Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/2b059a-325d-4385-811f-17e1a2569568/1/P7LVguO3ATsGR0SQ6GZg2vK6u5s.roa
File: P7LVguO3ATsGR0SQ6GZg2vK6u5s.roa (raw, json)
Hash identifier: niHgYvTbcI1qV3jo/MH7iwYtxyvsFm4VRGakpBDuQK0=
Subject key identifier: 3F:B2:D5:82:E3:B7:01:3B:06:47:44:90:E8:66:60:DA:F2:BA:BB:9B
Certificate issuer: /CN=c4ff935057c3bdbadbdf49f343562c5e30016044
Certificate serial: 018D995A1A0A9B0DA7522BA9FAAC9C4BA998
Authority key identifier: C4:FF:93:50:57:C3:BD:BA:DB:DF:49:F3:43:56:2C:5E:30:01:60:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xP-TUFfDvbrb30nzQ1YsXjABYEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/2b059a-325d-4385-811f-17e1a2569568/1/P7LVguO3ATsGR0SQ6GZg2vK6u5s.roa
Signing time: Sun 11 Feb 2024 18:07:15 +0000
ROA not before: Sun 11 Feb 2024 18:07:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41872
IP address blocks: 37.110.200.0/21 maxlen: 24
37.110.200.0/22 maxlen: 22
37.110.205.0/24 maxlen: 24
37.110.206.0/24 maxlen: 24
37.209.176.0/20 maxlen: 20
81.92.96.0/20 maxlen: 20
91.190.0.0/19 maxlen: 19
94.100.144.0/20 maxlen: 20
94.198.248.0/21 maxlen: 22
185.161.20.0/22 maxlen: 22
212.35.0.0/19 maxlen: 19
2a02:6500::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 01 Jan 2025 15:48:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:99:5a:1a:0a:9b:0d:a7:52:2b:a9:fa:ac:9c:4b:a9:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ff935057c3bdbadbdf49f343562c5e30016044
Validity
Not Before: Feb 11 18:07:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3fb2d582e3b7013b06474490e86660daf2babb9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1b:3c:b0:a5:d0:31:b3:b3:f4:76:5b:fe:64:
12:2e:46:1d:5f:25:dc:07:50:4f:c6:b7:d2:ee:44:
6f:73:f0:c3:45:06:87:c9:e3:b5:72:01:1f:13:1c:
27:30:3a:7f:6e:80:67:03:25:5f:af:50:36:67:e8:
80:5e:e4:d2:d1:08:86:14:1c:53:e9:1c:59:51:bf:
59:c2:ac:a7:9b:29:26:e2:45:b5:da:4b:dc:3c:ea:
48:cd:78:a0:ea:4a:e8:0b:dd:ef:66:94:c2:55:08:
95:58:96:2a:7b:16:1d:76:a5:60:9c:58:24:e3:bd:
55:8f:a8:fe:b2:6a:ed:93:e6:dc:bc:51:16:d6:66:
52:6a:36:80:cf:3b:26:2a:e8:ad:99:dd:bd:3d:90:
d4:f6:73:72:87:0e:30:09:3a:19:46:4b:28:57:61:
6c:fa:df:f0:69:e5:31:a2:93:56:d3:e7:12:fd:2e:
a9:9e:d3:9d:9c:ee:9d:27:d6:89:55:be:84:1b:a6:
56:ec:ad:e7:f6:50:be:f8:73:a0:07:7e:5b:a9:7c:
2b:e5:89:ab:6b:8c:55:56:97:38:76:07:7f:2b:ae:
49:18:76:46:b2:fd:56:dd:69:79:34:be:8e:19:04:
6f:12:d0:a1:3b:e1:e7:15:f1:ce:2a:62:3e:1b:95:
78:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:B2:D5:82:E3:B7:01:3B:06:47:44:90:E8:66:60:DA:F2:BA:BB:9B
X509v3 Authority Key Identifier:
keyid:C4:FF:93:50:57:C3:BD:BA:DB:DF:49:F3:43:56:2C:5E:30:01:60:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xP-TUFfDvbrb30nzQ1YsXjABYEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2b059a-325d-4385-811f-17e1a2569568/1/P7LVguO3ATsGR0SQ6GZg2vK6u5s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2b059a-325d-4385-811f-17e1a2569568/1/xP-TUFfDvbrb30nzQ1YsXjABYEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.110.200.0/21
