Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/PNuax5wAebsHatkOJJSuDZebHbE.roa
File: PNuax5wAebsHatkOJJSuDZebHbE.roa (raw, json)
Hash identifier: zW2/+UcdkLCWJuL41e2PMTGtbkK9H7s/fLNrqYHy9CY=
Subject key identifier: 3C:DB:9A:C7:9C:00:79:BB:07:6A:D9:0E:24:94:AE:0D:97:9B:1D:B1
Certificate issuer: /CN=a6bb3045aea78e8fa7648129714fb736068dc37b
Certificate serial: 018CC726F24D6F4ED6DACB6A2B5D7C714313
Authority key identifier: A6:BB:30:45:AE:A7:8E:8F:A7:64:81:29:71:4F:B7:36:06:8D:C3:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/prswRa6njo-nZIEpcU-3NgaNw3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/PNuax5wAebsHatkOJJSuDZebHbE.roa
Signing time: Mon 01 Jan 2024 22:31:07 +0000
ROA not before: Mon 01 Jan 2024 22:31:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6830
IP address blocks: 185.184.176.0/22 maxlen: 22
77.111.232.0/22 maxlen: 22
188.227.200.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 15 May 2024 05:52:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:f2:4d:6f:4e:d6:da:cb:6a:2b:5d:7c:71:43:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6bb3045aea78e8fa7648129714fb736068dc37b
Validity
Not Before: Jan 1 22:31:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3cdb9ac79c0079bb076ad90e2494ae0d979b1db1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:81:91:21:ca:67:e8:10:98:fa:78:d3:28:b1:
af:c4:eb:cd:db:fa:7b:40:f7:c3:68:d0:8b:45:10:
8b:23:4f:57:74:6e:6f:71:90:33:4f:25:4f:4e:72:
54:2a:f9:57:d9:43:90:9a:73:43:73:6e:99:d1:4e:
8d:b8:b6:f8:81:7b:5f:97:7b:59:e5:1e:4a:87:39:
f4:62:a1:f7:95:32:06:a8:c1:f7:ef:90:db:24:8e:
91:44:9d:a0:de:4c:dc:8f:a6:29:dc:f2:ec:c2:e9:
9b:87:13:14:60:5c:16:40:48:af:b6:aa:e4:7c:6b:
5e:92:42:d1:31:aa:a7:11:8f:94:bc:0c:28:93:0a:
2d:1f:71:97:30:84:7a:b3:92:56:01:6c:ab:7b:35:
0a:b3:33:86:8b:e6:bb:d9:f7:85:0f:ac:8f:40:27:
4b:75:e0:f0:cd:05:00:59:26:5e:e8:f7:a5:cc:7f:
3c:e0:e5:60:6d:f0:cb:69:38:76:b1:87:4e:7d:aa:
f1:15:1e:6f:f8:b8:62:de:ec:83:07:62:6f:a1:55:
2e:28:85:fd:63:97:65:2c:9b:ae:92:6d:49:2d:29:
66:2e:85:b2:2a:98:fe:e5:97:b8:ed:ed:a7:d5:e7:
b8:7f:bf:80:35:83:e0:4e:5c:11:8d:8e:70:c3:8c:
90:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:DB:9A:C7:9C:00:79:BB:07:6A:D9:0E:24:94:AE:0D:97:9B:1D:B1
X509v3 Authority Key Identifier:
keyid:A6:BB:30:45:AE:A7:8E:8F:A7:64:81:29:71:4F:B7:36:06:8D:C3:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prswRa6njo-nZIEpcU-3NgaNw3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/PNuax5wAebsHatkOJJSuDZebHbE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.111.232.0/22
185.184.176.0/22
188.227.200.0/22
