Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/7a13c8-2223-4aa4-8094-964111a9eb22/1/ijaEmiW-RCwKKkiHOv8wKr25DEk.roa
File: ijaEmiW-RCwKKkiHOv8wKr25DEk.roa (raw, json)
Hash identifier: MyMg3zyyOko7cJT98xYZrt/Z+i6xNgiD1lSFW32ZyEw=
Subject key identifier: 8A:36:84:9A:25:BE:44:2C:0A:2A:48:87:3A:FF:30:2A:BD:B9:0C:49
Certificate issuer: /CN=4e9381160d6594049a313a5b7bd531628d7dde1b
Certificate serial: 018CCA96C6118E608000B49A28578996340B
Authority key identifier: 4E:93:81:16:0D:65:94:04:9A:31:3A:5B:7B:D5:31:62:8D:7D:DE:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TpOBFg1llASaMTpbe9UxYo193hs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/7a13c8-2223-4aa4-8094-964111a9eb22/1/ijaEmiW-RCwKKkiHOv8wKr25DEk.roa
Signing time: Tue 02 Jan 2024 14:32:07 +0000
ROA not before: Tue 02 Jan 2024 14:32:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 19905
IP address blocks: 213.5.174.0/24 maxlen: 24
213.5.173.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 17 Apr 2024 08:49:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:96:c6:11:8e:60:80:00:b4:9a:28:57:89:96:34:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e9381160d6594049a313a5b7bd531628d7dde1b
Validity
Not Before: Jan 2 14:32:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8a36849a25be442c0a2a48873aff302abdb90c49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6d:2e:e0:28:32:eb:3d:ad:29:93:d6:06:11:
8c:39:df:e1:6b:21:9e:de:61:fe:83:d6:12:a6:9d:
e5:44:65:8b:14:a6:7f:df:ed:37:53:0f:c2:7e:25:
cd:61:db:25:2c:66:71:a8:55:95:b0:fc:4f:0d:85:
78:45:5f:fd:c6:8a:0e:99:c0:29:22:f4:ef:80:59:
b5:c1:dd:8f:94:51:a9:46:86:a9:d3:f6:61:05:37:
38:77:be:b5:43:ba:08:2e:2e:26:40:86:08:4c:dd:
2d:32:30:5f:67:8e:c5:a7:68:e2:ac:2b:f7:88:87:
ad:02:c5:04:a2:67:0d:e1:09:21:b6:90:5e:2d:b6:
bd:3b:7b:75:fd:9f:d5:7a:16:11:f6:5c:fb:83:a0:
1e:47:00:76:21:8f:58:7f:3a:6e:d1:df:c5:3a:b3:
33:a5:26:53:98:06:79:e0:63:bc:0d:b6:a9:d1:3e:
fc:f0:5e:77:15:61:b0:21:5b:13:e7:8d:02:01:55:
a0:e2:78:26:f7:e1:95:50:af:33:be:8f:4e:87:db:
5b:b8:b5:e9:6e:48:0e:90:25:3a:38:1b:f2:10:ca:
a3:38:8e:98:c9:df:28:b8:24:19:3f:fa:e5:d8:59:
a4:2a:99:d3:41:8b:7d:5a:d0:2e:ac:7a:55:4a:fc:
45:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:36:84:9A:25:BE:44:2C:0A:2A:48:87:3A:FF:30:2A:BD:B9:0C:49
X509v3 Authority Key Identifier:
keyid:4E:93:81:16:0D:65:94:04:9A:31:3A:5B:7B:D5:31:62:8D:7D:DE:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TpOBFg1llASaMTpbe9UxYo193hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/7a13c8-2223-4aa4-8094-964111a9eb22/1/ijaEmiW-RCwKKkiHOv8wKr25DEk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/7a13c8-2223-4aa4-8094-964111a9eb22/1/TpOBFg1llASaMTpbe9UxYo193hs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.5.173.0-213.5.174.255
