Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/A84pl4vaFV57PTvJ5mguFrbqZdk.roa
File: A84pl4vaFV57PTvJ5mguFrbqZdk.roa (raw, json)
Hash identifier: ILms0Lsq7bOJvTcPhC/UweQVFKJmDC2BcjCv/oTnACM=
Subject key identifier: 03:CE:29:97:8B:DA:15:5E:7B:3D:3B:C9:E6:68:2E:16:B6:EA:65:D9
Certificate issuer: /CN=f64ad45d22b5f3cf2e71ce0ac01074b7cd21ac57
Certificate serial: 01856D41AED1487FE3A2FE756757688A4878
Authority key identifier: F6:4A:D4:5D:22:B5:F3:CF:2E:71:CE:0A:C0:10:74:B7:CD:21:AC:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9krUXSK1888ucc4KwBB0t80hrFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/A84pl4vaFV57PTvJ5mguFrbqZdk.roa
Signing time: Sun 01 Jan 2023 12:14:59 +0000
ROA not before: Sun 01 Jan 2023 12:14:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213358
IP address blocks: 194.113.22.0/23 maxlen: 24
91.208.68.0/24 maxlen: 24
94.124.100.0/22 maxlen: 24
2a06:a900::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:32:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:41:ae:d1:48:7f:e3:a2:fe:75:67:57:68:8a:48:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f64ad45d22b5f3cf2e71ce0ac01074b7cd21ac57
Validity
Not Before: Jan 1 12:14:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=03ce29978bda155e7b3d3bc9e6682e16b6ea65d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a0:37:c8:2a:fd:4b:6e:81:cd:d4:98:6a:84:
4d:48:6f:06:34:9a:46:eb:1a:53:a2:95:17:3a:f9:
e7:65:cf:d3:f8:40:89:da:dc:d5:76:6a:d0:67:c8:
64:19:7e:77:23:78:7f:aa:b5:55:26:8d:3b:37:c2:
98:49:a8:59:11:dc:57:44:12:96:6d:29:9a:b6:b8:
09:aa:08:a5:85:66:5e:46:e7:1b:c9:fb:3a:ff:7f:
45:4d:b5:1c:82:c2:4b:e4:c3:8d:22:ca:d0:3a:47:
da:c4:e7:d7:e0:a1:01:5f:28:39:38:d9:af:98:ef:
e3:a6:75:ba:fc:a3:7e:bf:a4:a9:d8:26:c9:0b:34:
7c:a6:f9:e6:06:b6:0e:64:f3:bd:f4:06:e8:08:8c:
bd:32:be:5d:76:50:b4:a3:ec:62:6a:01:b0:11:92:
98:19:d9:fb:50:d6:ac:39:3c:e7:8b:78:3e:8f:e1:
28:9c:81:30:b2:3c:72:59:17:ec:99:f3:15:de:b0:
26:f9:a6:ea:51:73:e4:9c:b6:40:b5:a8:43:9d:ee:
2a:6f:57:f7:5f:15:6a:a2:e1:67:1a:d2:6e:ec:92:
8b:56:c1:20:ca:0e:e6:7f:ab:4b:69:3b:0e:0c:08:
65:7b:b7:c5:52:47:36:ab:82:4e:8b:73:44:69:72:
5a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:CE:29:97:8B:DA:15:5E:7B:3D:3B:C9:E6:68:2E:16:B6:EA:65:D9
X509v3 Authority Key Identifier:
keyid:F6:4A:D4:5D:22:B5:F3:CF:2E:71:CE:0A:C0:10:74:B7:CD:21:AC:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9krUXSK1888ucc4KwBB0t80hrFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/A84pl4vaFV57PTvJ5mguFrbqZdk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.68.0/24
94.124.100.0/22
194.113.22.0/23
IPv6:
2a06:a900::/29
