Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/dd_76CX2jgaB2uOyBvcLy9YbRg4.roa
File: dd_76CX2jgaB2uOyBvcLy9YbRg4.roa (raw, json)
Hash identifier: eb23z1LD4Nb9GD4jK7WohVKUN+Rl5qUfvHADo546VeI=
Subject key identifier: 75:DF:FB:E8:25:F6:8E:06:81:DA:E3:B2:06:F7:0B:CB:D6:1B:46:0E
Certificate issuer: /CN=fe54ab2d481cf1622a2c52183ab4f5a930a4ae41
Certificate serial: 018CC9BCED6B3DC4A70CF925EBDE7895A341
Authority key identifier: FE:54:AB:2D:48:1C:F1:62:2A:2C:52:18:3A:B4:F5:A9:30:A4:AE:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_lSrLUgc8WIqLFIYOrT1qTCkrkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/dd_76CX2jgaB2uOyBvcLy9YbRg4.roa
Signing time: Tue 02 Jan 2024 10:34:11 +0000
ROA not before: Tue 02 Jan 2024 10:34:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25717
IP address blocks: 193.221.69.0/24 maxlen: 24
193.221.70.0/23 maxlen: 23
193.221.72.0/24 maxlen: 24
193.221.74.0/24 maxlen: 24
193.221.78.0/24 maxlen: 24
193.221.57.0/24 maxlen: 24
193.221.56.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 24 Jan 2024 08:10:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:ed:6b:3d:c4:a7:0c:f9:25:eb:de:78:95:a3:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe54ab2d481cf1622a2c52183ab4f5a930a4ae41
Validity
Not Before: Jan 2 10:34:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=75dffbe825f68e0681dae3b206f70bcbd61b460e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:61:c2:7b:b9:e9:92:90:c2:e4:41:0a:f9:a3:
d2:65:f8:9c:ca:fd:82:90:62:4e:2c:3d:fd:1b:63:
53:1a:0c:d9:10:89:1a:76:9f:55:c9:da:7d:a1:0a:
49:63:b6:c2:43:3b:9d:16:41:c2:ac:cf:40:96:6e:
1a:69:37:54:5d:99:e0:bc:09:0f:a3:07:fa:17:a0:
39:9c:40:1a:79:79:b1:e7:76:43:91:b7:3a:4d:ff:
48:66:ed:27:f0:6c:2c:78:e3:27:61:da:e6:8b:2b:
e8:8c:01:fb:4b:c0:85:a1:b7:58:2d:85:3a:ba:05:
41:99:59:d5:ab:55:e0:55:52:33:0f:c2:34:c8:56:
35:eb:f8:c1:f0:39:78:40:23:67:7a:1c:e4:ec:ef:
f9:30:29:d5:2b:20:ec:99:77:b3:7b:94:0d:85:59:
6a:ad:2b:b4:b9:2f:bc:d2:ef:b9:0f:82:42:f6:ae:
06:ae:47:bf:6e:ef:34:c7:cb:ee:ee:04:3e:36:b1:
d3:48:f9:6d:ee:ec:91:3e:7f:27:1d:82:a0:0c:61:
14:1b:4c:54:51:87:eb:c4:4b:8f:eb:10:01:c0:d5:
8e:9b:e7:5b:70:b3:55:9e:d8:88:de:12:23:15:49:
c6:46:f2:dd:b7:c9:b0:27:d5:22:3b:1a:58:ce:9e:
a8:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:DF:FB:E8:25:F6:8E:06:81:DA:E3:B2:06:F7:0B:CB:D6:1B:46:0E
X509v3 Authority Key Identifier:
keyid:FE:54:AB:2D:48:1C:F1:62:2A:2C:52:18:3A:B4:F5:A9:30:A4:AE:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_lSrLUgc8WIqLFIYOrT1qTCkrkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/dd_76CX2jgaB2uOyBvcLy9YbRg4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/_lSrLUgc8WIqLFIYOrT1qTCkrkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.221.56.0/23
