Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/mE0mPtx3lCMEhkp_cz7DEAG_ROo.roa
File: mE0mPtx3lCMEhkp_cz7DEAG_ROo.roa (raw, json)
Hash identifier: 3PGsEs+BStpYAu3eSqhYPi0pzlJsaGo5YI9mBUXfEU4=
Subject key identifier: 98:4D:26:3E:DC:77:94:23:04:86:4A:7F:73:3E:C3:10:01:BF:44:EA
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 018D8DECFE43B88C40D9D9328FDCE4D888FA
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/mE0mPtx3lCMEhkp_cz7DEAG_ROo.roa
Signing time: Fri 09 Feb 2024 12:52:15 +0000
ROA not before: Fri 09 Feb 2024 12:52:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29278
IP address blocks: 79.172.192.0/18 maxlen: 18
84.21.7.0/24 maxlen: 24
84.21.8.0/24 maxlen: 24
84.21.11.0/24 maxlen: 24
84.21.15.0/24 maxlen: 24
84.21.16.0/24 maxlen: 24
84.21.18.0/24 maxlen: 24
84.21.19.0/24 maxlen: 24
87.229.12.0/24 maxlen: 24
87.229.14.0/24 maxlen: 24
87.229.26.0/24 maxlen: 24
87.229.32.0/24 maxlen: 24
87.229.33.0/24 maxlen: 24
87.229.40.0/23 maxlen: 23
87.229.45.0/24 maxlen: 24
87.229.53.0/24 maxlen: 24
87.229.54.0/24 maxlen: 24
87.229.55.0/24 maxlen: 24
87.229.58.0/24 maxlen: 24
87.229.105.0/24 maxlen: 24
87.229.115.0/24 maxlen: 24
213.181.200.0/24 maxlen: 24
213.181.204.0/24 maxlen: 24
213.181.205.0/24 maxlen: 24
213.181.207.0/24 maxlen: 24
213.181.210.0/24 maxlen: 24
213.181.211.0/24 maxlen: 24
213.181.219.0/24 maxlen: 24
217.113.49.0/24 maxlen: 24
217.113.50.0/24 maxlen: 24
217.113.51.0/24 maxlen: 24
217.113.53.0/24 maxlen: 24
217.113.61.0/24 maxlen: 24
217.113.63.0/24 maxlen: 24
217.144.48.0/23 maxlen: 23
217.144.50.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 12 Feb 2024 07:28:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:8d:ec:fe:43:b8:8c:40:d9:d9:32:8f:dc:e4:d8:88:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Feb 9 12:52:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=984d263edc77942304864a7f733ec31001bf44ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f9:0e:bb:a5:2f:ed:aa:33:c4:ae:51:21:e9:
a1:44:0b:9d:d7:cb:67:5d:3b:88:47:b6:01:24:d0:
a1:3e:3a:c6:fc:b7:b2:91:b3:51:9f:31:33:d7:4a:
ba:b0:89:62:c3:eb:a3:40:83:47:cd:9d:fb:16:7f:
95:d6:05:18:ae:7d:08:ee:90:93:a0:4f:93:fb:36:
7b:db:88:b7:38:dc:1c:c5:0e:db:94:a8:06:83:15:
50:b7:0b:c0:1a:e8:d7:26:2c:e2:62:3f:be:5e:f3:
ff:c7:f6:52:05:81:7e:ac:12:5d:1c:5a:ff:da:d6:
54:82:78:9f:fc:c7:33:86:96:ab:1b:96:2a:26:f8:
c3:99:25:b2:7c:b6:ef:88:c4:fb:42:1f:ee:26:cf:
7b:1e:e7:81:df:57:8e:05:9f:ac:b7:13:ce:9b:c8:
72:a9:22:cf:30:43:cb:06:20:fe:7f:3b:ea:3e:35:
00:41:03:de:f5:5f:23:d6:b2:1a:e7:9a:bb:6e:e3:
fe:8c:05:ae:e0:63:10:54:c7:87:03:94:09:63:ff:
9f:61:87:d4:a4:24:93:b7:58:ea:30:0c:d0:06:6c:
a2:98:af:84:76:92:9f:42:b6:6b:6d:9c:5d:f4:cb:
a4:91:cd:95:ed:27:24:ce:69:dd:cd:09:36:78:e8:
8f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:4D:26:3E:DC:77:94:23:04:86:4A:7F:73:3E:C3:10:01:BF:44:EA
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/mE0mPtx3lCMEhkp_cz7DEAG_ROo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.192.0/18
