Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/rWnFz71-Nszwi7F3mIBGGI51FZM.roa
File: rWnFz71-Nszwi7F3mIBGGI51FZM.roa (raw, json)
Hash identifier: Ejcmt4IiaRTWoeUhoBQIWtn1lKrEzW5qy82nXB+shlA=
Subject key identifier: AD:69:C5:CF:BD:7E:36:CC:F0:8B:B1:77:98:80:46:18:8E:75:15:93
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018C6E76C4E47BE4766B8B2C2708066D9B3A
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/rWnFz71-Nszwi7F3mIBGGI51FZM.roa
Signing time: Fri 15 Dec 2023 17:12:06 +0000
ROA not before: Fri 15 Dec 2023 17:12:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 193.30.241.0/24 maxlen: 24
77.83.39.0/24 maxlen: 24
85.209.120.0/23 maxlen: 24
193.57.41.0/24 maxlen: 24
45.94.171.0/24 maxlen: 24
195.177.95.0/24 maxlen: 24
45.88.139.0/24 maxlen: 24
146.19.125.0/24 maxlen: 24
45.81.115.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 24 Dec 2023 22:45:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:6e:76:c4:e4:7b:e4:76:6b:8b:2c:27:08:06:6d:9b:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Dec 15 17:12:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ad69c5cfbd7e36ccf08bb177988046188e751593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0a:20:76:aa:c5:36:86:1c:fb:c8:96:07:54:
67:92:94:ab:fd:ef:d4:97:64:6d:f8:0b:4e:2f:a1:
4f:db:80:5f:35:c2:27:f2:6d:38:ef:a6:e2:6a:8c:
60:5c:ea:04:44:0b:55:ae:2d:7b:48:c2:a6:fc:31:
45:d2:f1:7d:43:7d:b6:bb:c6:28:4c:df:54:fd:a4:
19:f7:6e:69:23:a9:d2:26:c3:52:bc:99:e2:69:75:
60:d5:95:d1:b2:0a:84:3e:a7:1e:00:d0:10:15:6e:
67:2b:f6:32:c0:3e:82:3e:15:f2:65:9e:55:b9:eb:
87:34:15:d6:fb:f6:77:fb:47:fe:0a:75:35:f7:18:
3d:b7:80:e7:66:dd:e9:4a:0b:76:19:93:8c:dd:a9:
ed:5c:37:72:2d:92:d0:65:3a:f2:bf:a6:50:27:c9:
57:8d:60:ed:cb:d6:b8:11:ad:d8:c9:d6:47:81:57:
eb:19:1d:1e:9c:b8:e2:d4:b5:7a:d3:52:47:02:94:
10:f5:e9:e5:73:c8:09:38:64:db:c1:15:1e:d0:15:
58:25:fd:73:b6:1a:a6:18:27:56:78:47:cb:f6:a8:
19:40:b5:8c:3f:66:f9:96:3c:89:9a:25:69:29:93:
57:76:8b:dc:bc:55:1a:62:d5:72:8e:a6:fb:9b:f0:
15:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:69:C5:CF:BD:7E:36:CC:F0:8B:B1:77:98:80:46:18:8E:75:15:93
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/rWnFz71-Nszwi7F3mIBGGI51FZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.115.0/24
45.88.139.0/24
45.94.171.0/24
77.83.39.0/24
85.209.120.0/23
146.19.125.0/24
193.30.241.0/24
193.57.41.0/24
