Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/ejnNa89y4FZFXgdDYGCF04ka7oY.roa
File: ejnNa89y4FZFXgdDYGCF04ka7oY.roa (raw, json)
Hash identifier: bSbUuw/p2CkbZmYLFVZXXh0bXuRoIm5t69F/WJxfzq4=
Subject key identifier: 7A:39:CD:6B:CF:72:E0:56:45:5E:07:43:60:60:85:D3:89:1A:EE:86
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 01856D0AEA5EA2CB659474A9BB5B75F9E33A
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/ejnNa89y4FZFXgdDYGCF04ka7oY.roa
Signing time: Sun 01 Jan 2023 11:15:09 +0000
ROA not before: Sun 01 Jan 2023 11:15:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34849
IP address blocks: 80.250.174.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:0a:ea:5e:a2:cb:65:94:74:a9:bb:5b:75:f9:e3:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Jan 1 11:15:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7a39cd6bcf72e056455e0743606085d3891aee86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ea:a6:8b:18:b6:7e:4b:40:63:ff:7e:5f:11:
72:ee:19:a7:d6:41:09:17:c1:44:55:ea:77:45:a9:
e1:1c:39:3f:8d:58:aa:69:81:de:3f:4c:87:83:29:
ac:be:9b:19:d7:58:5c:f2:e7:21:6c:33:87:31:be:
15:90:dc:19:5e:a8:3b:b9:e3:ee:cd:21:ac:7d:1e:
eb:5a:f0:aa:ec:e6:0e:a8:e8:9b:f0:5f:77:48:ef:
7e:7c:49:d9:70:f5:09:34:19:73:11:cd:00:0e:ac:
08:c5:12:e3:e5:a8:94:cb:d7:55:3b:e3:c7:e2:54:
94:1d:f1:bc:38:31:d4:79:8b:37:24:24:14:b5:5e:
90:9d:34:8b:9f:fc:68:ca:07:f2:fd:f5:ee:e4:b9:
d8:a1:f9:b2:9c:e6:11:f7:8e:6b:cd:5c:4c:51:b7:
da:3f:c2:d0:b2:e9:2a:67:78:1c:b8:7d:f9:d3:8c:
10:4c:2c:f1:0c:3c:e0:c5:3e:7a:f6:8e:6e:8a:1f:
df:6a:e2:e6:f2:ea:25:cd:e7:87:1d:7d:b0:dd:26:
9f:be:70:83:cb:1c:6e:c1:a0:e6:d1:15:3d:86:4b:
dc:c8:11:c3:75:6d:f3:d7:81:01:9b:b2:02:bc:a1:
c8:44:c0:0b:20:fc:25:a6:82:be:42:3b:d9:07:76:
d0:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:39:CD:6B:CF:72:E0:56:45:5E:07:43:60:60:85:D3:89:1A:EE:86
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/ejnNa89y4FZFXgdDYGCF04ka7oY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.250.174.0/24
Signature Algorithm: sha256WithRSAEncryption
31:c3:08:1c:a0:91:01:a6:ba:01:08:6e:60:9c:3a:ce:e1:74:
ad:9e:64:37:c9:2b:3d:7e:2a:87:63:4b:4c:cc:85:e3:9e:d0:
ed:ec:16:bf:5c:45:7b:1a:7b:24:95:9f:3d:81:82:d5:b5:2e:
cb:b4:7e:c6:6b:e8:1c:28:a0:65:30:27:92:19:c4:79:2d:e7:
d5:5a:e5:5e:22:16:27:f5:34:f4:c2:bc:c3:e5:86:56:25:3d:
d8:ba:d4:bf:90:67:15:48:fd:d1:a3:e9:b7:2d:a5:9c:9c:df:
71:30:df:c3:ee:6a:67:a3:09:34:da:b9:01:47:e1:38:fb:da:
96:dc:f8:e1:b4:2b:07:ed:b4:2d:28:7d:48:8f:6e:7c:ce:12:
1a:0b:83:88:cf:d1:64:b7:24:c7:10:e4:33:6c:b0:1b:49:ee:
11:37:45:09:69:12:d4:a5:90:95:5b:cb:67:5d:44:95:26:a4:
ad:1e:46:b5:2f:c4:4b:fe:44:41:15:85:6c:5e:80:2a:e7:64:
4e:23:01:9d:ba:e2:22:ba:9e:ec:7e:c3:fa:33:5b:ed:c8:e4:
e3:ad:dc:eb:57:c6:9a:d5:e9:ac:1c:a5:0f:3d:6a:8a:ad:92:
70:82:cc:15:3b:d4:c0:cd:86:4b:ee:71:b7:e1:7b:61:88:27:
d8:2a:a4:6d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtCupeostllHSpu1t1+eM6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4YjIyMDIzYjZlYWQ0YzI5NjgzYTlmZWQ0NDkzZDAzZGVl
MmM2ODUwHhcNMjMwMTAxMTExNTA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YTM5Y2Q2YmNmNzJlMDU2NDU1ZTA3NDM2MDYwODVkMzg5MWFlZTg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOqmixi2fktAY/9+XxFy7hmn1kEJ
F8FEVep3RanhHDk/jViqaYHeP0yHgymsvpsZ11hc8uchbDOHMb4VkNwZXqg7uePu
zSGsfR7rWvCq7OYOqOib8F93SO9+fEnZcPUJNBlzEc0ADqwIxRLj5aiUy9dVO+PH
4lSUHfG8ODHUeYs3JCQUtV6QnTSLn/xoygfy/fXu5LnYofmynOYR945rzVxMUbfa
P8LQsukqZ3gcuH3504wQTCzxDDzgxT569o5uih/fauLm8uolzeeHHX2w3SafvnCD
yxxuwaDm0RU9hkvcyBHDdW3z14EBm7ICvKHIRMALIPwlpoK+QjvZB3bQdQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHo5zWvPcuBWRV4HQ2BghdOJGu6GMB8GA1UdIwQY
MBaAFDiyICO26tTCloOp/tRJPQPe4saFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMt
NDBkOTViZDMzZmNiLzEvZWpuTmE4OXk0RlpGWGdkRFlHQ0YwNGthN29ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMtNDBkOTViZDMzZmNi
LzEvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUPquMA0G
CSqGSIb3DQEBCwUAA4IBAQAxwwgcoJEBproBCG5gnDrO4XStnmQ3ySs9fiqHY0tM
zIXjntDt7Ba/XEV7GnsklZ89gYLVtS7LtH7Ga+gcKKBlMCeSGcR5LefVWuVeIhYn
9TT0wrzD5YZWJT3YutS/kGcVSP3Ro+m3LaWcnN9xMN/D7mpnowk02rkBR+E4+9qW
3PjhtCsH7bQtKH1Ij258zhIaC4OIz9FktyTHEOQzbLAbSe4RN0UJaRLUpZCVW8tn
XUSVJqStHka1L8RL/kRBFYVsXoAq52ROIwGduuIiup7sfsP6M1vtyOTjrdzrV8aa
1emsHKUPPWqKrZJwgswVO9TAzYZL7nG34XthiCfYKqRt
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:46 2024 by rpki-client on console-fra.rpki-client.org