Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/GRsT7PMXk9rPXlvdN2Vgo3vvUUs.roa
File: GRsT7PMXk9rPXlvdN2Vgo3vvUUs.roa (raw, json)
Hash identifier: WRrBJG0nBr4FzarficuCGdrqqYNbIBChhGLjTWuKZ2k=
Subject key identifier: 19:1B:13:EC:F3:17:93:DA:CF:5E:5B:DD:37:65:60:A3:7B:EF:51:4B
Certificate issuer: /CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Certificate serial: 01856F94CBB5CB462DBCDF0C752B3B220043
Authority key identifier: 5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/GRsT7PMXk9rPXlvdN2Vgo3vvUUs.roa
Signing time: Sun 01 Jan 2023 23:05:00 +0000
ROA not before: Sun 01 Jan 2023 23:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210583
IP address blocks: 79.132.216.0/24 maxlen: 24
78.158.167.0/24 maxlen: 24
86.109.61.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:94:cb:b5:cb:46:2d:bc:df:0c:75:2b:3b:22:00:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Validity
Not Before: Jan 1 23:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=191b13ecf31793dacf5e5bdd376560a37bef514b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:0b:ae:80:34:ab:79:ce:6b:60:0f:8a:a0:cf:
d1:3d:4b:d5:99:5f:0d:f9:f4:54:78:67:0f:c8:84:
fa:8d:48:40:fe:8d:f6:bf:dd:52:d9:38:8c:66:8b:
e7:b5:eb:70:31:ec:d7:16:eb:08:f0:3f:a9:3a:ac:
7d:a7:09:8d:27:c5:fa:db:65:18:81:8b:4f:6e:b5:
09:5a:9a:26:de:4c:ba:a5:33:37:aa:24:f8:df:1b:
be:b3:e9:57:09:ba:5a:56:a3:f2:d0:fd:b8:fc:02:
e6:29:fc:4a:55:5c:9a:6b:d8:e3:73:ac:cf:79:9b:
79:9b:73:8a:87:57:4c:93:c0:fc:9d:a7:48:97:e8:
22:00:05:d5:43:e7:da:de:30:93:db:e4:3e:fd:51:
fe:55:69:f6:84:80:36:ea:6e:d4:c3:c5:de:09:f6:
64:e4:34:61:ef:0d:28:18:4b:56:8f:78:51:85:92:
19:21:80:62:02:fe:71:8a:3b:5e:f5:20:d1:99:82:
39:e6:86:8b:41:4d:78:54:30:e9:a7:0d:98:6f:b2:
a1:9f:4c:09:96:e7:cb:da:c0:1b:0e:3a:f9:fa:c9:
38:c6:24:76:15:bc:a0:b9:64:c7:1b:4e:ca:a7:ae:
bf:93:1d:04:ed:22:31:15:fc:bd:89:62:60:c1:ea:
4a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:1B:13:EC:F3:17:93:DA:CF:5E:5B:DD:37:65:60:A3:7B:EF:51:4B
X509v3 Authority Key Identifier:
keyid:5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/GRsT7PMXk9rPXlvdN2Vgo3vvUUs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.158.167.0/24
79.132.216.0/24
86.109.61.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:ab:e9:df:80:0f:cc:fc:15:93:c5:7b:04:f6:1d:8c:43:13:
18:2f:71:80:e0:fa:21:35:08:52:25:25:c9:a6:f5:33:1c:6b:
7f:a0:ad:e1:7c:b8:40:7f:12:f7:47:d1:7a:7f:c8:c4:36:04:
8f:7c:86:0f:7b:c2:3f:ea:21:f4:fa:ae:d4:9c:f9:66:68:3f:
5c:bb:1f:b8:5d:06:ac:2d:06:d0:7d:d7:f7:49:28:86:b3:36:
49:58:2a:7d:f3:6a:6d:4d:72:1c:34:c3:c5:70:d6:b6:9b:23:
ba:0d:be:ea:9f:ab:35:ca:d7:15:e3:81:10:79:91:9b:3b:2c:
4f:cc:bb:24:c2:b8:3f:92:a8:fa:2d:12:dd:4b:3f:67:9b:d4:
7e:1b:96:9c:98:43:48:74:8f:c3:42:80:6a:9b:3b:e4:d4:90:
db:41:ac:69:d0:69:d8:ee:06:a6:9b:e7:97:01:78:60:09:13:
14:a0:a0:4a:31:f6:33:fe:d4:26:ce:24:e1:0a:e7:06:16:e2:
4a:d1:47:8a:a6:a5:b7:d1:c4:43:53:15:4b:28:8f:9c:ce:0c:
f1:50:0d:f7:d6:7b:32:a7:02:15:25:55:fa:67:57:a3:45:97:
07:8a:ec:a6:7e:a3:82:52:aa:4a:c6:63:de:64:6f:67:cc:cf:
05:ca:71:80
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYVvlMu1y0YtvN8MdSs7IgBDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViNjk4YzRiNjEyYWZlZTJjYmIxY2RkNTA5ZTRmMDI0NmZi
YjgwZTEwHhcNMjMwMTAxMjMwNTAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOTFiMTNlY2YzMTc5M2RhY2Y1ZTViZGQzNzY1NjBhMzdiZWY1MTRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQuugDSrec5rYA+KoM/RPUvVmV8N
+fRUeGcPyIT6jUhA/o32v91S2TiMZovntetwMezXFusI8D+pOqx9pwmNJ8X622UY
gYtPbrUJWpom3ky6pTM3qiT43xu+s+lXCbpaVqPy0P24/ALmKfxKVVyaa9jjc6zP
eZt5m3OKh1dMk8D8nadIl+giAAXVQ+fa3jCT2+Q+/VH+VWn2hIA26m7Uw8XeCfZk
5DRh7w0oGEtWj3hRhZIZIYBiAv5xijte9SDRmYI55oaLQU14VDDppw2Yb7Khn0wJ
lufL2sAbDjr5+sk4xiR2FbyguWTHG07Kp66/kx0E7SIxFfy9iWJgwepKOQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFBkbE+zzF5Paz15b3TdlYKN771FLMB8GA1UdIwQY
MBaAFFtpjEthKv7iy7HN1Qnk8CRvu4DhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzJtTVMyRXFfdUxMc2MzVkNlVHdKRy03Z09FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9jMTZmNTUtYjQ0ZC00MGMzLTlkYWMt
Y2MyZmFmZTNhOGI0LzEvR1JzVDdQTVhrOXJQWGx2ZE4yVmdvM3Z2VVVzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS9jMTZmNTUtYjQ0ZC00MGMzLTlkYWMtY2MyZmFmZTNhOGI0
LzEvVzJtTVMyRXFfdUxMc2MzVkNlVHdKRy03Z09FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQATp6nAwQA
T4TYAwQAVm09MA0GCSqGSIb3DQEBCwUAA4IBAQBtq+nfgA/M/BWTxXsE9h2MQxMY
L3GA4PohNQhSJSXJpvUzHGt/oK3hfLhAfxL3R9F6f8jENgSPfIYPe8I/6iH0+q7U
nPlmaD9cux+4XQasLQbQfdf3SSiGszZJWCp982ptTXIcNMPFcNa2myO6Db7qn6s1
ytcV44EQeZGbOyxPzLskwrg/kqj6LRLdSz9nm9R+G5acmENIdI/DQoBqmzvk1JDb
Qaxp0GnY7gamm+eXAXhgCRMUoKBKMfYz/tQmziThCucGFuJK0UeKpqW30cRDUxVL
KI+czgzxUA331nsypwIVJVX6Z1ejRZcHiuymfqOCUqpKxmPeZG9nzM8FynGA
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:06 2024 by rpki-client on console-ams.rpki-client.org