Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/TxW8tTCeSmLA92jHFEJRGWZBZLM.roa
File: TxW8tTCeSmLA92jHFEJRGWZBZLM.roa (raw, json)
Hash identifier: TTdoxdcy5HMWW/3w9vdCf/JYhFG+jmS0t8B/AKgkxqI=
Subject key identifier: 4F:15:BC:B5:30:9E:4A:62:C0:F7:68:C7:14:42:51:19:66:41:64:B3
Certificate issuer: /CN=b32c9c26df7ccd8ad38d89bd5d49380b93b1e009
Certificate serial: 0189A0F301A6653A3E4C8498B08F7A894127
Authority key identifier: B3:2C:9C:26:DF:7C:CD:8A:D3:8D:89:BD:5D:49:38:0B:93:B1:E0:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/syycJt98zYrTjYm9XUk4C5Ox4Ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/TxW8tTCeSmLA92jHFEJRGWZBZLM.roa
Signing time: Sat 29 Jul 2023 09:20:27 +0000
ROA not before: Sat 29 Jul 2023 09:20:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43641
IP address blocks: 91.234.198.0/23 maxlen: 24
91.234.199.0/24 maxlen: 24
195.26.86.0/23 maxlen: 24
45.11.56.0/24 maxlen: 24
45.11.59.0/24 maxlen: 24
91.222.172.0/22 maxlen: 24
45.134.174.0/24 maxlen: 24
45.134.175.0/24 maxlen: 24
185.254.199.0/24 maxlen: 24
2a09:2dc1::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 04 Aug 2023 07:02:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:a0:f3:01:a6:65:3a:3e:4c:84:98:b0:8f:7a:89:41:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b32c9c26df7ccd8ad38d89bd5d49380b93b1e009
Validity
Not Before: Jul 29 09:20:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4f15bcb5309e4a62c0f768c714425119664164b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:06:1a:12:bc:d2:f9:89:d7:f5:22:58:04:c3:
16:36:8f:e6:93:ef:48:45:ac:2c:c0:14:b7:89:0d:
69:99:99:23:ec:3d:03:42:57:f7:89:42:5d:cb:b6:
98:be:a6:9f:05:50:0a:4b:f1:39:fe:79:c4:13:70:
57:84:d2:08:a4:82:d9:f2:b7:97:27:6b:9e:54:79:
5a:46:37:74:2c:db:f6:a5:27:61:2c:a7:68:f8:32:
46:93:14:ba:5b:ad:c4:c9:75:69:7e:6d:19:ef:02:
52:6f:65:0c:06:cf:1e:03:59:4d:2e:1e:86:73:50:
fa:24:ff:e6:a8:2e:42:e9:92:19:a1:a5:3d:56:25:
c7:b4:68:52:1a:1e:f7:85:15:8b:32:29:ec:cf:4b:
42:d1:0e:39:1a:0b:54:60:44:5d:f1:04:8a:ce:3f:
36:2a:28:c5:16:c4:d6:25:1a:2a:28:6b:78:ac:08:
5d:ac:2a:1e:76:03:1c:a4:e2:dc:53:d5:5c:4b:fc:
18:20:e4:98:2b:4b:e2:62:c7:fc:ce:ef:fc:04:99:
97:78:04:14:89:22:0a:e3:7f:a8:bc:cf:db:85:9e:
fd:66:81:c2:b2:eb:b1:66:45:3f:79:03:95:df:76:
2c:05:7b:07:07:37:ac:25:5b:05:c2:12:c4:89:1a:
91:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:15:BC:B5:30:9E:4A:62:C0:F7:68:C7:14:42:51:19:66:41:64:B3
X509v3 Authority Key Identifier:
keyid:B3:2C:9C:26:DF:7C:CD:8A:D3:8D:89:BD:5D:49:38:0B:93:B1:E0:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/syycJt98zYrTjYm9XUk4C5Ox4Ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/TxW8tTCeSmLA92jHFEJRGWZBZLM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.56.0/24
45.11.59.0/24
45.134.174.0/23
