Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/abe628-fce7-447e-853e-94fdc9fbdcac/1/yEgRD-IzP_mbmKtziJ4_R7RzGmU.roa
File: yEgRD-IzP_mbmKtziJ4_R7RzGmU.roa (raw, json)
Hash identifier: AibMrx9B2kkH/C41IoDD/BNp/pVrlkiQ5K6uSgl1ulQ=
Subject key identifier: C8:48:11:0F:E2:33:3F:F9:9B:98:AB:73:88:9E:3F:47:B4:73:1A:65
Certificate issuer: /CN=1ae1c7aa0b395e0612ec423fe07fb0389aaa4003
Certificate serial: 01891FDEA0D23DB6F434C61F4585720B6877
Authority key identifier: 1A:E1:C7:AA:0B:39:5E:06:12:EC:42:3F:E0:7F:B0:38:9A:AA:40:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GuHHqgs5XgYS7EI_4H-wOJqqQAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/abe628-fce7-447e-853e-94fdc9fbdcac/1/yEgRD-IzP_mbmKtziJ4_R7RzGmU.roa
Signing time: Tue 04 Jul 2023 07:47:11 +0000
ROA not before: Tue 04 Jul 2023 07:47:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39657
IP address blocks: 185.63.12.0/22 maxlen: 22
81.93.32.0/22 maxlen: 22
81.93.32.0/21 maxlen: 21
81.93.32.0/20 maxlen: 20
81.93.36.0/22 maxlen: 22
81.93.40.0/21 maxlen: 21
81.93.40.0/22 maxlen: 22
81.93.44.0/22 maxlen: 22
93.88.32.0/22 maxlen: 22
93.88.32.0/20 maxlen: 24
93.88.36.0/22 maxlen: 22
93.88.40.0/22 maxlen: 22
81.30.16.0/20 maxlen: 20
93.88.44.0/22 maxlen: 22
81.30.20.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 05 Jul 2023 08:21:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:1f:de:a0:d2:3d:b6:f4:34:c6:1f:45:85:72:0b:68:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ae1c7aa0b395e0612ec423fe07fb0389aaa4003
Validity
Not Before: Jul 4 07:47:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c848110fe2333ff99b98ab73889e3f47b4731a65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d3:7c:5c:f7:71:b6:c5:00:63:e2:ec:3c:ca:
74:3c:b8:d4:fb:64:fc:5e:9b:72:cb:03:cc:ea:90:
6b:10:0f:69:dc:51:8e:cb:2f:d3:0e:26:61:e9:de:
a8:59:4c:6c:ef:20:0f:a2:90:e5:bd:27:fb:9a:51:
43:4b:ae:b5:47:f5:0b:d5:83:ef:94:0d:de:65:1c:
84:4b:d2:97:d1:41:22:f3:6e:38:ea:a0:af:1d:b1:
ae:f9:a8:da:f5:61:93:76:eb:66:16:c3:1f:4e:9f:
43:92:3c:5b:19:ce:6f:bd:c7:83:b0:73:62:49:5f:
b0:94:d8:ce:a6:8d:ae:b7:b0:8c:da:59:69:17:69:
61:1d:4d:53:3a:ab:d5:52:50:37:39:8b:07:2d:af:
b9:c0:5d:bc:d5:6c:b0:7f:76:02:60:ee:ee:69:fd:
df:ce:51:cf:97:c3:06:7e:b5:b0:ae:d0:d6:65:0e:
f0:86:c6:30:92:5a:ba:63:6b:90:1a:16:de:81:43:
02:bd:64:7e:4f:f6:7f:5f:b3:ee:07:19:cc:35:92:
f3:d7:1e:2d:97:9b:cf:84:b5:3f:84:50:b3:a1:6d:
9b:44:a3:d5:38:bb:ba:f0:e2:4b:a8:f2:53:f4:a0:
6f:ff:77:7d:31:d5:20:9f:de:95:0f:53:63:a5:33:
72:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:48:11:0F:E2:33:3F:F9:9B:98:AB:73:88:9E:3F:47:B4:73:1A:65
X509v3 Authority Key Identifier:
keyid:1A:E1:C7:AA:0B:39:5E:06:12:EC:42:3F:E0:7F:B0:38:9A:AA:40:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GuHHqgs5XgYS7EI_4H-wOJqqQAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/abe628-fce7-447e-853e-94fdc9fbdcac/1/yEgRD-IzP_mbmKtziJ4_R7RzGmU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/abe628-fce7-447e-853e-94fdc9fbdcac/1/GuHHqgs5XgYS7EI_4H-wOJqqQAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.30.16.0/20
