Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/265769-354e-4a8b-9542-94f97b3a2ce2/1/1HTv0URZBgiie97i1NSalqXol3Q.roa
File: 1HTv0URZBgiie97i1NSalqXol3Q.roa (raw, json)
Hash identifier: c8n9GBXT81d8wx9vnJrM4q7SL1Wu9dXYMtecBTBf8Vg=
Subject key identifier: D4:74:EF:D1:44:59:06:08:A2:7B:DE:E2:D4:D4:9A:96:A5:E8:97:74
Certificate issuer: /CN=8aef1638d0911ba98864e979c8426ba4f41a272e
Certificate serial: 01856D0167A8573F7E32D4F5EDCD35589B6E
Authority key identifier: 8A:EF:16:38:D0:91:1B:A9:88:64:E9:79:C8:42:6B:A4:F4:1A:27:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iu8WONCRG6mIZOl5yEJrpPQaJy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/265769-354e-4a8b-9542-94f97b3a2ce2/1/1HTv0URZBgiie97i1NSalqXol3Q.roa
Signing time: Sun 01 Jan 2023 11:04:46 +0000
ROA not before: Sun 01 Jan 2023 11:04:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35729
IP address blocks: 87.252.126.0/23 maxlen: 24
87.252.96.0/21 maxlen: 24
87.252.104.0/23 maxlen: 24
2a01:4600::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:33:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:01:67:a8:57:3f:7e:32:d4:f5:ed:cd:35:58:9b:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8aef1638d0911ba98864e979c8426ba4f41a272e
Validity
Not Before: Jan 1 11:04:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d474efd144590608a27bdee2d4d49a96a5e89774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ad:47:45:fb:db:3b:70:e1:84:cf:2c:5d:61:
9a:84:0f:34:a2:5b:cb:31:e3:6f:53:90:40:ed:22:
92:ea:97:b1:cb:b7:11:ed:28:2d:e4:fe:b8:88:a5:
2f:4b:fd:eb:b5:c8:f3:6b:29:1f:83:9a:03:85:a5:
4b:e3:3e:28:22:08:44:93:95:7c:d9:1f:12:e9:73:
43:76:a6:4b:58:46:07:09:86:97:cb:b9:30:b8:16:
05:92:d5:ac:f4:ff:77:d9:37:f2:48:7c:e2:0c:e7:
0b:6b:be:d7:79:ac:b2:bc:49:e3:9b:91:71:c7:c5:
53:17:dd:30:2a:ba:51:15:2e:34:20:23:05:54:83:
f7:33:49:2a:b0:48:2d:96:07:68:5d:9a:45:73:17:
8d:ab:31:47:41:d0:26:a7:a0:40:44:19:69:ef:de:
8a:26:67:52:a6:c6:b4:d9:aa:ca:7f:7d:e5:29:5e:
0a:ce:00:d9:a8:8a:79:32:a3:36:f5:49:ac:d9:5a:
cd:66:43:e0:e7:04:63:cf:02:e2:61:7b:c6:28:80:
c9:59:e8:fc:2e:f0:5a:4b:c6:a2:89:4e:87:a0:20:
09:58:26:46:44:94:e4:be:ce:a7:3d:90:15:ef:3f:
c4:76:a1:af:3b:98:0a:4b:d8:ec:62:1d:ad:10:07:
8f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:74:EF:D1:44:59:06:08:A2:7B:DE:E2:D4:D4:9A:96:A5:E8:97:74
X509v3 Authority Key Identifier:
keyid:8A:EF:16:38:D0:91:1B:A9:88:64:E9:79:C8:42:6B:A4:F4:1A:27:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iu8WONCRG6mIZOl5yEJrpPQaJy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/265769-354e-4a8b-9542-94f97b3a2ce2/1/1HTv0URZBgiie97i1NSalqXol3Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/265769-354e-4a8b-9542-94f97b3a2ce2/1/iu8WONCRG6mIZOl5yEJrpPQaJy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.252.96.0-87.252.105.255
