Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/fB-LN7VYSdzrtm5MM9yS_V4cemY.roa
File: fB-LN7VYSdzrtm5MM9yS_V4cemY.roa (raw, json)
Hash identifier: g7L5ibbVwcU91moGjs9t7UHRdhzTX3HAll4AhhmTWt4=
Subject key identifier: 7C:1F:8B:37:B5:58:49:DC:EB:B6:6E:4C:33:DC:92:FD:5E:1C:7A:66
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 018581B0BD79F08CDB05EC26C6FA728B3A3D
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/fB-LN7VYSdzrtm5MM9yS_V4cemY.roa
Signing time: Thu 05 Jan 2023 11:28:41 +0000
ROA not before: Thu 05 Jan 2023 11:28:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61135
IP address blocks: 188.132.238.0/24 maxlen: 24
212.68.35.0/24 maxlen: 24
188.132.249.0/24 maxlen: 24
212.68.60.0/24 maxlen: 24
212.68.59.0/24 maxlen: 24
188.132.189.0/24 maxlen: 24
188.132.191.0/24 maxlen: 24
78.135.73.0/24 maxlen: 24
188.132.193.0/24 maxlen: 24
78.135.86.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 11 Jan 2023 20:36:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:81:b0:bd:79:f0:8c:db:05:ec:26:c6:fa:72:8b:3a:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jan 5 11:28:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7c1f8b37b55849dcebb66e4c33dc92fd5e1c7a66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:32:71:62:c9:2f:59:96:4b:63:96:30:a5:4f:
d0:19:b7:fe:01:35:ef:eb:a7:d8:4d:fe:fb:a7:63:
78:11:41:e8:d2:90:b5:60:94:cd:ae:36:e6:c4:af:
be:d4:2d:f2:85:98:c0:b5:48:ca:b6:53:ca:76:fa:
4a:90:0d:2e:28:a5:2b:1c:bb:da:96:c8:42:77:af:
c5:e3:4e:6a:cb:5c:e3:43:f0:dc:e5:26:92:9b:07:
e5:fc:ed:84:1c:c6:d8:46:d8:25:82:d1:71:01:22:
75:a3:21:75:80:12:2f:1e:1a:6d:73:8b:bb:98:5c:
53:81:18:e8:ed:46:c6:0c:89:33:a0:a7:d9:c3:da:
df:93:14:53:7b:97:c2:f2:a9:50:4b:05:cd:66:5c:
ef:77:ad:23:ac:ca:e0:45:6a:7d:c4:34:1e:f4:c5:
dd:1c:db:4c:14:c5:fc:2e:51:ba:a3:c9:18:44:86:
1e:b2:8d:aa:60:07:4a:37:57:18:7e:61:6a:24:0c:
f2:63:9c:10:f0:12:21:84:60:5a:49:c8:ef:db:bc:
3a:13:5f:84:dc:4b:34:c1:a7:c9:fc:c3:63:5d:ec:
86:22:57:07:bd:8d:a3:83:95:94:2d:b7:0b:70:99:
46:27:0c:24:e3:24:3d:f7:af:38:30:7e:b4:a0:2b:
92:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:1F:8B:37:B5:58:49:DC:EB:B6:6E:4C:33:DC:92:FD:5E:1C:7A:66
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/fB-LN7VYSdzrtm5MM9yS_V4cemY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.135.73.0/24
78.135.86.0/24
188.132.189.0/24
188.132.191.0/24
188.132.193.0/24
188.132.238.0/24
188.132.249.0/24
212.68.35.0/24
