Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/Izxu8HFDmBEW9TNh2-j1A0-WcdE.roa
File: Izxu8HFDmBEW9TNh2-j1A0-WcdE.roa (raw, json)
Hash identifier: 2LP7or0CRbv2ugHJ33hnnhs4FOV0/9AMuXm83PCbbTQ=
Subject key identifier: 23:3C:6E:F0:71:43:98:11:16:F5:33:61:DB:E8:F5:03:4F:96:71:D1
Certificate issuer: /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Certificate serial: 018CC2DB540D7D182CC1CE4FB925F27131A3
Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/Izxu8HFDmBEW9TNh2-j1A0-WcdE.roa
Signing time: Mon 01 Jan 2024 02:30:02 +0000
ROA not before: Mon 01 Jan 2024 02:30:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 194.35.38.0/23 maxlen: 23
95.100.147.0/24 maxlen: 24
93.191.173.0/24 maxlen: 24
2a02:2370:fe::/47 maxlen: 48
2a0b:35c0::/29 maxlen: 31
Validation: Failed, certificate revoked on Thu 07 Mar 2024 13:07:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:54:0d:7d:18:2c:c1:ce:4f:b9:25:f2:71:31:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Validity
Not Before: Jan 1 02:30:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=233c6ef07143981116f53361dbe8f5034f9671d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:de:cf:01:c5:52:10:69:b2:8b:b8:21:0b:24:
4c:e4:ef:ea:c8:34:1d:c3:46:69:14:be:6e:ec:63:
2a:d8:d4:2f:7d:ed:c3:8c:aa:6e:b4:24:da:f3:ab:
fe:39:f0:18:82:e7:2b:cf:e2:61:a8:57:3f:4b:30:
eb:87:66:f0:ff:db:b2:68:52:7d:4e:b7:32:cc:6f:
c1:4d:a5:47:5a:54:01:ad:ae:85:3b:73:ea:22:78:
7a:c4:c2:b1:79:a3:e2:bc:c7:d6:ba:2e:2e:a2:1c:
69:79:e6:97:25:c3:59:9d:37:50:21:d6:b8:be:2f:
57:8f:4b:7f:c2:e7:ab:7b:a3:8e:9e:b0:1b:6a:d7:
d4:2b:15:34:d3:31:1a:58:c9:db:c3:34:d4:c2:52:
e1:75:21:46:67:8c:d4:46:75:80:ae:26:1c:4a:54:
2a:4f:dc:f4:df:3f:f4:3d:0f:ba:fb:a2:2a:94:3c:
e7:b7:e0:cc:5e:f2:85:87:1b:9c:0b:81:30:42:46:
02:59:7a:6b:8e:d1:5e:d7:19:1a:38:cf:68:b1:c2:
4e:67:97:a6:72:0b:24:39:e4:c5:11:13:0d:5b:40:
dd:e0:fa:b2:0a:dd:02:5e:f3:fc:47:d9:d9:4d:6b:
2e:da:58:f8:84:7a:32:c7:b7:78:0e:b4:3b:d8:ea:
a8:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:3C:6E:F0:71:43:98:11:16:F5:33:61:DB:E8:F5:03:4F:96:71:D1
X509v3 Authority Key Identifier:
keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/Izxu8HFDmBEW9TNh2-j1A0-WcdE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.191.173.0/24
95.100.147.0/24
194.35.38.0/23
IPv6:
2a02:2370:fe::/47
2a0b:35c0::/29
Signature Algorithm: sha256WithRSAEncryption
17:77:aa:90:d3:f5:0e:76:7a:92:74:50:26:a2:4c:c4:76:67:
53:f3:be:cd:26:b9:81:67:92:7d:44:43:fe:57:70:ee:e7:2a:
