Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/289b1d-08dd-4d53-b12d-7d4028a1bf59/1/IbaQxdptiGKowyc5yHUCX7SNUSA.roa
File: IbaQxdptiGKowyc5yHUCX7SNUSA.roa (raw, json)
Hash identifier: fKmsJM0bPGviERIBAQA/aC8BT8W/HuKSCyr8QqaXmxM=
Subject key identifier: 21:B6:90:C5:DA:6D:88:62:A8:C3:27:39:C8:75:02:5F:B4:8D:51:20
Certificate issuer: /CN=a6f87cf4a15b9e7822455b3aa8af0b5ed3a299f7
Certificate serial: 018CC94E423051ACAE0C733B9D0D0B33F90D
Authority key identifier: A6:F8:7C:F4:A1:5B:9E:78:22:45:5B:3A:A8:AF:0B:5E:D3:A2:99:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pvh89KFbnngiRVs6qK8LXtOimfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/289b1d-08dd-4d53-b12d-7d4028a1bf59/1/IbaQxdptiGKowyc5yHUCX7SNUSA.roa
Signing time: Tue 02 Jan 2024 08:33:18 +0000
ROA not before: Tue 02 Jan 2024 08:33:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42831
IP address blocks: 81.92.217.0/24 maxlen: 24
81.92.219.0/24 maxlen: 24
81.92.218.0/24 maxlen: 24
81.92.218.0/23 maxlen: 23
94.46.184.0/22 maxlen: 22
81.92.192.0/22 maxlen: 22
185.109.168.0/22 maxlen: 22
185.99.254.0/24 maxlen: 24
94.46.244.0/22 maxlen: 22
91.109.112.0/21 maxlen: 21
94.46.192.0/22 maxlen: 22
94.46.207.0/24 maxlen: 24
94.46.220.0/22 maxlen: 22
185.99.253.0/24 maxlen: 24
185.99.252.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 05 Apr 2024 15:16:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:42:30:51:ac:ae:0c:73:3b:9d:0d:0b:33:f9:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6f87cf4a15b9e7822455b3aa8af0b5ed3a299f7
Validity
Not Before: Jan 2 08:33:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=21b690c5da6d8862a8c32739c875025fb48d5120
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:73:a4:2d:4a:6d:f9:c7:60:ee:f7:59:c2:27:
7a:be:d1:4c:86:b0:61:5d:46:15:57:60:40:79:b4:
c9:1f:02:b5:a6:15:ce:91:ae:42:86:cc:2b:14:57:
b5:5c:f0:29:7d:9d:f3:a3:7e:fe:25:06:d6:b0:0f:
38:f7:b0:ab:87:51:3b:d6:5d:3e:0e:8a:14:08:9e:
d8:4a:31:6b:ab:59:55:27:60:d5:44:ca:7a:eb:cc:
b5:3e:81:5b:fb:e9:8d:76:8e:48:75:87:9f:9b:43:
61:bf:7e:ec:bd:7e:50:84:c5:c6:91:a4:91:f1:1c:
c1:dc:e9:86:7a:fb:ac:46:05:af:d5:a4:0f:22:e9:
7b:9e:ab:6d:aa:d9:3f:36:b2:cf:d6:fe:f5:d9:5c:
3d:b0:f5:b3:e1:3b:bf:56:c0:76:64:a3:af:34:0a:
80:46:34:08:c5:aa:9e:41:10:13:c7:78:e3:ca:11:
08:60:db:f3:00:a1:a7:93:05:79:ba:48:af:aa:b4:
19:86:d0:d3:90:cd:16:aa:89:4f:4c:46:40:1b:37:
ad:8b:7f:fb:21:49:f1:84:15:c1:77:3a:4e:62:b2:
f7:23:11:fa:58:e1:7a:15:b3:76:a1:6d:c2:27:33:
8b:a3:c9:b6:77:d9:b0:a6:b3:b0:62:96:cd:26:c9:
89:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:B6:90:C5:DA:6D:88:62:A8:C3:27:39:C8:75:02:5F:B4:8D:51:20
X509v3 Authority Key Identifier:
keyid:A6:F8:7C:F4:A1:5B:9E:78:22:45:5B:3A:A8:AF:0B:5E:D3:A2:99:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pvh89KFbnngiRVs6qK8LXtOimfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/289b1d-08dd-4d53-b12d-7d4028a1bf59/1/IbaQxdptiGKowyc5yHUCX7SNUSA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/289b1d-08dd-4d53-b12d-7d4028a1bf59/1/pvh89KFbnngiRVs6qK8LXtOimfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.92.192.0/22
