Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/333ea6-584a-4749-83c7-03d7461eb58a/1/ASnh6EHnvjThleU13kkAutIsGyY.roa
File: ASnh6EHnvjThleU13kkAutIsGyY.roa (raw, json)
Hash identifier: DSr2D5Bh9BUuChZRVWQj75FQkcQ3XS/Gc3mvkvw+hKM=
Subject key identifier: 01:29:E1:E8:41:E7:BE:34:E1:95:E5:35:DE:49:00:BA:D2:2C:1B:26
Certificate issuer: /CN=75e6e212c63741b85b957c7c97f7c58f5b5e1335
Certificate serial: 01856E5D6D8B2E87A7C5F64C299075FC8276
Authority key identifier: 75:E6:E2:12:C6:37:41:B8:5B:95:7C:7C:97:F7:C5:8F:5B:5E:13:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/debiEsY3QbhblXx8l_fFj1teEzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/333ea6-584a-4749-83c7-03d7461eb58a/1/ASnh6EHnvjThleU13kkAutIsGyY.roa
Signing time: Sun 01 Jan 2023 17:24:54 +0000
ROA not before: Sun 01 Jan 2023 17:24:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35383
IP address blocks: 84.39.120.0/21 maxlen: 21
84.39.122.0/24 maxlen: 24
84.39.127.0/24 maxlen: 24
2a01:7a20::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:5d:6d:8b:2e:87:a7:c5:f6:4c:29:90:75:fc:82:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75e6e212c63741b85b957c7c97f7c58f5b5e1335
Validity
Not Before: Jan 1 17:24:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0129e1e841e7be34e195e535de4900bad22c1b26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:fd:27:48:d2:fe:ec:a9:76:2d:fd:ab:bd:7c:
58:39:86:d9:24:08:65:03:88:d2:c2:6c:05:c4:96:
0c:d0:56:e0:fb:1e:8f:95:72:af:99:db:c1:27:76:
1f:75:13:a8:e7:fb:95:45:f5:a2:db:eb:ab:e8:13:
a9:7e:5d:e7:ca:42:07:10:20:1a:c3:25:4f:b8:38:
b1:17:43:3b:11:64:2c:ad:26:78:91:df:90:80:b3:
05:ef:98:f2:61:80:81:79:fd:2d:f3:15:f2:d0:97:
a4:ba:f0:b6:c6:cc:f5:73:a9:c2:14:cd:60:a4:58:
77:f9:71:95:4b:05:3f:e7:a5:51:f2:e5:03:fb:e4:
d9:3d:33:bb:4e:c1:b2:bf:a8:78:b5:7e:3d:c5:19:
f9:0a:e5:28:fe:97:f5:81:c5:b4:94:0f:68:00:13:
fb:32:e6:d6:2e:1c:38:59:68:69:58:a6:b8:8c:de:
85:c1:6a:e5:ff:46:b3:c7:d4:58:90:5e:3d:3e:66:
c2:d4:43:99:47:30:9d:c5:c0:7a:ee:cc:48:70:2c:
c3:e5:ae:cf:66:40:2b:b0:ce:b3:99:f9:4f:dc:c4:
a5:d9:10:82:f8:2f:36:49:6f:f2:51:fa:0e:35:0d:
ae:40:b1:55:64:29:72:8f:89:94:ba:5d:f6:3e:81:
02:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:29:E1:E8:41:E7:BE:34:E1:95:E5:35:DE:49:00:BA:D2:2C:1B:26
X509v3 Authority Key Identifier:
keyid:75:E6:E2:12:C6:37:41:B8:5B:95:7C:7C:97:F7:C5:8F:5B:5E:13:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/debiEsY3QbhblXx8l_fFj1teEzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/333ea6-584a-4749-83c7-03d7461eb58a/1/ASnh6EHnvjThleU13kkAutIsGyY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/333ea6-584a-4749-83c7-03d7461eb58a/1/debiEsY3QbhblXx8l_fFj1teEzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.39.120.0/21
