Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/xAqWIF4GeaYve5or49woJvZRXZ8.roa
File: xAqWIF4GeaYve5or49woJvZRXZ8.roa (raw, json)
Hash identifier: 7CxTY3Y8CoS2Qqyk+94oSOPyC4Ue+WHOrPfcpa8C16Y=
Subject key identifier: C4:0A:96:20:5E:06:79:A6:2F:7B:9A:2B:E3:DC:28:26:F6:51:5D:9F
Certificate issuer: /CN=672f0e42b08aa451fc583a358ec370ffbd2dac68
Certificate serial: 01857169ABEF482EEF7620683135507235C9
Authority key identifier: 67:2F:0E:42:B0:8A:A4:51:FC:58:3A:35:8E:C3:70:FF:BD:2D:AC:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zy8OQrCKpFH8WDo1jsNw_70trGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/xAqWIF4GeaYve5or49woJvZRXZ8.roa
Signing time: Mon 02 Jan 2023 07:37:08 +0000
ROA not before: Mon 02 Jan 2023 07:37:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60385
IP address blocks: 87.238.139.0/24 maxlen: 24
185.18.251.0/24 maxlen: 24
185.18.248.0/24 maxlen: 24
185.18.249.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:69:ab:ef:48:2e:ef:76:20:68:31:35:50:72:35:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=672f0e42b08aa451fc583a358ec370ffbd2dac68
Validity
Not Before: Jan 2 07:37:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c40a96205e0679a62f7b9a2be3dc2826f6515d9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:5e:ac:de:8c:2e:c6:58:4c:3c:c6:26:cc:7c:
0a:b0:c3:91:bb:56:b8:c4:d8:ad:86:d6:0a:35:f5:
bd:8c:22:a3:84:77:0c:4b:d8:6d:a5:0a:6f:28:e0:
30:77:e5:1e:6a:46:bd:d9:eb:fe:5c:e1:f5:2f:7a:
15:ae:31:41:3a:5e:ff:31:4c:13:13:af:a3:13:92:
3a:f7:df:9b:ad:ca:82:a0:f0:96:ff:a9:19:1d:dd:
2a:3b:3f:71:cf:32:7c:a3:72:69:e7:fe:7d:3d:d9:
33:67:ae:45:5e:6e:8d:b0:22:e9:12:e5:db:63:eb:
21:5a:84:c9:84:b2:84:c6:57:78:d8:6c:9b:eb:f2:
fc:42:d7:3c:77:d4:ba:a3:b1:11:a0:61:88:43:f4:
a5:00:ad:7e:10:ee:22:18:69:8a:d6:2e:e6:4e:4b:
69:27:81:22:1f:d4:56:5e:18:62:9e:39:b5:ce:29:
95:ef:ca:1f:df:28:62:25:9c:19:f3:ea:f6:66:65:
91:c8:28:0f:38:c1:a2:7d:41:43:5c:ce:b2:56:d7:
97:0b:34:a5:b5:c2:cc:93:88:bd:7a:14:87:3e:42:
f5:82:08:db:af:bd:6e:04:33:50:9b:f0:c8:6f:ea:
b9:c7:9d:75:dc:09:8d:f1:2a:b1:b8:9e:39:28:1a:
10:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:0A:96:20:5E:06:79:A6:2F:7B:9A:2B:E3:DC:28:26:F6:51:5D:9F
X509v3 Authority Key Identifier:
keyid:67:2F:0E:42:B0:8A:A4:51:FC:58:3A:35:8E:C3:70:FF:BD:2D:AC:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zy8OQrCKpFH8WDo1jsNw_70trGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/xAqWIF4GeaYve5or49woJvZRXZ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/Zy8OQrCKpFH8WDo1jsNw_70trGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.238.139.0/24
185.18.248.0/23