195.177.95.0/24
Signature Algorithm: sha256WithRSAEncryption
74:f4:5c:fa:4c:1d:cb:da:5b:c0:52:b4:b2:de:4b:97:a9:97:
61:2e:15:af:2d:09:d2:01:9f:c1:bd:d9:49:5c:04:23:38:29:
00:f6:66:a5:8c:39:35:70:48:78:d7:86:9d:4c:65:f0:5c:a0:
8a:0e:ae:59:14:05:37:58:5b:7e:f3:45:a7:a5:ee:8c:f9:c5:
77:4e:8e:de:1f:59:51:bc:29:9c:3f:71:e2:c8:7d:69:6f:bb:
3e:90:1c:f0:78:74:d6:65:d7:66:dc:66:b8:96:b6:cd:64:ed:
ef:30:a6:26:dc:c2:f2:56:71:87:a2:bb:d1:b9:c1:16:d3:5e:
13:93:2c:8c:cd:aa:fb:62:ef:ee:7c:0a:79:b4:76:b2:52:6c:
1b:b3:6b:3a:4d:42:d1:3f:4e:91:b2:22:75:e1:5f:59:f4:3d:
6e:1e:56:84:36:c4:26:78:19:8b:e7:b5:99:5a:aa:4a:fb:ff:
4d:49:77:dd:5d:7f:21:40:9f:80:79:01:e4:40:c3:7f:0f:b2:
7d:8e:a1:16:61:3d:cd:c5:b4:4e:31:d1:5f:08:99:d9:50:0e:
19:84:a7:e1:9c:14:4b:cd:7b:8d:05:37:c1:da:89:c8:4a:a5:
26:24:c2:80:34:92:8a:35:91:76:27:36:ba:f2:b2:7a:f9:f3:
84:6c:69:f5
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgISAYxudsTke+R2a4ssJwgGbZs6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy
YTI4YTEwHhcNMjMxMjE1MTcxMjA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZDY5YzVjZmJkN2UzNmNjZjA4YmIxNzc5ODgwNDYxODhlNzUxNTkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugogdqrFNoYc+8iWB1RnkpSr/e/U
l2Rt+AtOL6FP24BfNcIn8m0476biaoxgXOoERAtVri17SMKm/DFF0vF9Q322u8Yo
TN9U/aQZ925pI6nSJsNSvJniaXVg1ZXRsgqEPqceANAQFW5nK/YywD6CPhXyZZ5V
ueuHNBXW+/Z3+0f+CnU19xg9t4DnZt3pSgt2GZOM3antXDdyLZLQZTryv6ZQJ8lX
jWDty9a4Ea3YydZHgVfrGR0enLji1LV601JHApQQ9enlc8gJOGTbwRUe0BVYJf1z
thqmGCdWeEfL9qgZQLWMP2b5ljyJmiVpKZNXdovcvFUaYtVyjqb7m/AVbQIDAQAB
o4ICOTCCAjUwHQYDVR0OBBYEFK1pxc+9fjbM8Iuxd5iARhiOdRWTMB8GA1UdIwQY
MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt
ZWVmMzUxMWY2YzYwLzEvclduRno3MS1Oc3p3aTdGM21JQkdHSTUxRlpNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw
LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQALVFzAwQA
LViLAwQALV6rAwQATVMnAwQBVdF4AwQAkhN9AwQAwR7xAwQAwTkpAwQAw7FfMA0G
CSqGSIb3DQEBCwUAA4IBAQB09Fz6TB3L2lvAUrSy3kuXqZdhLhWvLQnSAZ/BvdlJ
XAQjOCkA9maljDk1cEh414adTGXwXKCKDq5ZFAU3WFt+80Wnpe6M+cV3To7eH1lR
vCmcP3HiyH1pb7s+kBzweHTWZddm3Ga4lrbNZO3vMKYm3MLyVnGHorvRucEW014T
kyyMzar7Yu/ufAp5tHayUmwbs2s6TULRP06RsiJ14V9Z9D1uHlaENsQmeBmL57WZ
WqpK+/9NSXfdXX8hQJ+AeQHkQMN/D7J9jqEWYT3NxbROMdFfCJnZUA4ZhKfhnBRL
zXuNBTfB2onISqUmJMKANJKKNZF2Jza68rJ6+fOEbGn1
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:32 2024 by rpki-client on console-fra.rpki-client.org