Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/uB9xlJUanXDskdFbHmVg5qmc3SY.roa
File: uB9xlJUanXDskdFbHmVg5qmc3SY.roa (raw, json)
Hash identifier: SEiz/9C0QFAhXL2sMBcLdWjBrcD69IpO0bvnJqKuQlk=
Subject key identifier: B8:1F:71:94:95:1A:9D:70:EC:91:D1:5B:1E:65:60:E6:A9:9C:DD:26
Certificate issuer: /CN=9bbc4239c9cb981f19a495e633d3bec889fcbe89
Certificate serial: 018CC6B93B5540C55FD3C5BE0CA421CE4A4F
Authority key identifier: 9B:BC:42:39:C9:CB:98:1F:19:A4:95:E6:33:D3:BE:C8:89:FC:BE:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7xCOcnLmB8ZpJXmM9O-yIn8vok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/uB9xlJUanXDskdFbHmVg5qmc3SY.roa
Signing time: Mon 01 Jan 2024 20:31:17 +0000
ROA not before: Mon 01 Jan 2024 20:31:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43940
IP address blocks: 62.4.32.0/19 maxlen: 19
109.72.96.0/20 maxlen: 20
213.133.0.0/19 maxlen: 19
185.64.0.0/22 maxlen: 22
185.179.92.0/22 maxlen: 22
2a03:7a0::/29 maxlen: 29
Validation: Failed, certificate revoked on Fri 09 Feb 2024 12:25:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:3b:55:40:c5:5f:d3:c5:be:0c:a4:21:ce:4a:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bbc4239c9cb981f19a495e633d3bec889fcbe89
Validity
Not Before: Jan 1 20:31:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b81f7194951a9d70ec91d15b1e6560e6a99cdd26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:98:34:bf:c8:7c:88:ce:87:fa:88:8b:f0:fa:
2b:36:c7:87:39:60:09:83:ce:8d:77:30:dd:e4:3f:
67:1c:d7:33:4e:e0:6f:f2:85:29:1c:8e:21:05:73:
2e:c6:1a:83:ba:37:16:7f:4c:d0:e7:bf:1a:a1:8f:
cf:0d:f8:fd:63:a1:6c:91:62:8d:0e:c7:76:31:33:
90:b8:5e:0e:60:5f:5a:b9:cc:7e:cb:11:73:c9:05:
5d:c9:93:a9:b7:ee:fa:4f:ed:89:de:5a:b4:eb:24:
28:ef:fc:1e:43:18:e4:e0:1f:bb:7e:12:0d:67:82:
e7:d6:db:00:24:f7:89:ed:b7:08:ca:2d:34:bc:49:
f0:d9:6e:cf:ab:89:ab:e9:2f:64:aa:b3:45:25:75:
9a:39:04:89:4b:8c:ec:7b:49:f0:14:af:5e:c7:91:
ac:0a:10:6a:a1:f6:89:ce:39:d1:89:c8:39:7d:d4:
ca:fe:51:80:35:23:44:5a:e2:55:e9:41:41:b1:6b:
c1:ea:0a:f4:53:a1:78:b5:49:d7:86:34:0d:67:70:
77:44:d3:cb:07:60:31:f4:5c:ac:ea:5d:23:66:2b:
72:26:69:91:6f:3d:02:68:5c:d3:07:19:ce:02:60:
f9:41:13:c3:ff:99:34:fb:b4:c5:ec:21:c2:7e:63:
97:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:1F:71:94:95:1A:9D:70:EC:91:D1:5B:1E:65:60:E6:A9:9C:DD:26
X509v3 Authority Key Identifier:
keyid:9B:BC:42:39:C9:CB:98:1F:19:A4:95:E6:33:D3:BE:C8:89:FC:BE:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7xCOcnLmB8ZpJXmM9O-yIn8vok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/uB9xlJUanXDskdFbHmVg5qmc3SY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.4.32.0/19
109.72.96.0/20
185.64.0.0/22
185.179.92.0/22
