Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/w9n3SKFnY-lz5_xRsGNZmxw3ZNs.roa
File: w9n3SKFnY-lz5_xRsGNZmxw3ZNs.roa (raw, json)
Hash identifier: OA6+laFFQKjWbsOF78qPXEt0ZECAUAlnHgqPCiKZm8U=
Subject key identifier: C3:D9:F7:48:A1:67:63:E9:73:E7:FC:51:B0:63:59:9B:1C:37:64:DB
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 018570028AFC3112A71A91E7F9CE9ACC8792
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/w9n3SKFnY-lz5_xRsGNZmxw3ZNs.roa
Signing time: Mon 02 Jan 2023 01:04:52 +0000
ROA not before: Mon 02 Jan 2023 01:04:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61135
IP address blocks: 212.68.35.0/24 maxlen: 24
188.132.249.0/24 maxlen: 24
212.68.60.0/24 maxlen: 24
212.68.59.0/24 maxlen: 24
188.132.189.0/24 maxlen: 24
188.132.191.0/24 maxlen: 24
78.135.73.0/24 maxlen: 24
188.132.193.0/24 maxlen: 24
78.135.86.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 05 Jan 2023 11:28:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:02:8a:fc:31:12:a7:1a:91:e7:f9:ce:9a:cc:87:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jan 2 01:04:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c3d9f748a16763e973e7fc51b063599b1c3764db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:0d:aa:dc:fc:d7:8d:b9:c3:b8:af:d1:85:e4:
a7:84:ec:24:40:c2:d6:64:b3:c7:2c:71:f0:38:64:
79:bc:0c:dc:a0:81:bd:0f:5a:b5:23:6d:b0:c4:88:
44:d1:54:33:f9:bf:da:2c:a2:fe:d8:51:00:ee:6f:
f4:e1:7f:ed:40:c6:44:e6:ae:42:9d:6d:b1:b9:91:
e5:3c:42:79:76:0e:15:7e:c3:ce:4a:66:38:59:c2:
ff:22:80:61:c8:e9:71:ac:f0:04:67:c0:fc:41:89:
be:3b:7c:5d:82:2d:e3:7f:3b:cf:49:67:18:58:78:
65:1b:4c:65:f1:65:01:6d:1a:af:4e:b0:75:92:53:
e1:e5:b1:23:f7:f5:85:63:fb:0b:81:12:79:2b:8f:
28:a5:c9:58:1a:92:90:4f:ee:89:05:b9:fd:cd:5b:
51:3b:e4:d0:4f:de:35:ed:a4:94:2f:89:fb:a8:3b:
20:75:d2:3e:18:28:88:e8:d2:e0:cb:45:1e:d5:be:
1c:88:70:d0:7f:70:de:c0:68:7f:5c:33:4d:41:19:
49:54:7b:3c:61:3d:5e:41:4f:37:2e:c2:ad:eb:80:
c8:80:a0:b3:05:e9:8a:d8:eb:d3:ee:39:9c:c4:9e:
2d:ef:65:5e:4d:6f:a4:0d:74:58:51:f0:8e:38:a3:
3e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:D9:F7:48:A1:67:63:E9:73:E7:FC:51:B0:63:59:9B:1C:37:64:DB
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/w9n3SKFnY-lz5_xRsGNZmxw3ZNs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.135.73.0/24
78.135.86.0/24
188.132.189.0/24
188.132.191.0/24
188.132.193.0/24
188.132.249.0/24
212.68.35.0/24
212.68.59.0-212.68.60.255
