Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/pjIUSCf68bMfD9vqiiQ-KEZVsuQ.roa
File: pjIUSCf68bMfD9vqiiQ-KEZVsuQ.roa (raw, json)
Hash identifier: RSupm3tL8e6sRoayH1JHoH8ctBxjNS8SVM07/tBdrBg=
Subject key identifier: A6:32:14:48:27:FA:F1:B3:1F:0F:DB:EA:8A:24:3E:28:46:55:B2:E4
Certificate issuer: /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Certificate serial: 01856F9DBD6B53C2658026ACFB14B1767944
Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/pjIUSCf68bMfD9vqiiQ-KEZVsuQ.roa
Signing time: Sun 01 Jan 2023 23:14:46 +0000
ROA not before: Sun 01 Jan 2023 23:14:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34418
IP address blocks: 176.236.215.0/24 maxlen: 24
85.153.154.0/24 maxlen: 24
85.153.153.0/24 maxlen: 24
212.252.211.0/24 maxlen: 24
212.252.208.0/23 maxlen: 23
212.252.210.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:30:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:9d:bd:6b:53:c2:65:80:26:ac:fb:14:b1:76:79:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Validity
Not Before: Jan 1 23:14:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a632144827faf1b31f0fdbea8a243e284655b2e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:56:80:5f:45:6d:ce:49:9d:88:49:0e:05:2a:
17:d1:f7:19:eb:13:95:fb:ba:98:69:c3:54:05:0b:
5f:25:59:06:7e:63:df:3d:2d:b2:58:08:57:2b:76:
4a:cf:a8:9a:68:ee:56:9d:37:de:a1:58:af:28:43:
d1:d0:ed:19:e3:ee:24:6c:31:e0:da:f9:d8:79:ef:
62:30:2b:bd:d3:10:f9:4a:71:4b:cf:d0:80:9e:ee:
da:2a:c8:a3:9d:e3:a0:72:56:40:f8:bd:98:28:2b:
6f:30:0a:89:c6:e2:c4:b3:89:ba:dd:db:1e:fd:c9:
67:4d:ee:e2:c8:f4:33:b1:49:c2:e1:ee:fc:ad:fa:
aa:16:b4:89:26:20:22:91:64:ab:49:35:99:0c:09:
b3:f6:03:85:7e:87:ab:6b:5a:93:9e:6c:a3:87:ca:
ed:bc:fb:89:36:d5:f5:9e:95:5f:f7:4c:f7:ac:0c:
be:b6:ad:42:4c:1d:04:c6:a3:7c:28:9f:1a:a0:1d:
a2:4a:c3:08:9d:a1:c6:51:ac:83:23:81:cd:56:9b:
ed:33:82:d1:2a:65:ff:a7:d4:a3:91:bc:d5:05:50:
ba:1e:d0:b2:d1:38:2c:c0:ce:a2:86:e9:5a:9d:df:
69:eb:10:54:c9:1f:98:c5:7f:1c:9b:f3:b0:a2:fa:
cf:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:32:14:48:27:FA:F1:B3:1F:0F:DB:EA:8A:24:3E:28:46:55:B2:E4
X509v3 Authority Key Identifier:
keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/pjIUSCf68bMfD9vqiiQ-KEZVsuQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.153.153.0-85.153.154.255
176.236.215.0/24
212.252.208.0/22
Signature Algorithm: sha256WithRSAEncryption
60:f8:da:86:48:fd:6c:7d:7d:ff:d5:b5:2c:94:36:75:f8:1a:
9b:fa:02:d5:1d:00:32:41:fc:fc:26:5b:ff:c4:56:fb:99:65:
