Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/T9WZcftwojPTK019iEaXQd_c-GQ.roa
File: T9WZcftwojPTK019iEaXQd_c-GQ.roa (raw, json)
Hash identifier: h7xMDwM9bupRi1xBHXER9+ekIqwL88CgC/YFszBPynI=
Subject key identifier: 4F:D5:99:71:FB:70:A2:33:D3:2B:4D:7D:88:46:97:41:DF:DC:F8:64
Certificate issuer: /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Certificate serial: 019150004149F9B21A3ADD19B57BB6010212
Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/T9WZcftwojPTK019iEaXQd_c-GQ.roa
Signing time: Wed 14 Aug 2024 08:27:59 +0000
ROA not before: Wed 14 Aug 2024 08:27:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6747
IP address blocks: 80.233.136.0/24 maxlen: 24
81.198.93.0/24 maxlen: 24
2a02:16d8:105:9::/64 maxlen: 64
Validation: Failed, certificate revoked on Wed 14 Aug 2024 12:43:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:50:00:41:49:f9:b2:1a:3a:dd:19:b5:7b:b6:01:02:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Validity
Not Before: Aug 14 08:27:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4fd59971fb70a233d32b4d7d88469741dfdcf864
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b4:59:7c:00:88:c3:29:74:16:bd:d4:83:6a:
1b:ab:48:e5:5c:63:f5:a2:39:d0:f6:c1:0f:e1:07:
b7:bf:d2:f4:cd:43:75:63:a3:af:7d:39:65:8b:d0:
cd:e1:4d:23:5e:71:d6:15:d2:c4:64:3f:ed:c0:4a:
ca:c1:64:1f:8f:bf:fb:c3:91:7f:b1:e2:e3:04:4e:
36:68:48:aa:cd:04:aa:dd:f3:ee:bb:c8:49:1f:87:
63:0f:1f:fb:52:46:c5:3e:8e:c6:f2:d2:09:6e:60:
aa:ca:94:d7:59:a5:02:32:c4:d6:8a:bc:0a:be:1a:
05:a9:25:5a:52:f4:d2:00:ba:67:2a:78:3b:d2:bd:
54:d2:74:f2:34:7d:34:2d:d7:e5:d6:3e:d7:96:3d:
b0:44:ab:45:44:6f:cc:fd:de:8e:dc:7f:86:2a:8d:
74:63:06:ef:b3:a3:16:c1:34:c3:60:3b:d2:92:94:
cf:e6:e4:07:cb:bd:ac:55:7b:9f:3e:1b:e2:89:08:
35:4e:0f:48:f9:87:e2:30:c2:49:8a:f9:ce:ec:54:
05:a9:a5:d5:8d:74:e4:84:a9:48:3d:81:32:74:60:
14:8b:7f:64:9f:4e:26:d3:75:8c:8c:26:f2:2b:e3:
8b:ca:37:2c:80:8b:ff:cc:72:89:12:c8:24:73:cc:
15:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:D5:99:71:FB:70:A2:33:D3:2B:4D:7D:88:46:97:41:DF:DC:F8:64
X509v3 Authority Key Identifier:
keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/T9WZcftwojPTK019iEaXQd_c-GQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.233.136.0/24
81.198.93.0/24
IPv6:
2a02:16d8:105:9::/64
Signature Algorithm: sha256WithRSAEncryption
75:6d:2e:83:8f:15:9b:8f:5e:0f:07:cd:ad:42:b3:04:1d:fa:
14:78:d0:6e:41:b9:56:13:e0:b1:5b:08:0f:bc:85:66:89:8b:
26:cc:15:a6:d0:4a:be:aa:0c:27:6f:9a:f9:e4:1e:f8:e9:c9:
7e:c6:e6:00:f9:0b:74:23:e2:58:1a:bb:71:b6:9b:e6:6c:d9:
7a:65:fb:7c:49:41:65:29:a1:93:e2:47:f2:7f:59:c5:91:e9:
19:cc:f1:59:ff:85:94:b0:85:c4:10:33:44:b1:57:40:56:89:
1d:88:05:51:6f:8f:88:59:01:08:21:46:6e:31:c3:12:91:f3:
96:bc:ac:ee:8d:11:2c:cd:52:70:69:d9:24:cc:12:16:06:7b:
f0:ba:25:f0:86:88:48:03:60:71:35:27:59:4f:44:e5:47:65:
7f:76:1f:99:1c:de:df:67:78:8b:a5:ec:63:58:1c:87:0a:b1:
a6:14:02:dc:af:61:a9:52:36:6a:b7:48:ea:b6:51:8f:8a:89:
dc:2a:76:e9:d0:bb:a6:01:85:e6:2a:3f:8b:f2:60:03:77:34:
d4:1c:89:3b:59:18:20:3d:6c:f0:dd:36:c4:9b:8e:87:e3:f7:
5e:de:bd:94:bc:90:45:05:20:30:8e:79:20:db:6e:92:7e:65:
3f:d2:ab:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZFQAEFJ+bIaOt0ZtXu2AQISMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzYmUwN2NiMWZkNGYxZTNjOTIyMzAzYjY3MGE4ODFiODJl
NjE0OTEwHhcNMjQwODE0MDgyNzU5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZmQ1OTk3MWZiNzBhMjMzZDMyYjRkN2Q4ODQ2OTc0MWRmZGNmODY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7RZfACIwyl0Fr3Ug2obq0jlXGP1
ojnQ9sEP4Qe3v9L0zUN1Y6OvfTlli9DN4U0jXnHWFdLEZD/twErKwWQfj7/7w5F/
seLjBE42aEiqzQSq3fPuu8hJH4djDx/7UkbFPo7G8tIJbmCqypTXWaUCMsTWirwK
vhoFqSVaUvTSALpnKng70r1U0nTyNH00Ldfl1j7Xlj2wRKtFRG/M/d6O3H+GKo10
Ywbvs6MWwTTDYDvSkpTP5uQHy72sVXufPhviiQg1Tg9I+YfiMMJJivnO7FQFqaXV
jXTkhKlIPYEydGAUi39kn04m03WMjCbyK+OLyjcsgIv/zHKJEsgkc8wVoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE/VmXH7cKIz0ytNfYhGl0Hf3PhkMB8GA1UdIwQY
MBaAFOO+B8sf1PHjySIwO2cKiBuC5hSRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDc0SHl4X1U4ZVBKSWpBN1p3cUlHNExtRkpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS84ZjVmYWUtZGE5MC00MzE0LWJmZmMt
ZDRlZTFkMzg5ZTBkLzEvVDlXWmNmdHdvalBUSzAxOWlFYVhRZF9jLUdRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS84ZjVmYWUtZGE5MC00MzE0LWJmZmMtZDRlZTFkMzg5ZTBk
LzEvNDc0SHl4X1U4ZVBKSWpBN1p3cUlHNExtRkpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDgGCCsGAQUFBwEHAQH/BCkwJzASBAIAATAMAwQAUOmIAwQA
UcZdMBEEAgACMAsDCQAqAhbYAQUACTANBgkqhkiG9w0BAQsFAAOCAQEAdW0ug48V
m49eDwfNrUKzBB36FHjQbkG5VhPgsVsID7yFZomLJswVptBKvqoMJ2+a+eQe+OnJ
fsbmAPkLdCPiWBq7cbab5mzZemX7fElBZSmhk+JH8n9ZxZHpGczxWf+FlLCFxBAz
RLFXQFaJHYgFUW+PiFkBCCFGbjHDEpHzlrys7o0RLM1ScGnZJMwSFgZ78Lol8IaI
SANgcTUnWU9E5Udlf3YfmRze32d4i6XsY1gchwqxphQC3K9hqVI2ardI6rZRj4qJ
3Cp26dC7pgGF5io/i/JgA3c01ByJO1kYID1s8N02xJuOh+P3Xt69lLyQRQUgMI55
INtukn5lP9KroQ==
-----END CERTIFICATE-----
Generated at Wed Aug 14 15:15:13 2024 by rpki-client on console-ams.rpki-client.org