Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/0F6Ihcu81p8SRyPVU23tar9rVsk.roa
File: 0F6Ihcu81p8SRyPVU23tar9rVsk.roa (raw, json)
Hash identifier: 7n3lj2/cZFi7fBnWR4ruGgeiXe6FVJnRDHSZ+ZspCN0=
Subject key identifier: D0:5E:88:85:CB:BC:D6:9F:12:47:23:D5:53:6D:ED:6A:BF:6B:56:C9
Certificate issuer: /CN=ad243dcff0cb38211f7fe7db3f913169b44cf456
Certificate serial: 018F2C07D812361A36B44D61E07C5D6EAD2F
Authority key identifier: AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/0F6Ihcu81p8SRyPVU23tar9rVsk.roa
Signing time: Mon 29 Apr 2024 22:44:22 +0000
ROA not before: Mon 29 Apr 2024 22:44:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12929
IP address blocks: 46.15.0.0/16 maxlen: 16
80.232.124.0/24 maxlen: 24
89.8.0.0/15 maxlen: 15
89.9.72.0/23 maxlen: 24
89.9.254.0/24 maxlen: 24
176.11.0.0/16 maxlen: 16
212.45.160.0/19 maxlen: 19
212.125.252.0/22 maxlen: 22
212.169.64.0/18 maxlen: 18
Validation: Failed, certificate revoked on Tue 30 Apr 2024 00:47:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:2c:07:d8:12:36:1a:36:b4:4d:61:e0:7c:5d:6e:ad:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad243dcff0cb38211f7fe7db3f913169b44cf456
Validity
Not Before: Apr 29 22:44:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d05e8885cbbcd69f124723d5536ded6abf6b56c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a3:dd:08:0f:b0:2e:34:97:dc:ac:72:56:50:
99:f2:57:1a:e7:f7:41:80:61:42:78:54:b2:75:9b:
44:cc:d3:58:e7:24:e9:71:b1:c1:81:32:97:0c:55:
8f:3d:18:52:6c:e4:61:39:22:ea:2c:b0:27:8c:61:
04:43:71:07:7e:d7:3c:f9:27:cb:57:2d:95:78:38:
05:5d:5b:e5:4d:77:cf:a2:c4:27:ef:31:c0:ac:a2:
f4:0a:31:68:4e:09:85:cf:5d:18:aa:31:36:93:2d:
5e:b5:27:3d:12:06:85:4a:31:4c:ee:d5:b2:26:2d:
80:28:a8:d0:8b:7a:6e:ee:95:b6:3f:cb:e4:f6:70:
67:55:7b:77:65:f9:3a:2a:47:06:52:3d:1c:7f:13:
15:77:87:f5:66:0b:b6:48:e3:5a:63:65:00:7e:23:
c7:94:1b:60:da:ce:77:5b:49:81:64:b8:c9:66:7d:
54:d6:88:06:8b:03:4e:11:e4:d6:15:21:3d:3a:a5:
87:8f:59:49:a6:8e:3b:5e:92:f4:38:84:30:88:40:
41:53:89:de:83:a3:60:47:7e:cc:a2:c0:9b:07:f0:
6f:f0:28:d8:da:22:1a:82:f4:4b:5f:8c:8b:ff:0b:
7b:ba:f8:98:4f:8c:6b:c4:c2:d5:36:61:ce:09:ae:
0e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:5E:88:85:CB:BC:D6:9F:12:47:23:D5:53:6D:ED:6A:BF:6B:56:C9
X509v3 Authority Key Identifier:
keyid:AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/0F6Ihcu81p8SRyPVU23tar9rVsk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.15.0.0/16
80.232.124.0/24
89.8.0.0/15
176.11.0.0/16
212.45.160.0/19
212.125.252.0/22
212.169.64.0/18
Signature Algorithm: sha256WithRSAEncryption