84.21.7.0-84.21.8.255
84.21.11.0/24
84.21.15.0-84.21.16.255
84.21.18.0/23
87.229.12.0/24
87.229.14.0/24
87.229.26.0/24
87.229.32.0/23
87.229.40.0/23
87.229.45.0/24
87.229.53.0-87.229.55.255
87.229.58.0/24
87.229.105.0/24
87.229.115.0/24
213.181.200.0/24
213.181.204.0/23
213.181.207.0/24
213.181.210.0/23
213.181.219.0/24
217.113.49.0-217.113.51.255
217.113.53.0/24
217.113.61.0/24
217.113.63.0/24
217.144.48.0-217.144.50.255
Signature Algorithm: sha256WithRSAEncryption
40:ae:70:c0:8a:ae:48:43:03:9f:69:86:0d:74:da:b0:29:74:
f8:c5:92:fb:e4:d1:fb:a6:61:75:aa:eb:35:37:b7:a1:a3:a2:
b3:71:44:e8:3a:b9:72:ba:ec:43:3b:16:80:ac:1c:ae:16:d0:
ca:b2:9a:a6:5e:dd:1f:29:eb:56:f2:e5:6f:90:b0:27:0b:5f:
c2:e7:cb:14:32:fb:16:6d:cf:9d:40:97:ab:15:26:e7:41:a7:
3c:ac:40:31:19:c8:4c:de:99:b0:a6:08:c9:ed:ec:95:21:b0:
24:90:1f:73:69:22:d5:2d:4d:07:8a:8a:c2:b9:27:8a:74:2a:
79:b4:6f:b5:e0:d3:89:45:14:3b:44:0e:a1:3d:e2:4c:fe:86:
3b:52:09:88:c2:24:e4:59:5e:dc:c2:ea:51:37:01:68:25:70:
d7:ef:ff:51:ac:d1:8e:ef:6c:78:58:1c:15:31:24:ab:10:90:
80:16:24:85:18:cd:4d:76:e7:d7:86:b9:6a:38:47:e6:4d:f5:
79:2b:ab:11:01:6c:e4:43:66:82:e5:33:37:f5:a0:8c:53:e1:
85:f3:f9:d1:97:68:f1:b7:9e:4c:8b:9d:81:37:d4:f0:17:1d:
34:ba:a1:5e:5f:46:a6:ab:4e:e9:1c:b0:3d:32:dd:bf:55:00:
7a:af:ae:af
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgISAY2N7P5DuIxA2dkyj9zk2Ij6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2
NDI0OTcwHhcNMjQwMjA5MTI1MjE1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ODRkMjYzZWRjNzc5NDIzMDQ4NjRhN2Y3MzNlYzMxMDAxYmY0NGVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvkOu6Uv7aozxK5RIemhRAud18tn
XTuIR7YBJNChPjrG/LeykbNRnzEz10q6sIliw+ujQINHzZ37Fn+V1gUYrn0I7pCT
oE+T+zZ724i3ONwcxQ7blKgGgxVQtwvAGujXJiziYj++XvP/x/ZSBYF+rBJdHFr/
2tZUgnif/MczhparG5YqJvjDmSWyfLbviMT7Qh/uJs97HueB31eOBZ+stxPOm8hy
qSLPMEPLBiD+fzvqPjUAQQPe9V8j1rIa55q7buP+jAWu4GMQVMeHA5QJY/+fYYfU
pCSTt1jqMAzQBmyimK+EdpKfQrZrbZxd9Mukkc2V7SckzmndzQk2eOiP4QIDAQAB
o4ICxjCCAsIwHQYDVR0OBBYEFJhNJj7cd5QjBIZKf3M+wxABv0TqMB8GA1UdIwQY
MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt
OTU5M2E0ODhhZmNjLzEvbUUwbVB0eDNsQ01FaGtwX2N6N0RFQUdfUk9vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj
LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHbBggrBgEFBQcBBwEB/wSByzCByDCBxQQCAAEwgb4DBAZP
rMAwDAMEAFQVBwMEAFQVCAMEAFQVCzAMAwQAVBUPAwQAVBUQAwQBVBUSAwQAV+UM
AwQAV+UOAwQAV+UaAwQBV+UgAwQBV+UoAwQAV+UtMAwDBABX5TUDBANX5TADBABX
5ToDBABX5WkDBABX5XMDBADVtcgDBAHVtcwDBADVtc8DBAHVtdIDBADVtdswDAME
ANlxMQMEAtlxMAMEANlxNQMEANlxPQMEANlxPzAMAwQE2ZAwAwQA2ZAyMA0GCSqG
SIb3DQEBCwUAA4IBAQBArnDAiq5IQwOfaYYNdNqwKXT4xZL75NH7pmF1qus1N7eh
o6KzcUToOrlyuuxDOxaArByuFtDKspqmXt0fKetW8uVvkLAnC1/C58sUMvsWbc+d
QJerFSbnQac8rEAxGchM3pmwpgjJ7eyVIbAkkB9zaSLVLU0HiorCuSeKdCp5tG+1
4NOJRRQ7RA6hPeJM/oY7UgmIwiTkWV7cwupRNwFoJXDX7/9RrNGO72x4WBwVMSSr
EJCAFiSFGM1NdufXhrlqOEfmTfV5K6sRAWzkQ2aC5TM39aCMU+GF8/nRl2jxt55M
i52BN9TwFx00uqFeX0amq07pHLA9Mt2/VQB6r66v
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:28 2024 by rpki-client on console-fra.rpki-client.org