Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/2huPue1pxkVnJU1wvdD5xipg4Gc.roa
File: 2huPue1pxkVnJU1wvdD5xipg4Gc.roa (raw, json)
Hash identifier: RvaYT6qKQdFD2iFUmJHvcvZKbms41KlOUHAsN/kJ8T0=
Subject key identifier: DA:1B:8F:B9:ED:69:C6:45:67:25:4D:70:BD:D0:F9:C6:2A:60:E0:67
Certificate issuer: /CN=cf1df6667da38e57a25b1945fa40e593e5adfa00
Certificate serial: 019006B79B3504F71F2395254AF88DBCB62B
Authority key identifier: CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/2huPue1pxkVnJU1wvdD5xipg4Gc.roa
Signing time: Tue 11 Jun 2024 09:53:34 +0000
ROA not before: Tue 11 Jun 2024 09:53:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200420
IP address blocks: 185.76.82.0/24 maxlen: 24
192.109.248.0/24 maxlen: 24
195.49.205.0/24 maxlen: 24
212.110.157.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 16 Jul 2024 07:34:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:06:b7:9b:35:04:f7:1f:23:95:25:4a:f8:8d:bc:b6:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf1df6667da38e57a25b1945fa40e593e5adfa00
Validity
Not Before: Jun 11 09:53:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=da1b8fb9ed69c64567254d70bdd0f9c62a60e067
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ac:58:16:f2:7a:89:df:69:3a:3c:f3:b9:a8:
e0:9c:37:f7:b4:9d:54:be:48:e5:24:fe:82:d8:ab:
61:2c:62:15:97:9e:83:42:34:53:51:84:ea:f0:94:
fc:8a:b0:f4:bb:22:9a:94:a3:fe:42:09:69:d0:55:
7c:3a:6d:fd:81:f4:f1:31:dd:04:70:07:f6:a2:06:
97:2a:b1:8b:58:22:89:a1:9c:14:c0:f4:4e:0b:e7:
4a:ac:6e:46:22:9a:e1:34:f4:72:86:1a:1e:c1:ad:
d7:41:88:ee:87:7e:a5:52:65:d9:6f:0a:d8:95:c3:
d9:2f:9f:25:25:99:7a:3e:48:6c:54:4b:08:05:dd:
ef:86:70:c9:f0:2a:5b:9f:ec:2f:26:70:48:ac:70:
cc:cc:51:24:92:20:dd:f8:4a:37:c7:1b:ab:4f:a8:
22:ab:60:27:a8:ab:36:16:04:73:1d:c6:6b:3f:eb:
d4:bd:d4:50:a2:cf:ad:f9:56:4e:65:22:36:7a:36:
8c:67:3d:a0:70:b6:68:10:dc:3e:91:0c:3a:6e:32:
c8:d5:6e:1f:d2:01:36:52:c7:9b:9d:51:b4:ed:0e:
81:0e:4e:58:34:25:39:94:ae:e5:15:dc:54:df:c0:
bb:de:97:29:69:11:52:94:d4:aa:1c:d0:1e:45:ce:
e0:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:1B:8F:B9:ED:69:C6:45:67:25:4D:70:BD:D0:F9:C6:2A:60:E0:67
X509v3 Authority Key Identifier:
keyid:CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/2huPue1pxkVnJU1wvdD5xipg4Gc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.76.82.0/24
192.109.248.0/24
195.49.205.0/24
212.110.157.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:2b:3f:d0:7e:b6:1b:2f:1c:3b:9f:39:dc:cd:54:b5:78:d6:
5f:7a:7c:cf:ee:6a:07:a7:59:6d:a7:2d:95:e1:ff:bb:37:13:
69:d6:8d:d0:ef:05:76:ca:b3:af:f8:7e:b6:39:0c:aa:18:b4:
9c:43:81:ea:2e:e8:19:db:43:d6:84:d5:8a:bb:5e:0f:3c:3a:
3e:d8:5c:d4:2d:0f:86:65:d7:6c:a7:52:34:ee:bc:b5:b1:e3:
b7:e3:b9:6a:24:91:1f:df:7f:f5:c6:36:a6:f2:58:5a:7b:a3:
86:cd:30:4d:08:f0:30:dc:b1:27:f3:8e:65:a6:9f:70:be:05:
77:9d:41:7b:35:66:63:c4:ae:ad:81:b7:e1:90:00:af:f5:4e:
e2:62:1b:9c:d4:82:9e:de:ef:46:00:73:20:7a:ef:f0:6b:0d:
69:21:10:35:be:34:0e:9a:51:c6:51:25:c5:dd:c9:38:9a:53:
1b:74:38:28:78:43:f9:d5:c6:3e:9b:87:43:84:b6:48:13:75:
43:87:a7:18:8e:dd:a2:d3:fa:26:6e:99:61:3c:25:7d:a3:ca:
99:d8:db:c4:01:54:1b:75:e4:42:80:d3:2f:49:c0:fb:cb:9a:
e5:90:e3:fb:4d:00:e4:c3:da:7e:1b:e5:d1:a8:58:b9:82:48:
d8:48:2a:b4
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZAGt5s1BPcfI5UlSviNvLYrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmMWRmNjY2N2RhMzhlNTdhMjViMTk0NWZhNDBlNTkzZTVh
ZGZhMDAwHhcNMjQwNjExMDk1MzM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYTFiOGZiOWVkNjljNjQ1NjcyNTRkNzBiZGQwZjljNjJhNjBlMDY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqxYFvJ6id9pOjzzuajgnDf3tJ1U
vkjlJP6C2KthLGIVl56DQjRTUYTq8JT8irD0uyKalKP+Qglp0FV8Om39gfTxMd0E
cAf2ogaXKrGLWCKJoZwUwPROC+dKrG5GIprhNPRyhhoewa3XQYjuh36lUmXZbwrY
lcPZL58lJZl6PkhsVEsIBd3vhnDJ8Cpbn+wvJnBIrHDMzFEkkiDd+Eo3xxurT6gi
q2AnqKs2FgRzHcZrP+vUvdRQos+t+VZOZSI2ejaMZz2gcLZoENw+kQw6bjLI1W4f
0gE2UsebnVG07Q6BDk5YNCU5lK7lFdxU38C73pcpaRFSlNSqHNAeRc7gVwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFNobj7ntacZFZyVNcL3Q+cYqYOBnMB8GA1UdIwQY
MBaAFM8d9mZ9o45XolsZRfpA5ZPlrfoAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvengzMlpuMmpqbGVpV3hsRi1rRGxrLVd0LWdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9lNTc4OWEtMTYwZC00ODk2LWEyNWEt
OGRmMzYzMzdlNmJjLzEvMmh1UHVlMXB4a1ZuSlUxd3ZkRDV4aXBnNEdjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi9lNTc4OWEtMTYwZC00ODk2LWEyNWEtOGRmMzYzMzdlNmJj
LzEvengzMlpuMmpqbGVpV3hsRi1rRGxrLVd0LWdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAuUxSAwQA
wG34AwQAwzHNAwQA1G6dMA0GCSqGSIb3DQEBCwUAA4IBAQC4Kz/QfrYbLxw7nznc
zVS1eNZfenzP7moHp1ltpy2V4f+7NxNp1o3Q7wV2yrOv+H62OQyqGLScQ4HqLugZ
20PWhNWKu14PPDo+2FzULQ+GZddsp1I07ry1seO347lqJJEf33/1xjam8lhae6OG
zTBNCPAw3LEn845lpp9wvgV3nUF7NWZjxK6tgbfhkACv9U7iYhuc1IKe3u9GAHMg
eu/waw1pIRA1vjQOmlHGUSXF3ck4mlMbdDgoeEP51cY+m4dDhLZIE3VDh6cYjt2i
0/ombplhPCV9o8qZ2NvEAVQbdeRCgNMvScD7y5rlkOP7TQDkw9p+G+XRqFi5gkjY
SCq0
-----END CERTIFICATE-----
Generated at Tue Jul 16 10:03:40 2024 by rpki-client on console-ams.rpki-client.org