69:0a:43:2f:55:a0:93:96:6d:ba:04:c9:0b:b6:6f:2d:b2:98:
2e:d0:82:b5:f7:fb:0d:76:a1:85:3f:c7:e2:10:f1:6b:e7:7d:
d4:36:78:46:ef:25:e2:ec:04:57:b0:e2:d2:d3:76:6b:d5:11:
40:2e:b6:48:57:03:ce:d7:4d:b2:36:86:49:91:d4:26:1c:02:
91:30:df:f1:f5:1f:7f:e2:66:7d:fe:25:11:a4:c8:af:a0:31:
44:01:cb:c3:32:55:74:4c:76:f4:ed:c8:f0:5e:bb:e1:d7:aa:
15:6b:70:d2:e5:19:51:c3:15:fd:9b:49:c7:09:83:a1:d5:e5:
d5:69:5a:3f:4f:63:af:39:5c:50:11:3d:89:81:5b:03:e7:92:
49:8d:88:fb:26:ab:8c:39:97:8b:2d:86:c3:2c:a5:a4:0e:65:
d9:6a:8c:74:26:07:51:23:4e:ae:69:a8:87:4d:02:ad:fc:4a:
dd:6a:b3:2a:96:9e:f0:18:52:2e:61:63:85:eb:1e:41:2f:62:
41:13:92:8a:c9:bf:f2:7f:4b:d9:5f:6b:9d:d5:85:08:f9:04:
35:32:eb:ae
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAYzC21QNfRgswc5PuSXycTGjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiNWZjYmJlYTQ4OTM3YTQ0MmJhYmRiMzMwMjEzMmM0YmM5
YmQ2YWEwHhcNMjQwMTAxMDIzMDAyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMzNjNmVmMDcxNDM5ODExMTZmNTMzNjFkYmU4ZjUwMzRmOTY3MWQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoN7PAcVSEGmyi7ghCyRM5O/qyDQd
w0ZpFL5u7GMq2NQvfe3DjKputCTa86v+OfAYgucrz+JhqFc/SzDrh2bw/9uyaFJ9
TrcyzG/BTaVHWlQBra6FO3PqInh6xMKxeaPivMfWui4uohxpeeaXJcNZnTdQIda4
vi9Xj0t/wuere6OOnrAbatfUKxU00zEaWMnbwzTUwlLhdSFGZ4zURnWAriYcSlQq
T9z03z/0PQ+6+6IqlDznt+DMXvKFhxucC4EwQkYCWXprjtFe1xkaOM9oscJOZ5em
cgskOeTFERMNW0Dd4PqyCt0CXvP8R9nZTWsu2lj4hHoyx7d4DrQ72OqoOQIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFCM8bvBxQ5gRFvUzYdvo9QNPlnHRMB8GA1UdIwQY
MBaAFGtfy76kiTekQrq9szAhMsS8m9aqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTFfTHZxU0pONlJDdXIyek1DRXl4THliMXFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8wNDIxODgtZGZiNi00YWQ0LTkxYTQt
ODhkMWNhYzllNGYxLzEvSXp4dThIRkRtQkVXOVROaDItajFBMC1XY2RFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC8wNDIxODgtZGZiNi00YWQ0LTkxYTQtODhkMWNhYzllNGYx
LzEvYTFfTHZxU0pONlJDdXIyek1DRXl4THliMXFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAYBAIAATASAwQAXb+tAwQA
X2STAwQBwiMmMBYEAgACMBADBwEqAiNwAP4DBQMqCzXAMA0GCSqGSIb3DQEBCwUA
A4IBAQAXd6qQ0/UOdnqSdFAmokzEdmdT877NJrmBZ5J9REP+V3Du5yppCkMvVaCT
lm26BMkLtm8tspgu0IK19/sNdqGFP8fiEPFr533UNnhG7yXi7ARXsOLS03Zr1RFA
LrZIVwPO102yNoZJkdQmHAKRMN/x9R9/4mZ9/iURpMivoDFEAcvDMlV0THb07cjw
Xrvh16oVa3DS5RlRwxX9m0nHCYOh1eXVaVo/T2OvOVxQET2JgVsD55JJjYj7JquM
OZeLLYbDLKWkDmXZaox0JgdRI06uaaiHTQKt/ErdarMqlp7wGFIuYWOF6x5BL2JB
E5KKyb/yf0vZX2ud1YUI+QQ1Muuu
-----END CERTIFICATE-----
Generated at Thu Mar 7 17:08:11 2024 by rpki-client on console-ams.rpki-client.org