81.93.32.0/20
93.88.32.0/20
185.63.12.0/22
Signature Algorithm: sha256WithRSAEncryption
a7:ca:ca:c5:28:1e:47:6b:b8:d5:31:7d:0f:ed:97:e0:0b:78:
6a:0d:59:11:44:46:40:1a:13:57:3a:20:69:e2:49:ae:c4:8c:
7e:f0:f1:5f:61:40:14:28:dc:98:4f:1d:f6:e3:ac:d4:df:2a:
ea:fe:f1:98:aa:81:d7:b3:ac:e1:53:fd:3d:64:81:29:59:37:
2f:f2:98:43:8e:dd:7b:4d:41:d9:42:7f:90:fa:0e:11:e5:8f:
d2:4c:7c:74:10:94:b6:58:98:26:9f:c6:87:4f:e8:3d:a9:f8:
7d:99:c2:c9:63:01:c6:2d:f4:34:ea:4f:f8:0f:24:cf:9f:77:
82:ac:d3:1c:53:43:7a:3e:92:c8:7d:04:63:e8:82:fa:54:8a:
ca:b8:6e:97:da:b4:52:7f:d1:01:90:00:64:0c:6d:b3:2a:fb:
2e:26:c4:4b:27:5e:c0:86:b0:c4:f5:58:9b:1c:62:64:51:70:
9a:b8:e1:ab:cb:a7:67:ac:ca:56:ca:65:f3:4c:8c:ec:00:8b:
8d:6f:be:f5:f4:54:67:73:e1:99:6a:5a:0a:16:d8:63:4a:8c:
31:82:0e:09:2d:52:f8:c3:60:9c:bd:c0:ab:fa:e0:94:33:5b:
de:99:e4:eb:8e:5a:ce:61:fa:67:4b:d0:8d:b0:c9:51:e0:45:
3e:97:f6:74
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYkf3qDSPbb0NMYfRYVyC2h3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhZTFjN2FhMGIzOTVlMDYxMmVjNDIzZmUwN2ZiMDM4OWFh
YTQwMDMwHhcNMjMwNzA0MDc0NzExWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjODQ4MTEwZmUyMzMzZmY5OWI5OGFiNzM4ODllM2Y0N2I0NzMxYTY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndN8XPdxtsUAY+LsPMp0PLjU+2T8
XptyywPM6pBrEA9p3FGOyy/TDiZh6d6oWUxs7yAPopDlvSf7mlFDS661R/UL1YPv
lA3eZRyES9KX0UEi82446qCvHbGu+aja9WGTdutmFsMfTp9DkjxbGc5vvceDsHNi
SV+wlNjOpo2ut7CM2llpF2lhHU1TOqvVUlA3OYsHLa+5wF281Wywf3YCYO7uaf3f
zlHPl8MGfrWwrtDWZQ7whsYwklq6Y2uQGhbegUMCvWR+T/Z/X7PuBxnMNZLz1x4t
l5vPhLU/hFCzoW2bRKPVOLu68OJLqPJT9KBv/3d9MdUgn96VD1NjpTNymwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFMhIEQ/iMz/5m5irc4ieP0e0cxplMB8GA1UdIwQY
MBaAFBrhx6oLOV4GEuxCP+B/sDiaqkADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3VISHFnczVYZ1lTN0VJXzRILXdPSnFxUUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9hYmU2MjgtZmNlNy00NDdlLTg1M2Ut
OTRmZGM5ZmJkY2FjLzEveUVnUkQtSXpQX21ibUt0emlKNF9SN1J6R21VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC9hYmU2MjgtZmNlNy00NDdlLTg1M2UtOTRmZGM5ZmJkY2Fj
LzEvR3VISHFnczVYZ1lTN0VJXzRILXdPSnFxUUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQEUR4QAwQE
UV0gAwQEXVggAwQCuT8MMA0GCSqGSIb3DQEBCwUAA4IBAQCnysrFKB5Ha7jVMX0P
7ZfgC3hqDVkRREZAGhNXOiBp4kmuxIx+8PFfYUAUKNyYTx3246zU3yrq/vGYqoHX
s6zhU/09ZIEpWTcv8phDjt17TUHZQn+Q+g4R5Y/STHx0EJS2WJgmn8aHT+g9qfh9
mcLJYwHGLfQ06k/4DyTPn3eCrNMcU0N6PpLIfQRj6IL6VIrKuG6X2rRSf9EBkABk
DG2zKvsuJsRLJ17AhrDE9VibHGJkUXCauOGry6dnrMpWymXzTIzsAIuNb7719FRn
c+GZaloKFthjSowxgg4JLVL4w2CcvcCr+uCUM1vemeTrjlrOYfpnS9CNsMlR4EU+
l/Z0
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:17 2024 by rpki-client on console-ams.rpki-client.org