Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/57d908-207d-497c-ab18-de7be1e5c776/1/l6J7D0GccY6FJyD5RarcUgwdk50.roa
File: l6J7D0GccY6FJyD5RarcUgwdk50.roa (raw, json)
Hash identifier: kDgJuSgFPyhNMV8eAs/k9Wg6r2bXJ9VDDf2zsiKiYbk=
Subject key identifier: 97:A2:7B:0F:41:9C:71:8E:85:27:20:F9:45:AA:DC:52:0C:1D:93:9D
Certificate issuer: /CN=e4984f8f36ebf9f8f54c12174f463664d7b23aee
Certificate serial: 01856C53ABDA79A01BB631928266EE2C76D1
Authority key identifier: E4:98:4F:8F:36:EB:F9:F8:F5:4C:12:17:4F:46:36:64:D7:B2:3A:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/57d908-207d-497c-ab18-de7be1e5c776/1/l6J7D0GccY6FJyD5RarcUgwdk50.roa
Signing time: Sun 01 Jan 2023 07:55:00 +0000
ROA not before: Sun 01 Jan 2023 07:55:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211251
IP address blocks: 213.171.64.0/23 maxlen: 23
213.171.66.0/23 maxlen: 23
213.171.68.0/23 maxlen: 23
213.171.74.0/24 maxlen: 24
79.98.176.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 05 Jan 2023 19:38:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:53:ab:da:79:a0:1b:b6:31:92:82:66:ee:2c:76:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4984f8f36ebf9f8f54c12174f463664d7b23aee
Validity
Not Before: Jan 1 07:55:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=97a27b0f419c718e852720f945aadc520c1d939d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a5:a1:df:3f:7f:55:08:a4:1a:2d:58:30:32:
1b:ec:06:1b:33:b2:95:c6:5a:1c:d6:cf:47:55:13:
7f:49:34:74:b4:0e:bf:3d:bf:67:17:80:6c:39:86:
d1:e0:cb:48:eb:34:63:56:55:2d:36:d8:60:28:bc:
a9:82:ed:3d:60:cd:6d:c4:3a:45:a5:77:03:29:0e:
6b:51:74:6e:d0:7d:9d:21:08:86:0c:00:6e:fa:b2:
d9:c7:aa:da:16:71:fd:c8:28:b9:28:0f:5d:88:0b:
e1:54:20:6c:c6:0e:e3:19:e2:0e:65:f0:24:6f:74:
70:55:b7:67:3e:80:4b:ba:fb:51:8f:8d:5e:1d:b0:
0f:92:70:01:7b:fe:ce:8b:65:ca:cd:46:b7:47:3b:
6f:71:40:65:f3:57:a5:77:22:0f:89:a7:d8:f0:af:
92:52:1e:9b:78:e1:6b:49:e6:33:72:02:b4:5b:f7:
85:c5:f3:4f:8b:63:37:8e:88:38:1c:da:32:a4:93:
16:df:d5:84:46:d0:6c:3d:54:c3:a7:b8:b7:ff:a8:
9b:d8:bf:d6:d8:aa:3b:71:07:42:9b:95:1e:bf:94:
7e:0f:53:68:a0:6d:16:e7:42:b1:fa:77:81:31:7e:
6a:fd:02:d7:23:2f:06:e2:c1:4c:25:5c:94:7b:02:
33:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:A2:7B:0F:41:9C:71:8E:85:27:20:F9:45:AA:DC:52:0C:1D:93:9D
X509v3 Authority Key Identifier:
keyid:E4:98:4F:8F:36:EB:F9:F8:F5:4C:12:17:4F:46:36:64:D7:B2:3A:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/57d908-207d-497c-ab18-de7be1e5c776/1/l6J7D0GccY6FJyD5RarcUgwdk50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/57d908-207d-497c-ab18-de7be1e5c776/1/5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.98.176.0/22
