Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/348789-3208-4847-9c3f-982d1f21a32b/1/L6g28EK-TmZdnRA21Zx0Wthz-fc.roa
File: L6g28EK-TmZdnRA21Zx0Wthz-fc.roa (raw, json)
Hash identifier: iZIRCkqTS4ejeCx6P/2q0Ucf/YbLltoShO0zjqQz61c=
Subject key identifier: 2F:A8:36:F0:42:BE:4E:66:5D:9D:10:36:D5:9C:74:5A:D8:73:F9:F7
Certificate issuer: /CN=cbf74cd846493138f522c57c0065b5c60512dd09
Certificate serial: 018570B987856D5CA93CB8433542C06AFAC6
Authority key identifier: CB:F7:4C:D8:46:49:31:38:F5:22:C5:7C:00:65:B5:C6:05:12:DD:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/348789-3208-4847-9c3f-982d1f21a32b/1/L6g28EK-TmZdnRA21Zx0Wthz-fc.roa
Signing time: Mon 02 Jan 2023 04:24:45 +0000
ROA not before: Mon 02 Jan 2023 04:24:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200478
IP address blocks: 141.226.226.0/24 maxlen: 24
141.226.224.0/23 maxlen: 24
141.226.231.0/24 maxlen: 24
141.226.124.0/24 maxlen: 24
141.226.227.0/24 maxlen: 24
141.226.230.0/24 maxlen: 24
141.226.229.0/24 maxlen: 24
141.226.228.0/24 maxlen: 24
141.226.127.0/24 maxlen: 24
185.106.32.0/22 maxlen: 24
2a06:3b80:30::/48 maxlen: 48
2a06:3b80:110::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:b9:87:85:6d:5c:a9:3c:b8:43:35:42:c0:6a:fa:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbf74cd846493138f522c57c0065b5c60512dd09
Validity
Not Before: Jan 2 04:24:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2fa836f042be4e665d9d1036d59c745ad873f9f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:3f:52:93:b4:fb:38:02:49:d3:6a:a2:f6:f9:
dd:86:30:ec:c7:14:73:e1:3a:c3:a7:4f:44:c8:ce:
b4:59:9f:47:c5:1e:33:e2:f2:af:38:4b:87:4a:d7:
fe:a5:a3:72:50:1d:32:21:2c:d3:1f:3c:95:a8:9e:
15:85:66:06:e5:98:ff:ff:8a:20:0a:6e:83:eb:38:
f2:0f:50:58:df:ec:c5:ef:f0:57:e6:0b:2e:67:31:
e0:94:5a:52:6a:fe:41:3a:ac:d4:6d:a9:74:54:00:
2e:bf:50:50:6c:11:c2:41:d3:8a:b0:76:02:ed:51:
ef:30:1e:bc:f7:17:06:11:d2:03:41:9d:f5:b5:da:
4b:88:98:96:71:4d:ad:18:a8:db:2c:05:a5:8b:72:
7b:c7:c6:8f:5a:c2:5a:63:ca:8b:ea:ea:bf:1e:ec:
3e:98:a2:43:5a:0a:94:f9:bc:39:1d:03:d5:99:17:
a7:53:c6:b8:2a:f9:89:bf:62:a9:30:50:08:8b:c2:
fe:5b:07:5d:81:73:26:87:c2:a4:cc:70:8d:df:18:
3b:9b:0a:0f:95:93:a1:a4:3c:84:0e:57:73:67:d3:
16:f4:95:fb:6c:31:18:b1:5e:d0:56:52:86:77:d2:
58:4d:60:bb:2c:9f:52:4e:f9:3e:60:7d:8d:b5:19:
9c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:A8:36:F0:42:BE:4E:66:5D:9D:10:36:D5:9C:74:5A:D8:73:F9:F7
X509v3 Authority Key Identifier:
keyid:CB:F7:4C:D8:46:49:31:38:F5:22:C5:7C:00:65:B5:C6:05:12:DD:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/348789-3208-4847-9c3f-982d1f21a32b/1/L6g28EK-TmZdnRA21Zx0Wthz-fc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/348789-3208-4847-9c3f-982d1f21a32b/1/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.226.124.0/24