IPv6:
2a01:7a20::/32
Signature Algorithm: sha256WithRSAEncryption
15:ed:37:a7:3a:5c:0e:c0:32:9b:ba:74:8c:94:49:dd:e5:e7:
05:e5:f4:77:3a:78:f7:db:5c:ec:18:a5:f4:be:f5:84:a8:c8:
20:2c:a8:63:7f:62:bb:33:ce:e9:15:52:ff:41:88:dc:32:38:
ec:a6:50:21:ab:2a:ea:a2:b5:d3:4a:17:1c:c0:49:e0:44:d5:
2b:32:fe:d6:09:28:79:77:b1:6f:08:4f:20:42:f6:de:f9:e2:
11:23:de:c5:6e:87:a2:6e:3c:7d:07:28:e0:d7:6f:b3:d4:19:
db:8f:dc:eb:1b:68:07:80:45:62:cd:49:3d:5a:3c:ac:52:86:
b8:3a:63:f0:18:9c:f3:5b:91:f1:5f:ba:49:88:21:28:83:c7:
9a:87:60:2e:8e:6c:7f:d1:93:2b:43:81:c9:fc:3a:b9:00:cd:
a4:36:30:43:ce:7c:a2:36:06:43:16:89:66:8b:5e:2b:0c:25:
6d:ed:d3:7e:44:07:d3:ee:3b:e2:38:7d:e2:43:0b:9e:36:9a:
32:8b:50:7d:5c:51:3b:db:4b:2e:fe:1a:b2:0f:d6:5b:f0:4c:
65:f2:58:68:9a:e2:b1:c9:81:5e:f7:dd:f6:57:8b:a3:8b:4e:
b9:56:8e:60:f0:bd:cd:a9:16:66:5a:70:57:01:2c:c9:c7:57:
f0:41:ca:16
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVuXW2LLoenxfZMKZB1/IJ2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1ZTZlMjEyYzYzNzQxYjg1Yjk1N2M3Yzk3ZjdjNThmNWI1
ZTEzMzUwHhcNMjMwMTAxMTcyNDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMTI5ZTFlODQxZTdiZTM0ZTE5NWU1MzVkZTQ5MDBiYWQyMmMxYjI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhP0nSNL+7Kl2Lf2rvXxYOYbZJAhl
A4jSwmwFxJYM0Fbg+x6PlXKvmdvBJ3YfdROo5/uVRfWi2+ur6BOpfl3nykIHECAa
wyVPuDixF0M7EWQsrSZ4kd+QgLMF75jyYYCBef0t8xXy0JekuvC2xsz1c6nCFM1g
pFh3+XGVSwU/56VR8uUD++TZPTO7TsGyv6h4tX49xRn5CuUo/pf1gcW0lA9oABP7
MubWLhw4WWhpWKa4jN6FwWrl/0azx9RYkF49PmbC1EOZRzCdxcB67sxIcCzD5a7P
ZkArsM6zmflP3MSl2RCC+C82SW/yUfoONQ2uQLFVZClyj4mUul32PoECKwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFAEp4ehB57404ZXlNd5JALrSLBsmMB8GA1UdIwQY
MBaAFHXm4hLGN0G4W5V8fJf3xY9bXhM1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGViaUVzWTNRYmhibFh4OGxfZkZqMXRlRXpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS8zMzNlYTYtNTg0YS00NzQ5LTgzYzct
MDNkNzQ2MWViNThhLzEvQVNuaDZFSG52alRobGVVMTNra0F1dElzR3lZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS8zMzNlYTYtNTg0YS00NzQ5LTgzYzctMDNkNzQ2MWViNThh
LzEvZGViaUVzWTNRYmhibFh4OGxfZkZqMXRlRXpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDVCd4MA0E
AgACMAcDBQAqAXogMA0GCSqGSIb3DQEBCwUAA4IBAQAV7TenOlwOwDKbunSMlEnd
5ecF5fR3Onj321zsGKX0vvWEqMggLKhjf2K7M87pFVL/QYjcMjjsplAhqyrqorXT
ShccwEngRNUrMv7WCSh5d7FvCE8gQvbe+eIRI97Fboeibjx9Byjg12+z1Bnbj9zr
G2gHgEVizUk9WjysUoa4OmPwGJzzW5HxX7pJiCEog8eah2Aujmx/0ZMrQ4HJ/Dq5
AM2kNjBDznyiNgZDFolmi14rDCVt7dN+RAfT7jviOH3iQwueNpoyi1B9XFE720su
/hqyD9Zb8Exl8lhomuKxyYFe9932V4uji065Vo5g8L3NqRZmWnBXASzJx1fwQcoW
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:14 2024 by rpki-client on console-ams.rpki-client.org