Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/6f99d2-ad05-4cfc-9a5e-9cbedcec86d6/1/v92ar-v2xsnvB-YwSRE0GEwHDYc.roa
File: v92ar-v2xsnvB-YwSRE0GEwHDYc.roa (raw, json)
Hash identifier: 0bA83xWx1CC7QsBO4UK76CbQwbdUpCD1D0hkyUudh5s=
Subject key identifier: BF:DD:9A:AF:EB:F6:C6:C9:EF:07:E6:30:49:11:34:18:4C:07:0D:87
Certificate issuer: /CN=b9e2dc2340c5309b63eba23cfbe7eed11b74af47
Certificate serial: 01856F2FFD401AEAB1019A4B3053428E6AD3
Authority key identifier: B9:E2:DC:23:40:C5:30:9B:63:EB:A2:3C:FB:E7:EE:D1:1B:74:AF:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ueLcI0DFMJtj66I8--fu0Rt0r0c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/6f99d2-ad05-4cfc-9a5e-9cbedcec86d6/1/v92ar-v2xsnvB-YwSRE0GEwHDYc.roa
Signing time: Sun 01 Jan 2023 21:14:54 +0000
ROA not before: Sun 01 Jan 2023 21:14:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21454
IP address blocks: 80.252.224.0/20 maxlen: 24
185.173.237.0/24 maxlen: 24
185.173.236.0/22 maxlen: 24
188.214.198.0/24 maxlen: 24
2a10:5340::/29 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:2f:fd:40:1a:ea:b1:01:9a:4b:30:53:42:8e:6a:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9e2dc2340c5309b63eba23cfbe7eed11b74af47
Validity
Not Before: Jan 1 21:14:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bfdd9aafebf6c6c9ef07e630491134184c070d87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:29:b9:07:c2:07:6d:a5:18:c6:72:07:90:7d:
c9:a3:05:5c:e6:41:1a:6f:ab:20:37:90:5a:21:8f:
69:8e:91:85:46:87:8d:18:22:73:be:7f:48:28:78:
e3:3c:09:11:c9:4c:47:36:c6:93:3c:70:78:3e:95:
41:3c:74:e3:e9:8a:ff:a3:d8:79:46:a1:72:74:b2:
4a:70:a1:e4:90:06:ed:48:75:d5:b9:91:e7:d0:fc:
1d:cb:eb:6d:4e:a1:b3:da:14:0b:79:51:e0:07:65:
33:28:62:27:d9:be:72:01:ea:7f:90:39:5e:55:e9:
2d:8f:d6:5d:83:05:91:5c:b5:ad:3d:1f:87:01:17:
69:1b:9b:2b:51:fd:3b:ec:10:39:ef:b2:e8:db:63:
b7:25:03:ed:bc:32:eb:2d:b6:3b:9a:bb:d1:28:0d:
3c:d8:21:7d:60:37:5d:e8:2c:1d:c3:02:07:c9:6d:
55:f3:34:35:4c:88:68:fa:69:5e:86:a5:e6:ba:57:
0c:b0:42:a9:6c:41:59:6e:ef:0c:70:18:85:db:3d:
e8:fc:f0:d4:50:48:38:e1:9a:00:9c:b1:96:67:38:
75:35:a2:9e:75:47:d1:dc:94:60:62:aa:77:24:77:
35:34:fa:4d:2d:47:27:ad:d9:d1:71:92:25:b9:63:
38:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:DD:9A:AF:EB:F6:C6:C9:EF:07:E6:30:49:11:34:18:4C:07:0D:87
X509v3 Authority Key Identifier:
keyid:B9:E2:DC:23:40:C5:30:9B:63:EB:A2:3C:FB:E7:EE:D1:1B:74:AF:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ueLcI0DFMJtj66I8--fu0Rt0r0c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/6f99d2-ad05-4cfc-9a5e-9cbedcec86d6/1/v92ar-v2xsnvB-YwSRE0GEwHDYc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/6f99d2-ad05-4cfc-9a5e-9cbedcec86d6/1/ueLcI0DFMJtj66I8--fu0Rt0r0c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.252.224.0/20
