Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/4_O4IJwWeT1O3omRQMvp-rnvRaE.roa
File: 4_O4IJwWeT1O3omRQMvp-rnvRaE.roa (raw, json)
Hash identifier: Kf1Hx9XbRyLJJw8q39gaIAdroP45DsS/XmkML6b8SPE=
Subject key identifier: E3:F3:B8:20:9C:16:79:3D:4E:DE:89:91:40:CB:E9:FA:B9:EF:45:A1
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018EAD4A0A070515643E78F2293317AD6C58
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/4_O4IJwWeT1O3omRQMvp-rnvRaE.roa
Signing time: Fri 05 Apr 2024 08:04:54 +0000
ROA not before: Fri 05 Apr 2024 08:04:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215727
IP address blocks: 89.213.107.0/24 maxlen: 24
89.213.112.0/24 maxlen: 24
89.213.113.0/24 maxlen: 24
89.213.114.0/24 maxlen: 24
89.213.116.0/24 maxlen: 24
89.213.121.0/24 maxlen: 24
89.213.157.0/24 maxlen: 24
89.213.223.0/24 maxlen: 24
89.213.227.0/24 maxlen: 24
213.130.137.0/24 maxlen: 24
213.130.152.0/24 maxlen: 24
213.130.153.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 07 Apr 2024 11:14:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:ad:4a:0a:07:05:15:64:3e:78:f2:29:33:17:ad:6c:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Apr 5 08:04:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e3f3b8209c16793d4ede899140cbe9fab9ef45a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:cd:d0:68:8c:2f:51:0e:c3:c6:ca:e5:a5:03:
b7:85:c7:4c:3b:34:5a:4a:a2:5e:23:41:0c:1d:50:
4b:04:ef:37:26:77:ec:18:9f:c8:0a:05:2f:a9:99:
5a:2c:b3:a8:cd:08:36:ea:84:b4:2b:01:b2:24:39:
bc:8d:20:66:2f:38:6c:99:50:d9:73:48:c5:15:29:
6a:e3:2c:95:1a:b2:ed:d9:90:cd:9f:c2:52:62:09:
e4:c7:cd:10:95:95:d4:7d:7d:38:f4:6c:8c:6b:f3:
11:d2:33:61:2f:f4:5c:70:47:7c:ae:85:d3:1a:49:
82:d4:8a:8d:d0:fd:86:9a:2b:9e:de:90:be:96:a3:
b5:4b:d0:4c:e5:63:6c:3f:1d:67:13:91:b6:35:5f:
52:9d:51:1e:b1:d3:ec:e1:16:1d:8e:5d:30:f0:1e:
ff:3a:b9:78:37:61:84:c6:ee:2b:59:11:04:59:0d:
64:d7:6a:68:b1:b0:55:23:d8:a0:77:c1:25:e1:c2:
8e:50:8e:a7:6d:cd:16:22:83:f1:69:1a:2c:96:a1:
25:37:18:6f:e0:55:73:7c:66:4d:a9:f6:34:6d:e5:
5d:62:3b:7d:a7:25:7b:6b:da:ff:cb:95:87:de:35:
a6:9b:a3:6b:be:1b:0a:7a:53:d6:3e:0c:63:e9:fd:
38:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:F3:B8:20:9C:16:79:3D:4E:DE:89:91:40:CB:E9:FA:B9:EF:45:A1
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/4_O4IJwWeT1O3omRQMvp-rnvRaE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.107.0/24
89.213.112.0-89.213.114.255
89.213.116.0/24