91.222.172.0/22
91.234.198.0/23
185.254.199.0/24
195.26.86.0/23
IPv6:
2a09:2dc1::/32
Signature Algorithm: sha256WithRSAEncryption
4e:fb:00:b2:ac:00:41:0b:53:31:d5:31:ed:0a:78:48:94:72:
ff:eb:c9:f2:d9:17:ec:47:c2:9f:25:fa:ae:23:94:cb:36:1b:
0f:6f:6e:cd:22:bc:01:35:c6:40:c1:76:33:db:0c:99:fa:22:
00:84:a4:05:1e:29:20:91:64:32:3f:96:65:13:7e:3e:d5:dd:
77:29:95:f0:fe:d8:7d:e0:26:f9:83:84:53:25:e5:5c:95:50:
2f:3d:e5:d7:3d:01:21:e1:e5:9e:33:5e:10:ef:cc:a4:6a:9c:
a7:a7:31:72:1d:40:e6:53:25:19:8c:51:fb:b0:d8:96:c8:d5:
db:69:19:af:13:92:3b:6d:0f:61:7f:52:d0:00:30:81:cf:86:
3f:43:78:ac:7a:f9:a5:5c:ca:e6:b0:08:e8:fe:80:23:00:ee:
6d:27:17:4c:53:60:17:98:20:40:a1:3b:c8:a8:90:e5:6f:41:
e5:f5:7a:61:ac:bf:7a:8a:82:0f:a7:f8:6b:ad:d4:13:2e:a5:
78:1e:53:0c:99:54:a6:d0:84:e4:3c:f5:af:7f:dc:39:ee:66:
2a:5f:c3:6f:93:b3:9d:73:a8:2f:29:af:e7:41:04:9a:6d:e2:
4a:a5:63:83:dc:bf:34:72:11:43:12:86:8d:ac:9a:4a:9c:74:
b9:a0:73:16
-----BEGIN CERTIFICATE-----
MIIFMDCCBBigAwIBAgISAYmg8wGmZTo+TISYsI96iUEnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzMmM5YzI2ZGY3Y2NkOGFkMzhkODliZDVkNDkzODBiOTNi
MWUwMDkwHhcNMjMwNzI5MDkyMDI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZjE1YmNiNTMwOWU0YTYyYzBmNzY4YzcxNDQyNTExOTY2NDE2NGIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwYaErzS+YnX9SJYBMMWNo/mk+9I
RawswBS3iQ1pmZkj7D0DQlf3iUJdy7aYvqafBVAKS/E5/nnEE3BXhNIIpILZ8reX
J2ueVHlaRjd0LNv2pSdhLKdo+DJGkxS6W63EyXVpfm0Z7wJSb2UMBs8eA1lNLh6G
c1D6JP/mqC5C6ZIZoaU9ViXHtGhSGh73hRWLMinsz0tC0Q45GgtUYERd8QSKzj82
KijFFsTWJRoqKGt4rAhdrCoedgMcpOLcU9VcS/wYIOSYK0viYsf8zu/8BJmXeAQU
iSIK43+ovM/bhZ79ZoHCsuuxZkU/eQOV33YsBXsHBzesJVsFwhLEiRqRHwIDAQAB
o4ICPDCCAjgwHQYDVR0OBBYEFE8VvLUwnkpiwPdoxxRCURlmQWSzMB8GA1UdIwQY
MBaAFLMsnCbffM2K042JvV1JOAuTseAJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3l5Y0p0OTh6WXJUalltOVhVazRDNU94NEFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9kNWRhMGMtOWNmMy00ZjhiLWE1NjIt
Y2IxMWJjNWIyZjFiLzEvVHhXOHRUQ2VTbUxBOTJqSEZFSlJHV1pCWkxNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC9kNWRhMGMtOWNmMy00ZjhiLWE1NjItY2IxMWJjNWIyZjFi
LzEvc3l5Y0p0OTh6WXJUalltOVhVazRDNU94NEFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFIGCCsGAQUFBwEHAQH/BEMwQTAwBAIAATAqAwQALQs4AwQA
LQs7AwQBLYauAwQCW96sAwQBW+rGAwQAuf7HAwQBwxpWMA0EAgACMAcDBQAqCS3B
MA0GCSqGSIb3DQEBCwUAA4IBAQBO+wCyrABBC1Mx1THtCnhIlHL/68ny2RfsR8Kf
JfquI5TLNhsPb27NIrwBNcZAwXYz2wyZ+iIAhKQFHikgkWQyP5ZlE34+1d13KZXw
/th94Cb5g4RTJeVclVAvPeXXPQEh4eWeM14Q78ykapynpzFyHUDmUyUZjFH7sNiW
yNXbaRmvE5I7bQ9hf1LQADCBz4Y/Q3isevmlXMrmsAjo/oAjAO5tJxdMU2AXmCBA
oTvIqJDlb0Hl9XphrL96ioIPp/hrrdQTLqV4HlMMmVSm0ITkPPWvf9w57mYqX8Nv
k7Odc6gvKa/nQQSabeJKpWOD3L80chFDEoaNrJpKnHS5oHMW
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:21 2024 by rpki-client on console-fra.rpki-client.org