37.209.176.0/20
81.92.96.0/20
91.190.0.0/19
94.100.144.0/20
94.198.248.0/21
185.161.20.0/22
212.35.0.0/19
IPv6:
2a02:6500::/32
Signature Algorithm: sha256WithRSAEncryption
92:29:01:60:a6:b0:bd:e6:c5:67:f3:f1:30:01:cc:be:f8:82:
9f:fe:1a:2a:e2:3d:6f:94:93:f2:42:a9:b4:d1:d8:b0:ca:26:
64:c2:7e:4b:02:4e:3a:78:7d:d8:58:22:e8:2c:cf:57:0a:95:
d5:35:27:b2:97:7a:2f:48:d3:86:1b:32:16:ba:8d:1c:e7:6b:
27:0f:2a:22:88:51:3c:79:72:0b:db:5c:9e:da:ff:92:3d:fc:
c0:e0:dd:17:9c:70:6d:1c:45:0b:02:9c:bb:ec:ee:95:9f:f3:
72:7a:a3:7f:2b:8f:85:5e:8e:e8:43:92:37:2c:8d:6a:54:22:
5d:7b:9e:3c:8d:09:47:33:1a:cc:95:68:c2:d7:f8:7f:e5:88:
58:8c:90:3d:65:63:f9:54:62:3f:01:8c:64:ff:ad:b6:53:56:
79:36:76:67:43:5f:86:b2:9f:81:d5:df:1e:56:5d:0c:a2:a9:
43:67:ce:15:10:78:89:d3:70:59:d7:f1:98:59:77:6e:08:64:
10:98:c3:7d:6e:6a:21:c7:c3:f9:d1:a0:e2:22:44:2a:da:18:
8b:e5:e5:a2:ad:26:c6:f0:fa:ce:10:7c:9c:17:22:89:2a:72:
3c:66:85:30:45:17:08:3f:96:10:47:3e:c6:04:b7:b0:6b:78:
7d:f5:da:3d
-----BEGIN CERTIFICATE-----
MIIFNjCCBB6gAwIBAgISAY2ZWhoKmw2nUiup+qycS6mYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0ZmY5MzUwNTdjM2JkYmFkYmRmNDlmMzQzNTYyYzVlMzAw
MTYwNDQwHhcNMjQwMjExMTgwNzE1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZmIyZDU4MmUzYjcwMTNiMDY0NzQ0OTBlODY2NjBkYWYyYmFiYjliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRs8sKXQMbOz9HZb/mQSLkYdXyXc
B1BPxrfS7kRvc/DDRQaHyeO1cgEfExwnMDp/boBnAyVfr1A2Z+iAXuTS0QiGFBxT
6RxZUb9Zwqynmykm4kW12kvcPOpIzXig6kroC93vZpTCVQiVWJYqexYddqVgnFgk
471Vj6j+smrtk+bcvFEW1mZSajaAzzsmKuitmd29PZDU9nNyhw4wCToZRksoV2Fs
+t/waeUxopNW0+cS/S6pntOdnO6dJ9aJVb6EG6ZW7K3n9lC++HOgB35bqXwr5Ymr
a4xVVpc4dgd/K65JGHZGsv1W3Wl5NL6OGQRvEtChO+HnFfHOKmI+G5V4SwIDAQAB
o4ICQjCCAj4wHQYDVR0OBBYEFD+y1YLjtwE7BkdEkOhmYNryurubMB8GA1UdIwQY
MBaAFMT/k1BXw726299J80NWLF4wAWBEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFAtVFVGZkR2YnJiMzBuelExWXNYakFCWUVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC8yYjA1OWEtMzI1ZC00Mzg1LTgxMWYt
MTdlMWEyNTY5NTY4LzEvUDdMVmd1TzNBVHNHUjBTUTZHWmcydks2dTVzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC8yYjA1OWEtMzI1ZC00Mzg1LTgxMWYtMTdlMWEyNTY5NTY4
LzEveFAtVFVGZkR2YnJiMzBuelExWXNYakFCWUVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFgGCCsGAQUFBwEHAQH/BEkwRzA2BAIAATAwAwQDJW7IAwQE
JdGwAwQEUVxgAwQFW74AAwQEXmSQAwQDXsb4AwQCuaEUAwQF1CMAMA0EAgACMAcD
BQAqAmUAMA0GCSqGSIb3DQEBCwUAA4IBAQCSKQFgprC95sVn8/EwAcy++IKf/hoq
4j1vlJPyQqm00diwyiZkwn5LAk46eH3YWCLoLM9XCpXVNSeyl3ovSNOGGzIWuo0c
52snDyoiiFE8eXIL21ye2v+SPfzA4N0XnHBtHEULApy77O6Vn/NyeqN/K4+FXo7o
Q5I3LI1qVCJde548jQlHMxrMlWjC1/h/5YhYjJA9ZWP5VGI/AYxk/622U1Z5NnZn
Q1+Gsp+B1d8eVl0MoqlDZ84VEHiJ03BZ1/GYWXduCGQQmMN9bmohx8P50aDiIkQq
2hiL5eWirSbG8PrOEHycFyKJKnI8ZoUwRRcIP5YQRz7GBLewa3h99do9
-----END CERTIFICATE-----
Generated at Tue Apr 22 03:18:42 2025 by rpki-client