Signature Algorithm: sha256WithRSAEncryption
22:9b:ad:2d:fc:83:c2:74:0b:5f:13:5d:b6:9c:08:49:39:84:
16:f5:63:73:4e:52:70:57:d6:72:d8:c8:8d:ee:10:ff:61:8f:
37:c5:3e:61:77:1c:f5:b8:e9:2c:ba:11:32:72:48:6e:58:5a:
3f:ee:28:5a:be:2e:08:af:f9:3f:d9:2a:94:65:ae:9e:5b:45:
5f:c7:98:47:48:49:4a:a2:3e:6a:b1:07:27:2b:ef:38:04:43:
1e:6a:03:b3:96:a7:d8:f0:01:75:99:a8:15:dd:b1:4e:2d:6e:
9b:27:cc:4f:d0:e0:63:30:01:e4:cc:00:25:ef:26:7d:4c:2f:
e2:f1:9b:01:9f:11:6c:7b:c6:40:88:2b:3e:77:b7:00:af:7a:
fd:09:41:b6:77:c8:8e:b9:15:0a:b5:f7:80:1b:c9:23:0c:23:
d2:22:b0:e7:2a:f0:28:2e:5d:15:fd:b9:41:d9:61:3a:ec:f1:
82:58:1b:5d:60:58:b5:a4:30:0d:94:15:54:25:a6:73:4e:bf:
64:e4:47:69:2d:3d:f9:4b:03:7f:49:ee:d4:4d:f2:50:85:22:
6b:f2:bc:82:b0:08:10:77:c3:f1:e1:51:80:ba:c7:96:57:75:
48:5b:7b:2c:e3:8f:c6:d8:81:5a:fe:7b:5f:1e:cf:2b:23:b2:
c0:01:4d:40
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAYVtQa7RSH/jov51Z1doikh4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2NGFkNDVkMjJiNWYzY2YyZTcxY2UwYWMwMTA3NGI3Y2Qy
MWFjNTcwHhcNMjMwMTAxMTIxNDU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwM2NlMjk5NzhiZGExNTVlN2IzZDNiYzllNjY4MmUxNmI2ZWE2NWQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6A3yCr9S26BzdSYaoRNSG8GNJpG
6xpTopUXOvnnZc/T+ECJ2tzVdmrQZ8hkGX53I3h/qrVVJo07N8KYSahZEdxXRBKW
bSmatrgJqgilhWZeRucbyfs6/39FTbUcgsJL5MONIsrQOkfaxOfX4KEBXyg5ONmv
mO/jpnW6/KN+v6Sp2CbJCzR8pvnmBrYOZPO99AboCIy9Mr5ddlC0o+xiagGwEZKY
Gdn7UNasOTzni3g+j+EonIEwsjxyWRfsmfMV3rAm+abqUXPknLZAtahDne4qb1f3
XxVqouFnGtJu7JKLVsEgyg7mf6tLaTsODAhle7fFUkc2q4JOi3NEaXJaAQIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFAPOKZeL2hVeez07yeZoLha26mXZMB8GA1UdIwQY
MBaAFPZK1F0itfPPLnHOCsAQdLfNIaxXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWtyVVhTSzE4ODh1Y2M0S3dCQjB0ODBockZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9lZTNiODQtMjdkNy00ZGM3LThmM2Qt
Njk5YjIzNGZjNzhjLzEvQTg0cGw0dmFGVjU3UFR2SjVtZ3VGcmJxWmRrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9lZTNiODQtMjdkNy00ZGM3LThmM2QtNjk5YjIzNGZjNzhj
LzEvOWtyVVhTSzE4ODh1Y2M0S3dCQjB0ODBockZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQAW9BEAwQC
XnxkAwQBwnEWMA0EAgACMAcDBQMqBqkAMA0GCSqGSIb3DQEBCwUAA4IBAQAim60t
/IPCdAtfE122nAhJOYQW9WNzTlJwV9Zy2MiN7hD/YY83xT5hdxz1uOksuhEyckhu
WFo/7ihavi4Ir/k/2SqUZa6eW0Vfx5hHSElKoj5qsQcnK+84BEMeagOzlqfY8AF1
magV3bFOLW6bJ8xP0OBjMAHkzAAl7yZ9TC/i8ZsBnxFse8ZAiCs+d7cAr3r9CUG2
d8iOuRUKtfeAG8kjDCPSIrDnKvAoLl0V/blB2WE67PGCWBtdYFi1pDANlBVUJaZz
Tr9k5EdpLT35SwN/Se7UTfJQhSJr8ryCsAgQd8Px4VGAuseWV3VIW3ss44/G2IFa
/ntfHs8rI7LAAU1A
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:34 2024 by rpki-client on console-fra.rpki-client.org