Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/XAVFmrdYLwWEICCIauV6C7bInUg.roa
File: XAVFmrdYLwWEICCIauV6C7bInUg.roa (raw, json)
Hash identifier: sseIFYw9Hz5duD+QBY8MdBQ1ZrLUmn5vk0lRGz6EtXQ=
Subject key identifier: 5C:05:45:9A:B7:58:2F:05:84:20:20:88:6A:E5:7A:0B:B6:C8:9D:48
Certificate issuer: /CN=ab71e9b13f5c339a58692eeabe72eaa406bbbd7d
Certificate serial: 019232D5B1B3C7991DFFA8C51272541B2361
Authority key identifier: AB:71:E9:B1:3F:5C:33:9A:58:69:2E:EA:BE:72:EA:A4:06:BB:BD:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/XAVFmrdYLwWEICCIauV6C7bInUg.roa
Signing time: Fri 27 Sep 2024 09:35:18 +0000
ROA not before: Fri 27 Sep 2024 09:35:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210574
IP address blocks: 213.142.134.0/24 maxlen: 24
213.142.157.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 16 Oct 2024 21:29:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:32:d5:b1:b3:c7:99:1d:ff:a8:c5:12:72:54:1b:23:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab71e9b13f5c339a58692eeabe72eaa406bbbd7d
Validity
Not Before: Sep 27 09:35:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5c05459ab7582f05842020886ae57a0bb6c89d48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:65:6b:27:26:2c:59:f6:3b:cb:35:dc:f9:1d:
c0:b2:e7:50:26:85:e0:7b:27:7a:08:a4:ef:29:c8:
bd:2f:c5:3d:4e:98:0d:2a:6c:6a:11:f3:7b:41:e2:
05:94:a5:d3:1c:72:e0:1c:78:d0:fc:db:e1:ee:ef:
3d:60:e9:61:33:92:20:9d:60:06:c7:56:01:f9:1a:
aa:e4:17:fc:94:90:3a:18:2f:29:30:47:2b:21:18:
43:51:cc:f9:51:8c:03:08:26:e3:6d:78:fd:e0:47:
16:b2:89:a7:8b:89:11:36:51:96:be:41:f6:e6:5e:
7d:28:4c:ee:16:a5:ee:0f:5e:27:b0:5d:b1:44:39:
9d:17:6a:5d:16:ac:3e:8c:f3:f2:30:13:68:d1:c6:
c6:47:4d:81:ff:3c:aa:18:e0:8e:20:68:c8:ff:b6:
11:a9:54:7a:aa:a8:bc:41:e2:5c:c8:36:e9:94:06:
46:a7:1e:05:01:97:41:b5:93:4c:96:55:ea:1d:3b:
a8:71:a7:c1:11:0a:67:97:96:9f:43:83:d1:63:e2:
6b:52:a5:31:bf:ea:34:9e:64:19:59:a1:b3:ce:b0:
a6:00:d7:c2:6f:23:c8:10:9a:9d:96:1c:4a:cc:8b:
85:3f:bf:9d:f4:89:bb:52:08:7f:a9:3e:52:cf:38:
d6:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:05:45:9A:B7:58:2F:05:84:20:20:88:6A:E5:7A:0B:B6:C8:9D:48
X509v3 Authority Key Identifier:
keyid:AB:71:E9:B1:3F:5C:33:9A:58:69:2E:EA:BE:72:EA:A4:06:BB:BD:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/XAVFmrdYLwWEICCIauV6C7bInUg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.142.134.0/24
213.142.157.0/24
Signature Algorithm: sha256WithRSAEncryption
03:1f:74:1a:b6:43:8d:fd:2f:e7:6c:13:6f:f5:a8:c4:ed:4e:
61:25:23:73:81:be:94:c9:cc:54:b5:75:23:45:51:f1:f3:f3:
d4:54:ce:46:89:3d:cd:35:af:e3:54:7b:43:95:63:3f:09:36:
47:b7:83:63:a0:fd:d6:f6:ee:fe:99:dc:6b:b0:2e:94:1a:2c:
08:d7:84:c8:ff:b9:9b:e6:38:4a:72:7b:0f:e9:98:35:48:ea:
81:3f:c5:e9:bf:56:d4:d7:34:ae:5d:e8:bd:7d:09:a8:1f:f9:
c2:fc:5f:20:d9:c5:ff:3c:5a:c3:96:db:06:af:b7:fb:4f:75:
3a:1b:6f:5d:2c:99:33:b1:71:aa:ff:68:17:91:19:e0:97:bf:
7d:ac:76:86:da:25:4e:f7:c2:70:25:c5:54:54:20:75:3f:f6:
d1:b4:2a:f1:f4:11:2c:ee:e9:b1:3a:be:c3:1f:d7:ce:36:d5:
fd:b5:8f:60:1a:15:d0:93:19:f9:3f:c4:b0:0a:68:76:48:bc:
cb:df:c7:24:95:98:0e:5d:b3:31:6f:c8:a6:1b:12:bd:cb:e2:
6d:36:29:6c:61:a2:94:a9:de:fd:e7:6d:f2:34:df:da:ef:b6:
fd:7d:1f:84:0d:74:e3:3b:e9:81:13:cb:84:35:22:b8:94:4a:
09:79:74:59
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZIy1bGzx5kd/6jFEnJUGyNhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiNzFlOWIxM2Y1YzMzOWE1ODY5MmVlYWJlNzJlYWE0MDZi
YmJkN2QwHhcNMjQwOTI3MDkzNTE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YzA1NDU5YWI3NTgyZjA1ODQyMDIwODg2YWU1N2EwYmI2Yzg5ZDQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWVrJyYsWfY7yzXc+R3AsudQJoXg
eyd6CKTvKci9L8U9TpgNKmxqEfN7QeIFlKXTHHLgHHjQ/Nvh7u89YOlhM5IgnWAG
x1YB+Rqq5Bf8lJA6GC8pMEcrIRhDUcz5UYwDCCbjbXj94EcWsomni4kRNlGWvkH2
5l59KEzuFqXuD14nsF2xRDmdF2pdFqw+jPPyMBNo0cbGR02B/zyqGOCOIGjI/7YR
qVR6qqi8QeJcyDbplAZGpx4FAZdBtZNMllXqHTuocafBEQpnl5afQ4PRY+JrUqUx
v+o0nmQZWaGzzrCmANfCbyPIEJqdlhxKzIuFP7+d9Im7Ugh/qT5SzzjWzwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFwFRZq3WC8FhCAgiGrlegu2yJ1IMB8GA1UdIwQY
MBaAFKtx6bE/XDOaWGku6r5y6qQGu719MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTNIcHNUOWNNNXBZYVM3cXZuTHFwQWE3dlgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS82YmEzOWMtZWYxZC00ZDQ4LTk4MmIt
Y2Y0YjkwMDk5N2EwLzEvWEFWRm1yZFlMd1dFSUNDSWF1VjZDN2JJblVnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS82YmEzOWMtZWYxZC00ZDQ4LTk4MmItY2Y0YjkwMDk5N2Ew
LzEvcTNIcHNUOWNNNXBZYVM3cXZuTHFwQWE3dlgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA1Y6GAwQA
1Y6dMA0GCSqGSIb3DQEBCwUAA4IBAQADH3QatkON/S/nbBNv9ajE7U5hJSNzgb6U
ycxUtXUjRVHx8/PUVM5GiT3NNa/jVHtDlWM/CTZHt4NjoP3W9u7+mdxrsC6UGiwI
14TI/7mb5jhKcnsP6Zg1SOqBP8Xpv1bU1zSuXei9fQmoH/nC/F8g2cX/PFrDltsG
r7f7T3U6G29dLJkzsXGq/2gXkRngl799rHaG2iVO98JwJcVUVCB1P/bRtCrx9BEs
7umxOr7DH9fONtX9tY9gGhXQkxn5P8SwCmh2SLzL38cklZgOXbMxb8imGxK9y+Jt
NilsYaKUqd79523yNN/a77b9fR+EDXTjO+mBE8uENSK4lEoJeXRZ
-----END CERTIFICATE-----
Generated at Wed Oct 16 22:12:23 2024 by rpki-client on console-fra.rpki-client.org