Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/dee72d-d91d-465e-9d57-37a7cd37d49e/1/2C83YM3_F_Z3u8ePHNlDrKxm2Kw.roa
File: 2C83YM3_F_Z3u8ePHNlDrKxm2Kw.roa (raw, json)
Hash identifier: 2/1KZ9lqHR5yxYhixurvfKen0v2Supib9SXPXd7rJI8=
Subject key identifier: D8:2F:37:60:CD:FF:17:F6:77:BB:C7:8F:1C:D9:43:AC:AC:66:D8:AC
Certificate issuer: /CN=6ffc7253c0da15b56e0095731a10c2bbad6c117e
Certificate serial: 018FED23A7C151AC8F4AC6C5D2073945A62E
Authority key identifier: 6F:FC:72:53:C0:DA:15:B5:6E:00:95:73:1A:10:C2:BB:AD:6C:11:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b_xyU8DaFbVuAJVzGhDCu61sEX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/dee72d-d91d-465e-9d57-37a7cd37d49e/1/2C83YM3_F_Z3u8ePHNlDrKxm2Kw.roa
Signing time: Thu 06 Jun 2024 10:41:27 +0000
ROA not before: Thu 06 Jun 2024 10:41:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47752
IP address blocks: 91.204.236.0/22 maxlen: 22
178.216.128.0/21 maxlen: 21
178.216.131.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 09 Jun 2024 06:45:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:ed:23:a7:c1:51:ac:8f:4a:c6:c5:d2:07:39:45:a6:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ffc7253c0da15b56e0095731a10c2bbad6c117e
Validity
Not Before: Jun 6 10:41:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d82f3760cdff17f677bbc78f1cd943acac66d8ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:8e:5b:b1:81:ee:55:2e:db:22:31:10:a6:a2:
83:dd:74:f9:5c:66:e3:13:46:34:1f:0e:9e:7d:6e:
11:49:50:d4:1c:16:e3:5a:b9:67:39:1a:b5:d0:96:
ce:6b:39:e1:df:bc:98:cb:00:f4:f8:6e:40:c8:ad:
17:7e:ce:9e:1a:9c:8c:3e:59:8c:d2:cc:45:50:de:
31:88:a3:ae:20:96:8f:7d:05:2b:80:03:89:51:af:
53:9f:39:e9:ac:94:e7:71:78:63:49:7b:93:8c:8a:
26:88:b9:71:1f:58:f4:0d:af:bc:61:17:ac:08:33:
46:ff:16:4f:69:90:43:52:9c:1d:e9:53:c2:6d:40:
03:2b:f7:18:8f:4e:fe:34:42:bd:f9:18:02:af:82:
dc:a5:29:91:c8:03:0d:d6:f6:e6:38:53:2c:20:79:
a0:a9:9c:89:f2:91:3d:b2:c6:4a:21:2a:43:4f:ba:
95:ab:64:4d:54:e5:5b:f5:f0:85:90:ba:92:dd:5c:
89:61:71:b0:18:3f:21:9a:e0:53:67:f7:b7:e1:c9:
7d:ec:8b:1f:d1:c5:62:6d:93:99:f6:7a:4b:14:67:
b6:05:45:16:cc:b6:de:d6:e6:ae:6a:89:a4:72:14:
a8:e2:5a:06:5e:46:2d:db:7a:19:76:4d:ba:db:d8:
46:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:2F:37:60:CD:FF:17:F6:77:BB:C7:8F:1C:D9:43:AC:AC:66:D8:AC
X509v3 Authority Key Identifier:
keyid:6F:FC:72:53:C0:DA:15:B5:6E:00:95:73:1A:10:C2:BB:AD:6C:11:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_xyU8DaFbVuAJVzGhDCu61sEX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/dee72d-d91d-465e-9d57-37a7cd37d49e/1/2C83YM3_F_Z3u8ePHNlDrKxm2Kw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/dee72d-d91d-465e-9d57-37a7cd37d49e/1/b_xyU8DaFbVuAJVzGhDCu61sEX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.204.236.0/22
