Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/RhfCgR2fgcrX1ttggbBrBr4SL08.roa
File: RhfCgR2fgcrX1ttggbBrBr4SL08.roa (raw, json)
Hash identifier: HPkddzeakGdmw/olB36rdkw2fxbQFeMiyPxDDSiGDOk=
Subject key identifier: 46:17:C2:81:1D:9F:81:CA:D7:D6:DB:60:81:B0:6B:06:BE:12:2F:4F
Certificate issuer: /CN=2f117ada3cb9515a6d8a6dcc15f2b0b1a7d9be1d
Certificate serial: 018BF63838DD31C2E0EB391DAEFEC2B7EDBF
Authority key identifier: 2F:11:7A:DA:3C:B9:51:5A:6D:8A:6D:CC:15:F2:B0:B1:A7:D9:BE:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LxF62jy5UVptim3MFfKwsafZvh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/RhfCgR2fgcrX1ttggbBrBr4SL08.roa
Signing time: Wed 22 Nov 2023 08:49:21 +0000
ROA not before: Wed 22 Nov 2023 08:49:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 32787
IP address blocks: 141.93.16.0/24 maxlen: 24
141.93.16.0/22 maxlen: 24
141.93.17.0/24 maxlen: 24
141.93.12.0/24 maxlen: 24
141.93.18.0/24 maxlen: 24
141.93.19.0/24 maxlen: 24
141.93.25.0/24 maxlen: 24
141.93.32.0/24 maxlen: 24
141.93.35.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 12 Dec 2023 11:55:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f6:38:38:dd:31:c2:e0:eb:39:1d:ae:fe:c2:b7:ed:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f117ada3cb9515a6d8a6dcc15f2b0b1a7d9be1d
Validity
Not Before: Nov 22 08:49:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4617c2811d9f81cad7d6db6081b06b06be122f4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:13:e4:24:ec:b3:b0:bb:82:60:56:b4:d0:56:
1d:b9:29:80:9c:81:8c:de:d6:3d:16:93:50:35:46:
a2:ff:94:b3:d2:45:0f:18:2a:f5:7f:7b:99:68:50:
e6:1d:84:f7:dd:17:69:e8:f2:65:15:a2:82:22:e6:
8e:32:9e:76:4d:ca:d9:be:22:1b:77:c0:ab:a3:bc:
48:33:25:53:40:97:03:40:74:0e:06:7f:54:79:f0:
a4:78:5c:0f:4b:29:a3:37:44:9c:c0:3f:61:2c:b5:
6c:cd:e2:ff:a8:b7:8f:d7:ed:4d:66:9f:98:57:27:
5b:16:37:b3:84:8c:69:68:20:be:59:22:d8:51:31:
f8:f3:c5:1f:de:e8:ce:72:07:f4:6d:50:06:0b:49:
c6:47:9e:e4:a4:62:62:fe:e4:b3:85:be:37:06:13:
4a:73:ea:bd:8c:0b:17:79:86:dd:02:bb:e7:85:5f:
ed:28:3f:a3:a7:b3:20:b0:e8:9e:a8:b9:c0:4a:bf:
c4:33:5f:60:0b:74:90:b8:2d:5f:3e:df:0e:41:0d:
27:ad:17:4f:2c:06:4e:13:1a:7c:d0:13:2f:97:19:
64:f6:1a:26:0a:9d:27:41:df:93:0a:7c:2f:1c:c1:
db:cf:3c:f2:e8:5c:62:58:73:24:5f:4b:97:b9:9f:
6f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:17:C2:81:1D:9F:81:CA:D7:D6:DB:60:81:B0:6B:06:BE:12:2F:4F
X509v3 Authority Key Identifier:
keyid:2F:11:7A:DA:3C:B9:51:5A:6D:8A:6D:CC:15:F2:B0:B1:A7:D9:BE:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxF62jy5UVptim3MFfKwsafZvh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/RhfCgR2fgcrX1ttggbBrBr4SL08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/LxF62jy5UVptim3MFfKwsafZvh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.93.12.0/24
