Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/1h0gF_kqRsNGcqZJ7b4jLw-hGpA.roa
File: 1h0gF_kqRsNGcqZJ7b4jLw-hGpA.roa (raw, json)
Hash identifier: 3Cn8f5a/H70rI3ESnDFeT/0QnY8Nkz84JDrtmfUbetQ=
Subject key identifier: D6:1D:20:17:F9:2A:46:C3:46:72:A6:49:ED:BE:23:2F:0F:A1:1A:90
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 018F71D6FC77237B6B857C3E8B14CAB2E56D
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/1h0gF_kqRsNGcqZJ7b4jLw-hGpA.roa
Signing time: Mon 13 May 2024 12:04:25 +0000
ROA not before: Mon 13 May 2024 12:04:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39679
IP address blocks: 79.172.214.0/24 maxlen: 24
79.172.218.0/24 maxlen: 24
79.172.220.0/24 maxlen: 24
79.172.228.0/24 maxlen: 24
87.229.22.0/24 maxlen: 24
87.229.23.0/24 maxlen: 24
87.229.34.0/24 maxlen: 24
87.229.35.0/24 maxlen: 24
87.229.48.0/24 maxlen: 24
87.229.50.0/24 maxlen: 24
87.229.70.0/24 maxlen: 24
87.229.71.0/24 maxlen: 24
87.229.79.0/24 maxlen: 24
87.229.80.0/24 maxlen: 24
87.229.81.0/24 maxlen: 24
87.229.82.0/24 maxlen: 24
87.229.110.0/24 maxlen: 24
95.138.194.0/23 maxlen: 23
213.181.201.0/24 maxlen: 24
217.144.57.0/24 maxlen: 24
217.144.58.0/24 maxlen: 24
217.144.59.0/24 maxlen: 24
217.144.60.0/24 maxlen: 24
217.144.62.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 15 May 2024 09:12:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:71:d6:fc:77:23:7b:6b:85:7c:3e:8b:14:ca:b2:e5:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: May 13 12:04:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d61d2017f92a46c34672a649edbe232f0fa11a90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:9f:75:4d:0f:a7:36:05:eb:03:22:e6:74:b9:
c0:93:75:ef:ae:ca:ce:37:47:0d:f1:bf:76:af:64:
c6:3a:e2:da:ce:9d:24:d2:53:af:42:0e:62:da:64:
86:ec:f0:4f:50:e2:4e:17:9b:31:53:80:a0:cb:2f:
21:fa:be:04:5f:56:9d:d2:bf:be:f3:6e:b2:16:47:
a1:46:9a:ab:8c:47:34:f5:15:38:0e:1d:81:50:bf:
9c:20:1c:1d:d2:90:21:1a:32:7b:aa:06:08:d6:ab:
ee:d2:97:38:63:98:28:15:87:08:02:64:6e:94:6f:
e3:95:57:23:45:ab:7b:d2:8f:bd:ec:e8:56:15:34:
c7:f0:cb:e8:ff:3d:62:21:45:d7:8d:f6:d2:7c:de:
00:b4:be:6d:d5:3a:b3:ce:10:00:f6:bf:f3:d9:1e:
92:b8:23:7c:36:36:2f:8b:72:63:68:ea:f0:ff:9a:
bc:da:5a:1c:8a:f8:4f:4b:c3:4c:82:5f:eb:5e:57:
4a:c6:26:10:d8:52:d2:bf:5b:34:f3:8f:45:fa:10:
46:9f:0b:90:e9:e2:a3:0a:e7:6f:8c:cf:ff:4c:92:
ec:38:34:92:28:f5:d1:a9:54:b7:b1:c2:5a:75:15:
c7:1a:21:71:b7:76:4f:b8:ce:fa:c1:b5:24:fe:5b:
23:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:1D:20:17:F9:2A:46:C3:46:72:A6:49:ED:BE:23:2F:0F:A1:1A:90
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/1h0gF_kqRsNGcqZJ7b4jLw-hGpA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.214.0/24
79.172.218.0/24
