Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/2eALt0vh9tup-MJN4ILhwHRcc6g.roa
File: 2eALt0vh9tup-MJN4ILhwHRcc6g.roa (raw, json)
Hash identifier: YG+7gza/pAmZZ6CGowGGACR7OKD4uubzMGq20d427O0=
Subject key identifier: D9:E0:0B:B7:4B:E1:F6:DB:A9:F8:C2:4D:E0:82:E1:C0:74:5C:73:A8
Certificate issuer: /CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20
Certificate serial: 0189B6AE37E7131DE715E20DAEBE314D7DEA
Authority key identifier: EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/2eALt0vh9tup-MJN4ILhwHRcc6g.roa
Signing time: Wed 02 Aug 2023 14:36:58 +0000
ROA not before: Wed 02 Aug 2023 14:36:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24961
IP address blocks: 185.219.208.0/22 maxlen: 22
78.31.64.0/21 maxlen: 21
93.186.192.0/20 maxlen: 20
83.136.80.0/21 maxlen: 21
46.20.32.0/20 maxlen: 20
85.114.128.0/19 maxlen: 19
5.104.104.0/21 maxlen: 21
85.14.192.0/18 maxlen: 18
62.141.32.0/20 maxlen: 20
37.157.248.0/21 maxlen: 21
46.228.192.0/20 maxlen: 20
194.107.129.0/24 maxlen: 24
81.30.144.0/20 maxlen: 20
80.82.208.0/20 maxlen: 20
91.212.159.0/24 maxlen: 24
91.212.153.0/24 maxlen: 24
89.163.128.0/17 maxlen: 17
146.0.32.0/20 maxlen: 20
91.194.84.0/24 maxlen: 24
213.202.192.0/18 maxlen: 18
5.199.128.0/20 maxlen: 20
185.15.244.0/22 maxlen: 22
217.79.176.0/20 maxlen: 20
193.111.198.0/23 maxlen: 23
2001:4ba4::/32 maxlen: 32
2a01:480::/32 maxlen: 32
2001:4ba1::/32 maxlen: 32
2001:4ba0::/32 maxlen: 32
2001:4ba3::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 02 Nov 2023 15:13:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b6:ae:37:e7:13:1d:e7:15:e2:0d:ae:be:31:4d:7d:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20
Validity
Not Before: Aug 2 14:36:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d9e00bb74be1f6dba9f8c24de082e1c0745c73a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:ce:81:2d:19:7e:4e:4e:8a:b6:20:40:8c:82:
0d:85:5d:81:b2:3f:5c:a1:ca:68:24:ae:75:a4:40:
f4:a7:31:70:d7:d0:6c:b2:5c:4c:b7:41:35:2c:dc:
d2:69:e2:37:da:39:9f:94:0f:22:dd:23:6b:b7:df:
d9:1b:c3:f9:15:9c:a1:af:e0:37:51:52:42:a4:3b:
4d:4e:02:0f:80:b6:91:2e:01:d5:12:de:db:ae:0f:
fe:4c:33:35:2c:aa:7f:44:a2:39:e5:c4:0c:88:a7:
69:56:3f:c1:2c:9a:a8:f5:fb:b0:67:c8:b3:5f:d9:
24:b6:c4:62:b0:a9:82:14:4a:10:ac:b0:ee:c5:d2:
9c:3a:f8:b9:1b:8e:96:69:69:a8:d9:9b:3f:8e:6d:
df:16:a6:2e:4d:a6:91:df:ed:75:2a:91:d5:16:c2:
f5:a9:1d:0f:94:78:33:8a:cf:ec:98:0a:d3:7f:d2:
b5:7b:3e:7d:df:9c:41:43:c5:05:a6:6b:87:34:9f:
f4:07:d2:ca:e4:ca:47:53:e1:f7:02:67:ec:da:bb:
e7:e7:ed:21:38:29:6b:04:bd:ad:80:a1:6f:66:da:
06:68:60:b4:93:09:5a:08:d5:f8:88:73:d7:19:82:
31:a6:d2:ff:11:47:0e:2b:a3:64:50:d5:65:43:48:
04:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:E0:0B:B7:4B:E1:F6:DB:A9:F8:C2:4D:E0:82:E1:C0:74:5C:73:A8
X509v3 Authority Key Identifier:
keyid:EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/2eALt0vh9tup-MJN4ILhwHRcc6g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.104.104.0/21
5.199.128.0/20
37.157.248.0/21
46.20.32.0/20
46.228.192.0/20
62.141.32.0/20
78.31.64.0/21
80.82.208.0/20
81.30.144.0/20
83.136.80.0/21
85.14.192.0/18
85.114.128.0/19
89.163.128.0/17
