Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/eeedf6-52c1-4a01-9097-a6cf16c85ce4/1/9GkTHPZe8DH_rXKJmweogx_7lPA.roa
File: 9GkTHPZe8DH_rXKJmweogx_7lPA.roa (raw, json)
Hash identifier: 0ha4SbRwk/tmCDQurNJic6C77l7IYEJ9anV9X7QlIMg=
Subject key identifier: F4:69:13:1C:F6:5E:F0:31:FF:AD:72:89:9B:07:A8:83:1F:FB:94:F0
Certificate issuer: /CN=22c5a0c2ac3b1679499a96be31e43be85cf09953
Certificate serial: 01856D5D04CE0073C9BDC25859BF231FD500
Authority key identifier: 22:C5:A0:C2:AC:3B:16:79:49:9A:96:BE:31:E4:3B:E8:5C:F0:99:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsWgwqw7FnlJmpa-MeQ76FzwmVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/eeedf6-52c1-4a01-9097-a6cf16c85ce4/1/9GkTHPZe8DH_rXKJmweogx_7lPA.roa
Signing time: Sun 01 Jan 2023 12:44:50 +0000
ROA not before: Sun 01 Jan 2023 12:44:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20546
IP address blocks: 193.25.233.0/24 maxlen: 24
193.25.227.0/24 maxlen: 24
193.25.228.0/24 maxlen: 24
193.25.229.0/24 maxlen: 24
193.25.230.0/24 maxlen: 24
193.25.231.0/24 maxlen: 24
193.25.232.0/24 maxlen: 24
193.25.234.0/24 maxlen: 24
193.25.235.0/24 maxlen: 24
193.25.236.0/24 maxlen: 24
193.25.237.0/24 maxlen: 24
193.25.238.0/24 maxlen: 24
193.25.239.0/24 maxlen: 24
193.25.226.0/24 maxlen: 24
193.25.224.0/24 maxlen: 24
193.25.225.0/24 maxlen: 24
2001:678:9fc::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:31:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:5d:04:ce:00:73:c9:bd:c2:58:59:bf:23:1f:d5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c5a0c2ac3b1679499a96be31e43be85cf09953
Validity
Not Before: Jan 1 12:44:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f469131cf65ef031ffad72899b07a8831ffb94f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:0d:85:85:f4:c6:44:e8:f0:51:ed:f5:8a:0c:
ea:12:1d:b4:bc:90:80:11:8f:d7:39:eb:69:22:34:
53:23:a8:01:bc:46:3d:e8:e2:f5:11:b4:a0:8b:8c:
18:82:b3:e7:1a:6b:cb:bd:76:e1:f9:26:1e:35:7d:
24:f3:99:cb:da:d4:0f:0c:f2:f6:ed:58:e5:12:a2:
5b:1e:39:32:c9:14:57:2f:d8:e3:b8:51:9a:4e:0f:
b5:74:97:7f:a9:a4:20:8f:8c:ee:75:f2:b8:29:4f:
b9:d0:ff:c9:21:a9:70:c0:09:33:34:0e:2e:6a:31:
ad:b2:01:7f:8f:6b:c5:eb:5d:3a:7a:37:e0:90:c0:
1c:c9:ca:a6:83:a8:06:6c:a4:9b:1e:42:db:29:3f:
e3:ee:b7:a8:41:a7:02:a4:35:22:67:72:01:7f:b1:
0d:2e:e2:0b:79:2f:e4:39:9c:0d:02:9b:31:15:77:
9e:49:13:3c:f6:e5:87:d1:cb:a7:18:70:5d:d6:fe:
b4:fc:b2:1a:cb:ee:64:ef:3e:c8:3a:18:13:57:0c:
8a:cf:0a:09:f0:b4:0e:d4:9f:81:09:fe:69:d2:ad:
43:81:51:fe:a5:5b:98:2b:09:99:79:79:30:9c:49:
a5:d8:4e:dd:85:9e:83:6f:37:5a:60:ab:7c:23:07:
1d:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:69:13:1C:F6:5E:F0:31:FF:AD:72:89:9B:07:A8:83:1F:FB:94:F0
X509v3 Authority Key Identifier:
keyid:22:C5:A0:C2:AC:3B:16:79:49:9A:96:BE:31:E4:3B:E8:5C:F0:99:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsWgwqw7FnlJmpa-MeQ76FzwmVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/eeedf6-52c1-4a01-9097-a6cf16c85ce4/1/9GkTHPZe8DH_rXKJmweogx_7lPA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/eeedf6-52c1-4a01-9097-a6cf16c85ce4/1/IsWgwqw7FnlJmpa-MeQ76FzwmVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.25.224.0/20
IPv6:
2001:678:9fc::/48
Signature Algorithm: sha256WithRSAEncryption
a9:80:29:ac:43:8a:55:6c:51:9f:18:a0:24:bd:6e:88:cc:b5:
94:d5:a8:84:dd:c7:f1:99:81:43:c9:9c:ed:b9:3c:e8:37:45:
c9:57:d0:a1:86:4f:b9:f5:67:a5:38:73:32:74:78:ea:6f:5f:
8c:46:e8:f4:75:d6:4c:a0:9b:8c:9b:33:9d:d5:35:14:18:05:
97:13:da:e9:54:b3:fc:9a:3e:4b:6d:d5:b2:5f:22:84:90:8d:
82:58:f9:e9:b4:6d:2e:d5:e7:cb:13:72:0a:84:4d:36:9d:b9:
e6:f9:fd:c9:9a:25:11:41:bd:17:25:79:76:11:af:f7:e8:23:
1b:ac:ff:4e:08:09:c0:fc:f9:3d:8d:08:be:93:f5:05:db:7c:
56:f1:79:27:9f:82:e2:83:fa:5d:70:69:81:ce:9b:ba:6a:f9:
2e:da:06:39:a7:10:00:57:01:e4:00:0a:5e:70:3a:bc:ac:60:
9d:4c:e7:04:c3:21:13:98:e7:72:d4:21:d6:26:83:2f:7b:5b:
5f:10:be:76:5b:cb:ec:83:a7:e5:43:6a:1d:2a:0e:94:97:5b:
68:48:4a:9a:38:ce:d2:8f:ef:b4:08:85:95:80:0c:8e:8d:e3:
e1:e1:82:1c:cd:98:0a:ce:2b:d4:6c:bf:9b:21:06:37:9a:78:
2b:68:08:33
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYVtXQTOAHPJvcJYWb8jH9UAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzVhMGMyYWMzYjE2Nzk0OTlhOTZiZTMxZTQzYmU4NWNm
MDk5NTMwHhcNMjMwMTAxMTI0NDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNDY5MTMxY2Y2NWVmMDMxZmZhZDcyODk5YjA3YTg4MzFmZmI5NGYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhA2FhfTGROjwUe31igzqEh20vJCA
EY/XOetpIjRTI6gBvEY96OL1EbSgi4wYgrPnGmvLvXbh+SYeNX0k85nL2tQPDPL2
7VjlEqJbHjkyyRRXL9jjuFGaTg+1dJd/qaQgj4zudfK4KU+50P/JIalwwAkzNA4u
ajGtsgF/j2vF6106ejfgkMAcycqmg6gGbKSbHkLbKT/j7reoQacCpDUiZ3IBf7EN
LuILeS/kOZwNApsxFXeeSRM89uWH0cunGHBd1v60/LIay+5k7z7IOhgTVwyKzwoJ
8LQO1J+BCf5p0q1DgVH+pVuYKwmZeXkwnEml2E7dhZ6DbzdaYKt8IwcdLwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFPRpExz2XvAx/61yiZsHqIMf+5TwMB8GA1UdIwQY
MBaAFCLFoMKsOxZ5SZqWvjHkO+hc8JlTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNXZ3dxdzdGbmxKbXBhLU1lUTc2Rnp3bVZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9lZWVkZjYtNTJjMS00YTAxLTkwOTct
YTZjZjE2Yzg1Y2U0LzEvOUdrVEhQWmU4REhfclhLSm13ZW9neF83bFBBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS9lZWVkZjYtNTJjMS00YTAxLTkwOTctYTZjZjE2Yzg1Y2U0
LzEvSXNXZ3dxdzdGbmxKbXBhLU1lUTc2Rnp3bVZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQEwRngMA8E
AgACMAkDBwAgAQZ4CfwwDQYJKoZIhvcNAQELBQADggEBAKmAKaxDilVsUZ8YoCS9
bojMtZTVqITdx/GZgUPJnO25POg3RclX0KGGT7n1Z6U4czJ0eOpvX4xG6PR11kyg
m4ybM53VNRQYBZcT2ulUs/yaPktt1bJfIoSQjYJY+em0bS7V58sTcgqETTadueb5
/cmaJRFBvRcleXYRr/foIxus/04ICcD8+T2NCL6T9QXbfFbxeSefguKD+l1waYHO
m7pq+S7aBjmnEABXAeQACl5wOrysYJ1M5wTDIROY53LUIdYmgy97W18QvnZby+yD
p+VDah0qDpSXW2hISpo4ztKP77QIhZWADI6N4+HhghzNmArOK9Rsv5shBjeaeCto
CDM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:19 2024 by rpki-client on console-ams.rpki-client.org