141.93.16.0/22
141.93.25.0/24
141.93.32.0/24
141.93.35.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:77:5a:26:c8:6d:07:af:5f:6a:31:1b:d5:ba:7b:fd:d0:fd:
bc:a0:9c:ba:a9:7e:92:30:d8:c2:48:c5:e1:f0:cc:69:31:a2:
14:eb:f0:bc:63:d4:7b:40:c8:28:52:8a:1f:c3:9c:de:e7:07:
17:fa:9e:4a:e1:60:5a:25:64:1f:78:cb:30:92:4e:44:8e:d9:
d3:f7:80:37:59:31:be:49:fb:ac:95:9a:99:5a:59:99:36:7e:
1c:6d:39:81:cd:07:28:5e:d8:bb:95:b5:53:d8:fd:2e:b3:78:
62:f7:e7:a9:d5:0a:23:76:6e:cb:30:e6:dc:a8:21:41:a2:23:
7f:18:e3:46:46:82:67:52:ab:c6:3d:c5:4d:03:be:eb:95:6d:
9f:b4:e4:78:d1:7f:24:47:cb:ca:e9:79:a4:5d:6c:fd:5e:27:
19:d3:f8:07:22:29:ce:52:88:5c:9c:0b:70:03:1e:6f:c7:e4:
01:96:96:89:70:ab:9c:a8:f2:a6:2c:df:70:c6:61:37:57:b0:
ea:7a:79:d4:5d:e2:d4:2c:10:7d:7b:09:01:57:62:7e:52:41:
b9:3a:a1:51:ab:68:ee:a4:90:af:ea:6e:d8:6d:3e:7f:08:72:
13:af:c9:0f:cc:72:a7:5a:20:6b:ff:e2:44:df:dd:11:74:29:
e4:d5:27:26
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYv2ODjdMcLg6zkdrv7Ct+2/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmMTE3YWRhM2NiOTUxNWE2ZDhhNmRjYzE1ZjJiMGIxYTdk
OWJlMWQwHhcNMjMxMTIyMDg0OTIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NjE3YzI4MTFkOWY4MWNhZDdkNmRiNjA4MWIwNmIwNmJlMTIyZjRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBPkJOyzsLuCYFa00FYduSmAnIGM
3tY9FpNQNUai/5Sz0kUPGCr1f3uZaFDmHYT33Rdp6PJlFaKCIuaOMp52TcrZviIb
d8Cro7xIMyVTQJcDQHQOBn9UefCkeFwPSymjN0ScwD9hLLVszeL/qLeP1+1NZp+Y
VydbFjezhIxpaCC+WSLYUTH488Uf3ujOcgf0bVAGC0nGR57kpGJi/uSzhb43BhNK
c+q9jAsXeYbdArvnhV/tKD+jp7MgsOieqLnASr/EM19gC3SQuC1fPt8OQQ0nrRdP
LAZOExp80BMvlxlk9homCp0nQd+TCnwvHMHbzzzy6FxiWHMkX0uXuZ9vyQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFEYXwoEdn4HK19bbYIGwawa+Ei9PMB8GA1UdIwQY
MBaAFC8Reto8uVFabYptzBXysLGn2b4dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHhGNjJqeTVVVnB0aW0zTUZmS3dzYWZadmgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9lZmY0NGQtMjRmZC00Mzg0LTk1MDct
N2EwMzRkMTcwYjg1LzEvUmhmQ2dSMmZnY3JYMXR0Z2diQnJCcjRTTDA4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS9lZmY0NGQtMjRmZC00Mzg0LTk1MDctN2EwMzRkMTcwYjg1
LzEvTHhGNjJqeTVVVnB0aW0zTUZmS3dzYWZadmgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAjV0MAwQC
jV0QAwQAjV0ZAwQAjV0gAwQAjV0jMA0GCSqGSIb3DQEBCwUAA4IBAQCed1omyG0H
r19qMRvVunv90P28oJy6qX6SMNjCSMXh8MxpMaIU6/C8Y9R7QMgoUoofw5ze5wcX
+p5K4WBaJWQfeMswkk5EjtnT94A3WTG+SfuslZqZWlmZNn4cbTmBzQcoXti7lbVT
2P0us3hi9+ep1Qojdm7LMObcqCFBoiN/GONGRoJnUqvGPcVNA77rlW2ftOR40X8k
R8vK6XmkXWz9XicZ0/gHIinOUohcnAtwAx5vx+QBlpaJcKucqPKmLN9wxmE3V7Dq
ennUXeLULBB9ewkBV2J+UkG5OqFRq2jupJCv6m7YbT5/CHITr8kPzHKnWiBr/+JE
390RdCnk1Scm
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:47 2024 by rpki-client on console-ams.rpki-client.org