89.213.121.0/24
89.213.157.0/24
89.213.223.0/24
89.213.227.0/24
213.130.137.0/24
213.130.152.0/23
Signature Algorithm: sha256WithRSAEncryption
09:e4:2b:d9:75:0f:3e:83:1f:23:0b:37:5f:31:1d:1a:72:26:
c2:21:f2:36:4b:d3:50:48:cb:6e:e0:b0:87:83:c2:ed:8b:8a:
ab:81:c8:32:60:5d:b4:1f:94:2c:ca:2b:35:e5:b9:1b:7c:c0:
c4:ec:ad:cb:ae:b2:b9:0c:a0:f6:d8:83:38:5b:46:4b:ea:f9:
28:5d:2f:59:c2:58:0a:69:af:6f:0b:f2:69:45:c2:b4:df:03:
b3:7e:1a:b8:6b:c8:10:46:9f:6e:64:f7:31:00:75:97:56:9e:
31:f0:25:99:7a:cb:af:77:cf:e6:79:89:e4:f6:dc:dc:d7:52:
75:28:d8:af:82:1b:7c:3f:ae:3b:68:51:e1:a3:95:df:7a:23:
55:cb:40:7b:0e:6b:8f:48:70:da:48:ba:c5:42:eb:2e:f5:64:
53:3f:22:ee:0d:75:13:22:5a:19:48:5f:1a:f7:e4:db:a0:3b:
d8:f1:d9:93:30:7d:49:e4:e1:24:d2:a3:c5:9e:64:93:69:6d:
8d:6c:00:19:49:fb:83:3d:11:3d:a8:c0:91:16:1f:8d:90:96:
26:4c:3a:86:bd:07:3a:27:04:40:7d:a1:46:fd:de:25:1c:43:
ed:e5:8b:96:78:ae:33:0d:0b:f9:b8:97:0a:39:bb:c1:ab:37:
22:13:77:36
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgISAY6tSgoHBRVkPnjyKTMXrWxYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjQwNDA1MDgwNDU0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlM2YzYjgyMDljMTY3OTNkNGVkZTg5OTE0MGNiZTlmYWI5ZWY0NWExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl83QaIwvUQ7DxsrlpQO3hcdMOzRa
SqJeI0EMHVBLBO83JnfsGJ/ICgUvqZlaLLOozQg26oS0KwGyJDm8jSBmLzhsmVDZ
c0jFFSlq4yyVGrLt2ZDNn8JSYgnkx80QlZXUfX049GyMa/MR0jNhL/RccEd8roXT
GkmC1IqN0P2Gmiue3pC+lqO1S9BM5WNsPx1nE5G2NV9SnVEesdPs4RYdjl0w8B7/
Orl4N2GExu4rWREEWQ1k12posbBVI9igd8El4cKOUI6nbc0WIoPxaRoslqElNxhv
4FVzfGZNqfY0beVdYjt9pyV7a9r/y5WH3jWmm6NrvhsKelPWPgxj6f04iQIDAQAB
o4ICQTCCAj0wHQYDVR0OBBYEFOPzuCCcFnk9Tt6JkUDL6fq570WhMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvNF9PNElKd1dlVDFPM29tUlFNdnAtcm52UmFFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFcGCCsGAQUFBwEHAQH/BEgwRjBEBAIAATA+AwQAWdVrMAwD
BARZ1XADBABZ1XIDBABZ1XQDBABZ1XkDBABZ1Z0DBABZ1d8DBABZ1eMDBADVgokD
BAHVgpgwDQYJKoZIhvcNAQELBQADggEBAAnkK9l1Dz6DHyMLN18xHRpyJsIh8jZL
01BIy27gsIeDwu2LiquByDJgXbQflCzKKzXluRt8wMTsrcuusrkMoPbYgzhbRkvq
+ShdL1nCWAppr28L8mlFwrTfA7N+GrhryBBGn25k9zEAdZdWnjHwJZl6y693z+Z5
ieT23NzXUnUo2K+CG3w/rjtoUeGjld96I1XLQHsOa49IcNpIusVC6y71ZFM/Iu4N
dRMiWhlIXxr35NugO9jx2ZMwfUnk4STSo8WeZJNpbY1sABlJ+4M9ET2owJEWH42Q
liZMOoa9BzonBEB9oUb93iUcQ+3li5Z4rjMNC/m4lwo5u8GrNyITdzY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:13 2024 by rpki-client on console-fra.rpki-client.org