81.92.217.0-81.92.219.255
91.109.112.0/21
94.46.184.0/22
94.46.192.0/22
94.46.207.0/24
94.46.220.0/22
94.46.244.0/22
185.99.252.0-185.99.254.255
185.109.168.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:0b:e7:ab:c5:44:8c:aa:55:4b:10:aa:e8:16:50:fe:d1:35:
29:39:60:2b:38:f2:1c:6f:5b:80:d3:a7:2d:ff:03:06:ab:ad:
2a:d0:f5:ce:99:1d:46:3b:77:58:0f:68:f6:47:49:46:24:95:
8e:6d:36:a6:dc:67:b8:8c:70:d2:93:96:a2:d3:8d:75:ad:1c:
fc:32:22:19:ea:94:8e:95:65:dc:63:de:40:45:e4:e1:57:e1:
6b:ad:1a:84:8b:15:fd:a0:a8:b2:7b:f7:cd:01:f2:85:15:2a:
23:b3:fb:e5:87:66:92:cf:91:47:56:81:fc:a6:21:2d:2f:b6:
a4:f8:7f:77:5e:fd:be:46:27:9c:2a:bc:ed:36:8f:32:e9:ac:
51:a5:50:7f:90:4f:bf:a5:e0:fb:02:44:97:55:75:25:3e:dc:
4e:fa:81:5d:e8:1d:43:3d:5a:e2:c1:56:8a:7e:f5:2c:48:02:
06:dd:75:f2:22:1e:7c:8f:ed:dd:7b:5e:ef:0c:77:cf:e0:5f:
43:cb:72:03:ff:fe:88:0d:dd:32:49:d5:d2:60:78:14:23:02:
5d:a3:ba:34:f2:45:18:78:4c:09:f3:a5:9b:e9:7c:b5:5e:cb:
2c:27:85:76:99:5b:de:f2:b6:d0:b7:da:3b:40:ae:c4:52:0b:
5b:a0:12:6a
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgISAYzJTkIwUayuDHM7nQ0LM/kNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2Zjg3Y2Y0YTE1YjllNzgyMjQ1NWIzYWE4YWYwYjVlZDNh
Mjk5ZjcwHhcNMjQwMTAyMDgzMzE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMWI2OTBjNWRhNmQ4ODYyYThjMzI3MzljODc1MDI1ZmI0OGQ1MTIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA13OkLUpt+cdg7vdZwid6vtFMhrBh
XUYVV2BAebTJHwK1phXOka5ChswrFFe1XPApfZ3zo37+JQbWsA8497Crh1E71l0+
DooUCJ7YSjFrq1lVJ2DVRMp668y1PoFb++mNdo5IdYefm0Nhv37svX5QhMXGkaSR
8RzB3OmGevusRgWv1aQPIul7nqttqtk/NrLP1v712Vw9sPWz4Tu/VsB2ZKOvNAqA
RjQIxaqeQRATx3jjyhEIYNvzAKGnkwV5ukivqrQZhtDTkM0WqolPTEZAGzeti3/7
IUnxhBXBdzpOYrL3IxH6WOF6FbN2oW3CJzOLo8m2d9mwprOwYpbNJsmJRQIDAQAB
o4ICTzCCAkswHQYDVR0OBBYEFCG2kMXabYhiqMMnOch1Al+0jVEgMB8GA1UdIwQY
MBaAFKb4fPShW554IkVbOqivC17Topn3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHZoODlLRmJubmdpUlZzNnFLOExYdE9pbWZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8yODliMWQtMDhkZC00ZDUzLWIxMmQt
N2Q0MDI4YTFiZjU5LzEvSWJhUXhkcHRpR0tvd3ljNXlIVUNYN1NOVVNBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My8yODliMWQtMDhkZC00ZDUzLWIxMmQtN2Q0MDI4YTFiZjU5
LzEvcHZoODlLRmJubmdpUlZzNnFLOExYdE9pbWZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGUGCCsGAQUFBwEHAQH/BFYwVDBSBAIAATBMAwQCUVzAMAwD
BABRXNkDBAJRXNgDBANbbXADBAJeLrgDBAJeLsADBABeLs8DBAJeLtwDBAJeLvQw
DAMEArlj/AMEALlj/gMEArltqDANBgkqhkiG9w0BAQsFAAOCAQEAawvnq8VEjKpV
SxCq6BZQ/tE1KTlgKzjyHG9bgNOnLf8DBqutKtD1zpkdRjt3WA9o9kdJRiSVjm02
ptxnuIxw0pOWotONda0c/DIiGeqUjpVl3GPeQEXk4Vfha60ahIsV/aCosnv3zQHy
hRUqI7P75Ydmks+RR1aB/KYhLS+2pPh/d179vkYnnCq87TaPMumsUaVQf5BPv6Xg
+wJEl1V1JT7cTvqBXegdQz1a4sFWin71LEgCBt118iIefI/t3Xte7wx3z+BfQ8ty
A//+iA3dMknV0mB4FCMCXaO6NPJFGHhMCfOlm+l8tV7LLCeFdplb3vK20LfaO0Cu
xFILW6ASag==
-----END CERTIFICATE-----
Generated at Fri Apr 5 18:37:50 2024 by rpki-client on console-fra.rpki-client.org