Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/gHlleHl42VGpF9ZhqTH5Nh5OKz0.roa
File: gHlleHl42VGpF9ZhqTH5Nh5OKz0.roa (raw, json)
Hash identifier: QMUVUoL3waMrbXbiWiYBxhKEctGWogD0TrUU6DrY8Ao=
Subject key identifier: 80:79:65:78:79:78:D9:51:A9:17:D6:61:A9:31:F9:36:1E:4E:2B:3D
Certificate issuer: /CN=c44db8b0983acf97a3255152c2ea592adae7735b
Certificate serial: 01856D53E9045309EEB067D493C96BC3E8D8
Authority key identifier: C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/gHlleHl42VGpF9ZhqTH5Nh5OKz0.roa
Signing time: Sun 01 Jan 2023 12:34:53 +0000
ROA not before: Sun 01 Jan 2023 12:34:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207990
IP address blocks: 188.212.136.0/21 maxlen: 32
93.113.52.0/23 maxlen: 32
185.66.136.0/22 maxlen: 32
94.139.224.0/20 maxlen: 32
176.223.182.0/23 maxlen: 32
Validation: Failed, certificate revoked on Tue 17 Jan 2023 07:36:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:53:e9:04:53:09:ee:b0:67:d4:93:c9:6b:c3:e8:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c44db8b0983acf97a3255152c2ea592adae7735b
Validity
Not Before: Jan 1 12:34:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=807965787978d951a917d661a931f9361e4e2b3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:15:3a:be:81:f7:47:51:91:23:d8:e3:12:c2:
83:f0:98:b6:f2:23:51:4f:03:83:f2:ae:6a:de:20:
4c:b6:7c:74:1c:79:a0:63:b9:e3:1a:02:20:30:80:
9e:c5:0b:cb:7f:51:be:15:57:5d:05:52:16:f2:f9:
b8:7a:00:07:8a:19:07:e6:34:ba:1b:ed:9b:be:93:
79:12:fc:4b:e6:fc:62:d6:57:33:94:ed:c8:80:96:
fe:c2:38:d9:df:84:1e:af:c2:9f:9c:92:6c:55:f9:
44:d9:29:8a:ab:4d:39:b3:0b:6f:23:e6:da:71:7a:
70:e0:e7:01:00:cb:d6:6e:1d:14:24:45:ac:18:26:
72:00:06:cd:f2:d9:a6:6b:d8:84:33:fe:de:95:05:
62:f5:26:df:c3:a3:9c:5c:4c:ba:ac:87:44:ff:82:
b9:2d:35:30:f7:ed:35:a4:f0:04:54:e8:0b:52:a9:
7a:50:04:0e:33:4d:8f:c2:f3:15:3d:fb:0b:f3:ae:
36:7b:3a:2a:a3:6e:df:be:57:10:27:fb:5d:79:07:
eb:c1:f1:c4:6c:91:6c:76:1a:bc:cf:99:03:f6:6d:
34:1e:bd:55:55:73:47:6b:fe:98:7b:ef:57:e6:ba:
a0:79:aa:b2:0f:5d:5c:bb:83:f8:78:5a:d9:4a:92:
58:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:79:65:78:79:78:D9:51:A9:17:D6:61:A9:31:F9:36:1E:4E:2B:3D
X509v3 Authority Key Identifier:
keyid:C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/gHlleHl42VGpF9ZhqTH5Nh5OKz0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.113.52.0/23
94.139.224.0/20
176.223.182.0/23
185.66.136.0/22
188.212.136.0/21
Signature Algorithm: sha256WithRSAEncryption
2d:1e:21:fe:76:a2:3b:41:0a:8f:57:49:38:22:be:29:62:e9:
74:9a:74:71:78:b4:e4:df:6e:cf:fb:10:c3:7b:dd:62:65:dc:
38:da:00:57:07:b0:bd:ae:02:3a:79:a4:47:1e:01:b7:17:d2:
26:12:6c:0e:8e:c1:0e:ad:b6:22:b4:2d:39:e3:fe:eb:f6:cc:
53:35:aa:7a:cd:09:d7:48:f3:1e:be:8b:23:c5:13:d9:b0:8b:
65:05:c3:a5:19:0c:1e:f3:3d:d1:d9:32:c8:08:37:e5:69:51:
5b:da:fa:1c:18:a6:28:2a:98:96:58:d5:4b:6e:03:12:ac:72:
44:1f:95:46:09:f7:a3:41:e4:3a:d3:40:23:07:dc:a0:ad:c3:
d6:7a:1e:8a:7c:b1:85:d7:3f:4b:16:47:aa:0e:a8:f9:70:71:
3a:e7:f3:6a:28:a3:cf:7a:d1:28:7d:55:2a:42:a6:2d:71:1f:
39:ab:06:6a:7e:09:7e:f8:e0:52:b5:c8:13:ae:f0:7f:07:81:
db:26:d8:b8:20:93:2a:53:8f:5d:54:38:6a:84:06:24:f5:29:
af:06:a7:cb:59:ca:d2:e0:e1:e0:cc:60:a9:bb:90:e2:5c:28:
ff:1d:26:c5:43:55:cd:26:dd:8c:c4:ec:9e:13:14:48:32:7e:
b4:12:da:18
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYVtU+kEUwnusGfUk8lrw+jYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0NGRiOGIwOTgzYWNmOTdhMzI1NTE1MmMyZWE1OTJhZGFl
NzczNWIwHhcNMjMwMTAxMTIzNDUzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MDc5NjU3ODc5NzhkOTUxYTkxN2Q2NjFhOTMxZjkzNjFlNGUyYjNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5xU6voH3R1GRI9jjEsKD8Ji28iNR
TwOD8q5q3iBMtnx0HHmgY7njGgIgMICexQvLf1G+FVddBVIW8vm4egAHihkH5jS6
G+2bvpN5EvxL5vxi1lczlO3IgJb+wjjZ34Qer8KfnJJsVflE2SmKq005swtvI+ba
cXpw4OcBAMvWbh0UJEWsGCZyAAbN8tmma9iEM/7elQVi9Sbfw6OcXEy6rIdE/4K5
LTUw9+01pPAEVOgLUql6UAQOM02PwvMVPfsL8642ezoqo27fvlcQJ/tdeQfrwfHE
bJFsdhq8z5kD9m00Hr1VVXNHa/6Ye+9X5rqgeaqyD11cu4P4eFrZSpJYcwIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFIB5ZXh5eNlRqRfWYakx+TYeTis9MB8GA1UdIwQY
MBaAFMRNuLCYOs+XoyVRUsLqWSra53NbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEUyNHNKZzZ6NWVqSlZGU3d1cFpLdHJuYzFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC80Mzc4OTctYWY1OC00OTU5LThlNzYt
ZWVkZDk0ZWMxMjhjLzEvZ0hsbGVIbDQyVkdwRjlaaHFUSDVOaDVPS3owLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC80Mzc4OTctYWY1OC00OTU5LThlNzYtZWVkZDk0ZWMxMjhj
LzEveEUyNHNKZzZ6NWVqSlZGU3d1cFpLdHJuYzFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQBXXE0AwQE
XovgAwQBsN+2AwQCuUKIAwQDvNSIMA0GCSqGSIb3DQEBCwUAA4IBAQAtHiH+dqI7
QQqPV0k4Ir4pYul0mnRxeLTk327P+xDDe91iZdw42gBXB7C9rgI6eaRHHgG3F9Im
EmwOjsEOrbYitC054/7r9sxTNap6zQnXSPMevosjxRPZsItlBcOlGQwe8z3R2TLI
CDflaVFb2vocGKYoKpiWWNVLbgMSrHJEH5VGCfejQeQ600AjB9ygrcPWeh6KfLGF
1z9LFkeqDqj5cHE65/NqKKPPetEofVUqQqYtcR85qwZqfgl++OBStcgTrvB/B4Hb
Jti4IJMqU49dVDhqhAYk9SmvBqfLWcrS4OHgzGCpu5DiXCj/HSbFQ1XNJt2MxOye
ExRIMn60EtoY
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:47 2024 by rpki-client on console-fra.rpki-client.org