178.216.128.0/21
Signature Algorithm: sha256WithRSAEncryption
7b:f6:c6:b1:87:48:c9:e7:44:70:44:82:5c:26:db:d7:9f:cd:
c8:61:ba:01:cd:a2:fb:9c:fc:ce:54:37:1c:f7:bd:04:34:e9:
88:65:d4:da:3f:fd:26:70:15:87:52:35:97:7b:72:27:00:53:
1e:4d:4e:fa:21:6d:b3:cf:a0:5e:20:7b:81:98:cf:5f:14:74:
a0:a2:b7:58:bd:1b:17:eb:98:d5:13:ae:e1:9a:ba:ab:86:7f:
e3:25:48:dd:b0:c9:e8:dd:6e:43:e4:36:32:a9:a0:51:0c:59:
fe:0d:dc:7e:04:50:94:dc:0e:79:9e:4a:4b:93:40:64:f1:f5:
3c:41:05:95:72:60:4e:d1:a6:52:46:99:dc:30:05:22:76:bb:
35:13:f1:44:29:88:8a:b2:72:26:5b:c5:06:5c:02:aa:79:f1:
c3:a0:1f:3a:8b:90:49:f7:f6:e3:0d:97:c3:5d:af:7f:e8:0b:
1e:87:02:58:46:78:88:13:5c:fe:ad:40:f0:e5:c5:01:05:15:
fd:7c:58:49:9d:d0:bc:70:69:07:a2:13:fa:a9:0b:f9:ec:a1:
61:b1:6a:d2:8c:f8:ca:d9:92:34:e5:ff:76:3e:0c:67:a4:69:
72:94:08:86:ae:89:bd:29:39:e2:49:d6:fe:95:7e:88:92:17:
99:50:8a:44
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAY/tI6fBUayPSsbF0gc5RaYuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmZmM3MjUzYzBkYTE1YjU2ZTAwOTU3MzFhMTBjMmJiYWQ2
YzExN2UwHhcNMjQwNjA2MTA0MTI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkODJmMzc2MGNkZmYxN2Y2NzdiYmM3OGYxY2Q5NDNhY2FjNjZkOGFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnI5bsYHuVS7bIjEQpqKD3XT5XGbj
E0Y0Hw6efW4RSVDUHBbjWrlnORq10JbOaznh37yYywD0+G5AyK0Xfs6eGpyMPlmM
0sxFUN4xiKOuIJaPfQUrgAOJUa9TnznprJTncXhjSXuTjIomiLlxH1j0Da+8YRes
CDNG/xZPaZBDUpwd6VPCbUADK/cYj07+NEK9+RgCr4LcpSmRyAMN1vbmOFMsIHmg
qZyJ8pE9ssZKISpDT7qVq2RNVOVb9fCFkLqS3VyJYXGwGD8hmuBTZ/e34cl97Isf
0cVibZOZ9npLFGe2BUUWzLbe1uauaomkchSo4loGXkYt23oZdk2629hGgwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFNgvN2DN/xf2d7vHjxzZQ6ysZtisMB8GA1UdIwQY
MBaAFG/8clPA2hW1bgCVcxoQwrutbBF+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYl94eVU4RGFGYlZ1QUpWekdoREN1NjFzRVg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9kZWU3MmQtZDkxZC00NjVlLTlkNTct
MzdhN2NkMzdkNDllLzEvMkM4M1lNM19GX1ozdThlUEhObERyS3htMkt3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi9kZWU3MmQtZDkxZC00NjVlLTlkNTctMzdhN2NkMzdkNDll
LzEvYl94eVU4RGFGYlZ1QUpWekdoREN1NjFzRVg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCW8zsAwQD
stiAMA0GCSqGSIb3DQEBCwUAA4IBAQB79saxh0jJ50RwRIJcJtvXn83IYboBzaL7
nPzOVDcc970ENOmIZdTaP/0mcBWHUjWXe3InAFMeTU76IW2zz6BeIHuBmM9fFHSg
ordYvRsX65jVE67hmrqrhn/jJUjdsMno3W5D5DYyqaBRDFn+Ddx+BFCU3A55nkpL
k0Bk8fU8QQWVcmBO0aZSRpncMAUidrs1E/FEKYiKsnImW8UGXAKqefHDoB86i5BJ
9/bjDZfDXa9/6AsehwJYRniIE1z+rUDw5cUBBRX9fFhJndC8cGkHohP6qQv57KFh
sWrSjPjK2ZI05f92PgxnpGlylAiGrom9KTniSdb+lX6IkheZUIpE
-----END CERTIFICATE-----
Generated at Sun Apr 20 19:30:05 2025 by rpki-client