Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/442a9b-9ed7-493d-83f3-3ca488deee89/1/uOv7N2DOdjg0UtNSJHZKt6rulG4.roa
File: uOv7N2DOdjg0UtNSJHZKt6rulG4.roa (raw, json)
Hash identifier: aomdLuykvWtO6nST93rBaOEq2y5NhhM/zIGujIhiAWg=
Subject key identifier: B8:EB:FB:37:60:CE:76:38:34:52:D3:52:24:76:4A:B7:AA:EE:94:6E
Certificate issuer: /CN=810af00225106b2096e9b21d9ac2f2040688dea2
Certificate serial: 01879434CE597B3CF7DE80C6A2C9F243947F
Authority key identifier: 81:0A:F0:02:25:10:6B:20:96:E9:B2:1D:9A:C2:F2:04:06:88:DE:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gQrwAiUQayCW6bIdmsLyBAaI3qI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/442a9b-9ed7-493d-83f3-3ca488deee89/1/uOv7N2DOdjg0UtNSJHZKt6rulG4.roa
Signing time: Tue 18 Apr 2023 11:51:41 +0000
ROA not before: Tue 18 Apr 2023 11:51:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198890
IP address blocks: 87.120.100.0/22 maxlen: 22
93.187.110.0/24 maxlen: 24
2a13:1540::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:94:34:ce:59:7b:3c:f7:de:80:c6:a2:c9:f2:43:94:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=810af00225106b2096e9b21d9ac2f2040688dea2
Validity
Not Before: Apr 18 11:51:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b8ebfb3760ce76383452d35224764ab7aaee946e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:43:f7:24:f3:0b:b0:92:49:6e:60:02:fb:3d:
e7:59:cd:e0:b9:72:1c:71:de:84:22:a5:58:46:9e:
1e:9e:c5:bb:59:61:09:d5:33:3e:47:a7:e4:13:fa:
7a:95:29:33:32:51:85:87:2c:ad:ac:26:69:2d:57:
ca:60:b8:40:6d:14:fe:1f:7f:ab:83:97:f0:6b:ef:
a4:5b:78:85:c3:8c:cf:69:6c:ee:1c:cf:25:aa:79:
c5:4f:1a:f7:47:08:56:b7:80:ba:c6:78:d2:0e:20:
2b:c0:cc:63:99:67:1b:7e:28:97:27:0c:c1:db:c1:
ad:35:7e:c1:86:f6:3b:2a:04:07:df:81:f3:54:cd:
a7:56:0c:dc:2f:a7:4a:65:5e:c2:db:6e:0a:53:bf:
ba:9c:8e:4b:aa:6b:33:c6:e7:5b:62:a5:76:c4:1b:
11:13:d0:03:ec:52:5a:43:b6:58:a1:d3:3b:9c:c8:
c0:92:60:73:57:e3:a4:e3:b2:8c:e0:1d:17:dd:93:
0d:9c:9b:c8:68:b9:56:b2:71:83:d9:15:75:52:3b:
e4:f6:c9:1a:60:03:3e:13:db:ca:85:62:36:23:5c:
ac:12:24:e2:03:4a:b2:85:c4:70:d5:96:13:27:ff:
34:39:f6:9a:46:54:b7:ea:d4:4a:3d:2c:7c:5c:74:
4a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:EB:FB:37:60:CE:76:38:34:52:D3:52:24:76:4A:B7:AA:EE:94:6E
X509v3 Authority Key Identifier:
keyid:81:0A:F0:02:25:10:6B:20:96:E9:B2:1D:9A:C2:F2:04:06:88:DE:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQrwAiUQayCW6bIdmsLyBAaI3qI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/442a9b-9ed7-493d-83f3-3ca488deee89/1/uOv7N2DOdjg0UtNSJHZKt6rulG4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/442a9b-9ed7-493d-83f3-3ca488deee89/1/gQrwAiUQayCW6bIdmsLyBAaI3qI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.100.0/22