141.226.127.0/24
141.226.224.0/21
185.106.32.0/22
IPv6:
2a06:3b80:30::/48
2a06:3b80:110::/48
Signature Algorithm: sha256WithRSAEncryption
60:ac:22:cb:24:2f:47:c7:97:c6:28:37:6c:ca:d3:e5:d1:87:
37:e9:27:81:79:9e:85:48:4d:c9:ab:32:31:35:66:e7:ed:8c:
29:eb:81:56:66:92:0e:b8:47:c0:ce:cf:d4:86:69:df:51:31:
70:76:f7:d3:39:8a:79:fd:a7:6a:71:29:0f:b4:c4:18:a7:e1:
48:6f:fd:21:01:23:31:d9:4b:94:72:0c:a2:9d:ba:d7:92:9f:
c9:61:68:52:65:79:fa:30:1c:b1:72:f2:04:68:ae:37:13:7a:
94:9f:69:39:f7:8b:0b:db:61:81:fb:20:ce:6c:dd:9f:26:0b:
a2:84:cd:73:73:25:76:ee:84:ec:f9:d2:f7:b6:69:dc:14:36:
fd:9a:85:67:2a:6d:a4:7b:e8:a0:3b:0e:f0:08:23:dc:0a:a0:
e5:d7:dd:d2:58:03:6f:b1:b4:0b:df:5b:15:8d:21:35:3b:9d:
f4:74:d0:92:c8:cd:8b:c5:d0:af:84:a9:e3:6b:5f:68:0a:98:
63:cc:ac:24:1e:1f:86:a2:0b:83:ac:9e:3b:8c:33:76:4b:c5:
fd:42:43:77:7e:dc:e1:45:a1:4e:2b:ec:db:44:2b:09:7b:8a:
db:a2:3b:36:29:bb:22:31:55:7a:c8:94:a8:e3:66:6f:48:d2:
6e:b3:e1:1e
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgISAYVwuYeFbVypPLhDNULAavrGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiZjc0Y2Q4NDY0OTMxMzhmNTIyYzU3YzAwNjViNWM2MDUx
MmRkMDkwHhcNMjMwMTAyMDQyNDQ1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZmE4MzZmMDQyYmU0ZTY2NWQ5ZDEwMzZkNTljNzQ1YWQ4NzNmOWY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgz9Sk7T7OAJJ02qi9vndhjDsxxRz
4TrDp09EyM60WZ9HxR4z4vKvOEuHStf+paNyUB0yISzTHzyVqJ4VhWYG5Zj//4og
Cm6D6zjyD1BY3+zF7/BX5gsuZzHglFpSav5BOqzUbal0VAAuv1BQbBHCQdOKsHYC
7VHvMB689xcGEdIDQZ31tdpLiJiWcU2tGKjbLAWli3J7x8aPWsJaY8qL6uq/Huw+
mKJDWgqU+bw5HQPVmRenU8a4KvmJv2KpMFAIi8L+WwddgXMmh8KkzHCN3xg7mwoP
lZOhpDyEDldzZ9MW9JX7bDEYsV7QVlKGd9JYTWC7LJ9STvk+YH2NtRmcwwIDAQAB
o4ICNTCCAjEwHQYDVR0OBBYEFC+oNvBCvk5mXZ0QNtWcdFrYc/n3MB8GA1UdIwQY
MBaAFMv3TNhGSTE49SLFfABltcYFEt0JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveV9kTTJFWkpNVGoxSXNWOEFHVzF4Z1VTM1FrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8zNDg3ODktMzIwOC00ODQ3LTljM2Yt
OTgyZDFmMjFhMzJiLzEvTDZnMjhFSy1UbVpkblJBMjFaeDBXdGh6LWZjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC8zNDg3ODktMzIwOC00ODQ3LTljM2YtOTgyZDFmMjFhMzJi
LzEveV9kTTJFWkpNVGoxSXNWOEFHVzF4Z1VTM1FrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEsGCCsGAQUFBwEHAQH/BDwwOjAeBAIAATAYAwQAjeJ8AwQA
jeJ/AwQDjeLgAwQCuWogMBgEAgACMBIDBwAqBjuAADADBwAqBjuAARAwDQYJKoZI
hvcNAQELBQADggEBAGCsIsskL0fHl8YoN2zK0+XRhzfpJ4F5noVITcmrMjE1Zuft
jCnrgVZmkg64R8DOz9SGad9RMXB299M5inn9p2pxKQ+0xBin4Uhv/SEBIzHZS5Ry
DKKduteSn8lhaFJlefowHLFy8gRorjcTepSfaTn3iwvbYYH7IM5s3Z8mC6KEzXNz
JXbuhOz50ve2adwUNv2ahWcqbaR76KA7DvAII9wKoOXX3dJYA2+xtAvfWxWNITU7
nfR00JLIzYvF0K+EqeNrX2gKmGPMrCQeH4aiC4OsnjuMM3ZLxf1CQ3d+3OFFoU4r
7NtEKwl7ituiOzYpuyIxVXrIlKjjZm9I0m6z4R4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:52 2024 by rpki-client on console-ams.rpki-client.org