Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/fJEH_HDtdlLK9-GjkRzqeTmMoFQ.roa
File: fJEH_HDtdlLK9-GjkRzqeTmMoFQ.roa (raw, json)
Hash identifier: F4o8n3w4zogG68xMc70TY/nOtE8zDeLMgM6G62HO0BU=
Subject key identifier: 7C:91:07:FC:70:ED:76:52:CA:F7:E1:A3:91:1C:EA:79:39:8C:A0:54
Certificate issuer: /CN=b0b5a80a7106e0a4b8545c8150bb72c699fcc9a0
Certificate serial: 018679657381B8290248385FF6D1C23076D5
Authority key identifier: B0:B5:A8:0A:71:06:E0:A4:B8:54:5C:81:50:BB:72:C6:99:FC:C9:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sLWoCnEG4KS4VFyBULtyxpn8yaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/fJEH_HDtdlLK9-GjkRzqeTmMoFQ.roa
Signing time: Wed 22 Feb 2023 13:52:17 +0000
ROA not before: Wed 22 Feb 2023 13:52:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 193.164.4.0/24 maxlen: 24
185.93.70.0/24 maxlen: 24
185.93.68.0/24 maxlen: 24
193.164.6.0/24 maxlen: 24
193.164.7.0/24 maxlen: 24
93.177.102.0/24 maxlen: 24
2a05:f7c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 07 Aug 2023 14:17:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:79:65:73:81:b8:29:02:48:38:5f:f6:d1:c2:30:76:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0b5a80a7106e0a4b8545c8150bb72c699fcc9a0
Validity
Not Before: Feb 22 13:52:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7c9107fc70ed7652caf7e1a3911cea79398ca054
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:8c:f1:7e:f0:ef:45:3c:c5:73:da:7a:5f:2f:
12:58:00:b6:d1:52:4b:d6:9a:d9:40:38:ae:b7:bb:
81:92:ce:4f:89:67:e4:f4:cf:87:6f:42:88:a2:fb:
d8:a6:33:dd:ab:60:c6:5c:bd:6c:8e:43:af:cd:c1:
b4:5f:c1:52:29:5e:87:3b:cd:73:83:21:d2:e3:51:
b9:a3:4b:57:d5:8f:24:ea:eb:31:82:bd:ab:38:68:
94:1e:23:4b:91:2b:35:40:9d:8d:63:f7:b6:86:18:
17:e2:69:8c:70:36:05:23:9c:32:75:80:e4:82:64:
39:96:8d:16:15:52:4e:4c:26:9b:f2:52:1e:08:2e:
41:b0:16:84:ec:63:20:59:99:f2:3d:7b:e0:3e:75:
9f:08:81:ad:fd:95:1d:5d:e8:96:6a:ff:07:f8:82:
83:67:7d:e5:5f:ff:30:32:66:de:b0:ab:5f:5e:a4:
07:f4:79:2e:fa:d6:61:95:e8:bc:4b:96:c1:13:c9:
e2:35:7c:8d:ae:80:ea:dc:c3:3d:d6:4a:1d:df:8a:
b9:de:72:a4:3c:65:b3:9a:d3:f2:7b:b4:c6:16:1d:
48:f2:bb:14:e4:fb:03:4c:51:98:d9:5c:13:06:c6:
c6:a6:79:77:70:fa:6b:3b:da:72:90:1e:f8:76:c1:
d1:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:91:07:FC:70:ED:76:52:CA:F7:E1:A3:91:1C:EA:79:39:8C:A0:54
X509v3 Authority Key Identifier:
keyid:B0:B5:A8:0A:71:06:E0:A4:B8:54:5C:81:50:BB:72:C6:99:FC:C9:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLWoCnEG4KS4VFyBULtyxpn8yaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/fJEH_HDtdlLK9-GjkRzqeTmMoFQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/sLWoCnEG4KS4VFyBULtyxpn8yaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.177.102.0/24