6a:02:37:6c:f7:79:a3:8d:cb:0e:dd:2d:87:f1:c3:1a:12:e5:
b0:60:fa:5e:c9:21:f0:a8:2f:f2:d4:36:c7:c4:56:72:30:53:
6e:de:d1:3b:ea:d3:d7:ba:6f:63:d0:7d:54:12:57:20:7b:cd:
22:81:13:96:ea:60:19:85:2b:fc:66:71:5b:a5:29:e3:d3:89:
2b:0e:21:83:1a:0e:b2:fb:30:f5:62:79:5b:89:2d:2d:b2:02:
59:b7:57:c1:0a:5c:f8:f5:cf:24:c6:77:38:6e:c6:01:81:f7:
d2:32:b5:b1:74:e3:ac:f5:0e:d2:47:78:97:8d:82:30:50:49:
90:26:db:ec:ac:71:eb:85:b5:a5:d5:0a:14:13:ab:1f:2d:59:
4e:ea:24:cf:3d:40:81:4f:85:4d:83:90:d5:d5:d5:a6:ec:9d:
56:03:ea:b0:2b:45:31:af:0f:21:6c:4f:8c:69:25:86:69:e4:
9f:da:6a:74:75:30:52:0b:06:75:f1:23:2b:cf:c2:82:38:49:
b8:3d:92:ff:9e:f5:2e:d8:1d:69:bc:f2:c4:7a:ee:82:c1:4a:
35:a6:8a:fe
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAYVvnb1rU8JlgCas+xSxdnlEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkNTljNDMyM2Y3NjdjZTRmZmM4NWRhYWQyMDhiOTBjMDRm
YmQzZTkwHhcNMjMwMTAxMjMxNDQ2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNjMyMTQ0ODI3ZmFmMWIzMWYwZmRiZWE4YTI0M2UyODQ2NTViMmU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVaAX0VtzkmdiEkOBSoX0fcZ6xOV
+7qYacNUBQtfJVkGfmPfPS2yWAhXK3ZKz6iaaO5WnTfeoVivKEPR0O0Z4+4kbDHg
2vnYee9iMCu90xD5SnFLz9CAnu7aKsijneOgclZA+L2YKCtvMAqJxuLEs4m63dse
/clnTe7iyPQzsUnC4e78rfqqFrSJJiAikWSrSTWZDAmz9gOFfoera1qTnmyjh8rt
vPuJNtX1npVf90z3rAy+tq1CTB0ExqN8KJ8aoB2iSsMInaHGUayDI4HNVpvtM4LR
KmX/p9SjkbzVBVC6HtCy0TgswM6ihuland9p6xBUyR+YxX8cm/OwovrPWQIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFKYyFEgn+vGzHw/b6ookPihGVbLkMB8GA1UdIwQY
MBaAFI1ZxDI/dnzk/8hdqtIIuQwE+9PpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalZuRU1qOTJmT1RfeUYycTBnaTVEQVQ3MC1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9mMDllY2YtZTgwNS00MTU4LWIzMTUt
ZjJiZTlmNmM2NjRjLzEvcGpJVVNDZjY4Yk1mRDl2cWlpUS1LRVpWc3VRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni9mMDllY2YtZTgwNS00MTU4LWIzMTUtZjJiZTlmNmM2NjRj
LzEvalZuRU1qOTJmT1RfeUYycTBnaTVEQVQ3MC1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBABVmZkD
BABVmZoDBACw7NcDBALU/NAwDQYJKoZIhvcNAQELBQADggEBAGD42oZI/Wx9ff/V
tSyUNnX4Gpv6AtUdADJB/PwmW//EVvuZZWoCN2z3eaONyw7dLYfxwxoS5bBg+l7J
IfCoL/LUNsfEVnIwU27e0Tvq09e6b2PQfVQSVyB7zSKBE5bqYBmFK/xmcVulKePT
iSsOIYMaDrL7MPVieVuJLS2yAlm3V8EKXPj1zyTGdzhuxgGB99IytbF046z1DtJH
eJeNgjBQSZAm2+ysceuFtaXVChQTqx8tWU7qJM89QIFPhU2DkNXV1absnVYD6rAr
RTGvDyFsT4xpJYZp5J/aanR1MFILBnXxIyvPwoI4Sbg9kv+e9S7YHWm88sR67oLB
SjWmiv4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:16 2024 by rpki-client on console-fra.rpki-client.org