Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/lEie8RVZ37fUFZ8ueIwLNNwt5QA.roa
File: lEie8RVZ37fUFZ8ueIwLNNwt5QA.roa (raw, json)
Hash identifier: NIAJhfwA8xFI8gxj6tQoQMKq1tK1GoEYAHzYlxKspUY=
Subject key identifier: 94:48:9E:F1:15:59:DF:B7:D4:15:9F:2E:78:8C:0B:34:DC:2D:E5:00
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018CF45E77366E92C5177C103F5F241F490E
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/lEie8RVZ37fUFZ8ueIwLNNwt5QA.roa
Signing time: Wed 10 Jan 2024 17:14:40 +0000
ROA not before: Wed 10 Jan 2024 17:14:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 193.30.241.0/24 maxlen: 24
85.209.120.0/23 maxlen: 24
193.57.41.0/24 maxlen: 24
45.94.170.0/24 maxlen: 24
45.94.171.0/24 maxlen: 24
195.177.95.0/24 maxlen: 24
45.88.139.0/24 maxlen: 24
146.19.125.0/24 maxlen: 24
45.81.115.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 11 Jan 2024 15:40:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f4:5e:77:36:6e:92:c5:17:7c:10:3f:5f:24:1f:49:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jan 10 17:14:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=94489ef11559dfb7d4159f2e788c0b34dc2de500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7a:23:71:8d:07:69:14:b6:46:44:9d:ee:76:
f9:fc:c9:5d:7f:37:a8:78:8a:90:1b:14:66:bd:35:
d4:d0:62:d6:f0:77:ed:8c:99:da:9b:3b:29:99:fe:
6a:c3:88:c5:8a:11:93:28:68:6c:74:35:b4:35:eb:
4d:a4:5d:6e:25:61:fc:5f:c4:25:58:17:7d:61:6d:
08:35:37:36:46:35:c3:ba:3a:b2:e4:ac:b4:15:84:
cd:a9:bb:1d:a4:44:cf:e4:4d:30:18:e5:9d:ee:82:
ee:a0:2c:9e:fb:d0:94:f6:2b:d9:56:d7:58:fd:07:
9d:3e:7a:2b:db:b8:92:d3:07:98:57:0a:b1:11:ec:
29:dc:8b:e4:d7:6d:e7:4c:1a:7a:69:a1:9f:10:f0:
73:fa:52:0e:c0:0c:09:a8:60:14:d4:a4:57:8f:4f:
c7:d4:99:67:85:92:48:fa:3c:8e:ec:9f:f9:52:13:
0b:26:5b:9a:8f:95:e4:32:5b:3f:9e:08:0b:c1:bb:
cf:74:ce:df:f2:85:ae:17:06:bc:4b:fe:30:8d:73:
b2:d5:2c:67:09:6f:f2:bf:0f:5d:7a:05:e1:9e:9d:
72:5f:41:90:d8:0b:7c:aa:0b:8f:a3:d7:07:8c:34:
ff:a7:45:69:0b:54:e1:a9:aa:0a:88:87:d4:27:f1:
51:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:48:9E:F1:15:59:DF:B7:D4:15:9F:2E:78:8C:0B:34:DC:2D:E5:00
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/lEie8RVZ37fUFZ8ueIwLNNwt5QA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.115.0/24
45.88.139.0/24
45.94.170.0/23
85.209.120.0/23
146.19.125.0/24
193.30.241.0/24
193.57.41.0/24
195.177.95.0/24
