Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/cb1bc5-2c15-42f7-9ef2-5c99b683db0d/1/cJEB_UIRjE8OxNr5Gnm8beaNrHI.roa
File: cJEB_UIRjE8OxNr5Gnm8beaNrHI.roa (raw, json)
Hash identifier: 8ERZl75yQ8tHFJy5yqQn8yWxpsuUSrj30Elk9bol58E=
Subject key identifier: 70:91:01:FD:42:11:8C:4F:0E:C4:DA:F9:1A:79:BC:6D:E6:8D:AC:72
Certificate issuer: /CN=6c844bd62cbfb5adccfb4dc16eca23cb5c9ddeb6
Certificate serial: 01856D4AC4626EBACC05DDE3744D2EC2CC53
Authority key identifier: 6C:84:4B:D6:2C:BF:B5:AD:CC:FB:4D:C1:6E:CA:23:CB:5C:9D:DE:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bIRL1iy_ta3M-03Bbsojy1yd3rY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/cb1bc5-2c15-42f7-9ef2-5c99b683db0d/1/cJEB_UIRjE8OxNr5Gnm8beaNrHI.roa
Signing time: Sun 01 Jan 2023 12:24:54 +0000
ROA not before: Sun 01 Jan 2023 12:24:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47523
IP address blocks: 93.174.251.0/24 maxlen: 24
93.174.248.0/24 maxlen: 24
93.174.249.0/24 maxlen: 24
93.174.252.0/24 maxlen: 24
93.174.250.0/24 maxlen: 24
93.174.253.0/24 maxlen: 24
93.174.254.0/24 maxlen: 24
93.174.255.0/24 maxlen: 24
2a03:8ac0:255::/48 maxlen: 48
2a03:8ac0:248::/48 maxlen: 48
2a03:8ac0:250::/48 maxlen: 48
2a03:8ac0:254::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:4a:c4:62:6e:ba:cc:05:dd:e3:74:4d:2e:c2:cc:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c844bd62cbfb5adccfb4dc16eca23cb5c9ddeb6
Validity
Not Before: Jan 1 12:24:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=709101fd42118c4f0ec4daf91a79bc6de68dac72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d6:79:43:97:d5:18:8a:17:5a:da:8f:81:92:
8f:b4:9a:d4:e2:df:95:57:50:3e:6f:3b:a0:95:ca:
18:e5:88:bd:fb:84:00:7c:17:86:c2:90:75:00:58:
b6:ff:db:81:33:2f:7c:78:26:a4:c2:d0:5b:aa:89:
65:18:ed:d8:6e:95:ce:36:65:8e:ed:37:dd:18:a8:
6d:21:d1:21:79:1e:42:a4:fb:0e:ef:25:55:7c:32:
8f:b4:f1:db:2c:8f:90:65:96:f0:98:da:7e:1b:f5:
43:41:c8:ba:f6:3e:54:8d:25:37:8a:ee:17:30:37:
81:8c:88:c1:59:c6:80:03:03:2e:2c:a3:83:ef:20:
a5:bb:50:df:5a:1d:d1:1c:90:1d:30:bb:be:02:04:
1a:e0:ac:f8:31:b3:09:b5:aa:be:8a:86:4d:ac:8e:
f3:e2:f2:23:7f:d8:79:50:67:61:43:9d:81:42:96:
d5:f3:49:81:04:ab:d0:4e:c3:87:26:d2:32:23:d1:
3f:61:01:79:84:a9:17:80:8e:84:7c:5a:69:95:77:
3f:ea:e8:a1:a6:c6:ee:10:86:16:3c:f2:3a:92:4e:
cc:28:d3:1a:e3:52:98:31:dd:3a:e6:07:c5:28:60:
81:24:6f:d8:09:3e:e6:b2:dc:63:f7:11:b4:ec:17:
2c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:91:01:FD:42:11:8C:4F:0E:C4:DA:F9:1A:79:BC:6D:E6:8D:AC:72
X509v3 Authority Key Identifier:
keyid:6C:84:4B:D6:2C:BF:B5:AD:CC:FB:4D:C1:6E:CA:23:CB:5C:9D:DE:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bIRL1iy_ta3M-03Bbsojy1yd3rY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/cb1bc5-2c15-42f7-9ef2-5c99b683db0d/1/cJEB_UIRjE8OxNr5Gnm8beaNrHI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/cb1bc5-2c15-42f7-9ef2-5c99b683db0d/1/bIRL1iy_ta3M-03Bbsojy1yd3rY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.174.248.0/21
