Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/2fa707-dad6-4f95-b5de-fc99d33d3344/1/V8DwN8Fa0SSuGX2x2jqJxXpfgEA.roa
File: V8DwN8Fa0SSuGX2x2jqJxXpfgEA.roa (raw, json)
Hash identifier: u2tpWGHj58b5JY252wc/Zc7cBGvOsee4pPN5v1F7YKA=
Subject key identifier: 57:C0:F0:37:C1:5A:D1:24:AE:19:7D:B1:DA:3A:89:C5:7A:5F:80:40
Certificate issuer: /CN=59d590e2cc14cad844aef15ad5f2d467de8a37fe
Certificate serial: 01856E2FB31CFC692E1D49D0F84082F37D0B
Authority key identifier: 59:D5:90:E2:CC:14:CA:D8:44:AE:F1:5A:D5:F2:D4:67:DE:8A:37:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WdWQ4swUythErvFa1fLUZ96KN_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/2fa707-dad6-4f95-b5de-fc99d33d3344/1/V8DwN8Fa0SSuGX2x2jqJxXpfgEA.roa
Signing time: Sun 01 Jan 2023 16:34:57 +0000
ROA not before: Sun 01 Jan 2023 16:34:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47870
IP address blocks: 93.174.172.0/24 maxlen: 24
93.174.169.0/24 maxlen: 24
93.174.171.0/24 maxlen: 24
93.174.168.0/24 maxlen: 24
93.174.170.0/24 maxlen: 24
93.174.173.0/24 maxlen: 24
2a03:f400:3::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:2f:b3:1c:fc:69:2e:1d:49:d0:f8:40:82:f3:7d:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59d590e2cc14cad844aef15ad5f2d467de8a37fe
Validity
Not Before: Jan 1 16:34:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=57c0f037c15ad124ae197db1da3a89c57a5f8040
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:f8:d4:52:4e:93:04:00:2f:b7:df:7e:3f:f2:
48:13:11:97:30:f0:6d:79:54:31:0b:b8:ad:06:01:
a7:2d:b3:be:23:7e:26:20:44:f2:d8:67:6e:d6:a2:
1b:d3:2d:0b:d1:80:02:77:7d:25:fb:1a:09:be:a0:
af:1f:24:1c:8d:d6:e6:ab:03:ab:fe:56:a2:30:94:
45:07:fd:3f:e7:e0:73:6e:95:e0:21:6f:6e:4e:3e:
35:45:cc:ce:a3:9f:e3:8b:3f:b9:9f:b2:dd:6b:50:
d6:34:fa:ae:59:3e:53:ea:18:57:3d:98:da:9e:5f:
1e:4b:1b:b4:fb:82:2f:37:53:f8:cb:32:f8:d5:a5:
e8:29:8a:18:6e:f7:cd:e7:0d:69:06:06:72:4f:20:
69:83:7b:87:8a:af:11:6d:8a:b1:18:11:a6:5a:b8:
76:97:00:40:0c:7e:c9:d9:3d:31:a7:07:12:8e:7c:
bd:b7:9a:1c:97:75:0b:c5:11:94:2b:c2:16:b4:40:
87:dc:06:20:e1:79:77:54:37:c5:bd:61:5c:74:e3:
e4:95:b0:38:4c:4d:b6:51:8d:46:cc:ca:07:e3:ec:
be:ff:e9:5e:30:58:20:bb:a6:bc:f8:54:78:5b:43:
0c:b9:44:8e:98:68:13:60:52:be:10:7a:9f:7c:84:
01:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:C0:F0:37:C1:5A:D1:24:AE:19:7D:B1:DA:3A:89:C5:7A:5F:80:40
X509v3 Authority Key Identifier:
keyid:59:D5:90:E2:CC:14:CA:D8:44:AE:F1:5A:D5:F2:D4:67:DE:8A:37:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WdWQ4swUythErvFa1fLUZ96KN_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2fa707-dad6-4f95-b5de-fc99d33d3344/1/V8DwN8Fa0SSuGX2x2jqJxXpfgEA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2fa707-dad6-4f95-b5de-fc99d33d3344/1/WdWQ4swUythErvFa1fLUZ96KN_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.174.168.0-93.174.173.255
