Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/pI9Ldy6dLXDvBq3t4_S6kLWX1cA.roa
File: pI9Ldy6dLXDvBq3t4_S6kLWX1cA.roa (raw, json)
Hash identifier: 8FFakTc31bwYsIjSV8eMppUZ7xdqm1PR7MvfpKziqV8=
Subject key identifier: A4:8F:4B:77:2E:9D:2D:70:EF:06:AD:ED:E3:F4:BA:90:B5:97:D5:C0
Certificate issuer: /CN=11b69b59d19f2987e49f1852d60bb1777f80a301
Certificate serial: 01856ED4EC48501E59F4E0B2E9892271276A
Authority key identifier: 11:B6:9B:59:D1:9F:29:87:E4:9F:18:52:D6:0B:B1:77:7F:80:A3:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/pI9Ldy6dLXDvBq3t4_S6kLWX1cA.roa
Signing time: Sun 01 Jan 2023 19:35:25 +0000
ROA not before: Sun 01 Jan 2023 19:35:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61976
IP address blocks: 79.141.65.0/24 maxlen: 24
79.141.66.0/24 maxlen: 24
78.155.198.0/24 maxlen: 24
185.193.90.0/23 maxlen: 23
92.255.62.0/23 maxlen: 23
185.42.164.0/22 maxlen: 22
79.141.64.0/20 maxlen: 20
79.141.64.0/24 maxlen: 24
2a00:ab00:6000::/36 maxlen: 36
Validation: Failed, certificate revoked on Fri 24 Nov 2023 15:55:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:ec:48:50:1e:59:f4:e0:b2:e9:89:22:71:27:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11b69b59d19f2987e49f1852d60bb1777f80a301
Validity
Not Before: Jan 1 19:35:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a48f4b772e9d2d70ef06adede3f4ba90b597d5c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:2b:3c:01:91:bc:11:63:dc:31:53:21:15:0d:
f3:cf:7c:cd:de:c4:de:f3:53:0f:a9:cc:57:fd:62:
6a:fd:1b:ac:a6:be:37:6a:6d:b4:cb:0c:10:9e:54:
9d:e9:18:dc:13:4b:b3:ce:62:a4:cc:ef:c4:a7:24:
c1:01:11:af:4d:02:9b:d7:6e:96:6b:08:70:bf:36:
ba:ac:46:c8:5a:c9:7e:d7:20:a6:fc:1f:76:ad:a4:
dd:4b:d6:a5:b1:81:aa:f3:1d:27:c7:bb:da:2b:b7:
87:a9:a7:2e:23:cf:03:1c:bf:bf:a2:a1:bd:16:cc:
62:ff:f7:d0:89:a6:f3:c9:1b:e6:9e:98:6d:83:5b:
b7:67:f4:0e:bb:1a:bb:00:ad:fc:f0:46:04:92:79:
8e:f1:de:ed:1e:13:72:3f:8d:36:28:9a:69:61:70:
cb:72:a9:63:c7:c6:66:44:13:55:2f:b7:cb:2e:1e:
cf:d5:21:d0:26:62:14:0b:00:29:d1:81:85:04:90:
31:de:d2:f2:61:d7:37:e3:05:6f:40:bc:5d:df:f9:
9c:cb:9c:6c:49:89:32:7b:ea:7c:a3:29:5b:cf:0c:
fb:a0:12:08:b8:16:06:ce:3d:be:74:a4:ef:1a:d4:
04:85:73:e8:2b:fa:f1:85:d5:3a:13:63:e1:a1:84:
bb:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:8F:4B:77:2E:9D:2D:70:EF:06:AD:ED:E3:F4:BA:90:B5:97:D5:C0
X509v3 Authority Key Identifier:
keyid:11:B6:9B:59:D1:9F:29:87:E4:9F:18:52:D6:0B:B1:77:7F:80:A3:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/pI9Ldy6dLXDvBq3t4_S6kLWX1cA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.155.198.0/24
79.141.64.0/20
92.255.62.0/23
185.42.164.0/22
185.193.90.0/23
IPv6:
2a00:ab00:6000::/36