212.68.59.0-212.68.60.255
Signature Algorithm: sha256WithRSAEncryption
66:7d:85:da:8a:c6:20:00:bd:cb:7f:39:15:e9:52:47:c1:0d:
d9:78:96:db:2a:9d:24:81:ec:5e:74:c1:4e:0c:aa:33:e5:ae:
f7:01:30:9e:2f:49:6c:df:e5:9f:e2:08:e9:b4:28:eb:82:69:
21:17:c5:a7:cf:40:d8:c9:de:54:f6:88:18:d4:97:da:af:26:
4f:09:09:ac:fa:8e:e0:34:5e:2a:be:39:78:ab:5a:5b:ef:b0:
98:94:01:3b:04:81:be:c2:e7:18:a5:ad:cb:70:c5:c3:c0:96:
43:3f:46:b8:18:f5:bf:ca:7b:77:27:2c:4c:26:38:bb:d0:b7:
9b:13:5c:ff:b0:1a:90:28:0f:66:df:30:e7:e3:86:bf:96:c1:
89:bd:d5:0c:98:30:ad:6b:aa:b5:ec:0e:2a:68:8a:a7:97:d0:
c2:f0:a6:28:c5:a9:03:ed:a5:ac:7f:d5:8b:62:fa:1b:fa:98:
64:cd:35:2a:bb:8e:e2:cf:65:8e:b7:7f:bd:35:f4:0e:a4:de:
a2:0b:c7:f3:33:be:f7:0b:2c:4d:dc:e8:13:50:1d:7d:6d:85:
23:b8:8b:c9:76:78:43:3c:ab:9d:42:61:7c:f1:16:9a:53:17:
75:17:e6:25:52:bb:a3:8a:da:83:98:4f:44:a0:5d:79:4a:37:
dd:f1:d6:1e
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgISAYWBsL158IzbBewmxvpyizo9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx
OTJjYTIwHhcNMjMwMTA1MTEyODQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YzFmOGIzN2I1NTg0OWRjZWJiNjZlNGMzM2RjOTJmZDVlMWM3YTY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizJxYskvWZZLY5YwpU/QGbf+ATXv
66fYTf77p2N4EUHo0pC1YJTNrjbmxK++1C3yhZjAtUjKtlPKdvpKkA0uKKUrHLva
lshCd6/F405qy1zjQ/Dc5SaSmwfl/O2EHMbYRtglgtFxASJ1oyF1gBIvHhptc4u7
mFxTgRjo7UbGDIkzoKfZw9rfkxRTe5fC8qlQSwXNZlzvd60jrMrgRWp9xDQe9MXd
HNtMFMX8LlG6o8kYRIYeso2qYAdKN1cYfmFqJAzyY5wQ8BIhhGBaScjv27w6E1+E
3Es0wafJ/MNjXeyGIlcHvY2jg5WULbcLcJlGJwwk4yQ99684MH60oCuSAwIDAQAB
o4ICQTCCAj0wHQYDVR0OBBYEFHwfize1WEnc67ZuTDPckv1eHHpmMB8GA1UdIwQY
MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt
NGUxOThmMGE2MDEzLzEvZkItTE43VllTZHpydG01TU05eVNfVjRjZW1ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz
LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFcGCCsGAQUFBwEHAQH/BEgwRjBEBAIAATA+AwQATodJAwQA
TodWAwQAvIS9AwQAvIS/AwQAvITBAwQAvITuAwQAvIT5AwQA1EQjMAwDBADURDsD
BADURDwwDQYJKoZIhvcNAQELBQADggEBAGZ9hdqKxiAAvct/ORXpUkfBDdl4ltsq
nSSB7F50wU4MqjPlrvcBMJ4vSWzf5Z/iCOm0KOuCaSEXxafPQNjJ3lT2iBjUl9qv
Jk8JCaz6juA0Xiq+OXirWlvvsJiUATsEgb7C5xilrctwxcPAlkM/RrgY9b/Ke3cn
LEwmOLvQt5sTXP+wGpAoD2bfMOfjhr+WwYm91QyYMK1rqrXsDipoiqeX0MLwpijF
qQPtpax/1Yti+hv6mGTNNSq7juLPZY63f7019A6k3qILx/MzvvcLLE3c6BNQHX1t
hSO4i8l2eEM8q51CYXzxFppTF3UX5iVSu6OK2oOYT0SgXXlKN93x1h4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:58 2024 by rpki-client on console-ams.rpki-client.org