193.221.69.0-193.221.72.255
193.221.74.0/24
193.221.78.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:57:44:33:c3:96:12:a2:07:1e:8e:35:50:9f:47:e5:28:97:
33:3f:93:fd:59:bb:5a:fb:45:f0:44:16:59:54:eb:8d:b9:51:
e1:bd:e7:11:9c:a0:4f:49:fd:3a:7a:83:dd:49:7c:17:0c:d2:
7e:6b:86:81:1c:06:b4:97:63:3b:58:c4:73:57:74:a8:7b:eb:
6c:25:14:a7:9c:17:2e:2f:ad:40:a3:77:09:08:3f:46:ac:ba:
22:03:3d:f4:ce:b2:e0:b1:6d:1a:42:d1:99:17:c5:37:f9:b5:
46:7d:a9:bd:13:ba:a3:87:12:49:a0:9c:ee:82:2b:8e:a0:28:
a5:de:98:7d:f7:c8:3b:b8:1a:14:ec:84:6b:17:62:28:ea:e1:
bf:31:d5:c8:3f:a1:3a:77:38:29:42:f8:0c:6c:c2:53:6f:8d:
f9:20:70:05:d8:25:e3:db:70:64:8e:f8:68:40:c0:8e:2d:54:
ea:31:18:75:82:0d:9c:4e:a2:b0:e5:84:57:ae:14:5a:84:9e:
c3:22:d0:0a:70:ef:fc:e8:9c:b2:f8:f7:32:d3:a2:94:7d:13:
df:d5:01:28:6a:c5:b0:10:a2:6f:10:0e:78:ea:f5:62:f3:79:
01:53:d4:45:2c:97:96:81:09:33:8d:e4:a8:7c:c5:8f:b0:d8:
3a:c5:3a:c1
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAYzJvO1rPcSnDPkl6954laNBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlNTRhYjJkNDgxY2YxNjIyYTJjNTIxODNhYjRmNWE5MzBh
NGFlNDEwHhcNMjQwMTAyMTAzNDExWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NWRmZmJlODI1ZjY4ZTA2ODFkYWUzYjIwNmY3MGJjYmQ2MWI0NjBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWHCe7npkpDC5EEK+aPSZficyv2C
kGJOLD39G2NTGgzZEIkadp9Vydp9oQpJY7bCQzudFkHCrM9Alm4aaTdUXZngvAkP
owf6F6A5nEAaeXmx53ZDkbc6Tf9IZu0n8GwseOMnYdrmiyvojAH7S8CFobdYLYU6
ugVBmVnVq1XgVVIzD8I0yFY16/jB8Dl4QCNnehzk7O/5MCnVKyDsmXeze5QNhVlq
rSu0uS+80u+5D4JC9q4Grke/bu80x8vu7gQ+NrHTSPlt7uyRPn8nHYKgDGEUG0xU
UYfrxEuP6xABwNWOm+dbcLNVntiI3hIjFUnGRvLdt8mwJ9UiOxpYzp6onwIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFHXf++gl9o4Ggdrjsgb3C8vWG0YOMB8GA1UdIwQY
MBaAFP5Uqy1IHPFiKixSGDq09akwpK5BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2xTckxVZ2M4V0lxTEZJWU9yVDFxVENrcmtFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC80ZDVlNGEtOGExNi00NTM3LWJlMWYt
MWIxMzYyYjliNmEyLzEvZGRfNzZDWDJqZ2FCMnVPeUJ2Y0x5OVliUmc0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC80ZDVlNGEtOGExNi00NTM3LWJlMWYtMWIxMzYyYjliNmEy
LzEvX2xTckxVZ2M4V0lxTEZJWU9yVDFxVENrcmtFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQBwd04MAwD
BADB3UUDBADB3UgDBADB3UoDBADB3U4wDQYJKoZIhvcNAQELBQADggEBAA1XRDPD
lhKiBx6ONVCfR+UolzM/k/1Zu1r7RfBEFllU6425UeG95xGcoE9J/Tp6g91JfBcM
0n5rhoEcBrSXYztYxHNXdKh762wlFKecFy4vrUCjdwkIP0asuiIDPfTOsuCxbRpC
0ZkXxTf5tUZ9qb0TuqOHEkmgnO6CK46gKKXemH33yDu4GhTshGsXYijq4b8x1cg/
oTp3OClC+AxswlNvjfkgcAXYJePbcGSO+GhAwI4tVOoxGHWCDZxOorDlhFeuFFqE
nsMi0Apw7/zonLL49zLTopR9E9/VAShqxbAQom8QDnjq9WLzeQFT1EUsl5aBCTON
5Kh8xY+w2DrFOsE=
-----END CERTIFICATE-----
Generated at Tue Feb 27 00:59:19 2024 by rpki-client on console.sobornost.net