Signature Algorithm: sha256WithRSAEncryption
20:3b:d4:3e:93:2e:05:d0:44:1a:78:ea:15:84:8d:40:9b:b4:
fa:e2:8c:d6:4a:f6:95:1f:5d:ae:65:70:e4:d3:86:7b:53:6c:
e6:98:f9:40:8b:54:68:68:20:e9:b8:0c:ea:df:b1:78:59:7f:
a4:12:7a:d9:2e:f9:9c:cf:8f:06:11:7b:07:09:a4:67:12:9b:
e2:de:2b:04:f5:66:4a:ea:10:a0:7b:30:7b:ab:3f:7c:a3:be:
03:c8:f3:c4:17:1a:12:7b:c0:49:44:1a:7b:f7:70:5a:47:5a:
30:e8:59:78:9b:7a:19:c4:2b:c0:a5:9b:35:32:fe:90:5b:7d:
3f:3d:1f:58:3d:bb:34:29:c5:e0:ad:64:1d:7d:51:28:29:bb:
bd:dc:23:7f:12:27:3f:e5:9e:e5:22:7d:20:36:c8:7a:50:52:
9c:20:43:78:9d:63:05:b8:10:50:05:6d:d1:e7:e8:91:4e:40:
91:5c:8f:b8:c2:bd:a8:df:e1:fc:d6:65:6c:c3:41:51:d4:43:
fa:9e:51:0e:18:16:9b:31:d4:7f:ce:78:c0:29:cd:59:14:df:
84:41:a7:55:db:15:a7:9b:2d:84:0a:33:3a:14:1c:ce:de:2a:
12:c7:ba:d9:f5:5d:c0:e6:0f:75:67:78:1c:e3:9f:00:4d:01:
5a:ce:28:34
-----BEGIN CERTIFICATE-----
MIIFJTCCBA2gAwIBAgISAYVu1OxIUB5Z9OCy6YkicSdqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExYjY5YjU5ZDE5ZjI5ODdlNDlmMTg1MmQ2MGJiMTc3N2Y4
MGEzMDEwHhcNMjMwMTAxMTkzNTI1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNDhmNGI3NzJlOWQyZDcwZWYwNmFkZWRlM2Y0YmE5MGI1OTdkNWMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgys8AZG8EWPcMVMhFQ3zz3zN3sTe
81MPqcxX/WJq/Ruspr43am20ywwQnlSd6RjcE0uzzmKkzO/EpyTBARGvTQKb126W
awhwvza6rEbIWsl+1yCm/B92raTdS9alsYGq8x0nx7vaK7eHqacuI88DHL+/oqG9
Fsxi//fQiabzyRvmnphtg1u3Z/QOuxq7AK388EYEknmO8d7tHhNyP402KJppYXDL
cqljx8ZmRBNVL7fLLh7P1SHQJmIUCwAp0YGFBJAx3tLyYdc34wVvQLxd3/mcy5xs
SYkye+p8oylbzwz7oBIIuBYGzj2+dKTvGtQEhXPoK/rxhdU6E2PhoYS76QIDAQAB
o4ICMTCCAi0wHQYDVR0OBBYEFKSPS3cunS1w7wat7eP0upC1l9XAMB8GA1UdIwQY
MBaAFBG2m1nRnymH5J8YUtYLsXd/gKMBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWJhYldkR2ZLWWZrbnhoUzFndXhkMy1Bb3dFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC81ZWRmN2EtYWI5YS00NWU3LWE2MTIt
ZDE2OWMwODhiNDEyLzEvcEk5TGR5NmRMWER2QnEzdDRfUzZrTFdYMWNBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC81ZWRmN2EtYWI5YS00NWU3LWE2MTItZDE2OWMwODhiNDEy
LzEvRWJhYldkR2ZLWWZrbnhoUzFndXhkMy1Bb3dFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEcGCCsGAQUFBwEHAQH/BDgwNjAkBAIAATAeAwQATpvGAwQE
T41AAwQBXP8+AwQCuSqkAwQBucFaMA4EAgACMAgDBgQqAKsAYDANBgkqhkiG9w0B
AQsFAAOCAQEAIDvUPpMuBdBEGnjqFYSNQJu0+uKM1kr2lR9drmVw5NOGe1Ns5pj5
QItUaGgg6bgM6t+xeFl/pBJ62S75nM+PBhF7BwmkZxKb4t4rBPVmSuoQoHswe6s/
fKO+A8jzxBcaEnvASUQae/dwWkdaMOhZeJt6GcQrwKWbNTL+kFt9Pz0fWD27NCnF
4K1kHX1RKCm7vdwjfxInP+We5SJ9IDbIelBSnCBDeJ1jBbgQUAVt0efokU5AkVyP
uMK9qN/h/NZlbMNBUdRD+p5RDhgWmzHUf854wCnNWRTfhEGnVdsVp5sthAozOhQc
zt4qEse62fVdwOYPdWd4HOOfAE0BWs4oNA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:37 2024 by rpki-client on console-fra.rpki-client.org