Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/47422f-2fd0-4b32-9354-dbc9a522cd12/1/p0hP2krPS6y9MVhtcQFWjelr_Q0.roa
File: p0hP2krPS6y9MVhtcQFWjelr_Q0.roa (raw, json)
Hash identifier: YsQb3+b8XZNhkm5sc3qqeI94KxLyFWeUysZH2O+7qzk=
Subject key identifier: A7:48:4F:DA:4A:CF:4B:AC:BD:31:58:6D:71:01:56:8D:E9:6B:FD:0D
Certificate issuer: /CN=2b1dc205e24a23a5a0454a13f1d4a0c9637a439d
Certificate serial: 01857102FFE3534BF663991181171C1DDAA8
Authority key identifier: 2B:1D:C2:05:E2:4A:23:A5:A0:45:4A:13:F1:D4:A0:C9:63:7A:43:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kx3CBeJKI6WgRUoT8dSgyWN6Q50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/47422f-2fd0-4b32-9354-dbc9a522cd12/1/p0hP2krPS6y9MVhtcQFWjelr_Q0.roa
Signing time: Mon 02 Jan 2023 05:44:59 +0000
ROA not before: Mon 02 Jan 2023 05:44:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51545
IP address blocks: 91.217.245.0/24 maxlen: 24
185.155.104.0/24 maxlen: 24
185.155.107.0/24 maxlen: 24
185.155.106.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:02:ff:e3:53:4b:f6:63:99:11:81:17:1c:1d:da:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b1dc205e24a23a5a0454a13f1d4a0c9637a439d
Validity
Not Before: Jan 2 05:44:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a7484fda4acf4bacbd31586d7101568de96bfd0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:45:f1:35:82:b7:34:f9:00:23:39:e1:89:bb:
10:e0:de:49:09:1c:38:8d:a6:16:e7:74:48:1a:9a:
36:c6:cb:1a:6a:14:59:5e:96:db:57:07:1b:a6:a4:
7e:64:c6:bc:d0:e4:e0:d0:2b:f4:cc:f3:b7:ed:fa:
d5:63:bf:90:c2:ac:89:43:5b:02:bc:59:69:b4:d4:
08:d3:61:8a:c3:7d:1b:77:52:27:f0:ff:16:a1:17:
05:f5:ae:6c:c0:0a:61:1f:fb:fb:22:d2:48:b5:5e:
ac:d5:a8:45:23:86:f1:32:0e:30:ee:84:c9:54:7a:
f7:a3:e3:da:b6:80:d3:7a:73:b2:25:03:42:9e:35:
5c:60:bc:28:8c:3b:aa:44:f1:43:a3:c7:e8:9f:bb:
22:ff:e5:9d:1d:5d:2d:05:05:3e:f4:32:f6:c5:ef:
23:c2:a0:53:96:9b:32:3d:53:b3:74:19:27:4f:f9:
a6:29:42:4e:c4:29:1c:8e:9a:ef:cc:b0:3b:52:e5:
b3:a3:d4:bf:69:ba:c8:53:aa:17:94:79:11:ac:88:
26:3e:43:46:da:ae:ed:62:41:c5:cc:6b:ab:ef:db:
1c:87:26:72:06:34:d1:d1:9d:06:f8:e6:1e:df:54:
f0:10:90:9d:0d:6b:a0:ab:77:05:c4:df:49:72:24:
ca:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:48:4F:DA:4A:CF:4B:AC:BD:31:58:6D:71:01:56:8D:E9:6B:FD:0D
X509v3 Authority Key Identifier:
keyid:2B:1D:C2:05:E2:4A:23:A5:A0:45:4A:13:F1:D4:A0:C9:63:7A:43:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kx3CBeJKI6WgRUoT8dSgyWN6Q50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/47422f-2fd0-4b32-9354-dbc9a522cd12/1/p0hP2krPS6y9MVhtcQFWjelr_Q0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/47422f-2fd0-4b32-9354-dbc9a522cd12/1/Kx3CBeJKI6WgRUoT8dSgyWN6Q50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.245.0/24
