Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/rVk2Fjb2I3UPDps7kgvmTpUI5x8.roa
File: rVk2Fjb2I3UPDps7kgvmTpUI5x8.roa (raw, json)
Hash identifier: X1VLJFvAuUdwBhW1jcDw76iFbrKqO+Tf3+JVHpI+nhA=
Subject key identifier: AD:59:36:16:36:F6:23:75:0F:0E:9B:3B:92:0B:E6:4E:95:08:E7:1F
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018B915173F8A4AE7D3CA1F0697F4E5C5C76
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/rVk2Fjb2I3UPDps7kgvmTpUI5x8.roa
Signing time: Thu 02 Nov 2023 18:35:16 +0000
ROA not before: Thu 02 Nov 2023 18:35:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206509
IP address blocks: 89.213.192.0/24 maxlen: 24
81.168.0.0/17 maxlen: 17
109.176.0.0/16 maxlen: 16
81.5.128.0/18 maxlen: 18
82.152.0.0/15 maxlen: 15
213.152.32.0/19 maxlen: 19
Validation: Failed, certificate revoked on Mon 04 Dec 2023 12:46:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:91:51:73:f8:a4:ae:7d:3c:a1:f0:69:7f:4e:5c:5c:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Nov 2 18:35:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ad59361636f623750f0e9b3b920be64e9508e71f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:db:57:2b:53:cd:e5:1c:2a:0b:7c:2a:84:ee:
43:e6:39:0a:4d:0f:cb:0d:f6:5c:5a:f3:f3:d2:db:
cb:4b:25:fc:27:cb:2b:df:21:69:32:68:ad:5e:74:
22:ea:bc:ef:26:a5:bd:42:bc:75:b9:25:bb:90:de:
16:60:47:3b:0e:db:d0:01:bb:40:37:7b:5c:d9:25:
b2:e7:2e:92:f6:87:99:a3:79:72:9f:a7:f6:95:7a:
34:71:3f:37:0c:5e:0e:70:b0:c6:9d:a2:75:36:75:
50:73:e4:df:04:cb:28:58:f2:8d:c2:bb:c9:ac:85:
22:e2:7b:ca:1c:20:5f:55:d2:fa:62:ba:60:28:6e:
21:da:22:8e:24:7a:8a:65:d0:7e:1a:51:45:8d:e9:
2d:d1:f0:bf:d7:5a:89:46:62:d7:a2:0c:69:29:61:
eb:56:a5:cf:ba:39:84:ac:34:8c:67:2b:34:8a:a7:
67:ed:f9:f5:95:d4:77:15:84:75:e6:28:fe:5c:ae:
23:ef:d9:c3:e2:bf:00:fd:29:6d:e2:94:65:35:60:
77:60:65:5f:00:95:b2:9e:5f:6b:76:fb:1f:bf:b0:
d0:7b:1e:3c:e3:5f:e0:98:6b:87:da:67:0d:8c:32:
21:29:a7:df:15:aa:1a:9a:50:67:c0:e6:0e:42:6c:
39:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:59:36:16:36:F6:23:75:0F:0E:9B:3B:92:0B:E6:4E:95:08:E7:1F
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/rVk2Fjb2I3UPDps7kgvmTpUI5x8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.5.128.0/18
81.168.0.0/17
82.152.0.0/15
89.213.192.0/24
109.176.0.0/16
213.152.32.0/19
Signature Algorithm: sha256WithRSAEncryption
98:ef:3a:b5:d0:2e:95:b0:fb:a3:3c:1a:d6:f7:78:1a:e5:2c:
2a:d5:2d:75:81:bd:95:70:1f:92:1b:f9:18:c2:80:48:e5:13:
07:90:f5:72:c6:a1:97:a3:f6:c0:7a:63:85:75:b7:16:b9:59:
73:26:bb:5a:ec:fd:af:4b:ee:59:40:fc:2b:0d:04:57:d1:cb:
95:87:05:f0:d1:34:e4:b5:bc:93:26:49:b2:00:6a:d6:09:f4:
fc:1d:7d:2d:1f:ad:48:24:8b:15:85:bd:eb:1c:ad:00:64:c8:
b8:f8:1c:38:a3:c6:20:cd:b7:42:0d:d1:df:b4:cd:07:a4:80:
27:f7:8a:49:45:29:08:44:1c:43:5e:9c:26:7e:29:47:01:a4:
f2:48:31:73:25:30:53:71:c8:33:1d:f5:80:b2:65:ea:d5:77:
e3:0e:4d:c9:fa:9c:d9:e1:66:94:c2:15:34:8e:76:f4:8f:c6:
41:ff:bd:b5:94:5b:0e:6b:b0:7e:0b:b2:64:dc:94:ac:00:e3:
a2:10:5e:01:84:11:9c:1d:f2:11:84:bf:12:57:cb:27:01:0d:
be:92:82:4a:e0:28:cd:4d:24:93:34:c6:7d:98:9c:92:55:a8:
c9:96:02:1c:a4:68:f0:23:92:c4:12:08:9b:e2:18:e5:40:5f:
4c:e6:2a:73
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAYuRUXP4pK59PKHwaX9OXFx2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjMxMTAyMTgzNTE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZDU5MzYxNjM2ZjYyMzc1MGYwZTliM2I5MjBiZTY0ZTk1MDhlNzFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldtXK1PN5RwqC3wqhO5D5jkKTQ/L
DfZcWvPz0tvLSyX8J8sr3yFpMmitXnQi6rzvJqW9Qrx1uSW7kN4WYEc7DtvQAbtA
N3tc2SWy5y6S9oeZo3lyn6f2lXo0cT83DF4OcLDGnaJ1NnVQc+TfBMsoWPKNwrvJ
rIUi4nvKHCBfVdL6YrpgKG4h2iKOJHqKZdB+GlFFjekt0fC/11qJRmLXogxpKWHr
VqXPujmErDSMZys0iqdn7fn1ldR3FYR15ij+XK4j79nD4r8A/Slt4pRlNWB3YGVf
AJWynl9rdvsfv7DQex4841/gmGuH2mcNjDIhKaffFaoamlBnwOYOQmw54QIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFK1ZNhY29iN1Dw6bO5IL5k6VCOcfMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvclZrMkZqYjJJM1VQRHBzN2tndm1UcFVJNXg4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAATAiAwQGUQWAAwQH
UagAAwMBUpgDBABZ1cADAwBtsAMEBdWYIDANBgkqhkiG9w0BAQsFAAOCAQEAmO86
tdAulbD7ozwa1vd4GuUsKtUtdYG9lXAfkhv5GMKASOUTB5D1csahl6P2wHpjhXW3
FrlZcya7Wuz9r0vuWUD8Kw0EV9HLlYcF8NE05LW8kyZJsgBq1gn0/B19LR+tSCSL
FYW96xytAGTIuPgcOKPGIM23Qg3R37TNB6SAJ/eKSUUpCEQcQ16cJn4pRwGk8kgx
cyUwU3HIMx31gLJl6tV34w5Nyfqc2eFmlMIVNI529I/GQf+9tZRbDmuwfguyZNyU
rADjohBeAYQRnB3yEYS/ElfLJwENvpKCSuAozU0kkzTGfZicklWoyZYCHKRo8COS
xBIIm+IY5UBfTOYqcw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:18 2024 by rpki-client on console-fra.rpki-client.org