Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/1c6180-9950-4ce8-811e-f8d662b96dab/1/c4viF3SBh4UG33jBkwbprF1yVus.roa
File: c4viF3SBh4UG33jBkwbprF1yVus.roa (raw, json)
Hash identifier: cvUam/iFZ7OPb/h4APPwn6HZ7xHJWKwKeQIITFAjVSk=
Subject key identifier: 73:8B:E2:17:74:81:87:85:06:DF:78:C1:93:06:E9:AC:5D:72:56:EB
Certificate issuer: /CN=7d4d1c8790a913e832c733dff778dee79129700a
Certificate serial: 01856D78A2C2F1AD67C6D36A5F8F5224343D
Authority key identifier: 7D:4D:1C:87:90:A9:13:E8:32:C7:33:DF:F7:78:DE:E7:91:29:70:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fU0ch5CpE-gyxzPf93je55EpcAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/1c6180-9950-4ce8-811e-f8d662b96dab/1/c4viF3SBh4UG33jBkwbprF1yVus.roa
Signing time: Sun 01 Jan 2023 13:15:00 +0000
ROA not before: Sun 01 Jan 2023 13:15:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8222
IP address blocks: 188.92.112.0/21 maxlen: 24
213.183.0.0/19 maxlen: 24
194.59.179.0/24 maxlen: 24
185.227.12.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:78:a2:c2:f1:ad:67:c6:d3:6a:5f:8f:52:24:34:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d4d1c8790a913e832c733dff778dee79129700a
Validity
Not Before: Jan 1 13:15:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=738be2177481878506df78c19306e9ac5d7256eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:8a:ce:4e:df:fd:92:58:6d:fd:76:3b:b6:9d:
42:a7:95:7d:f4:8f:b2:40:65:09:65:49:e4:6e:f8:
ba:81:9d:f7:07:f2:da:45:65:1f:e8:be:0c:a1:30:
ea:20:36:7b:ac:a6:e5:47:8c:21:3b:03:e3:78:1c:
c2:f7:3e:c4:40:05:b7:17:f5:1d:59:41:f7:a0:14:
47:89:40:2a:dd:dc:9c:a9:86:1b:59:1e:ea:47:5e:
03:c3:df:2e:79:4c:be:5c:71:11:db:34:32:d7:bf:
95:f5:71:7b:09:42:49:88:ef:b1:d6:65:6c:74:5b:
61:e8:ce:11:0d:69:70:f1:e4:ff:38:fa:cf:1f:4e:
a5:51:db:aa:37:11:2a:9e:60:d7:bd:85:79:78:ef:
85:40:73:25:66:60:02:33:9d:60:1b:91:03:53:b5:
ca:08:55:d5:ca:cc:ec:a7:b9:5c:36:cb:ca:6a:0c:
38:55:4b:06:67:3d:29:58:e6:ed:1b:dd:05:ce:4c:
d3:0f:ec:38:57:d9:4c:12:24:cf:50:6d:a3:8a:ca:
13:2c:01:0c:84:4e:4c:96:98:da:ad:5f:1e:e2:b2:
7b:fe:69:a7:22:ae:88:8a:ba:3f:07:f2:7f:af:80:
0e:62:62:3d:28:79:37:1b:d6:9e:f1:67:d5:61:00:
d5:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:8B:E2:17:74:81:87:85:06:DF:78:C1:93:06:E9:AC:5D:72:56:EB
X509v3 Authority Key Identifier:
keyid:7D:4D:1C:87:90:A9:13:E8:32:C7:33:DF:F7:78:DE:E7:91:29:70:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fU0ch5CpE-gyxzPf93je55EpcAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/1c6180-9950-4ce8-811e-f8d662b96dab/1/c4viF3SBh4UG33jBkwbprF1yVus.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/1c6180-9950-4ce8-811e-f8d662b96dab/1/fU0ch5CpE-gyxzPf93je55EpcAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.227.12.0/22
