Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/4K97NcOfGLPRkAVlpAcDhSlanXw.roa
File: 4K97NcOfGLPRkAVlpAcDhSlanXw.roa (raw, json)
Hash identifier: mLJiA5DpjC8qRIkiTdyYPxsniY/5Kq7irCKqmyldf6w=
Subject key identifier: E0:AF:7B:35:C3:9F:18:B3:D1:90:05:65:A4:07:03:85:29:5A:9D:7C
Certificate issuer: /CN=c6583f58c7110ad4cc609f4ffb7cab2f80c83581
Certificate serial: 01926AD86410D5D083B410F6C654F8C4147E
Authority key identifier: C6:58:3F:58:C7:11:0A:D4:CC:60:9F:4F:FB:7C:AB:2F:80:C8:35:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xlg_WMcRCtTMYJ9P-3yrL4DINYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/4K97NcOfGLPRkAVlpAcDhSlanXw.roa
Signing time: Tue 08 Oct 2024 06:36:59 +0000
ROA not before: Tue 08 Oct 2024 06:36:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15659
IP address blocks: 80.202.0.0/16 maxlen: 16
84.48.0.0/18 maxlen: 18
84.49.0.0/16 maxlen: 16
84.49.128.0/17 maxlen: 17
89.10.0.0/16 maxlen: 16
89.11.0.0/17 maxlen: 17
213.145.160.0/19 maxlen: 19
213.187.160.0/19 maxlen: 19
213.187.190.0/24 maxlen: 24
217.13.0.0/19 maxlen: 19
2a04:980::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 09 Oct 2024 07:44:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:6a:d8:64:10:d5:d0:83:b4:10:f6:c6:54:f8:c4:14:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6583f58c7110ad4cc609f4ffb7cab2f80c83581
Validity
Not Before: Oct 8 06:36:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e0af7b35c39f18b3d1900565a4070385295a9d7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fd:6a:5a:56:9e:00:53:7e:f7:fb:85:c2:1b:
bb:19:45:18:17:14:01:43:57:d3:21:7a:4d:eb:74:
8e:de:c4:e4:75:92:68:40:a8:53:db:41:f6:0b:ee:
f1:32:43:d3:5f:1e:19:11:fa:2c:d8:93:ba:64:40:
cf:df:3e:e1:58:50:09:20:b7:ba:f4:e1:df:ea:36:
81:81:a2:be:7d:33:dd:95:a9:53:38:c6:e2:bb:e2:
a0:45:1b:c5:bf:94:69:29:13:84:c6:a9:17:6b:60:
5f:d3:d3:c2:c8:42:ec:6e:12:5a:2b:65:04:8c:c7:
5f:7f:d2:18:25:1e:85:c7:ff:3b:fe:aa:77:d2:c6:
33:ff:50:06:88:92:93:1e:e3:81:7a:5a:3e:2f:c9:
82:fe:c2:fa:87:fb:a3:6c:fc:29:7d:6f:a9:f4:95:
21:35:11:d9:87:13:77:bb:46:cc:29:0f:4e:0b:c9:
11:6a:64:78:65:65:f8:fa:29:40:24:5e:d6:97:86:
f3:ff:9e:11:bf:d2:dd:7f:bc:a6:80:8b:82:7f:35:
74:68:c7:5c:69:b8:e7:f4:29:e4:e7:07:61:ce:f1:
a5:4d:78:d5:02:bf:8c:83:f6:15:88:d7:75:da:4d:
26:92:7d:a5:d8:59:f9:33:d1:f5:dd:42:eb:87:5e:
0d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:AF:7B:35:C3:9F:18:B3:D1:90:05:65:A4:07:03:85:29:5A:9D:7C
X509v3 Authority Key Identifier:
keyid:C6:58:3F:58:C7:11:0A:D4:CC:60:9F:4F:FB:7C:AB:2F:80:C8:35:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlg_WMcRCtTMYJ9P-3yrL4DINYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/4K97NcOfGLPRkAVlpAcDhSlanXw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.202.0.0/16
84.48.0.0/18
84.49.0.0/16
