Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/7Atd6Qa5oBi90e09mJzDmZn-9R0.roa
File: 7Atd6Qa5oBi90e09mJzDmZn-9R0.roa (raw, json)
Hash identifier: zlpr0YpRFOZC2wreGV9KWBtzty8hUfYzppIEiC69Y34=
Subject key identifier: EC:0B:5D:E9:06:B9:A0:18:BD:D1:ED:3D:98:9C:C3:99:99:FE:F5:1D
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 01856CF8548742BA66B8988EA4A1419BAD76
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/7Atd6Qa5oBi90e09mJzDmZn-9R0.roa
Signing time: Sun 01 Jan 2023 10:54:51 +0000
ROA not before: Sun 01 Jan 2023 10:54:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25374
IP address blocks: 79.124.11.0/24 maxlen: 24
79.124.10.0/24 maxlen: 24
79.124.10.0/23 maxlen: 23
79.124.12.0/24 maxlen: 24
79.124.19.0/24 maxlen: 24
79.124.18.0/23 maxlen: 23
79.124.18.0/24 maxlen: 24
79.124.46.0/24 maxlen: 24
130.185.230.0/23 maxlen: 23
130.185.230.0/24 maxlen: 24
130.185.233.0/24 maxlen: 24
130.185.231.0/24 maxlen: 24
80.72.84.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:f8:54:87:42:ba:66:b8:98:8e:a4:a1:41:9b:ad:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Jan 1 10:54:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ec0b5de906b9a018bdd1ed3d989cc39999fef51d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:db:e6:08:f6:56:bc:43:b0:08:58:04:17:48:
a7:bd:35:cb:6f:48:16:0f:6c:60:05:ce:c6:ac:35:
6f:4e:38:1b:7f:d5:0a:ed:9f:d8:23:68:f5:3a:3e:
38:86:ae:1c:d0:87:08:0a:2d:c9:6c:6d:a6:d2:5e:
67:37:db:a0:e6:98:57:fe:9c:8e:d2:c4:7a:50:f9:
a4:53:f8:54:2c:95:b5:cf:66:9a:44:e7:1b:35:d5:
3c:bc:78:76:3f:f9:07:be:62:41:b4:71:23:ca:1b:
69:d7:41:4c:a5:e8:8a:fa:e0:0e:2e:ff:03:75:59:
27:83:60:66:81:6c:e4:f1:58:b6:36:ee:b0:9a:55:
4c:f9:1d:2c:85:26:0e:72:50:48:9d:16:12:1f:23:
c5:2c:89:30:ee:fc:ff:55:24:f0:37:48:16:d4:c4:
2e:65:b4:2b:ae:15:88:1f:d9:1b:d1:65:bb:05:67:
eb:50:6f:c3:51:06:24:55:45:21:a8:39:79:cc:05:
ce:21:4c:91:1b:81:20:87:0a:21:b6:ed:51:ec:1c:
f9:8f:cb:9b:4c:01:c6:c0:45:98:2c:4a:02:05:53:
03:93:03:53:48:9e:fc:10:e0:57:97:d8:8c:cf:9d:
2e:3b:de:b3:45:05:89:b3:14:0b:e5:b8:96:1d:03:
9b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:0B:5D:E9:06:B9:A0:18:BD:D1:ED:3D:98:9C:C3:99:99:FE:F5:1D
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/7Atd6Qa5oBi90e09mJzDmZn-9R0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.124.10.0-79.124.12.255
79.124.18.0/23
79.124.46.0/24
80.72.84.0/22
130.185.230.0/23
130.185.233.0/24