188.92.112.0/21
194.59.179.0/24
213.183.0.0/19
Signature Algorithm: sha256WithRSAEncryption
1b:09:79:42:d3:82:ba:fa:4b:b1:6a:e3:14:99:5f:6e:31:85:
5e:bb:e8:64:af:ec:cd:30:6f:cb:96:1b:60:dd:c6:99:cc:f7:
1b:8f:f8:10:60:c1:4c:6d:fb:3c:14:43:dd:e0:8c:27:a1:ea:
2a:8d:ee:cc:10:b2:17:70:2c:3c:f8:b1:87:49:a5:e4:c4:3b:
fa:24:c6:43:59:8d:d4:2e:18:e7:fe:53:c7:90:2f:02:ee:8a:
bd:33:87:fe:7e:b6:0d:86:2d:42:43:d6:fc:4f:d1:c5:41:f9:
4d:01:c3:9b:ac:24:9c:78:02:8d:48:5a:8b:44:a8:20:d9:ee:
36:9f:ec:7a:b0:5d:4e:a2:c8:28:26:73:3d:38:84:2a:90:ef:
5f:2f:54:f0:cb:71:6f:43:bc:17:56:54:f6:f1:c1:91:55:c1:
0c:d2:44:02:ce:98:3a:14:e7:6f:d5:1f:27:ed:9d:92:0f:88:
cb:b4:f9:b1:a4:d0:dc:49:1d:06:8c:19:a0:fc:02:92:f0:19:
e3:00:4f:39:80:c6:48:19:e4:62:34:eb:c6:67:67:ee:19:4f:
30:52:f7:cd:9a:32:25:43:b3:d6:d1:f6:a6:97:dd:17:08:4d:
41:e7:df:27:cf:a0:b1:49:37:fc:50:86:9d:08:51:b2:49:64:
09:d0:fe:2a
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYVteKLC8a1nxtNqX49SJDQ9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNGQxYzg3OTBhOTEzZTgzMmM3MzNkZmY3NzhkZWU3OTEy
OTcwMGEwHhcNMjMwMTAxMTMxNTAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MzhiZTIxNzc0ODE4Nzg1MDZkZjc4YzE5MzA2ZTlhYzVkNzI1NmViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4rOTt/9klht/XY7tp1Cp5V99I+y
QGUJZUnkbvi6gZ33B/LaRWUf6L4MoTDqIDZ7rKblR4whOwPjeBzC9z7EQAW3F/Ud
WUH3oBRHiUAq3dycqYYbWR7qR14Dw98ueUy+XHER2zQy17+V9XF7CUJJiO+x1mVs
dFth6M4RDWlw8eT/OPrPH06lUduqNxEqnmDXvYV5eO+FQHMlZmACM51gG5EDU7XK
CFXVyszsp7lcNsvKagw4VUsGZz0pWObtG90FzkzTD+w4V9lMEiTPUG2jisoTLAEM
hE5MlpjarV8e4rJ7/mmnIq6Iiro/B/J/r4AOYmI9KHk3G9ae8WfVYQDV2wIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFHOL4hd0gYeFBt94wZMG6axdclbrMB8GA1UdIwQY
MBaAFH1NHIeQqRPoMscz3/d43ueRKXAKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlUwY2g1Q3BFLWd5eHpQZjkzamU1NUVwY0FvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy8xYzYxODAtOTk1MC00Y2U4LTgxMWUt
ZjhkNjYyYjk2ZGFiLzEvYzR2aUYzU0JoNFVHMzNqQmt3YnByRjF5VnVzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy8xYzYxODAtOTk1MC00Y2U4LTgxMWUtZjhkNjYyYjk2ZGFi
LzEvZlUwY2g1Q3BFLWd5eHpQZjkzamU1NUVwY0FvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCueMMAwQD
vFxwAwQAwjuzAwQF1bcAMA0GCSqGSIb3DQEBCwUAA4IBAQAbCXlC04K6+kuxauMU
mV9uMYVeu+hkr+zNMG/Llhtg3caZzPcbj/gQYMFMbfs8FEPd4Iwnoeoqje7MELIX
cCw8+LGHSaXkxDv6JMZDWY3ULhjn/lPHkC8C7oq9M4f+frYNhi1CQ9b8T9HFQflN
AcObrCSceAKNSFqLRKgg2e42n+x6sF1OosgoJnM9OIQqkO9fL1Twy3FvQ7wXVlT2
8cGRVcEM0kQCzpg6FOdv1R8n7Z2SD4jLtPmxpNDcSR0GjBmg/AKS8BnjAE85gMZI
GeRiNOvGZ2fuGU8wUvfNmjIlQ7PW0faml90XCE1B598nz6CxSTf8UIadCFGySWQJ
0P4q
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:28 2024 by rpki-client on console-fra.rpki-client.org