185.173.236.0/22
188.214.198.0/24
IPv6:
2a10:5340::/29
Signature Algorithm: sha256WithRSAEncryption
99:64:20:ab:0c:c9:36:24:b8:2e:a5:27:47:ae:60:0f:93:12:
b8:fd:85:aa:2a:9e:9f:84:e6:25:02:a0:9b:27:af:01:b7:ed:
0e:26:0a:0a:34:3b:92:a7:5d:2e:58:af:32:62:cf:21:dd:97:
c2:22:05:9d:1c:cc:b1:4d:3d:b1:ae:83:00:56:ca:09:30:fc:
88:47:6b:38:0d:ed:a4:99:65:07:d2:96:1e:62:2a:b1:7e:27:
89:20:51:7a:71:e0:a9:a7:e8:c9:b8:a8:f1:7a:a7:13:4b:2f:
c2:b4:fd:2d:29:1e:33:b9:6c:68:fd:e7:ca:28:0e:95:00:3a:
cf:e5:0e:4b:1d:47:63:ef:3f:b5:0e:b1:aa:e0:04:b0:64:4b:
a1:93:3e:b1:64:5e:e7:22:93:c6:e8:e5:26:38:6a:b1:b5:26:
e8:17:31:64:8e:8e:f3:36:5c:90:4f:7b:19:d6:ce:5a:eb:30:
77:21:5b:71:f0:be:9e:68:91:60:7c:cc:dc:5b:6f:cd:cf:49:
87:cd:b4:df:53:db:a5:41:ff:c0:f2:43:58:e4:d7:2d:44:8a:
c8:b8:ac:e1:b3:7e:e6:33:a5:e1:eb:1a:5f:a8:74:19:94:ce:
1e:32:25:2c:95:07:f1:c5:03:55:1c:2f:a1:54:c5:75:82:d1:
48:75:99:ca
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAYVvL/1AGuqxAZpLMFNCjmrTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5ZTJkYzIzNDBjNTMwOWI2M2ViYTIzY2ZiZTdlZWQxMWI3
NGFmNDcwHhcNMjMwMTAxMjExNDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZmRkOWFhZmViZjZjNmM5ZWYwN2U2MzA0OTExMzQxODRjMDcwZDg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsym5B8IHbaUYxnIHkH3JowVc5kEa
b6sgN5BaIY9pjpGFRoeNGCJzvn9IKHjjPAkRyUxHNsaTPHB4PpVBPHTj6Yr/o9h5
RqFydLJKcKHkkAbtSHXVuZHn0Pwdy+ttTqGz2hQLeVHgB2UzKGIn2b5yAep/kDle
Vektj9ZdgwWRXLWtPR+HARdpG5srUf077BA577Lo22O3JQPtvDLrLbY7mrvRKA08
2CF9YDdd6CwdwwIHyW1V8zQ1TIho+mlehqXmulcMsEKpbEFZbu8McBiF2z3o/PDU
UEg44ZoAnLGWZzh1NaKedUfR3JRgYqp3JHc1NPpNLUcnrdnRcZIluWM42QIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFL/dmq/r9sbJ7wfmMEkRNBhMBw2HMB8GA1UdIwQY
MBaAFLni3CNAxTCbY+uiPPvn7tEbdK9HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWVMY0kwREZNSnRqNjZJOC0tZnUwUnQwcjBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny82Zjk5ZDItYWQwNS00Y2ZjLTlhNWUt
OWNiZWRjZWM4NmQ2LzEvdjkyYXItdjJ4c252Qi1Zd1NSRTBHRXdIRFljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny82Zjk5ZDItYWQwNS00Y2ZjLTlhNWUtOWNiZWRjZWM4NmQ2
LzEvdWVMY0kwREZNSnRqNjZJOC0tZnUwUnQwcjBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQEUPzgAwQC
ua3sAwQAvNbGMA0EAgACMAcDBQMqEFNAMA0GCSqGSIb3DQEBCwUAA4IBAQCZZCCr
DMk2JLgupSdHrmAPkxK4/YWqKp6fhOYlAqCbJ68Bt+0OJgoKNDuSp10uWK8yYs8h
3ZfCIgWdHMyxTT2xroMAVsoJMPyIR2s4De2kmWUH0pYeYiqxfieJIFF6ceCpp+jJ
uKjxeqcTSy/CtP0tKR4zuWxo/efKKA6VADrP5Q5LHUdj7z+1DrGq4ASwZEuhkz6x
ZF7nIpPG6OUmOGqxtSboFzFkjo7zNlyQT3sZ1s5a6zB3IVtx8L6eaJFgfMzcW2/N
z0mHzbTfU9ulQf/A8kNY5NctRIrIuKzhs37mM6Xh6xpfqHQZlM4eMiUslQfxxQNV
HC+hVMV1gtFIdZnK
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:28 2024 by rpki-client on console-fra.rpki-client.org