93.187.110.0/24
IPv6:
2a13:1540::/48
Signature Algorithm: sha256WithRSAEncryption
7b:a7:24:e5:00:5d:27:02:bd:35:c1:59:e1:e0:ce:f8:e6:a2:
49:ec:87:f7:fb:40:17:c3:8f:8f:94:83:8f:1f:64:44:67:6d:
77:5e:0f:d5:06:da:4f:11:52:95:54:9d:d2:81:28:28:9f:b7:
c5:06:1c:7c:63:a9:d6:44:0c:94:9a:68:3b:a1:ef:d5:37:54:
23:b0:a1:24:b8:4b:d3:ac:d3:02:72:cc:86:f2:02:17:e3:39:
7d:60:49:9b:62:ee:fa:11:ee:45:d9:ce:45:5a:0a:4f:30:c1:
46:95:b5:55:60:8d:e8:61:ff:75:11:8d:96:8f:c4:6c:92:27:
0e:bf:b8:5d:6c:cc:3a:b0:ca:ee:a5:8e:ad:fb:8b:a3:93:12:
48:82:d8:3a:a3:99:95:58:93:4e:d0:59:0f:ed:a4:89:94:82:
21:0a:8f:be:6c:2a:e0:c5:c7:bb:ef:d3:8c:6b:e5:46:d1:7b:
e5:01:0a:65:f1:f5:ae:6d:9d:9b:61:20:8b:60:1a:66:18:89:
e2:9f:06:1f:14:36:a6:31:53:10:33:aa:87:31:cc:71:0b:70:
f4:90:48:70:c0:a8:92:78:e1:38:09:6c:ae:cb:c9:36:06:26:
84:e5:38:49:ef:1c:fe:54:05:64:e7:4c:ad:48:1f:f7:c2:4a:
6d:7d:02:95
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAYeUNM5Zezz33oDGosnyQ5R/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxMGFmMDAyMjUxMDZiMjA5NmU5YjIxZDlhYzJmMjA0MDY4
OGRlYTIwHhcNMjMwNDE4MTE1MTQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOGViZmIzNzYwY2U3NjM4MzQ1MmQzNTIyNDc2NGFiN2FhZWU5NDZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUP3JPMLsJJJbmAC+z3nWc3guXIc
cd6EIqVYRp4ensW7WWEJ1TM+R6fkE/p6lSkzMlGFhyytrCZpLVfKYLhAbRT+H3+r
g5fwa++kW3iFw4zPaWzuHM8lqnnFTxr3RwhWt4C6xnjSDiArwMxjmWcbfiiXJwzB
28GtNX7BhvY7KgQH34HzVM2nVgzcL6dKZV7C224KU7+6nI5LqmszxudbYqV2xBsR
E9AD7FJaQ7ZYodM7nMjAkmBzV+Ok47KM4B0X3ZMNnJvIaLlWsnGD2RV1Ujvk9ska
YAM+E9vKhWI2I1ysEiTiA0qyhcRw1ZYTJ/80OfaaRlS36tRKPSx8XHRKcQIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFLjr+zdgznY4NFLTUiR2Sreq7pRuMB8GA1UdIwQY
MBaAFIEK8AIlEGsglumyHZrC8gQGiN6iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1Fyd0FpVVFheUNXNmJJZG1zTHlCQWFJM3FJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC80NDJhOWItOWVkNy00OTNkLTgzZjMt
M2NhNDg4ZGVlZTg5LzEvdU92N04yRE9kamcwVXROU0pIWkt0NnJ1bEc0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC80NDJhOWItOWVkNy00OTNkLTgzZjMtM2NhNDg4ZGVlZTg5
LzEvZ1Fyd0FpVVFheUNXNmJJZG1zTHlCQWFJM3FJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQCV3hkAwQA
XbtuMA8EAgACMAkDBwAqExVAAAAwDQYJKoZIhvcNAQELBQADggEBAHunJOUAXScC
vTXBWeHgzvjmoknsh/f7QBfDj4+Ug48fZERnbXdeD9UG2k8RUpVUndKBKCift8UG
HHxjqdZEDJSaaDuh79U3VCOwoSS4S9Os0wJyzIbyAhfjOX1gSZti7voR7kXZzkVa
Ck8wwUaVtVVgjehh/3URjZaPxGySJw6/uF1szDqwyu6ljq37i6OTEkiC2DqjmZVY
k07QWQ/tpImUgiEKj75sKuDFx7vv04xr5UbRe+UBCmXx9a5tnZthIItgGmYYieKf
Bh8UNqYxUxAzqocxzHELcPSQSHDAqJJ44TgJbK7LyTYGJoTlOEnvHP5UBWTnTK1I
H/fCSm19ApU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:13 2024 by rpki-client on console-ams.rpki-client.org