Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/e8l1FBVvYJOJy274iiviqdEC54I.roa
File: e8l1FBVvYJOJy274iiviqdEC54I.roa (raw, json)
Hash identifier: 7Zl2qQRPSZMWvEp6rUGKp6zA/H2oXPgm1VeDdeP5iN4=
Subject key identifier: 7B:C9:75:14:15:6F:60:93:89:CB:6E:F8:8A:2B:E2:A9:D1:02:E7:82
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 01856C53D628B7E4D997767DDFD870563639
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/e8l1FBVvYJOJy274iiviqdEC54I.roa
Signing time: Sun 01 Jan 2023 07:55:11 +0000
ROA not before: Sun 01 Jan 2023 07:55:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211237
IP address blocks: 109.236.50.0/24 maxlen: 24
109.236.49.0/24 maxlen: 24
193.160.143.0/24 maxlen: 24
193.160.141.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:53:d6:28:b7:e4:d9:97:76:7d:df:d8:70:56:36:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Jan 1 07:55:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7bc97514156f609389cb6ef88a2be2a9d102e782
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:db:5f:5f:f3:c6:e6:00:61:bc:f6:56:7f:06:
f3:53:47:61:e8:ba:8e:69:9a:07:b5:05:d2:c2:39:
11:7d:c5:e7:ea:8f:55:e0:98:ff:c5:a8:2a:b9:7e:
82:77:0c:2f:a8:65:b4:8b:7a:c1:42:93:a0:f3:75:
fd:f5:87:ad:a5:ea:00:c3:27:aa:b1:2c:84:92:4c:
47:9e:56:ec:2b:6a:de:04:0a:bb:eb:c8:fe:0f:3f:
4d:4f:b7:85:c3:c1:5c:ea:26:46:f5:26:3c:ed:da:
10:cf:8c:3b:d8:cd:a2:e0:a8:9f:10:72:f2:c6:66:
81:9e:a7:79:e7:5a:a6:b0:1f:40:af:18:90:32:26:
7a:b1:f0:a9:a0:ca:77:2d:48:6b:ab:b7:ca:b6:ce:
57:8a:0c:69:75:b2:2e:11:2e:d8:6e:42:14:ea:4e:
68:a6:f5:86:80:aa:31:28:5e:88:85:70:52:09:6d:
b5:44:96:1c:61:2d:ae:92:12:da:af:c3:08:12:8c:
23:02:20:26:15:36:d2:9f:6d:24:1b:81:32:94:c8:
11:95:76:bf:0a:1c:a4:39:a1:60:18:ff:58:1c:cf:
41:f6:3e:53:f9:49:0e:24:7e:e6:71:a2:fe:e8:82:
bf:dc:9d:81:e6:e3:e8:78:91:e0:70:aa:69:cd:76:
22:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:C9:75:14:15:6F:60:93:89:CB:6E:F8:8A:2B:E2:A9:D1:02:E7:82
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/e8l1FBVvYJOJy274iiviqdEC54I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.236.49.0-109.236.50.255
193.160.141.0/24
193.160.143.0/24
Signature Algorithm: sha256WithRSAEncryption
87:8c:85:20:3e:4e:c9:36:4d:09:7f:9e:63:e7:af:13:1e:72:
85:ee:58:23:bf:0d:5a:9c:bf:69:49:e5:1a:b3:32:dc:40:49:
61:a2:00:d7:79:83:09:99:94:8f:0e:f6:91:96:f0:ed:27:5c:
82:01:44:91:f6:b6:0b:74:fe:60:c4:39:03:b0:55:4c:70:f0:
0b:d2:da:14:db:16:b3:29:7a:8d:d9:dd:9d:f9:d3:38:5f:8c:
57:ad:d2:db:57:df:bd:79:19:bf:43:5e:29:dc:20:87:cd:75:
42:36:e3:bd:df:41:6e:80:d8:b4:84:dc:8b:a1:1c:74:ca:b2:
87:97:5c:63:5a:58:f8:e3:6a:c0:65:d1:e1:46:bc:d0:2d:70:
38:0b:cd:3c:1a:1e:be:92:ef:a0:b7:f3:90:fe:b3:c8:25:4b:
1c:2e:22:7c:07:76:0c:ff:71:ff:bf:79:df:ed:e0:14:45:27:
e2:eb:d6:55:65:3b:75:3d:96:6f:95:3c:f3:a4:bc:f7:35:f1:
8c:f2:1a:41:f6:0c:bf:fd:be:20:ac:20:7d:53:89:cb:11:a7:
e7:b2:49:5d:c3:ec:1c:cc:e3:be:c9:31:a5:63:55:3c:10:d6:
40:b5:1b:5b:68:08:92:08:81:f4:62:44:1c:06:43:7c:92:da:
c2:a8:37:8a
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAYVsU9Yot+TZl3Z939hwVjY5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2MTZjNDE5NTE1MmVmZmVkYmY3YjNhZmVlMmFhNzJlMTkw
OTBlNGQwHhcNMjMwMTAxMDc1NTExWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YmM5NzUxNDE1NmY2MDkzODljYjZlZjg4YTJiZTJhOWQxMDJlNzgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg9tfX/PG5gBhvPZWfwbzU0dh6LqO
aZoHtQXSwjkRfcXn6o9V4Jj/xagquX6CdwwvqGW0i3rBQpOg83X99YetpeoAwyeq
sSyEkkxHnlbsK2reBAq768j+Dz9NT7eFw8Fc6iZG9SY87doQz4w72M2i4KifEHLy
xmaBnqd551qmsB9ArxiQMiZ6sfCpoMp3LUhrq7fKts5XigxpdbIuES7YbkIU6k5o
pvWGgKoxKF6IhXBSCW21RJYcYS2ukhLar8MIEowjAiAmFTbSn20kG4EylMgRlXa/
ChykOaFgGP9YHM9B9j5T+UkOJH7mcaL+6IK/3J2B5uPoeJHgcKppzXYiBQIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFHvJdRQVb2CTictu+Ior4qnRAueCMB8GA1UdIwQY
MBaAFMYWxBlRUu/+2/ezr+4qpy4ZCQ5NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjkt
MzlmZGI5ODZmMDU5LzEvZThsMUZCVnZZSk9KeTI3NGlpdmlxZEVDNTRJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjktMzlmZGI5ODZmMDU5
LzEveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBABt7DED
BABt7DIDBADBoI0DBADBoI8wDQYJKoZIhvcNAQELBQADggEBAIeMhSA+Tsk2TQl/
nmPnrxMecoXuWCO/DVqcv2lJ5RqzMtxASWGiANd5gwmZlI8O9pGW8O0nXIIBRJH2
tgt0/mDEOQOwVUxw8AvS2hTbFrMpeo3Z3Z350zhfjFet0ttX3715Gb9DXincIIfN
dUI2473fQW6A2LSE3IuhHHTKsoeXXGNaWPjjasBl0eFGvNAtcDgLzTwaHr6S76C3
85D+s8glSxwuInwHdgz/cf+/ed/t4BRFJ+Lr1lVlO3U9lm+VPPOkvPc18YzyGkH2
DL/9viCsIH1TicsRp+eySV3D7BzM477JMaVjVTwQ1kC1G1toCJIIgfRiRBwGQ3yS
2sKoN4o=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:24 2024 by rpki-client on console-ams.rpki-client.org