Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/4fyP4anrFmsedfdAsw8LO_m0-qQ.roa
File: 4fyP4anrFmsedfdAsw8LO_m0-qQ.roa (raw, json)
Hash identifier: LrRaAPzKnrNG4eYx/PCiVLgfgGTa0gqSaS/eD2E5Ox4=
Subject key identifier: E1:FC:8F:E1:A9:EB:16:6B:1E:75:F7:40:B3:0F:0B:3B:F9:B4:FA:A4
Certificate issuer: /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Certificate serial: 01856F9DBF4942C6A5EEF584A800AD40C22E
Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/4fyP4anrFmsedfdAsw8LO_m0-qQ.roa
Signing time: Sun 01 Jan 2023 23:14:47 +0000
ROA not before: Sun 01 Jan 2023 23:14:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42193
IP address blocks: 213.14.241.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:30:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:9d:bf:49:42:c6:a5:ee:f5:84:a8:00:ad:40:c2:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Validity
Not Before: Jan 1 23:14:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e1fc8fe1a9eb166b1e75f740b30f0b3bf9b4faa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:18:c6:a9:f0:71:19:dc:a0:b9:02:8d:7f:70:
30:5b:58:20:db:f8:3e:8f:cf:f9:67:2e:34:5b:e4:
1d:f6:7a:09:3d:bc:cc:72:0b:6d:c3:b1:75:f0:7a:
85:c5:b5:e7:a0:96:ef:91:e5:77:e0:55:4e:12:b5:
d9:e0:cb:20:4f:89:af:6d:5a:3a:52:8c:96:70:b4:
42:85:37:fc:e6:fc:87:f9:61:80:18:18:7e:db:7f:
15:3a:7f:bb:99:aa:9c:5d:1d:e0:c7:2a:a3:71:cd:
5c:de:27:0c:c3:ee:76:0e:65:c4:e1:2a:82:c2:e3:
c7:81:2d:79:22:22:11:07:ad:ec:62:9b:b4:d9:86:
f5:b5:06:43:ab:99:a9:81:74:62:f5:aa:65:14:c9:
d6:eb:e7:1d:59:fb:d2:d6:c3:c9:eb:88:9d:dd:4c:
68:8c:1e:aa:9a:90:a5:08:0a:07:4c:17:6e:44:76:
c5:e4:66:01:f1:ad:ed:c8:53:3a:6b:bd:48:c0:37:
1f:9f:ce:94:d6:ca:e9:c2:a7:4a:97:df:2b:9a:ca:
83:f7:dd:38:40:2a:77:54:eb:83:78:89:44:89:1a:
e1:cf:ef:c2:3e:ed:8d:77:15:4f:01:4d:14:9e:e2:
a1:53:c7:e7:9f:58:7d:ee:6b:ba:1c:99:e8:5e:30:
4e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:FC:8F:E1:A9:EB:16:6B:1E:75:F7:40:B3:0F:0B:3B:F9:B4:FA:A4
X509v3 Authority Key Identifier:
keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/4fyP4anrFmsedfdAsw8LO_m0-qQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.14.241.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:c1:0f:8b:f7:70:73:85:10:68:3b:b2:40:35:e9:7d:4d:57:
d3:45:54:3b:5a:39:62:ef:3a:72:df:22:6a:b5:e4:1d:10:fd:
99:8c:ea:00:eb:a4:26:b1:01:de:03:bf:49:0e:08:9a:82:53:
e4:25:62:e8:f2:64:8e:cc:be:e1:0a:ea:df:6f:d1:78:e5:0e:
f3:4b:6b:0a:a6:50:20:e5:ad:57:2d:2a:b5:59:a5:35:87:af:
85:21:b7:f0:6b:52:01:17:87:38:65:49:16:ae:4a:ec:f9:cf:
03:da:80:a0:63:29:02:fb:36:27:1f:4e:3d:dc:e7:98:f9:aa:
66:12:df:d1:ae:31:82:dd:54:2d:29:53:b6:9f:41:56:b6:6c:
13:68:71:35:2e:65:ea:3f:9e:4d:64:c7:8d:9d:40:b7:62:9d:
f6:5f:25:cd:f8:d0:ba:b3:3a:41:fd:b7:f3:45:d6:09:a0:23:
32:4d:98:00:cb:09:8f:53:b8:a4:90:5c:de:0f:8b:93:56:71:
79:b4:13:ae:48:d7:e6:2e:b2:67:fe:b7:ed:62:a9:79:75:9c:
af:55:81:72:1f:cb:7a:9a:4d:b5:06:7e:53:4e:8a:3d:4c:47:
04:63:ca:b4:13:76:99:86:36:df:84:4d:cd:24:d8:99:95:d7:
05:b0:7a:0f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvnb9JQsal7vWEqACtQMIuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkNTljNDMyM2Y3NjdjZTRmZmM4NWRhYWQyMDhiOTBjMDRm
YmQzZTkwHhcNMjMwMTAxMjMxNDQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMWZjOGZlMWE5ZWIxNjZiMWU3NWY3NDBiMzBmMGIzYmY5YjRmYWE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxjGqfBxGdyguQKNf3AwW1gg2/g+
j8/5Zy40W+Qd9noJPbzMcgttw7F18HqFxbXnoJbvkeV34FVOErXZ4MsgT4mvbVo6
UoyWcLRChTf85vyH+WGAGBh+238VOn+7maqcXR3gxyqjcc1c3icMw+52DmXE4SqC
wuPHgS15IiIRB63sYpu02Yb1tQZDq5mpgXRi9aplFMnW6+cdWfvS1sPJ64id3Uxo
jB6qmpClCAoHTBduRHbF5GYB8a3tyFM6a71IwDcfn86U1srpwqdKl98rmsqD9904
QCp3VOuDeIlEiRrhz+/CPu2NdxVPAU0UnuKhU8fnn1h97mu6HJnoXjBOJQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOH8j+Gp6xZrHnX3QLMPCzv5tPqkMB8GA1UdIwQY
MBaAFI1ZxDI/dnzk/8hdqtIIuQwE+9PpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalZuRU1qOTJmT1RfeUYycTBnaTVEQVQ3MC1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9mMDllY2YtZTgwNS00MTU4LWIzMTUt
ZjJiZTlmNmM2NjRjLzEvNGZ5UDRhbnJGbXNlZGZkQXN3OExPX20wLXFRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni9mMDllY2YtZTgwNS00MTU4LWIzMTUtZjJiZTlmNmM2NjRj
LzEvalZuRU1qOTJmT1RfeUYycTBnaTVEQVQ3MC1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1Q7xMA0G
CSqGSIb3DQEBCwUAA4IBAQBNwQ+L93BzhRBoO7JANel9TVfTRVQ7Wjli7zpy3yJq
teQdEP2ZjOoA66QmsQHeA79JDgiaglPkJWLo8mSOzL7hCurfb9F45Q7zS2sKplAg
5a1XLSq1WaU1h6+FIbfwa1IBF4c4ZUkWrkrs+c8D2oCgYykC+zYnH0493OeY+apm
Et/RrjGC3VQtKVO2n0FWtmwTaHE1LmXqP55NZMeNnUC3Yp32XyXN+NC6szpB/bfz
RdYJoCMyTZgAywmPU7ikkFzeD4uTVnF5tBOuSNfmLrJn/rftYql5dZyvVYFyH8t6
mk21Bn5TToo9TEcEY8q0E3aZhjbfhE3NJNiZldcFsHoP
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:22 2024 by rpki-client on console-ams.rpki-client.org