Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/ceea91-0a2a-4a4e-917b-c6161ce395af/1/rMfczkPd7zWHItfDkj_SIfZ_4Vg.roa
File: rMfczkPd7zWHItfDkj_SIfZ_4Vg.roa (raw, json)
Hash identifier: 6L0QCmtmH//SrQf2G0PaWWFZXy4DLr86pEuUfl3WJQw=
Subject key identifier: AC:C7:DC:CE:43:DD:EF:35:87:22:D7:C3:92:3F:D2:21:F6:7F:E1:58
Certificate issuer: /CN=85fb85add09f4876ea6aaa88d4d88c81ccb6b10a
Certificate serial: 0187FFBE390D1046CD0948EDEE889B0E1B0B
Authority key identifier: 85:FB:85:AD:D0:9F:48:76:EA:6A:AA:88:D4:D8:8C:81:CC:B6:B1:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hfuFrdCfSHbqaqqI1NiMgcy2sQo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/ceea91-0a2a-4a4e-917b-c6161ce395af/1/rMfczkPd7zWHItfDkj_SIfZ_4Vg.roa
Signing time: Tue 09 May 2023 09:01:09 +0000
ROA not before: Tue 09 May 2023 09:01:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48813
IP address blocks: 195.242.191.0/24 maxlen: 24
83.143.16.0/21 maxlen: 21
195.140.140.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:32:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:ff:be:39:0d:10:46:cd:09:48:ed:ee:88:9b:0e:1b:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85fb85add09f4876ea6aaa88d4d88c81ccb6b10a
Validity
Not Before: May 9 09:01:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=acc7dcce43ddef358722d7c3923fd221f67fe158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:a0:06:31:a0:ba:a7:83:29:2a:3c:40:e1:41:
b6:29:4a:c2:13:30:d8:59:8f:6c:d7:2d:c4:67:d4:
f7:14:1f:c4:d4:f9:11:dd:22:d8:ae:99:d6:c5:aa:
f5:a1:b9:8b:52:53:16:80:c9:b9:fa:aa:88:7d:42:
21:f3:dc:7b:66:fe:d5:81:d8:e5:c2:db:a3:2a:06:
12:06:e9:23:07:08:fb:05:e9:89:77:f7:12:98:29:
bb:b5:34:ba:17:3f:a3:5f:44:49:f3:e1:12:f3:38:
57:44:83:f3:50:69:91:3b:3e:7a:5f:88:53:cd:34:
27:2c:5c:d9:94:b0:4d:11:07:29:7a:44:25:e9:90:
de:e7:97:92:f9:11:03:d8:9a:eb:a5:50:c0:0f:0e:
83:b4:28:31:c1:1e:6e:59:d5:90:51:f5:e1:ff:d9:
99:92:62:5f:f8:ae:49:7e:33:30:2d:f6:72:36:95:
29:bf:59:45:5f:41:c9:a2:cb:07:59:92:91:44:78:
3f:c8:e4:84:08:0e:41:0d:0f:24:a8:7e:54:cc:c5:
eb:88:16:a6:34:5a:49:23:f4:ed:61:e4:5b:d9:d2:
ab:d4:fd:4a:d8:95:73:bb:b7:5b:c8:21:23:f7:b1:
e4:5b:9c:40:85:bc:13:92:9b:58:69:0f:0a:a4:34:
26:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:C7:DC:CE:43:DD:EF:35:87:22:D7:C3:92:3F:D2:21:F6:7F:E1:58
X509v3 Authority Key Identifier:
keyid:85:FB:85:AD:D0:9F:48:76:EA:6A:AA:88:D4:D8:8C:81:CC:B6:B1:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hfuFrdCfSHbqaqqI1NiMgcy2sQo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ceea91-0a2a-4a4e-917b-c6161ce395af/1/rMfczkPd7zWHItfDkj_SIfZ_4Vg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ceea91-0a2a-4a4e-917b-c6161ce395af/1/hfuFrdCfSHbqaqqI1NiMgcy2sQo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.143.16.0/21