6a:47:d3:e8:5a:ce:2e:a3:61:2d:26:80:a7:1b:95:57:e4:49:
fa:f9:5b:93:75:11:ba:6b:85:10:ab:4f:23:45:ad:76:1b:44:
9a:61:5d:8d:d3:24:06:53:ba:ea:7c:2e:8e:cc:7d:e6:25:c2:
f0:3f:f9:9f:c1:99:a2:dd:90:7a:b7:79:a2:a0:93:0f:1a:ce:
38:03:e3:53:26:1a:00:29:1c:4f:4a:8c:d9:65:f7:e9:4a:ae:
ba:9a:fd:56:c8:33:87:9e:b2:4b:12:8b:70:b3:6e:ae:45:b8:
c7:22:71:72:a1:0b:da:c5:ba:28:a9:8c:c9:84:c6:26:c1:93:
40:95:16:47:e0:9e:ff:36:46:03:fe:01:49:fe:ea:b5:60:98:
6d:7e:c0:85:18:fd:b5:8e:21:66:e6:09:59:ac:3f:5f:ab:27:
d7:f4:29:c5:60:85:bc:b3:b2:97:3a:98:ab:7a:96:f4:b9:1c:
ab:0d:67:e4:a3:62:60:89:04:36:7e:42:5a:22:24:a0:02:74:
58:6a:a0:87:89:68:3e:dc:9f:a9:20:94:e9:bd:23:90:f2:e9:
a3:0c:9c:98:b4:33:44:66:a3:12:ee:0b:ed:7a:dd:30:28:a7:
12:72:ec:ba:0c:e7:ee:9a:3e:3d:d0:f1:e0:98:24:a9:4d:88:
71:d1:f5:a3
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAY8sB9gSNho2tE1h4Hxdbq0vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkMjQzZGNmZjBjYjM4MjExZjdmZTdkYjNmOTEzMTY5YjQ0
Y2Y0NTYwHhcNMjQwNDI5MjI0NDIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMDVlODg4NWNiYmNkNjlmMTI0NzIzZDU1MzZkZWQ2YWJmNmI1NmM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKPdCA+wLjSX3KxyVlCZ8lca5/dB
gGFCeFSydZtEzNNY5yTpcbHBgTKXDFWPPRhSbORhOSLqLLAnjGEEQ3EHftc8+SfL
Vy2VeDgFXVvlTXfPosQn7zHArKL0CjFoTgmFz10YqjE2ky1etSc9EgaFSjFM7tWy
Ji2AKKjQi3pu7pW2P8vk9nBnVXt3Zfk6KkcGUj0cfxMVd4f1Zgu2SONaY2UAfiPH
lBtg2s53W0mBZLjJZn1U1ogGiwNOEeTWFSE9OqWHj1lJpo47XpL0OIQwiEBBU4ne
g6NgR37MosCbB/Bv8CjY2iIagvRLX4yL/wt7uviYT4xrxMLVNmHOCa4OkQIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFNBeiIXLvNafEkcj1VNt7Wq/a1bJMB8GA1UdIwQY
MBaAFK0kPc/wyzghH3/n2z+RMWm0TPRWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclNROXpfRExPQ0VmZi1mYlA1RXhhYlJNOUZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9hNWQyN2ItMjZjMC00ZWIzLTg5YmMt
YjlmMjk4YTc5OGU0LzEvMEY2SWhjdTgxcDhTUnlQVlUyM3RhcjlyVnNrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9hNWQyN2ItMjZjMC00ZWIzLTg5YmMtYjlmMjk4YTc5OGU0
LzEvclNROXpfRExPQ0VmZi1mYlA1RXhhYlJNOUZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAtBAIAATAnAwMALg8DBABQ
6HwDAwFZCAMDALALAwQF1C2gAwQC1H38AwQG1KlAMA0GCSqGSIb3DQEBCwUAA4IB
AQBqR9PoWs4uo2EtJoCnG5VX5En6+VuTdRG6a4UQq08jRa12G0SaYV2N0yQGU7rq
fC6OzH3mJcLwP/mfwZmi3ZB6t3mioJMPGs44A+NTJhoAKRxPSozZZffpSq66mv1W
yDOHnrJLEotws26uRbjHInFyoQvaxbooqYzJhMYmwZNAlRZH4J7/NkYD/gFJ/uq1
YJhtfsCFGP21jiFm5glZrD9fqyfX9CnFYIW8s7KXOpirepb0uRyrDWfko2JgiQQ2
fkJaIiSgAnRYaqCHiWg+3J+pIJTpvSOQ8umjDJyYtDNEZqMS7gvtet0wKKcScuy6
DOfumj490PHgmCSpTYhx0fWj
-----END CERTIFICATE-----
Generated at Tue Apr 30 04:46:16 2024 by rpki-client on console.sobornost.net