Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/ekFZlPZxdbB-i_X_xBUVCEG80Ww.roa
File: ekFZlPZxdbB-i_X_xBUVCEG80Ww.roa (raw, json)
Hash identifier: n3mVLP0txvLlI45+vXtAr0mNIr4lX5QSq1P84aU5XKw=
Subject key identifier: 7A:41:59:94:F6:71:75:B0:7E:8B:F5:FF:C4:15:15:08:41:BC:D1:6C
Certificate issuer: /CN=21a00080cd2cb1bb073903b32b25ad660a366486
Certificate serial: 018CED5DA683F87A05A263353BBC9541C9FA
Authority key identifier: 21:A0:00:80:CD:2C:B1:BB:07:39:03:B3:2B:25:AD:66:0A:36:64:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/ekFZlPZxdbB-i_X_xBUVCEG80Ww.roa
Signing time: Tue 09 Jan 2024 08:36:26 +0000
ROA not before: Tue 09 Jan 2024 08:36:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51167
IP address blocks: 213.109.76.0/23 maxlen: 23
91.239.43.0/24 maxlen: 24
195.191.65.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 10 Jan 2024 20:44:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ed:5d:a6:83:f8:7a:05:a2:63:35:3b:bc:95:41:c9:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21a00080cd2cb1bb073903b32b25ad660a366486
Validity
Not Before: Jan 9 08:36:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7a415994f67175b07e8bf5ffc415150841bcd16c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9e:e0:87:74:30:df:7d:67:73:b3:a1:8b:e8:
57:60:82:26:2b:08:36:f4:0f:c4:d1:29:73:ca:66:
7d:33:d7:b1:6c:de:3c:56:ab:a5:32:a2:3a:55:0d:
07:f1:f3:d5:1a:42:1c:35:ae:69:41:00:62:85:f7:
95:b2:55:7d:e5:77:41:de:0f:e8:13:a6:4d:96:80:
26:4a:93:13:30:ef:14:ab:d0:22:bc:af:10:13:6d:
1d:63:b5:5c:0b:d1:d4:3d:70:6c:9b:07:63:66:d6:
ec:f6:cd:b1:9c:a0:23:80:34:a7:79:17:cc:c7:75:
17:01:9d:44:48:7f:77:cb:88:ad:0b:f2:5e:f4:58:
c4:fe:76:73:2a:d1:fd:71:52:ad:df:37:2d:64:e9:
c3:bd:d8:0c:9f:43:81:02:37:ee:5f:5d:a4:24:2a:
00:46:ee:30:46:09:58:7c:9f:46:69:c7:24:72:61:
65:e0:7e:6d:49:2f:de:1c:a7:8a:64:4e:dd:b9:b7:
86:1a:0f:9f:ed:32:b2:a5:19:62:bd:15:4d:f2:7a:
bb:df:b9:74:fe:93:9a:36:f8:5e:0d:d0:b4:4a:bd:
9d:0d:2c:76:bf:10:ed:11:44:fa:21:ee:0a:d1:99:
91:fa:22:4c:9d:fd:61:58:b7:47:12:db:83:26:e5:
1c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:41:59:94:F6:71:75:B0:7E:8B:F5:FF:C4:15:15:08:41:BC:D1:6C
X509v3 Authority Key Identifier:
keyid:21:A0:00:80:CD:2C:B1:BB:07:39:03:B3:2B:25:AD:66:0A:36:64:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/ekFZlPZxdbB-i_X_xBUVCEG80Ww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.43.0/24
195.191.65.0/24
213.109.76.0/23
Signature Algorithm: sha256WithRSAEncryption
4b:92:86:c7:34:9d:b6:4f:8e:98:d6:f1:47:74:92:e0:1c:d1:
34:38:f1:a1:24:a2:b2:43:f3:c4:22:c2:89:25:0c:66:c3:7a:
b8:fd:40:a7:1e:43:73:ab:fc:32:81:6c:ab:f8:db:a1:27:b8:
2f:0a:29:1c:6d:f7:d1:b5:a2:e8:9c:16:58:51:ef:10:17:e8:
d0:eb:38:ef:76:f7:9d:c8:28:30:72:72:20:d7:f4:c8:d4:5a:
56:f1:b5:8e:34:79:22:c5:28:5b:a6:dc:13:98:62:5e:93:f2:
3e:50:d8:c4:ce:7c:4b:e0:5f:e6:b0:88:8e:fc:ae:21:93:81:
58:9e:1d:a1:2c:03:0d:1d:65:eb:ca:58:95:a7:97:32:0d:5e:
dc:a4:06:d0:e0:1c:65:32:9d:5f:92:c6:49:44:45:22:84:5c:
f3:a1:48:af:90:ae:ed:fe:cf:0d:14:0d:fe:92:62:e3:9f:d5:
d1:ab:bd:3c:14:3e:67:80:96:99:08:66:89:29:53:be:e1:d5:
ea:ee:67:0b:4a:56:46:6b:7a:eb:39:d2:e3:3d:06:77:5e:1a:
4a:f7:c3:6f:24:6c:0f:c8:e4:f1:7c:14:2a:7c:1a:45:54:2b:
cc:19:78:27:ca:70:f8:3c:7b:92:41:27:93:26:9e:95:8d:fd:
75:2c:00:f6
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYztXaaD+HoFomM1O7yVQcn6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxYTAwMDgwY2QyY2IxYmIwNzM5MDNiMzJiMjVhZDY2MGEz
NjY0ODYwHhcNMjQwMTA5MDgzNjI2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YTQxNTk5NGY2NzE3NWIwN2U4YmY1ZmZjNDE1MTUwODQxYmNkMTZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs57gh3Qw331nc7Ohi+hXYIImKwg2
9A/E0SlzymZ9M9exbN48VqulMqI6VQ0H8fPVGkIcNa5pQQBihfeVslV95XdB3g/o
E6ZNloAmSpMTMO8Uq9AivK8QE20dY7VcC9HUPXBsmwdjZtbs9s2xnKAjgDSneRfM
x3UXAZ1ESH93y4itC/Je9FjE/nZzKtH9cVKt3zctZOnDvdgMn0OBAjfuX12kJCoA
Ru4wRglYfJ9GacckcmFl4H5tSS/eHKeKZE7dubeGGg+f7TKypRlivRVN8nq737l0
/pOaNvheDdC0Sr2dDSx2vxDtEUT6Ie4K0ZmR+iJMnf1hWLdHEtuDJuUcTQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFHpBWZT2cXWwfov1/8QVFQhBvNFsMB8GA1UdIwQY
MBaAFCGgAIDNLLG7BzkDsyslrWYKNmSGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWFBQWdNMHNzYnNIT1FPekt5V3RaZ28yWklZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy82YzNkOWYtOGE0Zi00YTZjLTg1Nzkt
ZTkyZWNlNGQzY2IzLzEvZWtGWmxQWnhkYkItaV9YX3hCVVZDRUc4MFd3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy82YzNkOWYtOGE0Zi00YTZjLTg1NzktZTkyZWNlNGQzY2Iz
LzEvSWFBQWdNMHNzYnNIT1FPekt5V3RaZ28yWklZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAW+8rAwQA
w79BAwQB1W1MMA0GCSqGSIb3DQEBCwUAA4IBAQBLkobHNJ22T46Y1vFHdJLgHNE0
OPGhJKKyQ/PEIsKJJQxmw3q4/UCnHkNzq/wygWyr+NuhJ7gvCikcbffRtaLonBZY
Ue8QF+jQ6zjvdvedyCgwcnIg1/TI1FpW8bWONHkixShbptwTmGJek/I+UNjEznxL
4F/msIiO/K4hk4FYnh2hLAMNHWXryliVp5cyDV7cpAbQ4BxlMp1fksZJREUihFzz
oUivkK7t/s8NFA3+kmLjn9XRq708FD5ngJaZCGaJKVO+4dXq7mcLSlZGa3rrOdLj
PQZ3XhpK98NvJGwPyOTxfBQqfBpFVCvMGXgnynD4PHuSQSeTJp6Vjf11LAD2
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:22 2024 by rpki-client on console-fra.rpki-client.org