213.171.64.0-213.171.69.255
213.171.74.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:c3:a7:e4:bb:54:63:b3:f8:4d:ed:75:92:a3:49:0b:47:38:
b9:8a:df:8e:8b:fa:2c:de:fa:be:22:bd:72:4a:80:73:48:f5:
e5:4c:34:f8:54:a1:4b:dd:3e:32:f6:19:ff:17:2c:b4:e6:96:
c3:b8:65:24:21:79:78:3e:20:7b:49:36:70:54:10:55:ee:05:
73:bd:ed:c2:57:79:c0:01:03:18:a4:4a:34:76:b6:fb:2d:b2:
5f:96:31:f7:a5:94:a2:2c:4d:b2:66:23:0a:92:67:e2:4c:57:
2b:6e:86:ff:a2:36:f9:d1:69:d0:f6:60:c2:4a:d3:df:e1:dc:
98:45:29:d3:6d:28:1f:bb:1b:db:98:4d:17:f1:ce:d2:ba:13:
84:56:d8:37:4b:36:d1:ac:53:c8:22:f3:f7:43:0a:4f:0f:47:
dd:a0:24:cd:39:40:fb:c7:0f:67:2d:51:c5:16:ac:3d:5d:b7:
37:42:d6:66:10:2f:d5:11:de:f3:1d:e8:80:36:09:d2:62:21:
7f:ee:da:d5:d2:6a:0e:9e:cb:3b:0c:0a:54:5d:99:9f:af:c5:
8c:d1:d7:40:ba:b3:35:a4:d4:37:6f:f1:ad:7e:d2:45:dc:a8:
cd:5a:5d:d8:29:24:49:de:ef:d3:d1:70:c6:f3:f8:45:65:6b:
01:6b:ec:93
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAYVsU6vaeaAbtjGSgmbuLHbRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0OTg0ZjhmMzZlYmY5ZjhmNTRjMTIxNzRmNDYzNjY0ZDdi
MjNhZWUwHhcNMjMwMTAxMDc1NTAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5N2EyN2IwZjQxOWM3MThlODUyNzIwZjk0NWFhZGM1MjBjMWQ5MzlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqWh3z9/VQikGi1YMDIb7AYbM7KV
xloc1s9HVRN/STR0tA6/Pb9nF4BsOYbR4MtI6zRjVlUtNthgKLypgu09YM1txDpF
pXcDKQ5rUXRu0H2dIQiGDABu+rLZx6raFnH9yCi5KA9diAvhVCBsxg7jGeIOZfAk
b3RwVbdnPoBLuvtRj41eHbAPknABe/7Oi2XKzUa3RztvcUBl81eldyIPiafY8K+S
Uh6beOFrSeYzcgK0W/eFxfNPi2M3jog4HNoypJMW39WERtBsPVTDp7i3/6ib2L/W
2Ko7cQdCm5Uev5R+D1NooG0W50Kx+neBMX5q/QLXIy8G4sFMJVyUewIz7QIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFJeiew9BnHGOhScg+UWq3FIMHZOdMB8GA1UdIwQY
MBaAFOSYT4826/n49UwSF09GNmTXsjruMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUpoUGp6YnItZmoxVEJJWFQwWTJaTmV5T3U0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi81N2Q5MDgtMjA3ZC00OTdjLWFiMTgt
ZGU3YmUxZTVjNzc2LzEvbDZKN0QwR2NjWTZGSnlENVJhcmNVZ3dkazUwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi81N2Q5MDgtMjA3ZC00OTdjLWFiMTgtZGU3YmUxZTVjNzc2
LzEvNUpoUGp6YnItZmoxVEJJWFQwWTJaTmV5T3U0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQCT2KwMAwD
BAbVq0ADBAHVq0QDBADVq0owDQYJKoZIhvcNAQELBQADggEBAB/Dp+S7VGOz+E3t
dZKjSQtHOLmK346L+ize+r4ivXJKgHNI9eVMNPhUoUvdPjL2Gf8XLLTmlsO4ZSQh
eXg+IHtJNnBUEFXuBXO97cJXecABAxikSjR2tvstsl+WMfellKIsTbJmIwqSZ+JM
Vytuhv+iNvnRadD2YMJK09/h3JhFKdNtKB+7G9uYTRfxztK6E4RW2DdLNtGsU8gi
8/dDCk8PR92gJM05QPvHD2ctUcUWrD1dtzdC1mYQL9UR3vMd6IA2CdJiIX/u2tXS
ag6eyzsMClRdmZ+vxYzR10C6szWk1Ddv8a1+0kXcqM1aXdgpJEne79PRcMbz+EVl
awFr7JM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:36 2024 by rpki-client on console-fra.rpki-client.org