195.140.140.0/22
195.242.191.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:88:e9:c9:a3:ba:45:22:a2:76:ac:f0:85:c6:11:9c:ad:14:
5c:e5:12:6b:2e:97:3a:82:90:36:f3:df:f5:4e:7e:12:af:37:
37:70:0c:ac:a5:a6:2b:90:22:c3:22:0d:f3:e8:fc:54:73:53:
bc:7f:2f:a6:99:77:b4:dd:e6:44:14:bd:29:54:4c:c8:7c:de:
b2:6b:55:29:6b:51:61:bb:b1:dd:82:2c:2c:32:3e:df:87:c7:
67:12:00:1b:b1:e7:c8:91:93:f3:de:eb:0f:8d:9d:1a:82:ee:
25:65:6f:18:1b:39:c4:d5:fd:e9:d5:73:68:40:f6:27:0a:eb:
a1:68:66:d8:52:21:e6:d4:89:8d:1f:89:8f:8b:6b:61:5e:fe:
dc:32:f6:9f:2f:81:a8:9f:5d:13:16:6c:a2:ff:5a:e1:03:74:
ff:38:d8:2d:96:07:e9:28:f0:a0:65:ae:ac:86:0f:15:86:ce:
a2:d0:22:e0:61:9c:4a:43:18:be:de:7e:e6:2d:c5:e0:56:d0:
e6:3a:8e:a3:12:3d:c7:71:86:9a:49:e2:f2:fd:39:f0:4c:1d:
89:d8:aa:93:e4:83:d7:34:83:2d:31:d9:f1:7b:d5:06:1a:e7:
5f:1c:6a:c9:1c:55:0c:4b:8a:54:11:66:fe:6d:07:e5:5b:92:
f2:02:d4:31
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYf/vjkNEEbNCUjt7oibDhsLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1ZmI4NWFkZDA5ZjQ4NzZlYTZhYWE4OGQ0ZDg4YzgxY2Ni
NmIxMGEwHhcNMjMwNTA5MDkwMTA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhY2M3ZGNjZTQzZGRlZjM1ODcyMmQ3YzM5MjNmZDIyMWY2N2ZlMTU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6AGMaC6p4MpKjxA4UG2KUrCEzDY
WY9s1y3EZ9T3FB/E1PkR3SLYrpnWxar1obmLUlMWgMm5+qqIfUIh89x7Zv7Vgdjl
wtujKgYSBukjBwj7BemJd/cSmCm7tTS6Fz+jX0RJ8+ES8zhXRIPzUGmROz56X4hT
zTQnLFzZlLBNEQcpekQl6ZDe55eS+RED2JrrpVDADw6DtCgxwR5uWdWQUfXh/9mZ
kmJf+K5JfjMwLfZyNpUpv1lFX0HJossHWZKRRHg/yOSECA5BDQ8kqH5UzMXriBam
NFpJI/TtYeRb2dKr1P1K2JVzu7dbyCEj97HkW5xAhbwTkptYaQ8KpDQmtwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFKzH3M5D3e81hyLXw5I/0iH2f+FYMB8GA1UdIwQY
MBaAFIX7ha3Qn0h26mqqiNTYjIHMtrEKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGZ1RnJkQ2ZTSGJxYXFxSTFOaU1nY3kyc1FvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9jZWVhOTEtMGEyYS00YTRlLTkxN2It
YzYxNjFjZTM5NWFmLzEvck1mY3prUGQ3eldISXRmRGtqX1NJZlpfNFZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC9jZWVhOTEtMGEyYS00YTRlLTkxN2ItYzYxNjFjZTM5NWFm
LzEvaGZ1RnJkQ2ZTSGJxYXFxSTFOaU1nY3kyc1FvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDU48QAwQC
w4yMAwQAw/K/MA0GCSqGSIb3DQEBCwUAA4IBAQBqiOnJo7pFIqJ2rPCFxhGcrRRc
5RJrLpc6gpA289/1Tn4Srzc3cAyspaYrkCLDIg3z6PxUc1O8fy+mmXe03eZEFL0p
VEzIfN6ya1Upa1Fhu7HdgiwsMj7fh8dnEgAbsefIkZPz3usPjZ0agu4lZW8YGznE
1f3p1XNoQPYnCuuhaGbYUiHm1ImNH4mPi2thXv7cMvafL4Gon10TFmyi/1rhA3T/
ONgtlgfpKPCgZa6shg8Vhs6i0CLgYZxKQxi+3n7mLcXgVtDmOo6jEj3HcYaaSeLy
/TnwTB2J2KqT5IPXNIMtMdnxe9UGGudfHGrJHFUMS4pUEWb+bQflW5LyAtQx
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:58 2024 by rpki-client on console-ams.rpki-client.org