Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/8357e2-a106-44ae-b866-8fa7b4c53073/1/AKjCSLal3lOal0I8aZYL_eJoP7E.roa
File: AKjCSLal3lOal0I8aZYL_eJoP7E.roa (raw, json)
Hash identifier: 1WHveHtLLqGe9Mc/KCpQcrgcCL2U3g3e24qikT8wvjM=
Subject key identifier: 00:A8:C2:48:B6:A5:DE:53:9A:97:42:3C:69:96:0B:FD:E2:68:3F:B1
Certificate issuer: /CN=17dd9c23af69ec2cdb6fe2b9936eb494cfd1621f
Certificate serial: 018C1784BF6727F64A8400E67CE0999A523F
Authority key identifier: 17:DD:9C:23:AF:69:EC:2C:DB:6F:E2:B9:93:6E:B4:94:CF:D1:62:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F92cI69p7Czbb-K5k260lM_RYh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/8357e2-a106-44ae-b866-8fa7b4c53073/1/AKjCSLal3lOal0I8aZYL_eJoP7E.roa
Signing time: Tue 28 Nov 2023 20:00:24 +0000
ROA not before: Tue 28 Nov 2023 20:00:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 157.167.226.0/24 maxlen: 24
157.167.225.0/24 maxlen: 24
157.167.224.0/24 maxlen: 24
157.167.228.0/24 maxlen: 24
157.167.227.0/24 maxlen: 24
157.167.232.0/24 maxlen: 24
157.167.231.0/24 maxlen: 24
157.167.230.0/24 maxlen: 24
157.167.229.0/24 maxlen: 24
157.167.233.0/24 maxlen: 24
157.167.240.0/24 maxlen: 24
157.167.235.0/24 maxlen: 24
157.167.234.0/24 maxlen: 24
157.167.239.0/24 maxlen: 24
157.167.238.0/24 maxlen: 24
157.167.237.0/24 maxlen: 24
157.167.236.0/24 maxlen: 24
157.167.152.0/24 maxlen: 24
157.167.156.0/24 maxlen: 24
157.167.155.0/24 maxlen: 24
157.167.153.0/24 maxlen: 24
157.167.184.0/21 maxlen: 21
157.167.136.0/21 maxlen: 21
157.167.134.0/24 maxlen: 24
157.167.135.0/24 maxlen: 24
157.167.144.0/21 maxlen: 21
85.115.38.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:30:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:17:84:bf:67:27:f6:4a:84:00:e6:7c:e0:99:9a:52:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17dd9c23af69ec2cdb6fe2b9936eb494cfd1621f
Validity
Not Before: Nov 28 20:00:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=00a8c248b6a5de539a97423c69960bfde2683fb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:de:4b:cf:a7:e1:e2:cb:f2:ce:59:43:81:6e:
e5:8c:b4:57:5c:b5:22:d5:23:63:af:25:fa:10:97:
60:d1:71:94:37:e3:aa:8d:23:88:4e:6e:07:eb:a8:
56:f3:7f:af:b3:46:63:4a:cd:c2:fd:4b:78:b6:95:
6b:07:5f:ce:39:f8:97:41:cf:66:02:53:26:ab:57:
0c:9a:b2:ec:d9:5c:2c:a5:03:ce:da:a2:dd:ce:d7:
04:fa:b4:89:73:3f:97:d5:4e:d4:8c:c0:c8:cc:d3:
55:06:77:a2:f1:8e:6f:03:33:81:70:99:92:0c:f0:
79:ca:5f:bc:b2:18:5b:2d:4e:c2:7c:fe:1d:ad:6d:
8a:e3:9c:5b:13:c4:e9:7d:97:88:df:8d:22:25:2f:
72:1d:a1:8f:b1:a4:9b:8a:e3:25:3d:3e:1d:95:a5:
13:84:70:3f:5c:49:6b:28:1f:d0:4c:3b:62:3a:df:
58:0f:61:e5:a9:0a:d9:77:e0:03:9f:4d:56:63:98:
6c:0c:ad:a7:c3:2c:f5:78:7a:f8:51:57:58:96:b4:
c7:06:9e:21:1b:53:10:5d:7f:0a:f4:34:03:d7:6d:
c6:8f:73:fa:c0:bc:78:66:1f:77:37:b3:35:3a:ac:
f6:13:c6:b2:21:1c:4f:12:52:7d:5b:f1:8d:b8:aa:
3e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:A8:C2:48:B6:A5:DE:53:9A:97:42:3C:69:96:0B:FD:E2:68:3F:B1
X509v3 Authority Key Identifier:
keyid:17:DD:9C:23:AF:69:EC:2C:DB:6F:E2:B9:93:6E:B4:94:CF:D1:62:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F92cI69p7Czbb-K5k260lM_RYh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/8357e2-a106-44ae-b866-8fa7b4c53073/1/AKjCSLal3lOal0I8aZYL_eJoP7E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/8357e2-a106-44ae-b866-8fa7b4c53073/1/F92cI69p7Czbb-K5k260lM_RYh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.115.38.0/24
157.167.134.0-157.167.153.255
157.167.155.0-157.167.156.255
157.167.184.0/21
157.167.224.0-157.167.240.255
Signature Algorithm: sha256WithRSAEncryption
2e:2f:33:e1:e3:34:1f:36:98:82:d9:66:ae:ed:6f:fc:6b:14:
02:ef:b5:9f:86:7f:ff:66:85:64:8f:09:b5:85:70:68:66:c9:
d5:ea:b9:d5:27:93:98:d9:9d:99:ac:6a:80:5d:b9:8b:bb:f8:
34:d4:ab:83:a0:46:96:f9:68:db:36:3b:fd:b4:ce:b7:f2:b9:
ad:fe:b6:96:a2:9a:91:4f:53:63:87:af:0d:68:29:4f:ce:31:
4b:3d:c7:1b:e3:51:df:05:44:4a:8d:89:2c:78:be:88:9f:55:
37:1d:40:81:67:42:6f:d2:53:a5:61:cf:4c:a2:bd:09:a3:08:
f3:20:74:36:9b:5f:b8:75:96:c0:52:1a:4e:66:9c:da:ab:a2:
0b:79:b4:e0:0a:7b:25:fb:ef:ed:49:4c:39:37:97:65:35:bd:
91:21:d0:61:0d:4b:ff:bf:47:93:69:a4:5a:74:9e:be:88:10:
cf:55:09:02:7b:56:bc:14:ca:84:70:1d:7c:21:97:e9:ca:2e:
e6:8a:4c:91:8a:fb:2f:84:5b:f4:16:b6:6d:20:02:d6:e1:77:
c7:48:ae:84:a2:68:76:8b:15:e2:13:2d:8c:9b:b4:0f:64:c6:
32:2a:c3:cf:f6:a7:15:d7:ef:36:5b:f1:fe:c6:df:87:9f:4e:
5c:4a:9f:f3
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgISAYwXhL9nJ/ZKhADmfOCZmlI/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3ZGQ5YzIzYWY2OWVjMmNkYjZmZTJiOTkzNmViNDk0Y2Zk
MTYyMWYwHhcNMjMxMTI4MjAwMDI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMGE4YzI0OGI2YTVkZTUzOWE5NzQyM2M2OTk2MGJmZGUyNjgzZmIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAid5Lz6fh4svyzllDgW7ljLRXXLUi
1SNjryX6EJdg0XGUN+OqjSOITm4H66hW83+vs0ZjSs3C/Ut4tpVrB1/OOfiXQc9m
AlMmq1cMmrLs2VwspQPO2qLdztcE+rSJcz+X1U7UjMDIzNNVBnei8Y5vAzOBcJmS
DPB5yl+8shhbLU7CfP4drW2K45xbE8TpfZeI340iJS9yHaGPsaSbiuMlPT4dlaUT
hHA/XElrKB/QTDtiOt9YD2HlqQrZd+ADn01WY5hsDK2nwyz1eHr4UVdYlrTHBp4h
G1MQXX8K9DQD123Gj3P6wLx4Zh93N7M1Oqz2E8ayIRxPElJ9W/GNuKo+nQIDAQAB
o4ICOTCCAjUwHQYDVR0OBBYEFACowki2pd5TmpdCPGmWC/3iaD+xMB8GA1UdIwQY
MBaAFBfdnCOvaews22/iuZNutJTP0WIfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjkyY0k2OXA3Q3piYi1LNWsyNjBsTV9SWWg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni84MzU3ZTItYTEwNi00NGFlLWI4NjYt
OGZhN2I0YzUzMDczLzEvQUtqQ1NMYWwzbE9hbDBJOGFaWUxfZUpvUDdFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni84MzU3ZTItYTEwNi00NGFlLWI4NjYtOGZhN2I0YzUzMDcz
LzEvRjkyY0k2OXA3Q3piYi1LNWsyNjBsTV9SWWg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQAVXMmMAwD
BAGdp4YDBAGdp5gwDAMEAJ2nmwMEAJ2nnAMEA52nuDAMAwQFnafgAwQAnafwMA0G
CSqGSIb3DQEBCwUAA4IBAQAuLzPh4zQfNpiC2Wau7W/8axQC77Wfhn//ZoVkjwm1
hXBoZsnV6rnVJ5OY2Z2ZrGqAXbmLu/g01KuDoEaW+WjbNjv9tM638rmt/raWopqR
T1Njh68NaClPzjFLPccb41HfBURKjYkseL6In1U3HUCBZ0Jv0lOlYc9Mor0Jowjz
IHQ2m1+4dZbAUhpOZpzaq6ILebTgCnsl++/tSUw5N5dlNb2RIdBhDUv/v0eTaaRa
dJ6+iBDPVQkCe1a8FMqEcB18IZfpyi7mikyRivsvhFv0FrZtIALW4XfHSK6Eomh2
ixXiEy2Mm7QPZMYyKsPP9qcV1+82W/H+xt+Hn05cSp/z
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:27 2024 by rpki-client on console-ams.rpki-client.org