79.172.220.0/24
79.172.228.0/24
87.229.22.0/23
87.229.34.0/23
87.229.48.0/24
87.229.50.0/24
87.229.70.0/23
87.229.79.0-87.229.82.255
87.229.110.0/24
95.138.194.0/23
213.181.201.0/24
217.144.57.0-217.144.60.255
217.144.62.0/24
Signature Algorithm: sha256WithRSAEncryption
17:ac:fd:fc:01:9f:39:be:cb:c9:68:79:d5:61:81:1e:ca:10:
44:24:bf:bf:d6:dd:03:8c:9a:ac:96:14:e0:91:06:c5:c0:bf:
0a:2d:a0:40:60:ee:53:ad:d5:81:8d:1e:ca:9b:99:bd:42:e6:
d8:3e:3f:ea:18:e7:40:2e:f3:c7:8a:8e:b0:a4:3c:46:ec:c8:
be:6b:ac:8c:48:6b:6d:83:d1:ca:63:dc:2c:09:11:2e:b0:27:
9a:e0:92:4f:69:c1:8e:04:cc:28:ec:cd:07:84:4c:2a:bb:4f:
04:b0:cd:4c:12:d3:d5:e8:07:55:a9:5c:5f:c4:c8:89:88:b5:
e5:31:55:cd:9b:b4:72:49:7a:b9:a0:50:69:f5:d0:6e:28:81:
24:ab:b6:16:82:49:ab:18:26:42:65:c3:c1:93:5d:2a:c6:44:
b6:6c:6b:47:ea:ba:f5:93:9a:ca:16:ad:5c:de:62:05:ff:a6:
9f:4d:2f:98:7a:d9:7a:15:3e:23:de:69:dc:98:e4:4e:1a:01:
1c:78:29:5a:02:54:62:86:41:19:9a:e2:4d:d8:6f:1d:57:34:
6c:6f:fd:73:45:ee:ec:61:e3:92:61:2f:83:25:7f:04:0a:40:
6f:c3:24:03:21:9f:d3:ed:93:26:e9:77:58:55:c9:f3:d1:2f:
72:b5:fd:48
-----BEGIN CERTIFICATE-----
MIIFYjCCBEqgAwIBAgISAY9x1vx3I3trhXw+ixTKsuVtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2
NDI0OTcwHhcNMjQwNTEzMTIwNDI1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNjFkMjAxN2Y5MmE0NmMzNDY3MmE2NDllZGJlMjMyZjBmYTExYTkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2J91TQ+nNgXrAyLmdLnAk3XvrsrO
N0cN8b92r2TGOuLazp0k0lOvQg5i2mSG7PBPUOJOF5sxU4Cgyy8h+r4EX1ad0r++
826yFkehRpqrjEc09RU4Dh2BUL+cIBwd0pAhGjJ7qgYI1qvu0pc4Y5goFYcIAmRu
lG/jlVcjRat70o+97OhWFTTH8Mvo/z1iIUXXjfbSfN4AtL5t1TqzzhAA9r/z2R6S
uCN8NjYvi3JjaOrw/5q82locivhPS8NMgl/rXldKxiYQ2FLSv1s0849F+hBGnwuQ
6eKjCudvjM//TJLsODSSKPXRqVS3scJadRXHGiFxt3ZPuM76wbUk/lsjvQIDAQAB
o4ICbjCCAmowHQYDVR0OBBYEFNYdIBf5KkbDRnKmSe2+Iy8PoRqQMB8GA1UdIwQY
MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt
OTU5M2E0ODhhZmNjLzEvMWgwZ0Zfa3FSc05HY3FaSjdiNGpMdy1oR3BBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj
LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGDBggrBgEFBQcBBwEB/wR0MHIwcAQCAAEwagMEAE+s1gME
AE+s2gMEAE+s3AMEAE+s5AMEAVflFgMEAVflIgMEAFflMAMEAFflMgMEAVflRjAM
AwQAV+VPAwQAV+VSAwQAV+VuAwQBX4rCAwQA1bXJMAwDBADZkDkDBADZkDwDBADZ
kD4wDQYJKoZIhvcNAQELBQADggEBABes/fwBnzm+y8loedVhgR7KEEQkv7/W3QOM
mqyWFOCRBsXAvwotoEBg7lOt1YGNHsqbmb1C5tg+P+oY50Au88eKjrCkPEbsyL5r
rIxIa22D0cpj3CwJES6wJ5rgkk9pwY4EzCjszQeETCq7TwSwzUwS09XoB1WpXF/E
yImIteUxVc2btHJJermgUGn10G4ogSSrthaCSasYJkJlw8GTXSrGRLZsa0fquvWT
msoWrVzeYgX/pp9NL5h62XoVPiPeadyY5E4aARx4KVoCVGKGQRma4k3Ybx1XNGxv
/XNF7uxh45JhL4MlfwQKQG/DJAMhn9Ptkybpd1hVyfPRL3K1/Ug=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:38 2024 by rpki-client on console-ams.rpki-client.org