185.155.104.0/24
185.155.106.0/23
Signature Algorithm: sha256WithRSAEncryption
bc:ab:40:c9:51:39:d7:74:30:f3:f0:de:1e:1e:e6:ed:79:03:
08:cf:19:08:eb:78:a1:f3:2e:1c:68:0f:bc:73:dd:df:64:9c:
f2:f1:71:e4:60:5d:71:ba:d8:7f:39:99:27:59:6b:11:1f:64:
1c:a1:da:8d:f9:53:2a:fe:c6:38:bd:06:76:ca:73:a5:bd:41:
6b:dc:10:e3:38:dc:08:de:1a:22:74:03:f9:90:6d:1c:3e:c5:
56:d3:e2:76:04:58:a9:e1:64:46:a0:cc:10:9c:e6:11:a1:2e:
02:29:f1:fd:19:e2:b0:28:d7:13:ed:69:48:c0:ca:26:45:9e:
74:84:05:a2:3f:78:19:0d:7e:29:dd:5f:e9:4a:dd:63:39:5e:
3d:47:e5:07:67:71:05:e4:43:01:a7:e2:5b:1b:af:86:c0:d4:
b4:62:bf:21:a0:f5:12:00:96:b7:7a:50:e8:f1:a9:fa:af:09:
45:00:f2:ce:49:ff:8b:3d:22:a1:46:05:dc:a9:3b:de:2c:87:
3b:f2:80:3d:69:ce:ad:50:cb:35:17:80:9d:33:5c:e5:39:4d:
85:1e:d2:8d:14:d9:53:45:1c:e1:8e:66:d7:59:d0:39:82:4e:
0e:a7:51:72:b3:a8:1e:e7:1b:70:29:3e:83:e9:c4:b0:c5:f4:
1d:1d:54:8e
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYVxAv/jU0v2Y5kRgRccHdqoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiMWRjMjA1ZTI0YTIzYTVhMDQ1NGExM2YxZDRhMGM5NjM3
YTQzOWQwHhcNMjMwMTAyMDU0NDU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNzQ4NGZkYTRhY2Y0YmFjYmQzMTU4NmQ3MTAxNTY4ZGU5NmJmZDBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUXxNYK3NPkAIznhibsQ4N5JCRw4
jaYW53RIGpo2xssaahRZXpbbVwcbpqR+ZMa80OTg0Cv0zPO37frVY7+QwqyJQ1sC
vFlptNQI02GKw30bd1In8P8WoRcF9a5swAphH/v7ItJItV6s1ahFI4bxMg4w7oTJ
VHr3o+PatoDTenOyJQNCnjVcYLwojDuqRPFDo8fon7si/+WdHV0tBQU+9DL2xe8j
wqBTlpsyPVOzdBknT/mmKUJOxCkcjprvzLA7UuWzo9S/abrIU6oXlHkRrIgmPkNG
2q7tYkHFzGur79schyZyBjTR0Z0G+OYe31TwEJCdDWugq3cFxN9JciTKGQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFKdIT9pKz0usvTFYbXEBVo3pa/0NMB8GA1UdIwQY
MBaAFCsdwgXiSiOloEVKE/HUoMljekOdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3gzQ0JlSktJNldnUlVvVDhkU2d5V042UTUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS80NzQyMmYtMmZkMC00YjMyLTkzNTQt
ZGJjOWE1MjJjZDEyLzEvcDBoUDJrclBTNnk5TVZodGNRRldqZWxyX1EwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS80NzQyMmYtMmZkMC00YjMyLTkzNTQtZGJjOWE1MjJjZDEy
LzEvS3gzQ0JlSktJNldnUlVvVDhkU2d5V042UTUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAW9n1AwQA
uZtoAwQBuZtqMA0GCSqGSIb3DQEBCwUAA4IBAQC8q0DJUTnXdDDz8N4eHubteQMI
zxkI63ih8y4caA+8c93fZJzy8XHkYF1xuth/OZknWWsRH2QcodqN+VMq/sY4vQZ2
ynOlvUFr3BDjONwI3hoidAP5kG0cPsVW0+J2BFip4WRGoMwQnOYRoS4CKfH9GeKw
KNcT7WlIwMomRZ50hAWiP3gZDX4p3V/pSt1jOV49R+UHZ3EF5EMBp+JbG6+GwNS0
Yr8hoPUSAJa3elDo8an6rwlFAPLOSf+LPSKhRgXcqTveLIc78oA9ac6tUMs1F4Cd
M1zlOU2FHtKNFNlTRRzhjmbXWdA5gk4Op1Fys6ge5xtwKT6D6cSwxfQdHVSO
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:54 2024 by rpki-client on console-fra.rpki-client.org