Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/V3cYOh3b6XVJthOQkCE4ACXDFVE.roa
File: V3cYOh3b6XVJthOQkCE4ACXDFVE.roa (raw, json)
Hash identifier: j/rXOex/sUlPEEBV2w/JQnKpUol0QPGU0jkKYihn7FY=
Subject key identifier: 57:77:18:3A:1D:DB:E9:75:49:B6:13:90:90:21:38:00:25:C3:15:51
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 018D8EB669061507930FCC012373DEBC2AA0
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/V3cYOh3b6XVJthOQkCE4ACXDFVE.roa
Signing time: Fri 09 Feb 2024 16:32:15 +0000
ROA not before: Fri 09 Feb 2024 16:32:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9123
IP address blocks: 80.242.56.0/24 maxlen: 24
80.242.57.0/24 maxlen: 24
80.242.58.0/24 maxlen: 24
92.63.176.0/22 maxlen: 22
92.63.176.0/24 maxlen: 24
92.63.177.0/24 maxlen: 24
92.63.178.0/24 maxlen: 24
92.63.179.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 03 Apr 2024 16:33:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:8e:b6:69:06:15:07:93:0f:cc:01:23:73:de:bc:2a:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Feb 9 16:32:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5777183a1ddbe97549b613909021380025c31551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c1:da:ef:ee:ee:2c:32:30:43:44:ae:f4:16:
b0:61:ea:fc:49:d4:5a:d7:e7:37:01:ba:41:9e:04:
d3:6c:2e:75:4c:aa:97:2f:22:65:dd:b7:6d:bb:55:
0b:99:6d:18:5e:ae:b2:7b:a6:60:88:7a:25:ca:cd:
3b:6c:7e:f3:b3:0a:a6:68:b0:09:bc:ef:59:44:f4:
64:6f:64:46:68:24:6b:2c:47:0b:8d:f3:88:ae:3e:
84:ee:7b:d4:49:41:ec:ea:e0:b1:20:40:fd:4a:24:
b2:83:e8:91:42:ac:93:e4:ee:f0:00:ff:c4:ea:d0:
3f:6f:ab:5a:fc:cd:35:22:54:e8:aa:cc:25:08:d7:
ef:79:72:47:ac:6b:37:ee:bf:3d:ec:9d:5a:b8:0c:
0a:3d:c3:43:82:b3:71:9a:e6:0e:41:e2:73:37:d4:
5a:40:8d:a2:c9:90:df:17:25:4e:1a:77:05:87:8d:
9b:15:ff:d5:e8:1c:a0:4d:c5:a7:65:2d:aa:41:71:
dc:18:d8:88:00:03:d0:a5:24:91:a4:88:c4:a3:08:
a4:04:88:61:72:c9:f9:30:08:84:e2:cc:9a:c0:1d:
a5:42:07:df:b4:f7:46:83:38:94:e4:2d:60:1a:d9:
50:09:14:1f:f3:ef:c7:f2:0b:c5:4d:8c:41:34:f8:
00:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:77:18:3A:1D:DB:E9:75:49:B6:13:90:90:21:38:00:25:C3:15:51
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/V3cYOh3b6XVJthOQkCE4ACXDFVE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.242.56.0-80.242.58.255
92.63.176.0/22
Signature Algorithm: sha256WithRSAEncryption
1e:65:97:03:b4:4d:f4:f3:07:be:5a:07:a1:24:be:34:60:bd:
76:91:48:07:4b:f8:f6:fe:f1:f8:c2:93:8a:e4:02:74:ff:4d:
43:76:1a:8c:93:0d:99:90:c0:89:da:80:08:f5:19:77:92:57:
5e:28:2e:ec:ca:a0:39:84:9d:31:01:6f:e0:48:02:fb:6f:3d:
0b:c8:46:49:d6:7a:f0:65:14:ee:a9:60:1f:bb:f1:26:92:41:
82:f4:98:62:a1:de:6b:d0:5b:64:b3:38:08:94:55:17:44:46:
3d:20:2e:b8:21:b3:35:e7:38:0e:72:bf:96:27:d8:87:08:1d:
df:03:2b:2e:20:b1:01:67:7c:e9:b7:13:7b:95:85:7d:16:22:
21:c3:3a:cc:bb:19:98:f2:89:3c:cc:e0:66:85:f8:0b:c8:07:
d2:8b:70:11:3e:ef:5c:95:d0:95:18:30:83:74:ee:97:02:e1:
11:56:fb:72:9d:31:27:b5:5a:d6:5e:e2:27:5e:c8:7e:b8:8d:
f9:7a:2b:00:43:ef:f0:de:19:42:a2:d3:bc:6c:65:f9:67:93:
20:d7:94:bd:fd:05:c8:61:c6:19:3a:6e:cf:de:8f:b7:a1:df:
c6:05:cd:55:95:16:99:38:fe:8b:41:c0:0d:f5:de:dd:13:1f:
5c:3f:08:ca
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAY2OtmkGFQeTD8wBI3PevCqgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxODQ3OGYxOThmZTU2OTAxMGMzZGY2MjE5MTQyZjUzMGM0
ZjVlNTYwHhcNMjQwMjA5MTYzMjE1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1Nzc3MTgzYTFkZGJlOTc1NDliNjEzOTA5MDIxMzgwMDI1YzMxNTUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzcHa7+7uLDIwQ0Su9BawYer8SdRa
1+c3AbpBngTTbC51TKqXLyJl3bdtu1ULmW0YXq6ye6ZgiHolys07bH7zswqmaLAJ
vO9ZRPRkb2RGaCRrLEcLjfOIrj6E7nvUSUHs6uCxIED9SiSyg+iRQqyT5O7wAP/E
6tA/b6ta/M01IlToqswlCNfveXJHrGs37r897J1auAwKPcNDgrNxmuYOQeJzN9Ra
QI2iyZDfFyVOGncFh42bFf/V6BygTcWnZS2qQXHcGNiIAAPQpSSRpIjEowikBIhh
csn5MAiE4syawB2lQgfftPdGgziU5C1gGtlQCRQf8+/H8gvFTYxBNPgAVQIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFFd3GDod2+l1SbYTkJAhOAAlwxVRMB8GA1UdIwQY
MBaAFGGEePGY/laQEMPfYhkUL1MMT15WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEt
YmE5OGYxMTIyMTIxLzEvVjNjWU9oM2I2WFZKdGhPUWtDRTRBQ1hERlZFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEtYmE5OGYxMTIyMTIx
LzEvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBANQ8jgD
BABQ8joDBAJcP7AwDQYJKoZIhvcNAQELBQADggEBAB5llwO0TfTzB75aB6EkvjRg
vXaRSAdL+Pb+8fjCk4rkAnT/TUN2GoyTDZmQwInagAj1GXeSV14oLuzKoDmEnTEB
b+BIAvtvPQvIRknWevBlFO6pYB+78SaSQYL0mGKh3mvQW2SzOAiUVRdERj0gLrgh
szXnOA5yv5Yn2IcIHd8DKy4gsQFnfOm3E3uVhX0WIiHDOsy7GZjyiTzM4GaF+AvI
B9KLcBE+71yV0JUYMIN07pcC4RFW+3KdMSe1WtZe4ideyH64jfl6KwBD7/DeGUKi
07xsZflnkyDXlL39Bchhxhk6bs/ej7eh38YFzVWVFpk4/otBwA313t0TH1w/CMo=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:51 2024 by rpki-client on console-fra.rpki-client.org