87.252.126.0/23
IPv6:
2a01:4600::/32
Signature Algorithm: sha256WithRSAEncryption
46:99:25:8c:34:dd:30:ba:00:28:6b:ab:3f:2e:ad:e8:4a:33:
94:2f:49:fc:07:c3:d0:a9:76:bf:fb:1e:1c:5a:a1:0e:98:cb:
3e:2c:f1:cc:57:ba:22:b5:8a:d0:14:04:ed:a7:c6:5d:a0:5a:
aa:64:4c:30:85:04:c4:47:fa:86:31:84:fb:49:2a:2a:2c:4e:
5c:2c:aa:d2:ad:31:d7:88:10:a1:20:6d:3d:f6:d8:4d:f5:13:
93:39:b8:ae:e5:43:75:03:ef:f5:5d:46:13:1b:16:72:d7:43:
66:12:36:07:f0:7c:8c:b4:1b:96:9b:ee:74:1d:ea:9d:a0:2c:
06:32:93:d3:bb:c5:31:d1:81:c1:3a:0a:3f:8a:74:8d:11:6e:
31:41:9d:c6:04:ce:68:6b:07:b3:06:08:96:c0:36:8e:14:64:
04:4b:96:bf:35:dc:5a:d4:27:b4:74:58:1f:a2:b2:d7:df:80:
9b:f4:6c:84:8e:c8:82:52:c8:84:89:ed:31:f0:ca:65:e1:57:
1e:b6:9e:19:fe:41:75:a4:76:18:01:84:0e:7e:9a:e4:83:60:
4f:55:72:24:1d:fe:98:35:cf:ca:77:13:27:f1:a2:11:a3:05:
cc:2e:47:99:b0:ee:e4:2d:93:91:7e:37:f3:1b:7d:7e:4d:ed:
b1:ec:89:10
-----BEGIN CERTIFICATE-----
MIIFGjCCBAKgAwIBAgISAYVtAWeoVz9+MtT17c01WJtuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhZWYxNjM4ZDA5MTFiYTk4ODY0ZTk3OWM4NDI2YmE0ZjQx
YTI3MmUwHhcNMjMwMTAxMTEwNDQ2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNDc0ZWZkMTQ0NTkwNjA4YTI3YmRlZTJkNGQ0OWE5NmE1ZTg5Nzc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv61HRfvbO3DhhM8sXWGahA80olvL
MeNvU5BA7SKS6pexy7cR7Sgt5P64iKUvS/3rtcjzaykfg5oDhaVL4z4oIghEk5V8
2R8S6XNDdqZLWEYHCYaXy7kwuBYFktWs9P932TfySHziDOcLa77XeayyvEnjm5Fx
x8VTF90wKrpRFS40ICMFVIP3M0kqsEgtlgdoXZpFcxeNqzFHQdAmp6BARBlp796K
JmdSpsa02arKf33lKV4KzgDZqIp5MqM29Ums2VrNZkPg5wRjzwLiYXvGKIDJWej8
LvBaS8aiiU6HoCAJWCZGRJTkvs6nPZAV7z/EdqGvO5gKS9jsYh2tEAePDQIDAQAB
o4ICJjCCAiIwHQYDVR0OBBYEFNR079FEWQYIonve4tTUmpal6Jd0MB8GA1UdIwQY
MBaAFIrvFjjQkRupiGTpechCa6T0GicuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXU4V09OQ1JHNm1JWk9sNXlFSnJwUFFhSnk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My8yNjU3NjktMzU0ZS00YThiLTk1NDIt
OTRmOTdiM2EyY2UyLzEvMUhUdjBVUlpCZ2lpZTk3aTFOU2FscVhvbDNRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My8yNjU3NjktMzU0ZS00YThiLTk1NDItOTRmOTdiM2EyY2Uy
LzEvaXU4V09OQ1JHNm1JWk9sNXlFSnJwUFFhSnk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAaBAIAATAUMAwDBAVX/GAD
BAFX/GgDBAFX/H4wDQQCAAIwBwMFACoBRgAwDQYJKoZIhvcNAQELBQADggEBAEaZ
JYw03TC6AChrqz8urehKM5QvSfwHw9Cpdr/7HhxaoQ6Yyz4s8cxXuiK1itAUBO2n
xl2gWqpkTDCFBMRH+oYxhPtJKiosTlwsqtKtMdeIEKEgbT322E31E5M5uK7lQ3UD
7/VdRhMbFnLXQ2YSNgfwfIy0G5ab7nQd6p2gLAYyk9O7xTHRgcE6Cj+KdI0RbjFB
ncYEzmhrB7MGCJbANo4UZARLlr813FrUJ7R0WB+istffgJv0bISOyIJSyISJ7THw
ymXhVx62nhn+QXWkdhgBhA5+muSDYE9VciQd/pg1z8p3EyfxohGjBcwuR5mw7uQt
k5F+N/MbfX5N7bHsiRA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:54 2024 by rpki-client on console-fra.rpki-client.org