Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/DriSRawABKnv69JbEqR6ruvNgZE.roa
File: DriSRawABKnv69JbEqR6ruvNgZE.roa (raw, json)
Hash identifier: SYl79bklvEjPYh3T4se2noonQhsbarSEXLP6nPtgJSA=
Subject key identifier: 0E:B8:92:45:AC:00:04:A9:EF:EB:D2:5B:12:A4:7A:AE:EB:CD:81:91
Certificate issuer: /CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
Certificate serial: 0190C9BEF8BE627297ABBC081E089C898F3D
Authority key identifier: D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/DriSRawABKnv69JbEqR6ruvNgZE.roa
Signing time: Fri 19 Jul 2024 06:47:34 +0000
ROA not before: Fri 19 Jul 2024 06:47:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24655
IP address blocks: 62.228.233.0/24 maxlen: 24
81.4.190.0/23 maxlen: 24
Validation: Failed, certificate revoked on Fri 11 Oct 2024 07:09:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:c9:be:f8:be:62:72:97:ab:bc:08:1e:08:9c:89:8f:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
Validity
Not Before: Jul 19 06:47:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0eb89245ac0004a9efebd25b12a47aaeebcd8191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5c:60:34:30:a9:be:02:00:a3:e2:f5:14:4a:
66:c8:15:c0:02:72:68:60:10:cc:fb:e5:86:34:fd:
68:86:0b:5f:47:ba:91:67:ba:d9:82:8e:a2:e8:d3:
9d:6d:b6:86:d2:31:11:ed:82:f5:13:6c:26:04:3a:
4b:85:c4:07:31:53:35:db:f0:f5:33:96:5d:18:d9:
32:67:b4:8b:1b:4e:b0:85:4c:26:fa:81:86:96:df:
1e:6a:13:b1:75:b6:80:2b:3a:41:15:be:c7:d4:a9:
3e:03:a4:82:a2:c7:54:5c:fc:f2:d8:50:cb:30:52:
20:9d:29:a8:90:40:c7:b6:b3:56:e2:b5:37:e2:ed:
97:68:ec:69:6b:9c:25:fe:05:93:b7:7f:72:1f:db:
36:7b:48:2f:dd:88:4a:1e:74:3d:fa:38:d5:e0:85:
c3:6c:5f:9d:12:07:cb:a5:c6:66:df:7b:6a:e1:1b:
d2:bf:f8:03:7e:fe:a5:1b:0a:32:1a:cb:bb:45:bd:
c8:f2:83:b2:39:c9:ab:3a:98:98:60:70:6b:a2:08:
05:25:33:b0:b5:14:3b:97:e4:71:9a:e3:7c:be:a1:
20:29:14:e4:58:dc:0f:3c:65:8c:88:97:a7:ed:53:
08:8d:cb:ef:f0:10:dc:14:9f:9a:04:71:01:7d:f9:
18:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:B8:92:45:AC:00:04:A9:EF:EB:D2:5B:12:A4:7A:AE:EB:CD:81:91
X509v3 Authority Key Identifier:
keyid:D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/DriSRawABKnv69JbEqR6ruvNgZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.228.233.0/24
81.4.190.0/23
Signature Algorithm: sha256WithRSAEncryption
a2:7d:8f:70:73:41:a0:ea:27:e0:ed:5d:8d:48:02:bc:67:14:
99:da:7e:f1:46:3b:f0:36:fe:31:1b:a4:d3:17:71:d7:c3:b3:
26:e9:78:71:72:18:ad:69:96:e1:f9:cb:60:67:74:f7:df:84:
08:9b:61:41:ec:c6:d4:9a:a8:11:13:66:ee:40:7f:c9:cc:77:
18:98:31:68:b3:fb:38:0b:04:7b:82:82:97:db:ab:22:1b:85:
a9:86:c8:26:fc:56:cb:43:02:b4:35:95:59:2c:ad:e8:3e:18:
78:f0:68:e6:55:84:c4:05:92:bd:45:78:d4:dd:55:e7:fd:85:
d3:5f:9f:ce:10:b7:df:18:38:13:d7:51:6c:f1:bf:80:f4:19:
d0:ae:86:57:32:c9:48:f1:6d:0c:f9:8f:31:27:f3:c0:06:19:
3d:25:2b:6b:70:d8:32:5b:a5:50:9c:8c:0a:b0:3b:44:7d:1e:
bd:9f:ba:ad:1c:a9:22:9c:13:a3:6c:14:73:a8:07:90:61:9c:
0a:cf:51:2c:94:6d:d1:6c:da:3e:7d:c0:92:23:c0:ad:a4:2a:
e5:09:78:87:3f:7f:b1:58:67:be:c6:a1:23:42:94:e2:48:6b:
eb:fc:4c:1b:80:f4:02:1b:1a:ce:0a:54:b4:1a:e7:55:ec:3e:
cf:54:8a:d7
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZDJvvi+YnKXq7wIHgiciY89MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0MTFhYmM0YzA0NjhhYjI4OTFlYWFjYWRiYTBkYzAzNzc5
MzZmZDUwHhcNMjQwNzE5MDY0NzM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZWI4OTI0NWFjMDAwNGE5ZWZlYmQyNWIxMmE0N2FhZWViY2Q4MTkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1xgNDCpvgIAo+L1FEpmyBXAAnJo
YBDM++WGNP1ohgtfR7qRZ7rZgo6i6NOdbbaG0jER7YL1E2wmBDpLhcQHMVM12/D1
M5ZdGNkyZ7SLG06whUwm+oGGlt8eahOxdbaAKzpBFb7H1Kk+A6SCosdUXPzy2FDL
MFIgnSmokEDHtrNW4rU34u2XaOxpa5wl/gWTt39yH9s2e0gv3YhKHnQ9+jjV4IXD
bF+dEgfLpcZm33tq4RvSv/gDfv6lGwoyGsu7Rb3I8oOyOcmrOpiYYHBroggFJTOw
tRQ7l+RxmuN8vqEgKRTkWNwPPGWMiJen7VMIjcvv8BDcFJ+aBHEBffkYsQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFA64kkWsAASp7+vSWxKkeq7rzYGRMB8GA1UdIwQY
MBaAFNQRq8TARoqyiR6qytug3AN3k2/VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUJHcnhNQkdpcktKSHFySzI2RGNBM2VUYjlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My82MThlNTMtYWZjNC00MGRmLTg2MTIt
YjBmNGI5YzM3ZTQ5LzEvRHJpU1Jhd0FCS252NjlKYkVxUjZydXZOZ1pFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My82MThlNTMtYWZjNC00MGRmLTg2MTItYjBmNGI5YzM3ZTQ5
LzEvMUJHcnhNQkdpcktKSHFySzI2RGNBM2VUYjlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAPuTpAwQB
UQS+MA0GCSqGSIb3DQEBCwUAA4IBAQCifY9wc0Gg6ifg7V2NSAK8ZxSZ2n7xRjvw
Nv4xG6TTF3HXw7Mm6XhxchitaZbh+ctgZ3T334QIm2FB7MbUmqgRE2buQH/JzHcY
mDFos/s4CwR7goKX26siG4Wphsgm/FbLQwK0NZVZLK3oPhh48GjmVYTEBZK9RXjU
3VXn/YXTX5/OELffGDgT11Fs8b+A9BnQroZXMslI8W0M+Y8xJ/PABhk9JStrcNgy
W6VQnIwKsDtEfR69n7qtHKkinBOjbBRzqAeQYZwKz1EslG3RbNo+fcCSI8CtpCrl
CXiHP3+xWGe+xqEjQpTiSGvr/EwbgPQCGxrOClS0GudV7D7PVIrX
-----END CERTIFICATE-----
Generated at Fri Oct 11 09:41:01 2024 by rpki-client on console-ams.rpki-client.org