Signature Algorithm: sha256WithRSAEncryption
37:80:f1:59:30:9f:89:5b:bd:fe:f9:f1:17:bf:a2:8c:83:71:
86:98:2e:bf:ff:30:d7:fb:2c:d6:ef:49:f5:e1:59:3e:8e:b7:
4c:0b:f5:5d:a1:df:b8:bd:23:c9:d2:14:b4:4a:3b:0d:2a:13:
8d:62:0f:c7:42:c4:b0:54:a0:62:b9:19:4b:02:f2:39:52:1a:
ca:74:6f:90:b0:f9:e9:7f:34:36:9e:b1:17:25:c6:02:a2:be:
b9:89:ed:b0:21:37:21:86:f9:7f:3d:10:78:eb:24:61:55:c7:
64:5b:2a:f6:f5:a8:19:c6:26:92:bb:a3:91:fa:9e:43:89:0d:
a2:f4:e9:09:c8:6d:f4:83:8c:01:b6:80:a8:12:4c:26:bc:21:
e7:a5:dc:b2:36:64:21:de:9f:ae:4c:89:a9:30:0f:c3:c1:10:
a4:bf:63:13:3a:f3:a4:db:9c:d7:7f:90:a7:ee:15:80:32:14:
94:40:64:7d:7e:0b:66:ee:38:8c:b3:b2:57:bd:f3:b5:3d:41:
74:f2:e2:d1:90:33:43:25:c9:41:f9:a5:31:ce:bd:24:39:c4:
9c:e7:d0:07:cd:64:6d:0f:81:e3:01:ff:bd:c9:81:27:e0:99:
fa:41:a8:00:7f:64:fd:af:09:d1:07:2a:ce:ab:71:92:0f:4d:
7b:3e:e2:4b
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgISAYVs+FSHQrpmuJiOpKFBm612MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzNWVhYzY0ZWE0ODAyZTY4MjQ2ODZmN2MwZDIwMWYyYzg1
Y2IyYWEwHhcNMjMwMTAxMTA1NDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYzBiNWRlOTA2YjlhMDE4YmRkMWVkM2Q5ODljYzM5OTk5ZmVmNTFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9vmCPZWvEOwCFgEF0invTXLb0gW
D2xgBc7GrDVvTjgbf9UK7Z/YI2j1Oj44hq4c0IcICi3JbG2m0l5nN9ug5phX/pyO
0sR6UPmkU/hULJW1z2aaROcbNdU8vHh2P/kHvmJBtHEjyhtp10FMpeiK+uAOLv8D
dVkng2BmgWzk8Vi2Nu6wmlVM+R0shSYOclBInRYSHyPFLIkw7vz/VSTwN0gW1MQu
ZbQrrhWIH9kb0WW7BWfrUG/DUQYkVUUhqDl5zAXOIUyRG4Eghwohtu1R7Bz5j8ub
TAHGwEWYLEoCBVMDkwNTSJ78EOBXl9iMz50uO96zRQWJsxQL5biWHQObcwIDAQAB
o4ICLzCCAiswHQYDVR0OBBYEFOwLXekGuaAYvdHtPZicw5mZ/vUdMB8GA1UdIwQY
MBaAFMNerGTqSALmgkaG98DSAfLIXLKqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMt
ZGFjYjVmMzU2ZWEzLzEvN0F0ZDZRYTVvQmk5MGUwOW1KekRtWm4tOVIwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMtZGFjYjVmMzU2ZWEz
LzEvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsMAwDBAFPfAoD
BABPfAwDBAFPfBIDBABPfC4DBAJQSFQDBAGCueYDBACCuekwDQYJKoZIhvcNAQEL
BQADggEBADeA8Vkwn4lbvf758Re/ooyDcYaYLr//MNf7LNbvSfXhWT6Ot0wL9V2h
37i9I8nSFLRKOw0qE41iD8dCxLBUoGK5GUsC8jlSGsp0b5Cw+el/NDaesRclxgKi
vrmJ7bAhNyGG+X89EHjrJGFVx2RbKvb1qBnGJpK7o5H6nkOJDaL06QnIbfSDjAG2
gKgSTCa8Ieel3LI2ZCHen65MiakwD8PBEKS/YxM686TbnNd/kKfuFYAyFJRAZH1+
C2buOIyzsle987U9QXTy4tGQM0MlyUH5pTHOvSQ5xJzn0AfNZG0PgeMB/73JgSfg
mfpBqAB/ZP2vCdEHKs6rcZIPTXs+4ks=
-----END CERTIFICATE-----
Generated at Mon Jan 1 17:26:30 2024 by rpki-client on console-fra.rpki-client.org