggEBAE1L+DEAUzPM9S3k
IrXqC+vuGCx7bH95Kpe77FldtKuyNH/c0j3Nnk6O/4IHP+5M1Q35NXfCwlQBWQgL
+lc9dJA3Do7TkgdSLDn7IEpU4gKA8qZv7P1R0VyYJssAgiPRXYyoCpm/6hBL0kN1
ni2W6P7bJxMLlEM6MoTpJgrxWw7qw9w5O9kKCod9FcHfLKJlEup01SxiAmcYwti/
0043sPyDhKt+bdPdnXAfR93/uoTcIPZZa9TEk38qh9w1LFG1FQryLsTxY3ZyydpQ
vt2+JWQK/IBmiAGf4kqmWnRE36pk8IgtQQvYEK8OcDzFo6haGwXSnNmwfALHmCqZ
inPxTXw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:35 2024 by rpki-client on console-fra.rpki-client.org