Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/2klSnuJfkU5ENeGG1XNBE6lx8Bc.roa
File: 2klSnuJfkU5ENeGG1XNBE6lx8Bc.roa (raw, json)
Hash identifier: neasfd7po0uu27ggBkrctTxOckQCY1B4FbN1tmFy2DU=
Subject key identifier: DA:49:52:9E:E2:5F:91:4E:44:35:E1:86:D5:73:41:13:A9:71:F0:17
Certificate issuer: /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Certificate serial: 018A45A65A8260C522C7CA3C6762E1E1E3E8
Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/2klSnuJfkU5ENeGG1XNBE6lx8Bc.roa
Signing time: Wed 30 Aug 2023 08:54:04 +0000
ROA not before: Wed 30 Aug 2023 08:54:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34073
IP address blocks: 87.246.172.0/24 maxlen: 24
81.198.73.0/24 maxlen: 24
81.198.192.0/22 maxlen: 22
81.198.194.0/24 maxlen: 24
87.110.221.0/24 maxlen: 24
87.110.220.0/24 maxlen: 24
2a02:2330:b2::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:45:a6:5a:82:60:c5:22:c7:ca:3c:67:62:e1:e1:e3:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Validity
Not Before: Aug 30 08:54:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=da49529ee25f914e4435e186d5734113a971f017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5b:62:bf:2c:80:8e:47:fb:00:0e:47:07:5e:
25:df:b2:70:90:4b:00:c8:48:bb:f1:2f:e5:d6:99:
30:77:b0:7c:ae:26:2d:b7:40:05:29:d9:da:1d:a7:
1d:88:69:30:77:00:f4:76:3b:28:7f:60:be:cd:4f:
44:27:60:c9:13:fd:4b:7f:bc:d0:7d:01:bd:bd:4a:
c8:8e:08:af:15:27:da:e2:89:4a:8a:a7:6e:60:57:
ad:75:39:68:f6:ef:a4:4c:5c:dd:bc:24:ff:92:08:
1f:8b:2f:37:62:9d:16:7d:e9:96:a7:ee:b8:c0:fe:
7b:e6:20:c4:bf:cb:46:dd:14:e9:0c:ef:23:8f:5f:
0f:87:e0:62:40:e2:2a:51:e8:c5:9a:aa:a3:47:e4:
dc:8d:a4:75:26:d0:93:97:7d:07:89:75:6e:5d:9c:
69:dd:a9:43:75:b7:3e:98:db:81:b5:d0:e3:b7:25:
60:a9:91:ab:b6:02:c1:9a:15:60:1a:b7:51:c0:57:
4d:59:c7:3e:78:f7:97:c9:ae:37:24:92:08:27:dd:
a7:f4:df:ba:4a:ec:42:8f:f6:ba:c2:0e:a6:d0:7e:
18:0f:3d:00:06:7c:57:3d:a7:aa:ed:53:bf:0a:60:
17:87:af:07:3a:f5:19:1a:eb:f7:de:50:50:86:48:
a0:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:49:52:9E:E2:5F:91:4E:44:35:E1:86:D5:73:41:13:A9:71:F0:17
X509v3 Authority Key Identifier:
keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/2klSnuJfkU5ENeGG1XNBE6lx8Bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.198.73.0/24
81.198.192.0/22
87.110.220.0/23
87.246.172.0/24
IPv6:
2a02:2330:b2::/48
Signature Algorithm: sha256WithRSAEncryption
1f:e8:db:ba:43:91:3a:b6:c7:d6:f5:eb:61:e2:de:a0:0a:af:
f8:9c:5e:b1:39:5d:8b:e4:3c:46:cf:c4:72:d3:f5:f7:61:88:
b1:ca:0f:4f:f8:06:4a:51:bc:32:29:6b:84:02:99:2e:c9:52:
42:25:3b:2c:04:49:32:7a:eb:4b:4e:5b:7c:54:75:fb:bb:0a:
0c:e5:8c:f2:64:6f:63:69:6d:7c:5f:7d:f8:5f:a9:8a:e5:17:
b7:cd:5c:8f:1e:c2:46:70:64:d6:5a:df:c1:c1:56:cc:13:fa:
6f:dd:c4:76:a9:53:94:e8:95:2c:c5:55:a5:9e:22:64:a4:ed:
25:b3:b0:15:23:e7:93:4b:7f:c1:3a:5a:c9:1c:1e:46:71:50:
33:f9:ad:bd:f6:1f:d1:e8:f9:f0:2e:2f:88:06:a4:e6:a5:5e:
0d:1c:19:6b:40:eb:32:f5:15:23:29:b1:48:e3:31:e9:c7:88:
9c:a2:56:d4:c1:54:12:9a:f9:95:92:a8:1a:f2:3e:e4:b2:b3:
c3:45:0e:c6:f8:92:ca:a4:f2:3f:df:30:b7:41:9b:8b:71:63:
cd:7a:76:4b:50:e1:5f:6b:56:6a:88:d0:da:c7:5b:d0:20:3a:
eb:06:7b:31:34:50:89:ad:95:93:aa:0e:d4:82:e4:01:91:e4:
a3:93:2e:47
-----BEGIN CERTIFICATE-----
MIIFIDCCBAigAwIBAgISAYpFplqCYMUix8o8Z2Lh4ePoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzYmUwN2NiMWZkNGYxZTNjOTIyMzAzYjY3MGE4ODFiODJl
NjE0OTEwHhcNMjMwODMwMDg1NDA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYTQ5NTI5ZWUyNWY5MTRlNDQzNWUxODZkNTczNDExM2E5NzFmMDE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnltivyyAjkf7AA5HB14l37JwkEsA
yEi78S/l1pkwd7B8riYtt0AFKdnaHacdiGkwdwD0djsof2C+zU9EJ2DJE/1Lf7zQ
fQG9vUrIjgivFSfa4olKiqduYFetdTlo9u+kTFzdvCT/kggfiy83Yp0WfemWp+64
wP575iDEv8tG3RTpDO8jj18Ph+BiQOIqUejFmqqjR+TcjaR1JtCTl30HiXVuXZxp
3alDdbc+mNuBtdDjtyVgqZGrtgLBmhVgGrdRwFdNWcc+ePeXya43JJIIJ92n9N+6
SuxCj/a6wg6m0H4YDz0ABnxXPaeq7VO/CmAXh68HOvUZGuv33lBQhkigMwIDAQAB
o4ICLDCCAigwHQYDVR0OBBYEFNpJUp7iX5FORDXhhtVzQROpcfAXMB8GA1UdIwQY
MBaAFOO+B8sf1PHjySIwO2cKiBuC5hSRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDc0SHl4X1U4ZVBKSWpBN1p3cUlHNExtRkpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS84ZjVmYWUtZGE5MC00MzE0LWJmZmMt
ZDRlZTFkMzg5ZTBkLzEvMmtsU251SmZrVTVFTmVHRzFYTkJFNmx4OEJjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS84ZjVmYWUtZGE5MC00MzE0LWJmZmMtZDRlZTFkMzg5ZTBk
LzEvNDc0SHl4X1U4ZVBKSWpBN1p3cUlHNExtRkpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAeBAIAATAYAwQAUcZJAwQC
UcbAAwQBV27cAwQAV/asMA8EAgACMAkDBwAqAiMwALIwDQYJKoZIhvcNAQELBQAD
ggEBAB/o27pDkTq2x9b162Hi3qAKr/icXrE5XYvkPEbPxHLT9fdhiLHKD0/4BkpR
vDIpa4QCmS7JUkIlOywESTJ660tOW3xUdfu7CgzljPJkb2NpbXxfffhfqYrlF7fN
XI8ewkZwZNZa38HBVswT+m/dxHapU5TolSzFVaWeImSk7SWzsBUj55NLf8E6Wskc
HkZxUDP5rb32H9Ho+fAuL4gGpOalXg0cGWtA6zL1FSMpsUjjMenHiJyiVtTBVBKa
+ZWSqBryPuSys8NFDsb4ksqk8j/fMLdBm4txY816dktQ4V9rVmqI0NrHW9AgOusG
ezE0UImtlZOqDtSC5AGR5KOTLkc=
-----END CERTIFICATE-----
Generated at Fri Sep 15 09:36:46 2023 by rpki-client on console-ams.rpki-client.org