Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/cCeYOrs1VsuI-skK7LHQGkv7vZg.roa
File: cCeYOrs1VsuI-skK7LHQGkv7vZg.roa (raw, json)
Hash identifier: sMYCrXJ3TTI8NhDUfVplHkNW6C/AHiYKrO+c4WsSvuI=
Subject key identifier: 70:27:98:3A:BB:35:56:CB:88:FA:C9:0A:EC:B1:D0:1A:4B:FB:BD:98
Certificate issuer: /CN=9ffc98428c2451c1aedf8affc072a95868ecee8b
Certificate serial: 01857315C75F3B3D86AFCC9D8F88FCEB89AC
Authority key identifier: 9F:FC:98:42:8C:24:51:C1:AE:DF:8A:FF:C0:72:A9:58:68:EC:EE:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_yYQowkUcGu34r_wHKpWGjs7os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/cCeYOrs1VsuI-skK7LHQGkv7vZg.roa
Signing time: Mon 02 Jan 2023 15:24:45 +0000
ROA not before: Mon 02 Jan 2023 15:24:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39791
IP address blocks: 193.109.176.0/21 maxlen: 21
89.111.102.0/24 maxlen: 24
89.111.64.0/18 maxlen: 18
89.111.72.0/22 maxlen: 22
89.111.76.0/22 maxlen: 22
2a01:a040::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:29:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:15:c7:5f:3b:3d:86:af:cc:9d:8f:88:fc:eb:89:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ffc98428c2451c1aedf8affc072a95868ecee8b
Validity
Not Before: Jan 2 15:24:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7027983abb3556cb88fac90aecb1d01a4bfbbd98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:de:4d:8e:02:15:16:ff:23:06:d7:47:15:dd:
3c:c7:90:80:d8:32:a3:28:9a:32:22:b6:4a:1d:28:
36:9e:1a:fc:55:db:01:df:01:d1:64:3c:06:a6:70:
e2:d5:2d:6f:46:29:3c:06:a3:9c:43:4f:01:ce:22:
09:8d:4d:c9:76:68:8e:9a:a1:65:b6:ac:30:33:54:
0b:88:c3:bd:e3:68:1f:61:69:26:00:2d:1d:15:99:
b3:7a:1c:08:16:bf:76:d5:3c:a6:e2:b0:21:54:96:
b6:01:99:68:78:ae:fa:97:80:1d:14:06:03:40:59:
ed:99:12:df:e2:a4:52:3b:3e:d1:18:12:9e:6b:ec:
5c:b3:97:b5:49:fa:51:fe:9a:95:3e:23:33:42:a7:
5e:2a:f2:67:79:ba:3f:54:00:f2:c7:5c:3c:8a:ae:
28:fb:81:46:93:0a:e4:10:41:b2:ea:ef:02:5b:c3:
7f:c3:14:6a:25:c9:3c:31:e9:c4:3c:a6:f3:57:38:
79:73:7e:8b:75:d6:1f:fe:3c:9e:ab:ce:40:fd:a0:
19:e8:e1:51:8a:96:da:90:0a:40:43:bf:18:e4:fe:
67:cb:64:55:f9:48:04:98:46:7e:8b:02:01:d1:4d:
40:f7:5e:76:36:17:71:4c:e7:cd:40:a0:83:ff:dd:
83:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:27:98:3A:BB:35:56:CB:88:FA:C9:0A:EC:B1:D0:1A:4B:FB:BD:98
X509v3 Authority Key Identifier:
keyid:9F:FC:98:42:8C:24:51:C1:AE:DF:8A:FF:C0:72:A9:58:68:EC:EE:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_yYQowkUcGu34r_wHKpWGjs7os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/cCeYOrs1VsuI-skK7LHQGkv7vZg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.111.64.0/18
193.109.176.0/21
IPv6:
2a01:a040::/32
Signature Algorithm: sha256WithRSAEncryption
6a:89:b2:c3:2d:34:9b:9a:c1:64:53:5f:89:55:2c:7c:91:94:
81:80:79:00:91:60:0b:01:d6:1c:c6:57:15:28:dc:dd:d1:42:
09:7a:4a:07:fc:11:22:b6:94:0c:5e:88:bc:89:26:99:14:02:
f3:a7:50:b6:ac:16:0f:ca:67:6c:b8:83:0b:d4:44:33:76:ea:
ae:7e:15:b4:e0:6a:17:81:28:d0:07:e8:bb:f3:6e:8e:80:7a:
5c:69:b7:c4:a2:d6:65:d2:ff:dc:c2:19:fb:0c:e5:d9:3b:63:
a9:67:f2:b6:42:26:79:ec:2a:65:55:b7:6a:6b:c3:1e:e4:f1:
fb:f9:fb:38:be:1b:07:06:83:62:92:1e:1f:70:68:0f:2b:72:
7a:0b:55:11:8a:41:ec:8c:14:84:fb:0a:78:62:aa:dd:71:59:
68:40:9f:1a:61:7e:60:fa:82:f4:cf:8e:74:28:b6:0f:dc:e1:
01:45:57:e0:3f:4b:88:1c:37:4f:2b:64:8b:d4:a9:e3:81:67:
15:83:52:3c:0a:2b:16:d6:92:a9:21:ee:f1:84:15:61:b4:66:
27:ff:75:a9:5b:5e:79:80:19:8e:bb:fa:d4:b6:16:e3:c4:6d:
49:56:2f:04:4e:eb:4b:3a:b8:1c:fa:8c:c6:ed:33:e4:c5:10:
12:2e:36:af
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYVzFcdfOz2Gr8ydj4j864msMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmZmM5ODQyOGMyNDUxYzFhZWRmOGFmZmMwNzJhOTU4Njhl
Y2VlOGIwHhcNMjMwMTAyMTUyNDQ1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MDI3OTgzYWJiMzU1NmNiODhmYWM5MGFlY2IxZDAxYTRiZmJiZDk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkN5NjgIVFv8jBtdHFd08x5CA2DKj
KJoyIrZKHSg2nhr8VdsB3wHRZDwGpnDi1S1vRik8BqOcQ08BziIJjU3JdmiOmqFl
tqwwM1QLiMO942gfYWkmAC0dFZmzehwIFr921Tym4rAhVJa2AZloeK76l4AdFAYD
QFntmRLf4qRSOz7RGBKea+xcs5e1SfpR/pqVPiMzQqdeKvJnebo/VADyx1w8iq4o
+4FGkwrkEEGy6u8CW8N/wxRqJck8MenEPKbzVzh5c36LddYf/jyeq85A/aAZ6OFR
ipbakApAQ78Y5P5ny2RV+UgEmEZ+iwIB0U1A9152NhdxTOfNQKCD/92DDQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFHAnmDq7NVbLiPrJCuyx0BpL+72YMB8GA1UdIwQY
MBaAFJ/8mEKMJFHBrt+K/8ByqVho7O6LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbl95WVFvd2tVY0d1MzRyX3dIS3BXR2pzN29zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS83MjQzMjgtMDlkMy00OTY0LWFjYzQt
Yjk2ZDJmYmVmZWJkLzEvY0NlWU9yczFWc3VJLXNrSzdMSFFHa3Y3dlpnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS83MjQzMjgtMDlkMy00OTY0LWFjYzQtYjk2ZDJmYmVmZWJk
LzEvbl95WVFvd2tVY0d1MzRyX3dIS3BXR2pzN29zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQGWW9AAwQD
wW2wMA0EAgACMAcDBQAqAaBAMA0GCSqGSIb3DQEBCwUAA4IBAQBqibLDLTSbmsFk
U1+JVSx8kZSBgHkAkWALAdYcxlcVKNzd0UIJekoH/BEitpQMXoi8iSaZFALzp1C2
rBYPymdsuIML1EQzduqufhW04GoXgSjQB+i7826OgHpcabfEotZl0v/cwhn7DOXZ
O2OpZ/K2QiZ57CplVbdqa8Me5PH7+fs4vhsHBoNikh4fcGgPK3J6C1URikHsjBSE
+wp4YqrdcVloQJ8aYX5g+oL0z450KLYP3OEBRVfgP0uIHDdPK2SL1KnjgWcVg1I8
CisW1pKpIe7xhBVhtGYn/3WpW155gBmOu/rUthbjxG1JVi8ETutLOrgc+ozG7TPk
xRASLjav
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:35 2024 by rpki-client on console-fra.rpki-client.org