Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/VS77x0ueEd-tnN1b94Uro33n-WQ.roa
File: VS77x0ueEd-tnN1b94Uro33n-WQ.roa (raw, json)
Hash identifier: r9r+fQRKhm4wj01vC6YpYW6juYZq4pGLS/Miu1PJPt0=
Subject key identifier: 55:2E:FB:C7:4B:9E:11:DF:AD:9C:DD:5B:F7:85:2B:A3:7D:E7:F9:64
Certificate issuer: /CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Certificate serial: 01856C813C7D46DFFAF95DC2FD2DE2E48F5F
Authority key identifier: FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/VS77x0ueEd-tnN1b94Uro33n-WQ.roa
Signing time: Sun 01 Jan 2023 08:44:47 +0000
ROA not before: Sun 01 Jan 2023 08:44:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203363
IP address blocks: 188.240.61.0/24 maxlen: 24
193.176.28.0/24 maxlen: 24
178.239.174.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 23 Oct 2023 17:11:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:81:3c:7d:46:df:fa:f9:5d:c2:fd:2d:e2:e4:8f:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Validity
Not Before: Jan 1 08:44:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=552efbc74b9e11dfad9cdd5bf7852ba37de7f964
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:7b:8c:a8:35:86:76:2c:6f:4d:1b:54:bd:ec:
5c:37:c6:d4:3f:18:73:ca:28:53:47:7a:a2:2e:54:
59:13:05:36:d3:16:9d:82:e5:f8:37:23:e2:bf:cf:
99:92:62:38:3d:2c:fd:c1:eb:a2:cc:eb:f7:d9:c6:
f4:6b:28:b6:f9:0b:5f:57:24:97:7a:e6:3c:c1:c9:
21:8c:0b:73:59:bf:02:b7:f9:1c:b2:3e:3d:52:14:
07:6c:dd:ba:1b:17:7a:c7:38:5c:73:fa:10:ba:85:
47:20:35:ed:85:c6:cf:fd:90:33:75:2b:e3:02:83:
6b:f6:76:70:87:ba:aa:00:14:9b:7d:17:bf:6a:75:
c2:79:e4:70:1c:7f:06:f7:fa:c2:d3:3f:bb:da:e4:
33:1f:c4:36:22:72:e8:7d:e1:24:04:a5:71:29:0f:
a6:ea:fb:4d:f0:10:8f:4d:91:de:99:e3:ef:30:af:
9e:0a:b0:11:98:48:45:bf:c8:9a:bf:24:b7:6d:59:
20:bf:ad:fe:01:0f:be:23:cb:4c:7a:06:07:04:c6:
06:fe:20:69:be:2c:da:cf:12:e9:cf:e1:13:25:d8:
fd:06:10:99:f8:fe:e9:30:a0:97:0f:3e:22:16:af:
9d:1a:0e:30:ee:93:ac:92:f8:d5:b1:6d:d1:a5:69:
fa:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:2E:FB:C7:4B:9E:11:DF:AD:9C:DD:5B:F7:85:2B:A3:7D:E7:F9:64
X509v3 Authority Key Identifier:
keyid:FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/VS77x0ueEd-tnN1b94Uro33n-WQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.174.0/24
188.240.61.0/24
193.176.28.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:e6:16:7d:8e:a6:d3:8d:78:15:7c:b8:16:a9:23:05:bd:54:
34:87:36:86:9c:14:01:dd:14:58:93:7f:0d:36:9e:d0:c4:60:
9c:df:e0:6c:c1:dd:75:d2:ac:40:66:bd:57:75:92:ae:06:10:
ee:28:11:d0:29:3c:5b:e0:be:25:f6:33:3c:cc:e1:46:4b:5e:
64:1a:66:28:61:7f:60:48:3d:3c:c8:c2:79:61:8d:2c:aa:c6:
81:a5:12:49:ab:dc:90:3f:9f:cc:71:fc:fc:2a:b3:7d:e3:48:
85:e7:b0:a6:15:c9:b3:18:fa:a9:22:15:da:8a:88:81:5c:1c:
ca:51:e7:d0:a8:ae:66:98:59:20:78:75:8d:da:aa:b5:4d:db:
5c:2b:cd:83:58:2a:e8:83:91:4f:cb:c9:05:0d:d0:88:a5:75:
10:80:6b:95:89:5e:d9:c5:79:07:df:7e:69:b9:f1:5d:ac:9c:
52:cf:db:a2:e6:99:01:d3:ac:2e:22:10:a3:b6:c3:d7:13:a6:
ec:7f:dc:93:3d:ea:38:c1:1e:b8:b6:63:db:84:9d:9b:c1:63:
fd:29:9d:27:35:47:bd:f1:c9:c4:1a:1e:b7:eb:c3:9c:c4:be:
8c:06:fd:0c:2a:24:2a:9a:b9:16:83:60:b4:19:e8:9a:19:54:
d8:44:cc:3c
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYVsgTx9Rt/6+V3C/S3i5I9fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkMzdjYzhmMTZiM2M2Y2JkMzM0NmFhM2VkNjE3NzFmM2U4
M2FjOTcwHhcNMjMwMTAxMDg0NDQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NTJlZmJjNzRiOWUxMWRmYWQ5Y2RkNWJmNzg1MmJhMzdkZTdmOTY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXuMqDWGdixvTRtUvexcN8bUPxhz
yihTR3qiLlRZEwU20xadguX4NyPiv8+ZkmI4PSz9weuizOv32cb0ayi2+QtfVySX
euY8wckhjAtzWb8Ct/kcsj49UhQHbN26Gxd6xzhcc/oQuoVHIDXthcbP/ZAzdSvj
AoNr9nZwh7qqABSbfRe/anXCeeRwHH8G9/rC0z+72uQzH8Q2InLofeEkBKVxKQ+m
6vtN8BCPTZHemePvMK+eCrARmEhFv8iavyS3bVkgv63+AQ++I8tMegYHBMYG/iBp
vizazxLpz+ETJdj9BhCZ+P7pMKCXDz4iFq+dGg4w7pOskvjVsW3RpWn68QIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFFUu+8dLnhHfrZzdW/eFK6N95/lkMB8GA1UdIwQY
MBaAFP03zI8Ws8bL0zRqo+1hdx8+g6yXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1RmTWp4YXp4c3ZUTkdxajdXRjNIejZEckpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8wNWUxN2YtZDMxZi00MzFmLWE4YmMt
N2UwNWFiNDFiNmU0LzEvVlM3N3gwdWVFZC10bk4xYjk0VXJvMzNuLVdRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS8wNWUxN2YtZDMxZi00MzFmLWE4YmMtN2UwNWFiNDFiNmU0
LzEvX1RmTWp4YXp4c3ZUTkdxajdXRjNIejZEckpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAsu+uAwQA
vPA9AwQAwbAcMA0GCSqGSIb3DQEBCwUAA4IBAQA75hZ9jqbTjXgVfLgWqSMFvVQ0
hzaGnBQB3RRYk38NNp7QxGCc3+Bswd110qxAZr1XdZKuBhDuKBHQKTxb4L4l9jM8
zOFGS15kGmYoYX9gSD08yMJ5YY0sqsaBpRJJq9yQP5/Mcfz8KrN940iF57CmFcmz
GPqpIhXaioiBXBzKUefQqK5mmFkgeHWN2qq1TdtcK82DWCrog5FPy8kFDdCIpXUQ
gGuViV7ZxXkH335pufFdrJxSz9ui5pkB06wuIhCjtsPXE6bsf9yTPeo4wR64tmPb
hJ2bwWP9KZ0nNUe98cnEGh6368OcxL6MBv0MKiQqmrkWg2C0GeiaGVTYRMw8
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:00 2024 by rpki-client on console-fra.rpki-client.org