Signature Algorithm: sha256WithRSAEncryption
58:cd:c0:20:4b:a4:13:4d:95:1f:93:ee:a8:17:b4:18:e6:48:
98:84:ff:ba:fb:87:ac:91:a6:b6:21:d4:9c:19:31:24:58:0f:
9c:ca:b7:2c:c3:49:45:f3:53:77:ba:4b:97:37:8b:9b:39:b1:
86:05:f2:29:a9:f3:12:84:73:ea:fa:02:72:a4:fb:ea:9d:77:
7b:ae:07:a2:e9:c8:a8:37:56:ee:3a:df:35:00:e9:c4:33:ad:
9e:99:69:01:a5:b9:c6:13:eb:b3:a7:f7:40:f7:6a:43:5a:e9:
41:ac:0a:e3:4e:27:69:e3:08:bd:f7:07:4b:35:ae:29:cc:66:
fb:a6:c1:6b:89:31:a7:5d:10:87:65:d8:ad:4d:ba:af:62:47:
29:a9:d9:3c:54:29:71:9f:a4:8f:5c:5f:ea:f0:3c:c0:b0:1b:
bb:9b:de:a0:ef:2a:e6:51:83:40:d7:33:7b:68:5d:21:0a:2c:
32:f1:0e:98:d3:04:6f:ee:6b:1c:8b:2e:0d:3d:d1:85:f2:1b:
7a:f9:44:33:b9:f9:8e:dd:50:50:66:b6:e1:8a:74:50:46:c6:
89:f2:27:fe:60:d3:38:ea:ab:ab:15:45:a6:67:ca:40:91:17:
a4:7d:fc:24:c2:63:75:52:54:3c:04:6d:50:b4:34:c4:da:10:
fd:51:6b:fe
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgISAYVwAor8MRKnGpHn+c6azIeSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx
OTJjYTIwHhcNMjMwMTAyMDEwNDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjM2Q5Zjc0OGExNjc2M2U5NzNlN2ZjNTFiMDYzNTk5YjFjMzc2NGRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQ2q3PzXjbnDuK/RheSnhOwkQMLW
ZLPHLHHwOGR5vAzcoIG9D1q1I22wxIhE0VQz+b/aLKL+2FEA7m/04X/tQMZE5q5C
nW2xuZHlPEJ5dg4VfsPOSmY4WcL/IoBhyOlxrPAEZ8D8QYm+O3xdgi3jfzvPSWcY
WHhlG0xl8WUBbRqvTrB1klPh5bEj9/WFY/sLgRJ5K48opclYGpKQT+6JBbn9zVtR
O+TQT9417aSUL4n7qDsgddI+GCiI6NLgy0Ue1b4ciHDQf3DewGh/XDNNQRlJVHs8
YT1eQU83LsKt64DIgKCzBemK2OvT7jmcxJ4t72VeTW+kDXRYUfCOOKM+5QIDAQAB
o4ICOzCCAjcwHQYDVR0OBBYEFMPZ90ihZ2Ppc+f8UbBjWZscN2TbMB8GA1UdIwQY
MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt
NGUxOThmMGE2MDEzLzEvdzluM1NLRm5ZLWx6NV94UnNHTlpteHczWk5zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz
LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFEGCCsGAQUFBwEHAQH/BEIwQDA+BAIAATA4AwQATodJAwQA
TodWAwQAvIS9AwQAvIS/AwQAvITBAwQAvIT5AwQA1EQjMAwDBADURDsDBADURDww
DQYJKoZIhvcNAQELBQADggEBAFjNwCBLpBNNlR+T7qgXtBjmSJiE/7r7h6yRprYh
1JwZMSRYD5zKtyzDSUXzU3e6S5c3i5s5sYYF8imp8xKEc+r6AnKk++qdd3uuB6Lp
yKg3Vu463zUA6cQzrZ6ZaQGlucYT67On90D3akNa6UGsCuNOJ2njCL33B0s1rinM
ZvumwWuJMaddEIdl2K1Nuq9iRymp2TxUKXGfpI9cX+rwPMCwG7ub3qDvKuZRg0DX
M3toXSEKLDLxDpjTBG/uaxyLLg090YXyG3r5RDO5+Y7dUFBmtuGKdFBGxonyJ/5g
0zjqq6sVRaZnykCRF6R9/CTCY3VSVDwEbVC0NMTaEP1Ra/4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:44 2024 by rpki-client on console-fra.rpki-client.org