Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/1bbWm4915Bw03ZM2VA1VjA5XPpE.roa
File: 1bbWm4915Bw03ZM2VA1VjA5XPpE.roa (raw, json)
Hash identifier: 4l5o4/SfCjuK+jxBscim/96FqdI+JuEZYMIMts88KGY=
Subject key identifier: D5:B6:D6:9B:8F:75:E4:1C:34:DD:93:36:54:0D:55:8C:0E:57:3E:91
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018CD876B82C14BD2BA7D3065F37B3D2BC58
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/1bbWm4915Bw03ZM2VA1VjA5XPpE.roa
Signing time: Fri 05 Jan 2024 07:11:48 +0000
ROA not before: Fri 05 Jan 2024 07:11:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44901
IP address blocks: 188.64.142.0/24 maxlen: 24
79.110.227.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 03 Feb 2024 10:39:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:d8:76:b8:2c:14:bd:2b:a7:d3:06:5f:37:b3:d2:bc:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 5 07:11:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d5b6d69b8f75e41c34dd9336540d558c0e573e91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:16:21:14:cd:f1:a1:f9:f3:9f:74:41:d3:a9:
f0:7f:2e:10:76:1c:8a:4b:47:04:5c:f1:a6:cd:28:
ee:ad:3e:c4:34:dd:8e:ce:80:c6:78:7c:14:85:75:
1d:fe:63:b1:86:23:6b:1d:83:91:11:77:26:5b:e1:
21:86:6b:d9:20:47:09:44:ed:7c:be:65:37:e0:be:
b4:99:11:67:46:40:52:da:2c:66:bb:a4:f6:6e:84:
4f:30:70:15:56:eb:ba:33:e7:84:f7:f6:f7:10:cf:
bc:b8:7d:83:ed:b5:c4:9b:33:d4:94:ce:32:74:9c:
ef:32:56:6e:2b:90:7d:8f:34:a2:bf:23:3b:cd:c1:
28:e0:47:16:b5:d1:b1:72:70:45:ed:68:60:6d:a0:
9c:ed:cd:f0:77:ba:ee:2b:7e:56:de:e6:0e:e5:c9:
57:76:1f:b9:04:57:04:24:ee:0c:0a:1c:7b:29:0e:
1d:af:98:8b:8c:3e:c2:19:fb:3c:04:ac:9b:aa:ea:
4d:4c:66:3a:b0:a0:61:28:a0:69:49:17:3e:bd:00:
6b:38:53:c2:2a:e2:27:b3:e7:65:66:11:fa:2a:e3:
a6:36:5f:94:2e:a3:41:a8:6b:66:46:11:c0:ab:50:
be:4e:71:22:1a:36:bd:7a:d2:b2:04:a7:48:b8:e6:
d1:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:B6:D6:9B:8F:75:E4:1C:34:DD:93:36:54:0D:55:8C:0E:57:3E:91
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/1bbWm4915Bw03ZM2VA1VjA5XPpE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.110.227.0/24
188.64.142.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:36:74:90:e3:59:25:9c:9b:53:31:08:84:af:7c:10:b6:74:
85:fe:ad:24:90:fe:00:7d:57:c7:98:6b:cf:54:07:78:c6:fc:
15:be:fc:3e:9f:ce:d8:9e:09:88:7a:8c:4d:d1:57:82:8c:74:
b0:17:ad:ed:92:e0:de:b0:63:d9:53:0b:51:3a:6c:09:c3:5e:
9a:30:48:34:93:e8:88:b0:af:9a:11:37:3f:a4:d9:c7:73:65:
e8:cf:a7:25:00:2a:ac:ee:2f:ba:00:27:88:12:54:96:9a:ec:
cf:fd:8d:e5:a8:d7:93:5d:74:bd:33:e6:a6:71:44:9d:64:d9:
48:4a:d7:b1:3c:56:c0:c2:41:36:fe:5a:cb:f3:7e:20:3a:aa:
1a:41:9a:03:04:d5:00:c1:69:fa:cf:0d:4a:c3:d7:a4:13:c2:
7f:91:c1:a5:d6:5d:3d:f3:7b:99:23:9a:67:50:d9:78:32:02:
56:02:89:a9:69:55:97:e5:cc:38:34:8c:fd:03:37:1a:6a:a2:
ea:45:84:bc:56:a2:f0:3b:99:a0:68:0f:30:80:db:1e:9b:3d:
9c:60:51:0a:22:db:5b:a8:a0:40:a1:80:a6:c0:a7:42:19:22:
d2:2c:c7:5a:d3:5c:86:45:17:a8:e4:35:27:7b:a3:38:e8:11:
e7:5b:6a:a2
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzYdrgsFL0rp9MGXzez0rxYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjQwMTA1MDcxMTQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNWI2ZDY5YjhmNzVlNDFjMzRkZDkzMzY1NDBkNTU4YzBlNTczZTkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBYhFM3xofnzn3RB06nwfy4QdhyK
S0cEXPGmzSjurT7ENN2OzoDGeHwUhXUd/mOxhiNrHYOREXcmW+EhhmvZIEcJRO18
vmU34L60mRFnRkBS2ixmu6T2boRPMHAVVuu6M+eE9/b3EM+8uH2D7bXEmzPUlM4y
dJzvMlZuK5B9jzSivyM7zcEo4EcWtdGxcnBF7WhgbaCc7c3wd7ruK35W3uYO5clX
dh+5BFcEJO4MChx7KQ4dr5iLjD7CGfs8BKybqupNTGY6sKBhKKBpSRc+vQBrOFPC
KuIns+dlZhH6KuOmNl+ULqNBqGtmRhHAq1C+TnEiGja9etKyBKdIuObRlQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFNW21puPdeQcNN2TNlQNVYwOVz6RMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvMWJiV200OTE1QncwM1pNMlZBMVZqQTVYUHBFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAT27jAwQA
vECOMA0GCSqGSIb3DQEBCwUAA4IBAQA9NnSQ41klnJtTMQiEr3wQtnSF/q0kkP4A
fVfHmGvPVAd4xvwVvvw+n87YngmIeoxN0VeCjHSwF63tkuDesGPZUwtROmwJw16a
MEg0k+iIsK+aETc/pNnHc2Xoz6clACqs7i+6ACeIElSWmuzP/Y3lqNeTXXS9M+am
cUSdZNlIStexPFbAwkE2/lrL834gOqoaQZoDBNUAwWn6zw1Kw9ekE8J/kcGl1l09
83uZI5pnUNl4MgJWAompaVWX5cw4NIz9AzcaaqLqRYS8VqLwO5mgaA8wgNsemz2c
YFEKIttbqKBAoYCmwKdCGSLSLMda01yGRReo5DUne6M46BHnW2qi
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:06 2024 by rpki-client on console-fra.rpki-client.org