Signature Algorithm: sha256WithRSAEncryption
3d:f2:c7:6c:61:01:04:4d:84:6e:d8:fd:bc:54:5e:a9:8c:4b:
1e:54:af:18:d6:d5:49:9f:58:f3:5e:33:f8:af:51:ee:8a:d9:
20:f8:86:9a:cf:2c:bb:68:64:50:29:f2:cc:27:78:4d:80:cd:
19:b1:2d:c2:c5:3b:33:c0:e3:48:bb:07:01:71:10:22:3f:9f:
8f:08:3c:2b:f9:3a:bb:65:af:05:1a:2a:eb:0c:da:bf:b1:18:
f8:c1:03:ed:ea:60:37:8f:6c:aa:4c:36:33:38:ff:04:e7:aa:
6f:bb:ae:80:57:ff:ce:37:96:b9:01:bb:79:26:88:ab:72:e8:
1f:e0:4b:ea:fa:d4:8b:ca:1c:a4:34:9f:0a:6f:73:90:cf:54:
cf:f7:66:28:45:15:fd:d2:56:0d:2e:8d:f4:73:8d:49:98:75:
05:95:18:a7:48:fd:e2:8a:48:55:da:bc:a0:b5:e8:65:c4:ca:
12:49:2b:44:9b:ea:2a:6c:97:a2:04:d6:95:d3:9c:29:c2:3d:
6f:d8:34:07:4c:50:4b:c9:04:a4:b5:8b:40:7a:ed:ef:b9:9f:
35:d9:ed:31:53:89:73:fa:5c:c4:aa:15:a8:c6:b4:0a:1f:c2:
c0:70:5f:c0:6f:48:ff:45:a0:6d:f8:63:eb:1a:bf:7b:8c:ee:
7a:5d:dd:5e
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYzKlsYRjmCAALSaKFeJljQLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlOTM4MTE2MGQ2NTk0MDQ5YTMxM2E1YjdiZDUzMTYyOGQ3
ZGRlMWIwHhcNMjQwMTAyMTQzMjA3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YTM2ODQ5YTI1YmU0NDJjMGEyYTQ4ODczYWZmMzAyYWJkYjkwYzQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsW0u4Cgy6z2tKZPWBhGMOd/hayGe
3mH+g9YSpp3lRGWLFKZ/3+03Uw/CfiXNYdslLGZxqFWVsPxPDYV4RV/9xooOmcAp
IvTvgFm1wd2PlFGpRoap0/ZhBTc4d761Q7oILi4mQIYITN0tMjBfZ47Fp2jirCv3
iIetAsUEomcN4QkhtpBeLba9O3t1/Z/VehYR9lz7g6AeRwB2IY9Yfzpu0d/FOrMz
pSZTmAZ54GO8Dbap0T788F53FWGwIVsT540CAVWg4ngm9+GVUK8zvo9Oh9tbuLXp
bkgOkCU6OBvyEMqjOI6Yyd8ouCQZP/rl2FmkKpnTQYt9WtAurHpVSvxFzQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFIo2hJolvkQsCipIhzr/MCq9uQxJMB8GA1UdIwQY
MBaAFE6TgRYNZZQEmjE6W3vVMWKNfd4bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHBPQkZnMWxsQVNhTVRwYmU5VXhZbzE5M2hzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC83YTEzYzgtMjIyMy00YWE0LTgwOTQt
OTY0MTExYTllYjIyLzEvaWphRW1pVy1SQ3dLS2tpSE92OHdLcjI1REVrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC83YTEzYzgtMjIyMy00YWE0LTgwOTQtOTY0MTExYTllYjIy
LzEvVHBPQkZnMWxsQVNhTVRwYmU5VXhZbzE5M2hzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADVBa0D
BADVBa4wDQYJKoZIhvcNAQELBQADggEBAD3yx2xhAQRNhG7Y/bxUXqmMSx5UrxjW
1UmfWPNeM/ivUe6K2SD4hprPLLtoZFAp8swneE2AzRmxLcLFOzPA40i7BwFxECI/
n48IPCv5OrtlrwUaKusM2r+xGPjBA+3qYDePbKpMNjM4/wTnqm+7roBX/843lrkB
u3kmiKty6B/gS+r61IvKHKQ0nwpvc5DPVM/3ZihFFf3SVg0ujfRzjUmYdQWVGKdI
/eKKSFXavKC16GXEyhJJK0Sb6ipsl6IE1pXTnCnCPW/YNAdMUEvJBKS1i0B67e+5
nzXZ7TFTiXP6XMSqFajGtAofwsBwX8BvSP9FoG34Y+sav3uM7npd3V4=
-----END CERTIFICATE-----
Generated at Wed Apr 17 14:46:08 2024 by rpki-client on console.sobornost.net