Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/fVCCp4rNT51CctyurHbLXad133I.roa
File: fVCCp4rNT51CctyurHbLXad133I.roa (raw, json)
Hash identifier: NLEJ9eoQRbWMKT9nLcwDzjGaV+/vGXROZUUOY88bMT8=
Subject key identifier: 7D:50:82:A7:8A:CD:4F:9D:42:72:DC:AE:AC:76:CB:5D:A7:75:DF:72
Certificate issuer: /CN=eab476f677cd0c3298d2811e60f48e1b29b3afef
Certificate serial: 01857343C2E1C1C05A23042CE6F8318D22AB
Authority key identifier: EA:B4:76:F6:77:CD:0C:32:98:D2:81:1E:60:F4:8E:1B:29:B3:AF:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6rR29nfNDDKY0oEeYPSOGymzr-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/fVCCp4rNT51CctyurHbLXad133I.roa
Signing time: Mon 02 Jan 2023 16:14:58 +0000
ROA not before: Mon 02 Jan 2023 16:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47176
IP address blocks: 185.70.48.0/22 maxlen: 22
185.70.48.0/24 maxlen: 24
93.190.75.0/24 maxlen: 24
93.190.72.0/21 maxlen: 21
2a05:2740::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:43:c2:e1:c1:c0:5a:23:04:2c:e6:f8:31:8d:22:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eab476f677cd0c3298d2811e60f48e1b29b3afef
Validity
Not Before: Jan 2 16:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7d5082a78acd4f9d4272dcaeac76cb5da775df72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9c:ad:4c:58:81:cb:a9:b4:52:d6:cd:3b:a0:
2b:5e:e4:26:c8:4d:37:85:71:fc:e4:0f:68:57:19:
9e:b5:bb:c7:2d:94:5f:82:96:2a:df:b7:34:fd:e5:
ce:dd:c7:22:3c:1d:f9:d2:07:a8:7f:b6:93:57:eb:
10:7a:ca:58:79:2f:72:d9:2f:76:9c:17:30:9b:97:
97:45:95:eb:10:8a:4d:8c:2c:7b:34:61:a0:ed:b7:
11:8a:6b:ab:86:6b:d1:71:86:9d:5c:2c:4f:9c:4e:
56:76:c5:58:8f:52:ee:65:05:0d:cf:a2:78:88:8b:
0d:c6:c2:7a:19:e3:d3:09:e3:94:62:ee:27:56:0e:
88:1b:31:59:76:db:bc:bb:83:3e:fa:e4:8b:6f:7f:
13:b5:e8:a8:05:69:ba:e5:9a:19:74:b9:be:56:4f:
f7:72:e0:b4:d1:f1:8f:6d:10:d9:4f:19:3a:94:af:
22:a0:64:1b:c3:fa:23:6f:6b:a5:45:2c:ce:56:19:
58:7b:71:d7:ee:4b:7d:a4:a9:08:e1:6e:64:08:4a:
c1:16:00:bc:c6:a4:14:6e:f3:8f:e9:f4:34:a4:28:
1d:a1:3e:9a:84:c4:35:cd:d7:ae:04:10:86:59:84:
bd:59:78:95:34:1f:68:ef:4b:eb:a3:76:a1:43:3c:
62:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:50:82:A7:8A:CD:4F:9D:42:72:DC:AE:AC:76:CB:5D:A7:75:DF:72
X509v3 Authority Key Identifier:
keyid:EA:B4:76:F6:77:CD:0C:32:98:D2:81:1E:60:F4:8E:1B:29:B3:AF:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6rR29nfNDDKY0oEeYPSOGymzr-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/fVCCp4rNT51CctyurHbLXad133I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.190.72.0/21
185.70.48.0/22
IPv6:
2a05:2740::/29
Signature Algorithm: sha256WithRSAEncryption