IPv6:
2a03:f400:3::/48
Signature Algorithm: sha256WithRSAEncryption
55:ac:d2:04:bd:b2:9e:40:9d:a0:56:76:bb:84:86:a6:ca:2b:
01:0d:6a:12:ff:95:a9:0a:e0:0d:bc:6a:98:65:de:83:7d:5d:
16:2f:45:dd:86:a4:31:e5:64:4f:8a:35:9c:54:0b:bf:00:25:
da:ce:b0:b6:f6:0b:c6:1c:85:30:12:52:b4:97:bb:81:a5:84:
9d:49:c8:a6:56:de:b5:ca:a2:17:86:2e:a7:c9:bd:a7:48:ac:
81:9b:bd:32:e3:59:d8:55:f0:34:c7:a0:b7:d6:1d:f1:3b:e7:
c0:bc:7f:96:8f:73:e7:92:84:83:41:d4:1d:a0:36:84:a9:a1:
01:99:5b:d3:b4:f1:fd:a3:66:fa:b9:d4:1d:20:2a:fd:20:13:
85:c8:72:34:b0:39:f4:01:ad:47:51:fe:8b:63:c0:70:0d:f1:
0c:6e:8a:13:c1:a7:c1:7c:c9:72:84:6b:b2:b2:c3:5c:c0:b7:
0d:04:9a:04:20:48:9f:56:f3:52:77:b6:13:98:5c:e4:60:ca:
d4:6b:d2:a3:42:4d:1f:cb:fd:82:25:8e:36:4e:c5:4f:46:08:
cf:14:d8:ce:86:76:4b:ed:f5:da:9b:82:4d:cf:7a:49:25:01:
97:43:9e:aa:53:98:30:f8:5f:8a:7a:7f:8c:15:b6:75:17:1f:
51:83:7d:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYVuL7Mc/GkuHUnQ+ECC830LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5ZDU5MGUyY2MxNGNhZDg0NGFlZjE1YWQ1ZjJkNDY3ZGU4
YTM3ZmUwHhcNMjMwMTAxMTYzNDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1N2MwZjAzN2MxNWFkMTI0YWUxOTdkYjFkYTNhODljNTdhNWY4MDQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgPjUUk6TBAAvt99+P/JIExGXMPBt
eVQxC7itBgGnLbO+I34mIETy2Gdu1qIb0y0L0YACd30l+xoJvqCvHyQcjdbmqwOr
/laiMJRFB/0/5+BzbpXgIW9uTj41RczOo5/jiz+5n7Lda1DWNPquWT5T6hhXPZja
nl8eSxu0+4IvN1P4yzL41aXoKYoYbvfN5w1pBgZyTyBpg3uHiq8RbYqxGBGmWrh2
lwBADH7J2T0xpwcSjny9t5ocl3ULxRGUK8IWtECH3AYg4Xl3VDfFvWFcdOPklbA4
TE22UY1GzMoH4+y+/+leMFggu6a8+FR4W0MMuUSOmGgTYFK+EHqffIQB9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFfA8DfBWtEkrhl9sdo6icV6X4BAMB8GA1UdIwQY
MBaAFFnVkOLMFMrYRK7xWtXy1Gfeijf+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2RXUTRzd1V5dGhFcnZGYTFmTFVaOTZLTl80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi8yZmE3MDctZGFkNi00Zjk1LWI1ZGUt
ZmM5OWQzM2QzMzQ0LzEvVjhEd044RmEwU1N1R1gyeDJqcUp4WHBmZ0VBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi8yZmE3MDctZGFkNi00Zjk1LWI1ZGUtZmM5OWQzM2QzMzQ0
LzEvV2RXUTRzd1V5dGhFcnZGYTFmTFVaOTZLTl80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDgGCCsGAQUFBwEHAQH/BCkwJzAUBAIAATAOMAwDBANdrqgD
BAFdrqwwDwQCAAIwCQMHACoD9AAAAzANBgkqhkiG9w0BAQsFAAOCAQEAVazSBL2y
nkCdoFZ2u4SGpsorAQ1qEv+VqQrgDbxqmGXeg31dFi9F3YakMeVkT4o1nFQLvwAl
2s6wtvYLxhyFMBJStJe7gaWEnUnIplbetcqiF4Yup8m9p0isgZu9MuNZ2FXwNMeg
t9Yd8TvnwLx/lo9z55KEg0HUHaA2hKmhAZlb07Tx/aNm+rnUHSAq/SAThchyNLA5
9AGtR1H+i2PAcA3xDG6KE8GnwXzJcoRrsrLDXMC3DQSaBCBIn1bzUne2E5hc5GDK
1GvSo0JNH8v9giWONk7FT0YIzxTYzoZ2S+312puCTc96SSUBl0OeqlOYMPhfinp/
jBW2dRcfUYN98w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:17 2024 by rpki-client on console-ams.rpki-client.org