Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/1d19ad-73f6-450b-b97c-2be25f9d5ed2/1/vOEtc6KP54woId8W6MkpeAhAOiY.roa
File: vOEtc6KP54woId8W6MkpeAhAOiY.roa (raw, json)
Hash identifier: jj7X43I8so+OqU1iB/QzgJLj06/0mro+lL4lVJwAzLE=
Subject key identifier: BC:E1:2D:73:A2:8F:E7:8C:28:21:DF:16:E8:C9:29:78:08:40:3A:26
Certificate issuer: /CN=cd269482ba261b88005608ec50b7b909d3f3fd4e
Certificate serial: 01856F2FEB38F45C843804FB31E50A957927
Authority key identifier: CD:26:94:82:BA:26:1B:88:00:56:08:EC:50:B7:B9:09:D3:F3:FD:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zSaUgromG4gAVgjsULe5CdPz_U4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/1d19ad-73f6-450b-b97c-2be25f9d5ed2/1/vOEtc6KP54woId8W6MkpeAhAOiY.roa
Signing time: Sun 01 Jan 2023 21:14:49 +0000
ROA not before: Sun 01 Jan 2023 21:14:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 52200
IP address blocks: 194.35.180.0/23 maxlen: 24
194.35.80.0/23 maxlen: 24
46.226.168.0/21 maxlen: 24
2a00:b600::/29 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:2f:eb:38:f4:5c:84:38:04:fb:31:e5:0a:95:79:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd269482ba261b88005608ec50b7b909d3f3fd4e
Validity
Not Before: Jan 1 21:14:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bce12d73a28fe78c2821df16e8c9297808403a26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e8:d4:18:5a:d5:4b:37:e6:41:64:12:6d:35:
91:e1:ed:1c:35:8d:c1:18:5f:93:18:24:93:15:25:
6f:e5:42:78:df:73:01:a1:74:4d:a1:f4:0b:43:82:
ee:66:a2:08:ea:7b:90:60:10:4b:dc:dd:9a:8a:48:
9d:ab:55:18:58:25:d0:6c:a8:fa:ea:57:29:45:55:
d3:5b:18:95:44:45:e6:fa:3f:2d:68:c7:df:2b:e6:
a3:84:c6:db:48:dd:65:2b:10:f2:36:f3:f3:b3:73:
5f:0f:94:55:22:8f:0f:40:19:9b:ac:c4:29:30:3d:
7e:b9:49:9e:4f:2f:e8:8d:90:c4:cb:a3:c6:4e:79:
61:31:1f:cb:38:a2:cb:0c:23:34:51:b3:12:5e:94:
4c:65:c4:53:7a:7d:36:cf:91:3b:35:c3:d6:c6:ab:
ad:f4:96:72:99:f3:51:f6:12:5a:ac:32:59:e1:4d:
b3:39:9b:94:0a:2f:0d:12:19:9e:8c:51:54:cb:8f:
77:3d:9f:6e:38:5e:fa:c8:aa:06:ff:ad:ce:c6:01:
e2:73:7c:aa:56:d2:e4:0c:16:72:b7:d0:13:2c:e7:
12:aa:8e:08:16:1a:66:8b:40:93:d2:f6:0e:56:2c:
e6:4b:6d:7d:da:1e:94:8c:4c:36:54:96:59:3e:07:
48:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:E1:2D:73:A2:8F:E7:8C:28:21:DF:16:E8:C9:29:78:08:40:3A:26
X509v3 Authority Key Identifier:
keyid:CD:26:94:82:BA:26:1B:88:00:56:08:EC:50:B7:B9:09:D3:F3:FD:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zSaUgromG4gAVgjsULe5CdPz_U4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1d19ad-73f6-450b-b97c-2be25f9d5ed2/1/vOEtc6KP54woId8W6MkpeAhAOiY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1d19ad-73f6-450b-b97c-2be25f9d5ed2/1/zSaUgromG4gAVgjsULe5CdPz_U4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.226.168.0/21
