Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/a1740e-8404-42d2-af5c-10e24625a4d4/1/9pO1ja2c6Dd8ipD89jXeXGIIlFY.roa
File: 9pO1ja2c6Dd8ipD89jXeXGIIlFY.roa (raw, json)
Hash identifier: zRcuBPHbIJx+EVnX2/C1VvbYjQ3lBG7TNdIN8ku8Q30=
Subject key identifier: F6:93:B5:8D:AD:9C:E8:37:7C:8A:90:FC:F6:35:DE:5C:62:08:94:56
Certificate issuer: /CN=e93f3a41e6be524115c6c2b558bc280043a0224e
Certificate serial: 01856F301A8D279C39B330B38A951ACBE3B6
Authority key identifier: E9:3F:3A:41:E6:BE:52:41:15:C6:C2:B5:58:BC:28:00:43:A0:22:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6T86Qea-UkEVxsK1WLwoAEOgIk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/a1740e-8404-42d2-af5c-10e24625a4d4/1/9pO1ja2c6Dd8ipD89jXeXGIIlFY.roa
Signing time: Sun 01 Jan 2023 21:15:01 +0000
ROA not before: Sun 01 Jan 2023 21:15:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51859
IP address blocks: 87.237.204.0/24 maxlen: 24
87.237.204.0/22 maxlen: 24
87.237.200.0/21 maxlen: 24
87.237.201.0/24 maxlen: 24
87.237.202.0/23 maxlen: 24
87.237.203.0/24 maxlen: 24
185.29.100.0/22 maxlen: 24
188.93.120.0/21 maxlen: 24
91.222.4.0/22 maxlen: 24
2a04:2e40::/29 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:30:1a:8d:27:9c:39:b3:30:b3:8a:95:1a:cb:e3:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e93f3a41e6be524115c6c2b558bc280043a0224e
Validity
Not Before: Jan 1 21:15:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f693b58dad9ce8377c8a90fcf635de5c62089456
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d3:b2:dc:ca:77:ac:d5:2c:3a:25:18:12:39:
17:b4:b5:1f:4a:f3:2e:10:61:af:f1:2d:72:2b:09:
53:31:5f:b4:41:34:59:2e:ed:20:56:24:01:69:25:
5d:3e:d7:b1:e1:77:2a:d6:38:db:69:42:15:11:12:
77:d4:83:c7:e7:47:1d:0d:76:84:41:8e:14:fb:1c:
dc:99:b1:7b:b8:c3:73:c3:d6:c2:b6:35:9f:e7:e9:
f3:80:24:1e:da:6f:e9:15:c5:e6:dd:35:07:02:b5:
da:af:b8:9e:4f:95:e3:de:9b:fb:ed:72:d5:56:d1:
05:1b:48:73:c1:f1:1b:b0:8c:82:9e:f0:58:ed:46:
dd:2a:94:9f:5e:dc:dd:62:0d:a9:66:93:c9:f6:6a:
e0:8c:45:26:57:51:66:cc:19:14:e1:6a:f3:d6:5c:
45:19:a3:04:78:02:5a:a1:55:58:53:eb:14:31:e4:
a7:8a:b7:0e:89:10:60:b2:c6:96:cf:70:69:63:88:
86:86:5b:f7:f8:ab:30:34:e9:04:44:76:07:79:96:
08:c7:c3:d4:7f:2f:6a:03:5f:36:db:b6:fe:38:52:
9a:b0:5a:8a:f6:0e:e9:30:00:20:de:93:46:a4:b0:
97:ca:ce:e3:b5:1d:1a:34:36:fb:89:5f:04:3b:c1:
ed:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:93:B5:8D:AD:9C:E8:37:7C:8A:90:FC:F6:35:DE:5C:62:08:94:56
X509v3 Authority Key Identifier:
keyid:E9:3F:3A:41:E6:BE:52:41:15:C6:C2:B5:58:BC:28:00:43:A0:22:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6T86Qea-UkEVxsK1WLwoAEOgIk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/a1740e-8404-42d2-af5c-10e24625a4d4/1/9pO1ja2c6Dd8ipD89jXeXGIIlFY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/a1740e-8404-42d2-af5c-10e24625a4d4/1/6T86Qea-UkEVxsK1WLwoAEOgIk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.237.200.0/21