185.18.251.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:9a:e6:5d:94:b7:10:80:53:eb:78:3f:d5:91:ba:ec:31:8b:
5a:ee:9c:d5:c6:83:fb:21:3d:94:e5:a5:76:da:98:9d:8e:7d:
a2:6f:22:47:0b:08:9c:9c:9c:f1:c2:cb:a5:7e:64:91:73:20:
18:08:a9:fb:de:bb:26:7c:19:92:e8:de:bf:69:68:77:ec:d7:
f6:6f:1a:b5:43:c9:78:42:50:bf:f3:19:a8:21:50:74:86:85:
7c:0f:57:61:66:e7:65:f1:08:64:3a:25:37:f1:7d:1d:80:09:
37:87:77:b6:3e:d8:f6:ae:62:fc:00:2c:20:cf:51:27:5c:3b:
70:8a:c9:d4:f1:40:cf:3d:b9:fa:a2:c7:fa:ef:f4:77:f0:f5:
1e:4d:74:65:bf:17:43:ba:c5:76:35:a3:b8:17:c1:2c:06:45:
75:88:67:12:b4:13:1d:0f:b8:8f:23:f4:6c:44:f8:dd:1d:1b:
45:54:c3:61:4a:5f:f4:a2:93:81:f3:69:da:8c:b6:06:7f:be:
c4:15:3f:0a:6f:92:68:82:f2:da:23:9d:83:14:78:28:da:f4:
dc:d9:b1:21:c2:f9:02:ab:fa:2d:60:d5:7b:45:f1:05:73:2f:
22:31:64:48:de:76:a0:d1:90:67:49:a8:0d:dd:91:89:b1:bb:
d1:53:5c:64
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYVxaavvSC7vdiBoMTVQcjXJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3MmYwZTQyYjA4YWE0NTFmYzU4M2EzNThlYzM3MGZmYmQy
ZGFjNjgwHhcNMjMwMTAyMDczNzA4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNDBhOTYyMDVlMDY3OWE2MmY3YjlhMmJlM2RjMjgyNmY2NTE1ZDlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm16s3owuxlhMPMYmzHwKsMORu1a4
xNithtYKNfW9jCKjhHcMS9htpQpvKOAwd+Ueaka92ev+XOH1L3oVrjFBOl7/MUwT
E6+jE5I699+brcqCoPCW/6kZHd0qOz9xzzJ8o3Jp5/59PdkzZ65FXm6NsCLpEuXb
Y+shWoTJhLKExld42Gyb6/L8Qtc8d9S6o7ERoGGIQ/SlAK1+EO4iGGmK1i7mTktp
J4EiH9RWXhhinjm1zimV78of3yhiJZwZ8+r2ZmWRyCgPOMGifUFDXM6yVteXCzSl
tcLMk4i9ehSHPkL1ggjbr71uBDNQm/DIb+q5x5113AmN8SqxuJ45KBoQ6QIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFMQKliBeBnmmL3uaK+PcKCb2UV2fMB8GA1UdIwQY
MBaAFGcvDkKwiqRR/Fg6NY7DcP+9LaxoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnk4T1FyQ0twRkg4V0RvMWpzTndfNzB0ckdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My81OWE2YjktY2QyMC00Y2Q3LWI0YTct
ZjBiOTYyZjUyNDE0LzEveEFxV0lGNEdlYVl2ZTVvcjQ5d29KdlpSWFo4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My81OWE2YjktY2QyMC00Y2Q3LWI0YTctZjBiOTYyZjUyNDE0
LzEvWnk4T1FyQ0twRkg4V0RvMWpzTndfNzB0ckdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAV+6LAwQB
uRL4AwQAuRL7MA0GCSqGSIb3DQEBCwUAA4IBAQB9muZdlLcQgFPreD/VkbrsMYta
7pzVxoP7IT2U5aV22pidjn2ibyJHCwicnJzxwsulfmSRcyAYCKn73rsmfBmS6N6/
aWh37Nf2bxq1Q8l4QlC/8xmoIVB0hoV8D1dhZudl8QhkOiU38X0dgAk3h3e2Ptj2
rmL8ACwgz1EnXDtwisnU8UDPPbn6osf67/R38PUeTXRlvxdDusV2NaO4F8EsBkV1
iGcStBMdD7iPI/RsRPjdHRtFVMNhSl/0opOB82najLYGf77EFT8Kb5JogvLaI52D
FHgo2vTc2bEhwvkCq/otYNV7RfEFcy8iMWRI3nag0ZBnSagN3ZGJsbvRU1xk
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:35 2024 by rpki-client on console-fra.rpki-client.org