91.194.84.0/24
91.212.153.0/24
91.212.159.0/24
93.186.192.0/20
146.0.32.0/20
185.15.244.0/22
185.219.208.0/22
193.111.198.0/23
194.107.129.0/24
213.202.192.0/18
217.79.176.0/20
IPv6:
2001:4ba0::/31
2001:4ba3::-2001:4ba4:ffff:ffff:ffff:ffff:ffff:ffff
2a01:480::/32
Signature Algorithm: sha256WithRSAEncryption
bc:ff:a2:a8:aa:3d:c7:30:03:00:f8:e4:10:e3:ea:0e:a8:45:
6d:13:dc:71:87:6b:0a:55:1c:f8:9b:84:5d:1d:38:21:3d:07:
b9:36:0d:89:27:3a:51:73:c7:50:99:b4:65:95:9c:22:02:cf:
08:1d:a6:66:27:bb:62:30:ca:ca:5e:1b:24:35:9d:67:51:ee:
ca:ad:ae:d2:ee:fb:1b:47:e8:20:7e:f4:06:36:54:41:32:ef:
bf:61:aa:d6:c2:c4:49:74:1c:79:97:da:48:23:7f:8e:58:ed:
18:04:01:d9:ac:67:dd:f5:35:47:1b:1d:0f:81:25:88:cf:87:
ed:ed:00:ca:a3:c2:01:45:4d:3b:a3:15:61:e4:1d:3c:c3:e8:
d2:26:2d:0e:f2:dd:0d:6e:13:85:95:3e:7d:41:28:b7:9f:63:
1c:fd:39:59:aa:6f:5d:63:c8:3b:4c:a3:db:1b:fc:36:43:93:
62:4f:85:73:47:9d:32:d5:6e:33:76:ab:cd:3a:d7:7b:82:36:
05:56:a7:9a:76:52:d2:90:49:02:7e:a1:9f:d7:9a:0f:ae:77:
80:ba:61:8c:97:37:5c:1f:a4:56:5d:60:03:56:9e:ae:be:58:
24:01:35:6c:3d:2e:3e:b1:d8:cc:06:e9:20:e7:87:db:70:e0:
1f:ed:fd:d2
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgISAYm2rjfnEx3nFeINrr4xTX3qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjNmI0MjAyMTg4NmQ4ZWVkYmFlOTBkOWU2YWIxZGU1MzNj
NTBkMjAwHhcNMjMwODAyMTQzNjU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOWUwMGJiNzRiZTFmNmRiYTlmOGMyNGRlMDgyZTFjMDc0NWM3M2E4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiM6BLRl+Tk6KtiBAjIINhV2Bsj9c
ocpoJK51pED0pzFw19BsslxMt0E1LNzSaeI32jmflA8i3SNrt9/ZG8P5FZyhr+A3
UVJCpDtNTgIPgLaRLgHVEt7brg/+TDM1LKp/RKI55cQMiKdpVj/BLJqo9fuwZ8iz
X9kktsRisKmCFEoQrLDuxdKcOvi5G46WaWmo2Zs/jm3fFqYuTaaR3+11KpHVFsL1
qR0PlHgzis/smArTf9K1ez5935xBQ8UFpmuHNJ/0B9LK5MpHU+H3Amfs2rvn5+0h
OClrBL2tgKFvZtoGaGC0kwlaCNX4iHPXGYIxptL/EUcOK6NkUNVlQ0gEFwIDAQAB
o4ICvjCCArowHQYDVR0OBBYEFNngC7dL4fbbqfjCTeCC4cB0XHOoMB8GA1UdIwQY
MBaAFOxrQgIYhtju266Q2earHeUzxQ0gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0d0Q0FoaUcyTzdicnBEWjVxc2Q1VFBGRFNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8yNmMzZTEtNjQ4Ni00ZTA5LTk5YTQt
YTY4NzNiMzc0ZTI2LzEvMmVBTHQwdmg5dHVwLU1KTjRJTGh3SFJjYzZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8yNmMzZTEtNjQ4Ni00ZTA5LTk5YTQtYTY4NzNiMzc0ZTI2
LzEvN0d0Q0FoaUcyTzdicnBEWjVxc2Q1VFBGRFNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHTBggrBgEFBQcBBwEB/wSBwzCBwDCBlwQCAAEwgZADBAMF
aGgDBAQFx4ADBAMlnfgDBAQuFCADBAQu5MADBAQ+jSADBANOH0ADBARQUtADBARR
HpADBANTiFADBAZVDsADBAVVcoADBAdZo4ADBABbwlQDBABb1JkDBABb1J8DBARd
usADBASSACADBAK5D/QDBAK529ADBAHBb8YDBADCa4EDBAbVysADBATZT7AwJAQC
AAIwHgMFASABS6AwDgMFACABS6MDBQAgAUukAwUAKgEEgDANBgkqhkiG9w0BAQsF
AAOCAQEAvP+iqKo9xzADAPjkEOPqDqhFbRPccYdrClUc+JuEXR04IT0HuTYNiSc6
UXPHUJm0ZZWcIgLPCB2mZie7YjDKyl4bJDWdZ1Huyq2u0u77G0foIH70BjZUQTLv
v2Gq1sLESXQceZfaSCN/jljtGAQB2axn3fU1RxsdD4EliM+H7e0AyqPCAUVNO6MV
YeQdPMPo0iYtDvLdDW4ThZU+fUEot59jHP05WapvXWPIO0yj2xv8NkOTYk+Fc0ed
MtVuM3arzTrXe4I2BVanmnZS0pBJAn6hn9eaD653gLphjJc3XB+kVl1gA1aerr5Y
JAE1bD0uPrHYzAbpIOeH23DgH+390g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:21 2024 by rpki-client on console-ams.rpki-client.org