Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/_u5hCxkxPuTbJa7iyMymRFEWQxY.roa
File: _u5hCxkxPuTbJa7iyMymRFEWQxY.roa (raw, json)
Hash identifier: Xpj15cmmZDiCZbSOiLuKW6aOP7WvUN8xPjuImTWrrUs=
Subject key identifier: FE:EE:61:0B:19:31:3E:E4:DB:25:AE:E2:C8:CC:A6:44:51:16:43:16
Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial: 018B948304DAFD65E1D4D0A0A4578CB56E89
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/_u5hCxkxPuTbJa7iyMymRFEWQxY.roa
Signing time: Fri 03 Nov 2023 09:28:16 +0000
ROA not before: Fri 03 Nov 2023 09:28:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212384
IP address blocks: 37.140.244.0/24 maxlen: 24
94.103.177.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:31:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:94:83:04:da:fd:65:e1:d4:d0:a0:a4:57:8c:b5:6e:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Validity
Not Before: Nov 3 09:28:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=feee610b19313ee4db25aee2c8cca64451164316
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:75:20:c1:20:50:51:b4:c4:34:7b:e9:2c:8c:
c8:9a:b9:e5:8e:a4:37:bb:17:53:ef:f6:aa:e4:7f:
c2:58:0e:54:be:3d:14:42:6d:77:2a:08:15:ad:3e:
a1:b0:37:3d:33:d2:4f:60:ed:b7:1d:c0:3e:cb:15:
e2:54:4e:f1:7f:46:1d:c7:ea:4a:a3:44:d9:94:b3:
93:04:8b:cb:02:d0:ee:7f:3a:31:3a:a5:45:3e:38:
88:f6:f2:da:83:fd:df:7f:e7:93:dd:36:e8:2e:91:
4b:55:f1:e1:06:7e:a1:5e:c9:64:92:cd:c8:aa:01:
bd:4d:92:9a:f7:58:27:e4:5f:3f:3c:03:3a:46:4c:
ac:98:47:88:b6:a3:8e:2c:b4:aa:a1:58:a1:8e:53:
12:b7:43:37:79:c5:c7:ba:61:3a:60:d1:73:ec:f7:
65:ef:36:a6:d9:4b:fa:9a:a8:ca:1f:ac:c2:21:ea:
ba:2a:e2:f8:93:7e:46:77:e3:e4:0d:bd:1a:6a:d8:
97:a7:c4:e6:ef:79:f7:fb:a3:4e:e7:5c:d6:e4:56:
54:9c:74:cb:42:62:b3:c2:e6:28:ed:f9:5a:c5:c8:
75:4a:69:f3:5b:28:2f:c7:69:df:80:a2:67:4a:70:
55:29:3b:90:18:51:c5:8c:0c:3b:f1:98:86:ff:d6:
6f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:EE:61:0B:19:31:3E:E4:DB:25:AE:E2:C8:CC:A6:44:51:16:43:16
X509v3 Authority Key Identifier:
keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/_u5hCxkxPuTbJa7iyMymRFEWQxY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.140.244.0/24
94.103.177.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:c3:07:d3:dc:dd:9b:f4:e9:eb:87:6d:6f:e2:fe:ad:1d:67:
30:2e:d9:8b:34:9c:74:bc:29:eb:4e:95:e8:19:f1:56:69:bf:
c9:ee:eb:b7:99:e8:38:b5:92:13:4a:15:31:13:4f:48:f1:22:
1b:cb:dd:ed:4c:e1:fb:5c:57:4f:e5:72:dd:37:89:7e:65:4e:
49:e7:bb:82:57:1d:78:4e:79:0e:f1:f5:88:35:67:2b:4a:bd:
89:ae:a3:d3:f9:21:a8:cd:46:58:85:0f:03:b1:11:67:97:04:
01:cf:17:b0:7b:da:98:20:c6:fa:b1:b5:90:a6:c8:fa:a0:33:
c8:90:58:87:d6:60:38:a4:2b:19:18:51:83:7a:67:43:bf:d5:
10:04:2c:bc:5e:80:a1:92:ca:3a:67:c4:27:0f:9e:b4:7a:69:
b7:cc:37:cf:10:82:6c:22:b9:21:f3:4e:4b:b9:65:17:27:43:
98:18:86:37:7e:64:7d:cc:28:d6:2b:f4:5b:75:2a:af:0e:fd:
cf:a6:98:6a:ad:1c:82:29:f1:28:8f:09:f2:ea:15:10:f2:d5:
1a:e5:66:65:86:b8:57:2c:e1:6a:63:57:2b:34:83:29:f7:15:
66:4c:2a:f0:de:bd:62:52:2c:32:94:0e:69:dc:85:72:5b:9c:
d8:2c:ce:60
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYuUgwTa/WXh1NCgpFeMtW6JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2Yjk4ZjgzY2NiZGE3YzE5ZjAwNDE1MWM5OGI1N2M1OWQy
NjhmNTQwHhcNMjMxMTAzMDkyODE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZWVlNjEwYjE5MzEzZWU0ZGIyNWFlZTJjOGNjYTY0NDUxMTY0MzE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzHUgwSBQUbTENHvpLIzImrnljqQ3
uxdT7/aq5H/CWA5Uvj0UQm13KggVrT6hsDc9M9JPYO23HcA+yxXiVE7xf0Ydx+pK
o0TZlLOTBIvLAtDufzoxOqVFPjiI9vLag/3ff+eT3TboLpFLVfHhBn6hXslkks3I
qgG9TZKa91gn5F8/PAM6RkysmEeItqOOLLSqoVihjlMSt0M3ecXHumE6YNFz7Pdl
7zam2Uv6mqjKH6zCIeq6KuL4k35Gd+PkDb0aatiXp8Tm73n3+6NO51zW5FZUnHTL
QmKzwuYo7flaxch1SmnzWygvx2nfgKJnSnBVKTuQGFHFjAw78ZiG/9ZvpwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFP7uYQsZMT7k2yWu4sjMpkRRFkMWMB8GA1UdIwQY
MBaAFFa5j4PMvafBnwBBUcmLV8WdJo9UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnJtUGc4eTlwOEdmQUVGUnlZdFh4WjBtajFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My84Y2I5MzUtNzFhMy00ZGIzLTlmM2Yt
N2FhN2ZjMzU5NjU1LzEvX3U1aEN4a3hQdVRiSmE3aXlNeW1SRkVXUXhZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My84Y2I5MzUtNzFhMy00ZGIzLTlmM2YtN2FhN2ZjMzU5NjU1
LzEvVnJtUGc4eTlwOEdmQUVGUnlZdFh4WjBtajFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAJYz0AwQA
XmexMA0GCSqGSIb3DQEBCwUAA4IBAQCqwwfT3N2b9Onrh21v4v6tHWcwLtmLNJx0
vCnrTpXoGfFWab/J7uu3meg4tZITShUxE09I8SIby93tTOH7XFdP5XLdN4l+ZU5J
57uCVx14TnkO8fWINWcrSr2JrqPT+SGozUZYhQ8DsRFnlwQBzxewe9qYIMb6sbWQ
psj6oDPIkFiH1mA4pCsZGFGDemdDv9UQBCy8XoChkso6Z8QnD560emm3zDfPEIJs
Irkh805LuWUXJ0OYGIY3fmR9zCjWK/RbdSqvDv3PpphqrRyCKfEojwny6hUQ8tUa
5WZlhrhXLOFqY1crNIMp9xVmTCrw3r1iUiwylA5p3IVyW5zYLM5g
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:04 2024 by rpki-client on console-ams.rpki-client.org