213.133.0.0/19
IPv6:
2a03:7a0::/29
Signature Algorithm: sha256WithRSAEncryption
67:3c:89:78:3b:97:bf:45:aa:a0:50:d5:de:5d:5e:b0:02:1c:
83:ea:5e:a3:c3:d0:89:28:ba:53:80:c2:b7:a2:98:32:0b:52:
e2:89:d0:4b:dd:f0:f9:72:39:f6:bf:fb:da:d1:17:b4:24:3a:
72:5b:a1:2f:c8:1e:32:56:f8:7e:cb:fb:a9:54:1c:2f:ad:05:
55:4a:d7:d7:64:7d:15:ab:32:9a:57:17:3b:25:ac:25:e5:cb:
c1:fa:45:46:c1:f8:91:06:41:14:19:c9:69:f5:55:76:a0:bc:
62:4d:2a:19:6f:53:ba:cc:86:f5:7b:b1:dc:03:2a:06:39:13:
aa:4e:a1:65:40:b2:0c:ae:4f:59:ff:02:3d:20:2a:bf:7e:22:
09:85:9c:ca:eb:79:13:12:70:82:2f:fd:86:26:9b:cd:7d:3a:
82:35:63:1d:b8:db:6c:a4:65:ae:23:51:3e:e2:eb:95:ec:64:
de:f1:3e:da:b7:54:75:ff:a7:1d:4c:32:ea:fc:87:b0:46:ad:
ea:4b:f6:fe:f2:60:5d:2c:13:28:d3:fd:5c:a0:8b:f0:21:04:
45:0c:08:4b:f8:03:b9:bd:4d:6f:56:fa:c1:14:ad:ff:82:d1:
d8:d0:c9:bc:99:1a:e1:a7:2c:07:8f:42:51:aa:b5:46:ad:de:
47:cd:7f:c7
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgISAYzGuTtVQMVf08W+DKQhzkpPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliYmM0MjM5YzljYjk4MWYxOWE0OTVlNjMzZDNiZWM4ODlm
Y2JlODkwHhcNMjQwMTAxMjAzMTE3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiODFmNzE5NDk1MWE5ZDcwZWM5MWQxNWIxZTY1NjBlNmE5OWNkZDI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJg0v8h8iM6H+oiL8PorNseHOWAJ
g86NdzDd5D9nHNczTuBv8oUpHI4hBXMuxhqDujcWf0zQ578aoY/PDfj9Y6FskWKN
Dsd2MTOQuF4OYF9aucx+yxFzyQVdyZOpt+76T+2J3lq06yQo7/weQxjk4B+7fhIN
Z4Ln1tsAJPeJ7bcIyi00vEnw2W7Pq4mr6S9kqrNFJXWaOQSJS4zse0nwFK9ex5Gs
ChBqofaJzjnRicg5fdTK/lGANSNEWuJV6UFBsWvB6gr0U6F4tUnXhjQNZ3B3RNPL
B2Ax9Fys6l0jZityJmmRbz0CaFzTBxnOAmD5QRPD/5k0+7TF7CHCfmOXkQIDAQAB
o4ICMDCCAiwwHQYDVR0OBBYEFLgfcZSVGp1w7JHRWx5lYOapnN0mMB8GA1UdIwQY
MBaAFJu8QjnJy5gfGaSV5jPTvsiJ/L6JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTd4Q09jbkxtQjhacEpYbU05Ty15SW44dm9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi9jODRhNGQtOWU1Ny00NzU2LWJkYmIt
MDFhYTA1NmIxZjZmLzEvdUI5eGxKVWFuWERza2RGYkhtVmc1cW1jM1NZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi9jODRhNGQtOWU1Ny00NzU2LWJkYmItMDFhYTA1NmIxZjZm
LzEvbTd4Q09jbkxtQjhacEpYbU05Ty15SW44dm9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQFPgQgAwQE
bUhgAwQCuUAAAwQCubNcAwQF1YUAMA0EAgACMAcDBQMqAwegMA0GCSqGSIb3DQEB
CwUAA4IBAQBnPIl4O5e/RaqgUNXeXV6wAhyD6l6jw9CJKLpTgMK3opgyC1LiidBL
3fD5cjn2v/va0Re0JDpyW6EvyB4yVvh+y/upVBwvrQVVStfXZH0VqzKaVxc7Jawl
5cvB+kVGwfiRBkEUGclp9VV2oLxiTSoZb1O6zIb1e7HcAyoGOROqTqFlQLIMrk9Z
/wI9ICq/fiIJhZzK63kTEnCCL/2GJpvNfTqCNWMduNtspGWuI1E+4uuV7GTe8T7a
t1R1/6cdTDLq/IewRq3qS/b+8mBdLBMo0/1coIvwIQRFDAhL+AO5vU1vVvrBFK3/
gtHY0Mm8mRrhpywHj0JRqrVGrd5HzX/H
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:10 2024 by rpki-client on console-fra.rpki-client.org