89.10.0.0-89.11.127.255
213.145.160.0/19
213.187.160.0/19
217.13.0.0/19
IPv6:
2a04:980::/29
Signature Algorithm: sha256WithRSAEncryption
27:a2:f7:16:1d:60:02:60:73:b5:08:7a:2f:73:59:2f:b1:1a:
e8:22:e5:60:37:04:60:b5:23:21:a6:f9:6f:9c:be:50:a1:46:
ac:d3:64:7c:34:0a:12:bf:2f:f3:1e:4f:ca:6e:1c:77:08:bb:
d5:d4:ae:25:7f:56:b4:6b:4b:88:00:e4:a2:c5:0f:15:93:3a:
4a:ef:87:c4:a5:8a:54:63:6b:ad:21:fa:8f:71:f9:a1:93:0b:
4e:df:7e:9f:1e:d0:da:83:b4:86:91:7e:11:56:f7:82:f4:4c:
b5:d2:2f:ec:ee:8d:41:d9:f7:1b:81:11:b1:ce:83:1e:86:12:
a3:98:f7:19:2d:76:ff:fb:82:2b:aa:59:86:52:7b:78:4d:41:
9a:11:a6:01:ae:f2:d4:f6:14:d5:72:a2:df:99:53:28:aa:8a:
b2:5f:df:88:8a:2c:f8:ee:7c:1b:3f:0d:ad:38:fc:f3:79:7a:
78:be:5e:a7:a8:f4:8e:b6:08:a0:34:db:e8:7a:70:0f:23:56:
54:85:de:2d:e8:7b:26:f0:b9:ac:44:8f:84:50:cf:4c:d2:2c:
bc:87:3f:ab:3d:70:01:b5:40:01:21:69:17:a8:c8:bf:56:b4:
cc:4d:fa:63:90:77:a8:42:3f:9e:ad:ab:44:19:08:61:dd:38:
2c:fc:48:2e
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgISAZJq2GQQ1dCDtBD2xlT4xBR+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NTgzZjU4YzcxMTBhZDRjYzYwOWY0ZmZiN2NhYjJmODBj
ODM1ODEwHhcNMjQxMDA4MDYzNjU5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMGFmN2IzNWMzOWYxOGIzZDE5MDA1NjVhNDA3MDM4NTI5NWE5ZDdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtv1qWlaeAFN+9/uFwhu7GUUYFxQB
Q1fTIXpN63SO3sTkdZJoQKhT20H2C+7xMkPTXx4ZEfos2JO6ZEDP3z7hWFAJILe6
9OHf6jaBgaK+fTPdlalTOMbiu+KgRRvFv5RpKROExqkXa2Bf09PCyELsbhJaK2UE
jMdff9IYJR6Fx/87/qp30sYz/1AGiJKTHuOBelo+L8mC/sL6h/ujbPwpfW+p9JUh
NRHZhxN3u0bMKQ9OC8kRamR4ZWX4+ilAJF7Wl4bz/54Rv9Ldf7ymgIuCfzV0aMdc
abjn9Cnk5wdhzvGlTXjVAr+Mg/YViNd12k0mkn2l2Fn5M9H13ULrh14NwQIDAQAB
o4ICQTCCAj0wHQYDVR0OBBYEFOCvezXDnxiz0ZAFZaQHA4UpWp18MB8GA1UdIwQY
MBaAFMZYP1jHEQrUzGCfT/t8qy+AyDWBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGxnX1dNY1JDdFRNWUo5UC0zeXJMNERJTllFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS84ZDBjYWUtZWMxMy00NWZiLTlhZmMt
M2Q1OTNlYmU1MjIwLzEvNEs5N05jT2ZHTFBSa0FWbHBBY0RoU2xhblh3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS84ZDBjYWUtZWMxMy00NWZiLTlhZmMtM2Q1OTNlYmU1MjIw
LzEveGxnX1dNY1JDdFRNWUo5UC0zeXJMNERJTllFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFcGCCsGAQUFBwEHAQH/BEgwRjA1BAIAATAvAwMAUMoDBAZU
MAADAwBUMTALAwMBWQoDBAdZCwADBAXVkaADBAXVu6ADBAXZDQAwDQQCAAIwBwMF
AyoECYAwDQYJKoZIhvcNAQELBQADggEBACei9xYdYAJgc7UIei9zWS+xGugi5WA3
BGC1IyGm+W+cvlChRqzTZHw0ChK/L/MeT8puHHcIu9XUriV/VrRrS4gA5KLFDxWT
Okrvh8SlilRja60h+o9x+aGTC07ffp8e0NqDtIaRfhFW94L0TLXSL+zujUHZ9xuB
EbHOgx6GEqOY9xktdv/7giuqWYZSe3hNQZoRpgGu8tT2FNVyot+ZUyiqirJf34iK
LPjufBs/Da04/PN5eni+Xqeo9I62CKA02+h6cA8jVlSF3i3oeybwuaxEj4RQz0zS
LLyHP6s9cAG1QAEhaReoyL9WtMxN+mOQd6hCP56tq0QZCGHdOCz8SC4=
-----END CERTIFICATE-----
Generated at Wed Oct 9 09:56:46 2024 by rpki-client on console-fra.rpki-client.org