IPv6:
2a03:8ac0:248::/48
2a03:8ac0:250::/48
2a03:8ac0:254::/47
Signature Algorithm: sha256WithRSAEncryption
bd:58:aa:1c:e8:0a:6b:ed:5a:75:6f:df:3d:7b:7b:49:4c:10:
7e:0c:fe:12:4f:0d:76:cb:9f:ff:4f:c9:7c:d1:31:a5:9f:58:
39:5e:0c:c9:41:25:5f:3b:91:e6:38:b3:e9:ef:b2:a6:29:ab:
44:66:89:09:47:63:8b:6b:c6:9e:66:f4:67:7c:d3:a0:c1:9f:
ad:d1:4b:29:56:83:eb:4d:92:58:26:5c:b3:4d:4e:46:23:24:
3f:43:f8:95:c2:93:5f:d7:31:0b:66:18:a7:92:cc:4c:aa:c9:
83:b1:14:27:b4:67:ad:e6:59:83:bc:f6:16:e5:a6:bd:cc:10:
7b:25:c8:28:04:ba:01:3e:82:19:68:a3:87:7c:e4:d8:0e:e2:
78:36:6a:bd:74:6d:b1:0f:a9:c0:f0:93:83:7e:ef:ef:34:0f:
8f:f7:41:85:f1:d5:b6:03:f3:10:99:a6:d0:30:53:65:01:ab:
5d:2a:83:3e:f9:13:63:4b:31:7a:94:d8:4e:c2:0d:83:bc:4f:
c0:dc:a9:92:35:65:0d:d0:e2:2f:7a:3d:0b:0c:5c:56:b3:3f:
f5:4f:bf:b4:e9:10:2d:0c:78:67:b6:0f:ea:fd:b4:ee:37:f4:
26:34:b6:44:40:5b:82:77:c4:bd:39:ea:0f:1e:21:a1:1a:28:
c3:6c:f7:f6
-----BEGIN CERTIFICATE-----
MIIFIDCCBAigAwIBAgISAYVtSsRibrrMBd3jdE0uwsxTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjODQ0YmQ2MmNiZmI1YWRjY2ZiNGRjMTZlY2EyM2NiNWM5
ZGRlYjYwHhcNMjMwMTAxMTIyNDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MDkxMDFmZDQyMTE4YzRmMGVjNGRhZjkxYTc5YmM2ZGU2OGRhYzcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNZ5Q5fVGIoXWtqPgZKPtJrU4t+V
V1A+bzuglcoY5Yi9+4QAfBeGwpB1AFi2/9uBMy98eCakwtBbqollGO3YbpXONmWO
7TfdGKhtIdEheR5CpPsO7yVVfDKPtPHbLI+QZZbwmNp+G/VDQci69j5UjSU3iu4X
MDeBjIjBWcaAAwMuLKOD7yClu1DfWh3RHJAdMLu+AgQa4Kz4MbMJtaq+ioZNrI7z
4vIjf9h5UGdhQ52BQpbV80mBBKvQTsOHJtIyI9E/YQF5hKkXgI6EfFpplXc/6uih
psbuEIYWPPI6kk7MKNMa41KYMd065gfFKGCBJG/YCT7mstxj9xG07Bcs/QIDAQAB
o4ICLDCCAigwHQYDVR0OBBYEFHCRAf1CEYxPDsTa+Rp5vG3mjaxyMB8GA1UdIwQY
MBaAFGyES9Ysv7WtzPtNwW7KI8tcnd62MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYklSTDFpeV90YTNNLTAzQmJzb2p5MXlkM3JZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9jYjFiYzUtMmMxNS00MmY3LTllZjIt
NWM5OWI2ODNkYjBkLzEvY0pFQl9VSVJqRThPeE5yNUdubThiZWFOckhJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy9jYjFiYzUtMmMxNS00MmY3LTllZjItNWM5OWI2ODNkYjBk
LzEvYklSTDFpeV90YTNNLTAzQmJzb2p5MXlkM3JZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAMBAIAATAGAwQDXa74MCEE
AgACMBsDBwAqA4rAAkgDBwAqA4rAAlADBwEqA4rAAlQwDQYJKoZIhvcNAQELBQAD
ggEBAL1YqhzoCmvtWnVv3z17e0lMEH4M/hJPDXbLn/9PyXzRMaWfWDleDMlBJV87
keY4s+nvsqYpq0RmiQlHY4trxp5m9Gd806DBn63RSylWg+tNklgmXLNNTkYjJD9D
+JXCk1/XMQtmGKeSzEyqyYOxFCe0Z63mWYO89hblpr3MEHslyCgEugE+ghloo4d8
5NgO4ng2ar10bbEPqcDwk4N+7+80D4/3QYXx1bYD8xCZptAwU2UBq10qgz75E2NL
MXqU2E7CDYO8T8DcqZI1ZQ3Q4i96PQsMXFazP/VPv7TpEC0MeGe2D+r9tO439CY0
tkRAW4J3xL056g8eIaEaKMNs9/Y=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:08 2024 by rpki-client on console-fra.rpki-client.org