194.35.80.0/23
194.35.180.0/23
IPv6:
2a00:b600::/29
Signature Algorithm: sha256WithRSAEncryption
d8:32:ee:95:b1:dc:3a:95:8a:66:fb:b6:3e:9d:b5:d6:92:25:
26:0c:d7:31:94:7f:9c:33:49:de:bf:ce:ac:46:23:3e:eb:d1:
42:e2:bd:6f:60:b4:35:dc:b0:40:d7:2b:a6:9e:6a:f0:e8:aa:
d5:bb:18:10:ff:b9:87:0e:ec:5c:ff:4e:7e:e2:81:70:18:4d:
db:a0:48:3b:e0:16:c7:7b:5f:8c:79:84:4f:55:4c:a6:a9:dd:
98:61:c7:be:40:51:f5:20:30:a2:9a:67:9f:62:b3:b4:5b:13:
97:24:85:73:0b:97:b6:be:94:e0:56:fd:ab:5f:40:cf:77:d6:
6c:6d:d3:46:69:b0:fe:bb:fa:7a:b8:00:2e:b0:28:89:d0:0e:
f5:39:1f:34:06:18:e7:16:f7:c1:94:a6:9e:dc:ec:fe:64:e9:
69:f2:74:ec:a5:e0:80:a0:d2:b1:2a:53:57:c0:f0:f2:c6:d0:
43:aa:90:c1:1f:67:48:5b:7e:96:ed:58:7b:30:6e:48:2e:9a:
11:71:1c:8d:78:ca:ac:3f:e9:b1:5e:92:e8:bb:72:07:a4:d1:
02:58:e7:61:8b:d6:c3:00:c6:06:0e:0d:ab:58:bd:35:ee:87:
9f:79:5e:63:88:73:31:49:74:72:ae:91:4f:3e:3b:ba:df:af:
83:28:76:ca
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAYVvL+s49FyEOAT7MeUKlXknMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkMjY5NDgyYmEyNjFiODgwMDU2MDhlYzUwYjdiOTA5ZDNm
M2ZkNGUwHhcNMjMwMTAxMjExNDQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiY2UxMmQ3M2EyOGZlNzhjMjgyMWRmMTZlOGM5Mjk3ODA4NDAzYTI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuujUGFrVSzfmQWQSbTWR4e0cNY3B
GF+TGCSTFSVv5UJ433MBoXRNofQLQ4LuZqII6nuQYBBL3N2aikidq1UYWCXQbKj6
6lcpRVXTWxiVREXm+j8taMffK+ajhMbbSN1lKxDyNvPzs3NfD5RVIo8PQBmbrMQp
MD1+uUmeTy/ojZDEy6PGTnlhMR/LOKLLDCM0UbMSXpRMZcRTen02z5E7NcPWxqut
9JZymfNR9hJarDJZ4U2zOZuUCi8NEhmejFFUy493PZ9uOF76yKoG/63OxgHic3yq
VtLkDBZyt9ATLOcSqo4IFhpmi0CT0vYOVizmS2192h6UjEw2VJZZPgdIfwIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFLzhLXOij+eMKCHfFujJKXgIQDomMB8GA1UdIwQY
MBaAFM0mlIK6JhuIAFYI7FC3uQnT8/1OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelNhVWdyb21HNGdBVmdqc1VMZTVDZFB6X1U0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi8xZDE5YWQtNzNmNi00NTBiLWI5N2Mt
MmJlMjVmOWQ1ZWQyLzEvdk9FdGM2S1A1NHdvSWQ4VzZNa3BlQWhBT2lZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi8xZDE5YWQtNzNmNi00NTBiLWI5N2MtMmJlMjVmOWQ1ZWQy
LzEvelNhVWdyb21HNGdBVmdqc1VMZTVDZFB6X1U0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQDLuKoAwQB
wiNQAwQBwiO0MA0EAgACMAcDBQMqALYAMA0GCSqGSIb3DQEBCwUAA4IBAQDYMu6V
sdw6lYpm+7Y+nbXWkiUmDNcxlH+cM0nev86sRiM+69FC4r1vYLQ13LBA1yumnmrw
6KrVuxgQ/7mHDuxc/05+4oFwGE3boEg74BbHe1+MeYRPVUymqd2YYce+QFH1IDCi
mmefYrO0WxOXJIVzC5e2vpTgVv2rX0DPd9ZsbdNGabD+u/p6uAAusCiJ0A71OR80
BhjnFvfBlKae3Oz+ZOlp8nTspeCAoNKxKlNXwPDyxtBDqpDBH2dIW36W7Vh7MG5I
LpoRcRyNeMqsP+mxXpLou3IHpNECWOdhi9bDAMYGDg2rWL017oefeV5jiHMxSXRy
rpFPPju636+DKHbK
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:08 2024 by rpki-client on console-fra.rpki-client.org