Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/Os_CJaubP1HPzlWE1CWfjYMlWBs.roa
File: Os_CJaubP1HPzlWE1CWfjYMlWBs.roa (raw, json)
Hash identifier: tSBpSYpBB5NdLvoi5fIiPrJYASZOMs6cuTWZTJFXvGg=
Subject key identifier: 3A:CF:C2:25:AB:9B:3F:51:CF:CE:55:84:D4:25:9F:8D:83:25:58:1B
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 01897FD62165D7E5A5235E5BCCE72B947693
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/Os_CJaubP1HPzlWE1CWfjYMlWBs.roa
Signing time: Sat 22 Jul 2023 23:01:26 +0000
ROA not before: Sat 22 Jul 2023 23:01:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212552
IP address blocks: 212.90.102.0/23 maxlen: 24
185.215.244.0/23 maxlen: 24
103.75.196.0/22 maxlen: 24
193.36.84.0/23 maxlen: 24
82.115.16.0/24 maxlen: 24
82.115.24.0/22 maxlen: 24
82.115.20.0/23 maxlen: 24
46.249.100.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 25 Oct 2023 07:32:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:7f:d6:21:65:d7:e5:a5:23:5e:5b:cc:e7:2b:94:76:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jul 22 23:01:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3acfc225ab9b3f51cfce5584d4259f8d8325581b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c4:0a:79:a8:f7:68:5c:00:b5:c6:86:55:d3:
4b:fd:f1:40:0c:37:54:e2:b3:04:be:ee:3e:91:67:
f2:4c:43:8d:27:f3:92:39:cc:1a:6b:a1:ef:47:b7:
53:81:77:d4:2a:2e:5b:12:42:a8:02:d7:14:2c:bc:
45:7e:64:3c:70:e9:a8:d5:2e:e4:66:51:e2:52:80:
f2:75:7e:13:d0:f4:a1:88:18:04:6a:ed:f4:6b:1d:
48:18:1e:7c:3d:53:3a:b2:98:dc:92:9e:88:25:73:
75:8f:c8:99:46:66:e4:20:55:af:be:16:8e:76:24:
0f:f6:b4:c4:d7:92:43:4f:1a:1e:2c:16:a7:ab:21:
b4:c8:0f:7c:ff:ee:d8:80:21:d3:bc:d9:36:ec:1a:
0e:a9:a5:82:f3:b0:24:ba:46:ec:7a:2b:28:57:59:
ae:18:c4:6a:ae:2d:a0:91:23:07:db:74:e6:17:ad:
1c:21:d7:6d:db:44:6b:d8:4a:e0:78:de:88:2e:1a:
07:07:b0:7a:7d:38:56:17:a2:c2:82:ea:df:c5:15:
2b:d5:be:85:25:5a:7f:0d:d6:91:8a:39:3e:13:ab:
32:ad:3e:2b:bd:17:9d:ba:e0:e0:12:b2:72:f0:e4:
e5:de:9c:92:cd:af:26:8d:c8:7c:a6:fb:a9:49:da:
b8:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:CF:C2:25:AB:9B:3F:51:CF:CE:55:84:D4:25:9F:8D:83:25:58:1B
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/Os_CJaubP1HPzlWE1CWfjYMlWBs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.249.100.0/22
82.115.16.0/24
82.115.20.0/23
82.115.24.0/22
103.75.196.0/22
185.215.244.0/23
193.36.84.0/23
212.90.102.0/23
Signature Algorithm: sha256WithRSAEncryption