185.93.68.0/24
185.93.70.0/24
193.164.4.0/24
193.164.6.0/23
IPv6:
2a05:f7c0::/29
Signature Algorithm: sha256WithRSAEncryption
96:42:8c:78:aa:1f:18:89:b6:98:85:1c:54:51:36:24:88:90:
23:23:f4:e7:82:f3:28:42:92:dc:8b:ea:b1:c9:19:09:b8:f9:
7b:1f:49:0b:f7:d1:55:e3:58:00:4e:f0:38:a7:42:64:2a:05:
f0:30:df:5f:a7:9b:67:2b:f2:0f:28:1a:56:16:f9:af:b5:b7:
98:73:6e:4f:29:d2:31:14:ae:02:eb:e7:ff:71:ad:d2:50:6c:
a6:b4:e8:03:4c:ad:7f:7f:5d:57:bd:6a:75:c7:4d:f8:a3:c0:
40:f1:cd:d1:12:bc:7d:98:45:ea:8c:a7:e9:63:44:e3:ff:68:
c8:21:cc:bd:87:17:f0:8d:a2:ef:fe:a3:cd:07:a7:c5:d7:97:
71:20:5b:48:4e:20:a2:41:a3:b1:10:0b:47:b8:d0:ac:37:ae:
56:3f:a6:6c:bf:b6:08:10:80:a2:97:35:80:c0:e6:d8:28:aa:
62:fc:ae:d3:dc:4d:5f:f4:05:ea:10:4f:0c:7b:11:7e:e8:4f:
14:de:46:c3:db:88:90:29:3b:4d:c6:42:03:72:46:58:95:0a:
90:b2:35:e4:36:ad:ad:48:b6:a0:71:a6:53:8b:6e:5a:50:5c:
78:53:b5:2c:d3:a2:e1:de:cb:72:5b:57:21:8b:6c:27:bb:6e:
d4:2f:6f:c7
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgISAYZ5ZXOBuCkCSDhf9tHCMHbVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwYjVhODBhNzEwNmUwYTRiODU0NWM4MTUwYmI3MmM2OTlm
Y2M5YTAwHhcNMjMwMjIyMTM1MjE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YzkxMDdmYzcwZWQ3NjUyY2FmN2UxYTM5MTFjZWE3OTM5OGNhMDU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4zxfvDvRTzFc9p6Xy8SWAC20VJL
1prZQDiut7uBks5PiWfk9M+Hb0KIovvYpjPdq2DGXL1sjkOvzcG0X8FSKV6HO81z
gyHS41G5o0tX1Y8k6usxgr2rOGiUHiNLkSs1QJ2NY/e2hhgX4mmMcDYFI5wydYDk
gmQ5lo0WFVJOTCab8lIeCC5BsBaE7GMgWZnyPXvgPnWfCIGt/ZUdXeiWav8H+IKD
Z33lX/8wMmbesKtfXqQH9Hku+tZhlei8S5bBE8niNXyNroDq3MM91kod34q53nKk
PGWzmtPye7TGFh1I8rsU5PsDTFGY2VwTBsbGpnl3cPprO9pykB74dsHRjQIDAQAB
o4ICMDCCAiwwHQYDVR0OBBYEFHyRB/xw7XZSyvfho5Ec6nk5jKBUMB8GA1UdIwQY
MBaAFLC1qApxBuCkuFRcgVC7csaZ/MmgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0xXb0NuRUc0S1M0VkZ5QlVMdHl4cG44eWFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9mMTUzZGMtY2JmYi00YTRmLTgwZDIt
NzQ1ZTA4ZmU1OGM2LzEvZkpFSF9IRHRkbExLOS1HamtSenFlVG1Nb0ZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi9mMTUzZGMtY2JmYi00YTRmLTgwZDItNzQ1ZTA4ZmU1OGM2
LzEvc0xXb0NuRUc0S1M0VkZ5QlVMdHl4cG44eWFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQAXbFmAwQA
uV1EAwQAuV1GAwQAwaQEAwQBwaQGMA0EAgACMAcDBQMqBffAMA0GCSqGSIb3DQEB
CwUAA4IBAQCWQox4qh8YibaYhRxUUTYkiJAjI/TngvMoQpLci+qxyRkJuPl7H0kL
99FV41gATvA4p0JkKgXwMN9fp5tnK/IPKBpWFvmvtbeYc25PKdIxFK4C6+f/ca3S
UGymtOgDTK1/f11XvWp1x034o8BA8c3RErx9mEXqjKfpY0Tj/2jIIcy9hxfwjaLv
/qPNB6fF15dxIFtITiCiQaOxEAtHuNCsN65WP6Zsv7YIEICilzWAwObYKKpi/K7T
3E1f9AXqEE8MexF+6E8U3kbD24iQKTtNxkIDckZYlQqQsjXkNq2tSLagcaZTi25a
UFx4U7Us06Lh3styW1chi2wnu27UL2/H
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:32 2024 by rpki-client on console-fra.rpki-client.org