Signature Algorithm: sha256WithRSAEncryption
65:09:79:2f:ae:eb:c9:c7:2d:b6:5a:2c:90:f5:ab:61:7e:b8:
52:c6:68:89:9b:8c:8d:b3:62:a8:ab:bb:c5:0b:32:eb:c5:d9:
8a:d4:3c:6b:ad:c7:ec:80:0d:db:b0:40:26:8b:ec:12:73:fd:
fb:01:9d:9f:27:25:cf:d6:2e:62:6d:0d:40:26:4f:3f:87:34:
d1:ba:58:2f:57:d5:bf:e8:30:dd:9d:73:17:2b:98:f5:8e:54:
93:00:6a:ac:5c:e8:6c:09:a2:a4:2a:6e:15:25:dc:7e:68:d8:
c3:b7:5a:0f:a3:97:91:3b:97:9c:07:8e:c1:bf:c9:5d:30:67:
f3:0b:b6:d8:bf:52:d8:00:25:18:4c:84:87:d3:64:17:0b:f5:
5a:c2:d2:2f:ef:e6:11:29:3c:cb:27:9d:14:c2:f1:83:f8:72:
d9:39:fe:e1:07:6f:5c:51:e5:e4:e6:9d:7c:39:be:f4:70:4f:
cd:f2:8f:31:75:e0:41:87:be:db:05:3e:7e:8d:36:11:9f:cc:
ac:94:05:6a:d5:d8:32:32:d0:d1:9b:0c:db:38:07:e2:0c:3e:
2b:8f:3e:6f:ee:ab:f4:fb:77:ca:bc:7f:ff:9f:b6:b3:39:c8:
64:3c:a9:7d:16:30:56:8d:f6:4f:13:ca:ec:31:36:db:02:ce:
bc:d3:02:07
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgISAYz0Xnc2bpLFF3wQP18kH0kOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy
YTI4YTEwHhcNMjQwMTEwMTcxNDQwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NDQ4OWVmMTE1NTlkZmI3ZDQxNTlmMmU3ODhjMGIzNGRjMmRlNTAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXojcY0HaRS2RkSd7nb5/Mldfzeo
eIqQGxRmvTXU0GLW8HftjJnamzspmf5qw4jFihGTKGhsdDW0NetNpF1uJWH8X8Ql
WBd9YW0INTc2RjXDujqy5Ky0FYTNqbsdpETP5E0wGOWd7oLuoCye+9CU9ivZVtdY
/QedPnor27iS0weYVwqxEewp3Ivk123nTBp6aaGfEPBz+lIOwAwJqGAU1KRXj0/H
1JlnhZJI+jyO7J/5UhMLJluaj5XkMls/nggLwbvPdM7f8oWuFwa8S/4wjXOy1Sxn
CW/yvw9degXhnp1yX0GQ2At8qguPo9cHjDT/p0VpC1ThqaoKiIfUJ/FRowIDAQAB
o4ICMzCCAi8wHQYDVR0OBBYEFJRInvEVWd+31BWfLniMCzTcLeUAMB8GA1UdIwQY
MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt
ZWVmMzUxMWY2YzYwLzEvbEVpZThSVlozN2ZVRlo4dWVJd0xOTnd0NVFBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw
LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQALVFzAwQA
LViLAwQBLV6qAwQBVdF4AwQAkhN9AwQAwR7xAwQAwTkpAwQAw7FfMA0GCSqGSIb3
DQEBCwUAA4IBAQBlCXkvruvJxy22WiyQ9athfrhSxmiJm4yNs2Koq7vFCzLrxdmK
1DxrrcfsgA3bsEAmi+wSc/37AZ2fJyXP1i5ibQ1AJk8/hzTRulgvV9W/6DDdnXMX
K5j1jlSTAGqsXOhsCaKkKm4VJdx+aNjDt1oPo5eRO5ecB47Bv8ldMGfzC7bYv1LY
ACUYTISH02QXC/VawtIv7+YRKTzLJ50UwvGD+HLZOf7hB29cUeXk5p18Ob70cE/N
8o8xdeBBh77bBT5+jTYRn8yslAVq1dgyMtDRmwzbOAfiDD4rjz5v7qv0+3fKvH//
n7azOchkPKl9FjBWjfZPE8rsMTbbAs680wIH
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:32 2024 by rpki-client on console-fra.rpki-client.org