07:6d:77:45:01:b4:a8:0a:5e:ab:53:f1:6a:b0:0b:a2:21:b8:
e6:dd:7d:b0:f1:a4:05:c7:5b:f4:d6:c8:b6:c0:db:3d:20:b3:
df:bc:cb:04:7a:b4:f2:d0:d8:bd:1f:d3:00:92:6b:ce:10:29:
e6:19:ce:67:7f:ad:53:40:4c:f4:0c:0f:71:45:26:88:d5:59:
72:64:e2:48:40:9b:33:6c:59:8e:2a:38:79:a2:64:7c:d4:93:
2e:b0:ba:d2:96:03:dc:ca:41:04:3b:7a:fa:06:08:90:e4:e1:
4a:5e:de:75:75:c3:29:bd:f6:90:bd:cb:63:a2:f5:bc:81:93:
cc:4b:5f:f1:e5:d7:a3:70:b2:9f:b7:ba:cf:5a:9b:14:ed:ac:
e0:34:3f:2d:6f:fd:b3:16:d2:e2:f9:f0:2d:69:2d:b1:a2:81:
23:15:32:3c:63:f2:23:d5:95:de:fe:d8:4e:9a:56:13:fe:ed:
a3:79:72:33:68:a2:14:5f:c2:ea:f9:05:d7:ee:7e:36:21:44:
76:42:5e:c1:8d:1c:4a:01:13:6e:d2:d4:a6:ff:33:ea:09:d2:
d8:b1:cb:38:e3:f0:46:ba:13:01:65:8b:60:0b:d0:ad:71:68:
e2:e8:cb:b4:73:64:a4:25:a7:7f:93:84:96:b4:d4:52:a1:a3:
ff:18:27:f4
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgISAYl/1iFl1+WlI15bzOcrlHaTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYzNkYWExYjE0ODUwZjJlNjFjNTkyYjIxOTE5MTVhNWU2
NWE0NzgwHhcNMjMwNzIyMjMwMTI2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYWNmYzIyNWFiOWIzZjUxY2ZjZTU1ODRkNDI1OWY4ZDgzMjU1ODFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMQKeaj3aFwAtcaGVdNL/fFADDdU
4rMEvu4+kWfyTEONJ/OSOcwaa6HvR7dTgXfUKi5bEkKoAtcULLxFfmQ8cOmo1S7k
ZlHiUoDydX4T0PShiBgEau30ax1IGB58PVM6spjckp6IJXN1j8iZRmbkIFWvvhaO
diQP9rTE15JDTxoeLBanqyG0yA98/+7YgCHTvNk27BoOqaWC87AkukbseisoV1mu
GMRqri2gkSMH23TmF60cIddt20Rr2ErgeN6ILhoHB7B6fThWF6LCgurfxRUr1b6F
JVp/DdaRijk+E6syrT4rvReduuDgErJy8OTl3pySza8mjch8pvupSdq4KQIDAQAB
o4ICMzCCAi8wHQYDVR0OBBYEFDrPwiWrmz9Rz85VhNQln42DJVgbMB8GA1UdIwQY
MBaAFCrD2qGxSFDy5hxZKyGRkVpeZaR4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUt
ZmUwNjU5MTc2YTU2LzEvT3NfQ0phdWJQMUhQemxXRTFDV2ZqWU1sV0JzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUtZmUwNjU5MTc2YTU2
LzEvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQCLvlkAwQA
UnMQAwQBUnMUAwQCUnMYAwQCZ0vEAwQBudf0AwQBwSRUAwQB1FpmMA0GCSqGSIb3
DQEBCwUAA4IBAQAHbXdFAbSoCl6rU/FqsAuiIbjm3X2w8aQFx1v01si2wNs9ILPf
vMsEerTy0Ni9H9MAkmvOECnmGc5nf61TQEz0DA9xRSaI1VlyZOJIQJszbFmOKjh5
omR81JMusLrSlgPcykEEO3r6BgiQ5OFKXt51dcMpvfaQvctjovW8gZPMS1/x5dej
cLKft7rPWpsU7azgND8tb/2zFtLi+fAtaS2xooEjFTI8Y/Ij1ZXe/thOmlYT/u2j
eXIzaKIUX8Lq+QXX7n42IUR2Ql7BjRxKARNu0tSm/zPqCdLYscs44/BGuhMBZYtg
C9CtcWji6Mu0c2SkJad/k4SWtNRSoaP/GCf0
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:35 2024 by rpki-client on console-fra.rpki-client.org