Signature Algorithm: sha256WithRSAEncryption
51:ac:8a:ac:b7:49:8e:f6:03:10:bf:de:f8:a5:02:d3:59:ad:
90:ef:4f:74:a3:b1:df:3e:57:ee:24:5a:45:63:e9:be:c8:33:
33:15:2e:23:ca:4f:a2:76:b1:ee:7c:8a:8b:b8:d4:a0:6d:9b:
46:00:78:70:a8:a6:e4:bc:09:37:a6:b2:9d:82:97:34:03:45:
e3:b7:fd:55:a2:da:00:a1:0b:df:b7:44:4d:6e:d6:97:1e:1e:
7f:ff:ab:8e:cc:a5:e3:ac:27:fb:74:87:f6:4a:c9:b4:e8:86:
68:c4:ad:8e:fd:bb:ef:32:93:6c:57:e1:06:28:58:2f:a1:9d:
f9:2f:8e:f0:a5:73:d5:56:bd:d8:e2:72:26:f7:a7:14:12:1b:
e4:04:fa:3e:b0:b0:2f:59:ef:f1:10:b7:e2:ed:a6:aa:f1:55:
dc:f7:a5:8d:e9:73:20:e2:00:02:b7:a4:75:be:f1:c0:32:63:
d0:64:90:40:27:4e:fa:23:09:fe:0e:74:a6:3b:85:1a:bf:11:
5c:74:1b:51:e4:84:8e:3c:0d:9d:4b:41:bd:e8:77:ca:26:bd:
c7:18:92:59:7e:b4:1e:9c:9b:a8:27:82:96:0b:76:19:68:ba:
12:4f:85:b7:a6:58:d4:31:f4:99:29:91:14:71:e2:16:c5:37:
a2:f8:82:d4
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYzHJvJNb07W2stqK118cUMTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2YmIzMDQ1YWVhNzhlOGZhNzY0ODEyOTcxNGZiNzM2MDY4
ZGMzN2IwHhcNMjQwMTAxMjIzMTA3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzY2RiOWFjNzljMDA3OWJiMDc2YWQ5MGUyNDk0YWUwZDk3OWIxZGIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4GRIcpn6BCY+njTKLGvxOvN2/p7
QPfDaNCLRRCLI09XdG5vcZAzTyVPTnJUKvlX2UOQmnNDc26Z0U6NuLb4gXtfl3tZ
5R5Khzn0YqH3lTIGqMH375DbJI6RRJ2g3kzcj6Yp3PLswumbhxMUYFwWQEivtqrk
fGtekkLRMaqnEY+UvAwokwotH3GXMIR6s5JWAWyrezUKszOGi+a72feFD6yPQCdL
deDwzQUAWSZe6PelzH884OVgbfDLaTh2sYdOfarxFR5v+Lhi3uyDB2JvoVUuKIX9
Y5dlLJuukm1JLSlmLoWyKpj+5Ze47e2n1ee4f7+ANYPgTlwRjY5ww4yQmwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFDzbmsecAHm7B2rZDiSUrg2Xmx2xMB8GA1UdIwQY
MBaAFKa7MEWup46Pp2SBKXFPtzYGjcN7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHJzd1JhNm5qby1uWklFcGNVLTNOZ2FOdzNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi80MWVhZjktNjU2ZC00MGQ5LTlmN2Et
MzM0ZGUzZDc2ZmU1LzEvUE51YXg1d0FlYnNIYXRrT0pKU3VEWmViSGJFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi80MWVhZjktNjU2ZC00MGQ5LTlmN2EtMzM0ZGUzZDc2ZmU1
LzEvcHJzd1JhNm5qby1uWklFcGNVLTNOZ2FOdzNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCTW/oAwQC
ubiwAwQCvOPIMA0GCSqGSIb3DQEBCwUAA4IBAQBRrIqst0mO9gMQv974pQLTWa2Q
7090o7HfPlfuJFpFY+m+yDMzFS4jyk+idrHufIqLuNSgbZtGAHhwqKbkvAk3prKd
gpc0A0Xjt/1VotoAoQvft0RNbtaXHh5//6uOzKXjrCf7dIf2Ssm06IZoxK2O/bvv
MpNsV+EGKFgvoZ35L47wpXPVVr3Y4nIm96cUEhvkBPo+sLAvWe/xELfi7aaq8VXc
96WN6XMg4gACt6R1vvHAMmPQZJBAJ076Iwn+DnSmO4UavxFcdBtR5ISOPA2dS0G9
6HfKJr3HGJJZfrQenJuoJ4KWC3YZaLoST4W3pljUMfSZKZEUceIWxTei+ILU
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:24:42 2025 by rpki-client