38:02:71:2c:66:5f:af:e0:5a:39:3a:69:87:93:99:ab:12:a6:
fc:56:45:d2:bc:b8:77:4d:cf:c4:e0:d8:93:c0:fd:4e:c2:8e:
6e:76:c8:4c:b8:be:ac:10:ee:98:56:bd:95:83:10:9f:6b:f2:
cc:fe:5c:00:99:3e:69:4a:31:c7:bd:58:4a:c7:f5:6e:97:91:
9e:ec:67:02:47:8f:6f:c9:32:9b:e5:d3:59:da:6b:0c:a1:6c:
a8:82:20:84:ba:99:68:7b:42:69:bd:37:6b:0d:4d:4e:8f:d7:
35:93:38:d9:d4:21:d6:08:62:07:38:6f:cb:d9:5b:27:45:9e:
39:8d:94:8f:7f:79:50:aa:fd:1e:99:e1:ff:ff:3e:f4:cd:ee:
57:2b:0d:82:1f:c0:5f:88:a0:34:3c:86:43:12:d4:a5:46:8d:
8b:2f:f9:e2:ff:4e:9d:ef:b4:3c:ba:e3:6b:8a:c3:eb:48:ca:
61:3a:e1:c0:15:c8:f3:11:20:64:5b:83:43:c1:f2:d9:1a:e4:
aa:3d:d9:67:80:87:a0:c0:17:63:55:84:52:6a:4b:5f:5f:a1:
7d:96:97:7b:e7:26:71:3b:52:8e:d5:fd:ce:94:51:3d:28:56:
5d:93:c1:b3:c2:d7:a7:8e:84:ed:93:a0:42:00:b0:72:f5:4b:
f1:72:65:ae
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYVzQ8LhwcBaIwQs5vgxjSKrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhYjQ3NmY2NzdjZDBjMzI5OGQyODExZTYwZjQ4ZTFiMjli
M2FmZWYwHhcNMjMwMTAyMTYxNDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZDUwODJhNzhhY2Q0ZjlkNDI3MmRjYWVhYzc2Y2I1ZGE3NzVkZjcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZytTFiBy6m0UtbNO6ArXuQmyE03
hXH85A9oVxmetbvHLZRfgpYq37c0/eXO3cciPB350geof7aTV+sQespYeS9y2S92
nBcwm5eXRZXrEIpNjCx7NGGg7bcRimurhmvRcYadXCxPnE5WdsVYj1LuZQUNz6J4
iIsNxsJ6GePTCeOUYu4nVg6IGzFZdtu8u4M++uSLb38TteioBWm65ZoZdLm+Vk/3
cuC00fGPbRDZTxk6lK8ioGQbw/ojb2ulRSzOVhlYe3HX7kt9pKkI4W5kCErBFgC8
xqQUbvOP6fQ0pCgdoT6ahMQ1zdeuBBCGWYS9WXiVNB9o70vro3ahQzxiEwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFH1QgqeKzU+dQnLcrqx2y12ndd9yMB8GA1UdIwQY
MBaAFOq0dvZ3zQwymNKBHmD0jhsps6/vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnJSMjluZk5EREtZMG9FZVlQU09HeW16ci04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi82NTdhOTItNjIyMC00NDI1LTg4OTkt
MDdmMTk1MGQ4ODk0LzEvZlZDQ3A0ck5UNTFDY3R5dXJIYkxYYWQxMzNJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi82NTdhOTItNjIyMC00NDI1LTg4OTktMDdmMTk1MGQ4ODk0
LzEvNnJSMjluZk5EREtZMG9FZVlQU09HeW16ci04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDXb5IAwQC
uUYwMA0EAgACMAcDBQMqBSdAMA0GCSqGSIb3DQEBCwUAA4IBAQA4AnEsZl+v4Fo5
OmmHk5mrEqb8VkXSvLh3Tc/E4NiTwP1Owo5udshMuL6sEO6YVr2VgxCfa/LM/lwA
mT5pSjHHvVhKx/Vul5Ge7GcCR49vyTKb5dNZ2msMoWyogiCEuploe0JpvTdrDU1O
j9c1kzjZ1CHWCGIHOG/L2VsnRZ45jZSPf3lQqv0emeH//z70ze5XKw2CH8BfiKA0
PIZDEtSlRo2LL/ni/06d77Q8uuNrisPrSMphOuHAFcjzESBkW4NDwfLZGuSqPdln
gIegwBdjVYRSaktfX6F9lpd75yZxO1KO1f3OlFE9KFZdk8GzwtenjoTtk6BCALBy
9UvxcmWu
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:51 2024 by rpki-client on console-fra.rpki-client.org