91.222.4.0/22
185.29.100.0/22
188.93.120.0/21
IPv6:
2a04:2e40::/29
Signature Algorithm: sha256WithRSAEncryption
4a:3d:53:18:bd:98:b4:e8:56:a1:ff:91:9a:f5:aa:37:35:99:
1b:ed:49:f4:ca:54:3c:1a:0a:8d:d3:05:3c:e0:7f:7e:a6:0f:
67:c2:92:f9:7c:d9:27:60:f2:02:70:67:db:8d:fd:d9:36:37:
29:6e:d3:b2:77:9f:cc:70:e4:6e:67:fc:9b:0c:74:dd:ba:4e:
bf:76:1e:3d:12:c0:e7:9e:43:95:72:5a:c8:34:d1:48:81:13:
e1:e4:9f:64:0a:46:6e:95:7c:eb:a4:e2:25:b8:fc:19:28:6d:
97:b3:ab:81:4a:22:64:95:d5:74:a6:41:5e:cc:1c:b9:02:b8:
b7:51:53:c8:c7:d3:03:80:6b:08:df:63:71:3a:44:90:ed:61:
cb:3c:79:8e:31:39:66:b0:55:d1:fb:50:ac:c4:1f:e0:62:a1:
12:5c:63:34:38:31:03:58:fa:e1:02:d7:78:9e:03:da:9e:cc:
69:8d:5f:cb:48:98:4b:6a:45:3a:d8:64:50:e9:d7:60:82:a9:
a8:d0:e9:fa:77:62:4d:b6:8f:59:a2:4d:3d:32:50:9d:de:76:
6e:4f:c3:ad:9f:0e:4a:59:6c:cf:fb:ad:fb:30:48:17:29:b2:
5e:69:3d:1e:fb:2a:f0:a5:1a:69:5a:88:9d:9f:de:67:e5:a6:
c5:f0:7d:38
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAYVvMBqNJ5w5szCzipUay+O2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5M2YzYTQxZTZiZTUyNDExNWM2YzJiNTU4YmMyODAwNDNh
MDIyNGUwHhcNMjMwMTAxMjExNTAxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNjkzYjU4ZGFkOWNlODM3N2M4YTkwZmNmNjM1ZGU1YzYyMDg5NDU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9Oy3Mp3rNUsOiUYEjkXtLUfSvMu
EGGv8S1yKwlTMV+0QTRZLu0gViQBaSVdPtex4Xcq1jjbaUIVERJ31IPH50cdDXaE
QY4U+xzcmbF7uMNzw9bCtjWf5+nzgCQe2m/pFcXm3TUHArXar7ieT5Xj3pv77XLV
VtEFG0hzwfEbsIyCnvBY7UbdKpSfXtzdYg2pZpPJ9mrgjEUmV1FmzBkU4Wrz1lxF
GaMEeAJaoVVYU+sUMeSnircOiRBgssaWz3BpY4iGhlv3+KswNOkERHYHeZYIx8PU
fy9qA18227b+OFKasFqK9g7pMAAg3pNGpLCXys7jtR0aNDb7iV8EO8HtbQIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFPaTtY2tnOg3fIqQ/PY13lxiCJRWMB8GA1UdIwQY
MBaAFOk/OkHmvlJBFcbCtVi8KABDoCJOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlQ4NlFlYS1Va0VWeHNLMVdMd29BRU9nSWs0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9hMTc0MGUtODQwNC00MmQyLWFmNWMt
MTBlMjQ2MjVhNGQ0LzEvOXBPMWphMmM2RGQ4aXBEODlqWGVYR0lJbEZZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9hMTc0MGUtODQwNC00MmQyLWFmNWMtMTBlMjQ2MjVhNGQ0
LzEvNlQ4NlFlYS1Va0VWeHNLMVdMd29BRU9nSWs0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQDV+3IAwQC
W94EAwQCuR1kAwQDvF14MA0EAgACMAcDBQMqBC5AMA0GCSqGSIb3DQEBCwUAA4IB
AQBKPVMYvZi06Fah/5Ga9ao3NZkb7Un0ylQ8GgqN0wU84H9+pg9nwpL5fNknYPIC
cGfbjf3ZNjcpbtOyd5/McORuZ/ybDHTduk6/dh49EsDnnkOVclrINNFIgRPh5J9k
CkZulXzrpOIluPwZKG2Xs6uBSiJkldV0pkFezBy5Ari3UVPIx9MDgGsI32NxOkSQ
7WHLPHmOMTlmsFXR+1CsxB/gYqESXGM0ODEDWPrhAtd4ngPansxpjV/LSJhLakU6
2GRQ6ddggqmo0On6d2JNto9Zok09MlCd3nZuT8Otnw5KWWzP+637MEgXKbJeaT0e
+yrwpRppWoidn95n5abF8H04
Generated at Wed Dec 13 00:10:47 2023 by rpki-client on console-fra.rpki-client.org