Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1b8f2a-0abd-4ffb-82f6-ef3bbb05655e/1/hUpPCec93Yb-yDBJuRaZY59CY4U.roa
File: hUpPCec93Yb-yDBJuRaZY59CY4U.roa (raw, json)
Hash identifier: SMUjTjnfuyJ40sP4bYFt7ZAxKV1p1UlNWgSyLKdpxsM=
Subject key identifier: 85:4A:4F:09:E7:3D:DD:86:FE:C8:30:49:B9:16:99:63:9F:42:63:85
Certificate issuer: /CN=9b7d24416aa8a478b3ed36e2e65855d42259d9ee
Certificate serial: 01856E2FBD818AB92F58F1A2B48BD378C85C
Authority key identifier: 9B:7D:24:41:6A:A8:A4:78:B3:ED:36:E2:E6:58:55:D4:22:59:D9:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m30kQWqopHiz7Tbi5lhV1CJZ2e4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/1b8f2a-0abd-4ffb-82f6-ef3bbb05655e/1/hUpPCec93Yb-yDBJuRaZY59CY4U.roa
Signing time: Sun 01 Jan 2023 16:35:00 +0000
ROA not before: Sun 01 Jan 2023 16:35:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12843
IP address blocks: 37.16.64.0/21 maxlen: 21
109.109.200.0/21 maxlen: 21
46.167.16.0/21 maxlen: 21
88.214.60.0/22 maxlen: 22
213.144.0.0/19 maxlen: 19
93.189.152.0/21 maxlen: 21
109.109.201.200/30 maxlen: 30
185.106.0.0/21 maxlen: 21
185.9.176.0/22 maxlen: 22
37.228.160.0/20 maxlen: 20
46.232.224.0/21 maxlen: 21
85.115.0.0/19 maxlen: 19
81.26.160.0/20 maxlen: 20
2a02:788:1::18/128 maxlen: 128
2a02:788::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:2f:bd:81:8a:b9:2f:58:f1:a2:b4:8b:d3:78:c8:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b7d24416aa8a478b3ed36e2e65855d42259d9ee
Validity
Not Before: Jan 1 16:35:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=854a4f09e73ddd86fec83049b91699639f426385
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:8c:45:aa:5c:b5:a7:7b:43:1e:27:23:b8:0b:
fe:ac:2d:ca:48:d1:cb:bc:d9:5a:de:12:2b:95:71:
be:b5:ee:12:88:88:99:65:88:75:69:ec:33:fc:0a:
93:40:72:5d:4b:22:c4:db:15:de:d8:9f:28:67:18:
d2:3f:51:80:e1:0f:88:20:2c:2f:27:4d:4d:26:2c:
1e:ad:09:ca:a2:b6:f7:3c:3f:0b:2c:f6:51:e4:a6:
ed:17:5e:c8:05:13:5a:c1:9a:85:dd:21:75:f9:ef:
c6:03:08:ed:0f:5e:0b:cb:5a:a9:5c:69:b0:74:c7:
75:49:99:ec:7e:f0:38:79:34:46:67:67:f7:49:0b:
db:64:97:25:ee:3d:d7:5e:2b:8c:92:a3:f2:40:37:
0c:e8:c6:e2:95:c4:ab:a8:bb:e3:44:fc:64:24:11:
6e:50:a7:fd:02:6f:66:ed:be:5a:05:0d:cf:ca:77:
69:db:b8:87:3d:47:4b:16:2f:52:18:81:35:55:c2:
df:57:ab:5d:2d:8b:91:f4:40:56:59:1e:68:de:85:
d1:06:00:cd:39:5a:04:2d:1b:b6:a3:cc:a9:72:e6:
14:19:c4:48:2a:3d:5a:9d:61:ee:21:69:76:58:79:
74:8c:23:e0:47:0f:94:b9:49:a1:1a:9e:3e:99:28:
a8:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:4A:4F:09:E7:3D:DD:86:FE:C8:30:49:B9:16:99:63:9F:42:63:85
X509v3 Authority Key Identifier:
keyid:9B:7D:24:41:6A:A8:A4:78:B3:ED:36:E2:E6:58:55:D4:22:59:D9:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m30kQWqopHiz7Tbi5lhV1CJZ2e4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1b8f2a-0abd-4ffb-82f6-ef3bbb05655e/1/hUpPCec93Yb-yDBJuRaZY59CY4U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1b8f2a-0abd-4ffb-82f6-ef3bbb05655e/1/m30kQWqopHiz7Tbi5lhV1CJZ2e4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.16.64.0/21
37.228.160.0/20
46.167.16.0/21
46.232.224.0/21
81.26.160.0/20
85.115.0.0/19
88.214.60.0/22
93.189.152.0/21
109.109.200.0/21
185.9.176.0/22
185.106.0.0/21
213.144.0.0/19
IPv6:
2a02:788::/29
Signature Algorithm: sha256WithRSAEncryption
05:c8:cd:68:5b:47:ee:75:6a:f4:16:1b:e9:b9:6b:39:af:b1:
b0:a4:4c:ba:fd:ee:2d:dd:69:1f:79:a6:fd:0a:ad:2e:9f:dd:
f7:41:9c:49:52:10:69:5f:e1:a3:91:82:0d:4e:7e:f4:9c:70:
a4:2e:63:db:6f:20:4a:92:87:68:76:4e:c3:46:37:83:0a:8b:
9c:ee:7c:a8:98:63:6e:57:c5:28:78:03:86:82:56:51:e8:02:
01:78:26:7f:22:d5:62:88:b3:60:14:f5:9e:77:f4:92:d3:5f:
60:49:5d:60:80:91:63:67:80:39:97:7b:c7:d7:3b:fb:8e:e7:
8a:60:c2:66:1b:fc:fe:ed:dc:eb:ec:4d:56:85:9b:00:80:18:
e4:8a:01:71:f5:e6:a5:d6:2b:ab:0a:c6:f4:b6:7b:75:90:04:
be:da:a7:52:f1:ca:d3:f8:29:ad:08:c7:28:37:cb:e7:fd:b5:
c2:99:45:05:4d:82:6a:0b:fa:ee:17:d0:3b:33:e7:1b:da:60:
62:83:bf:64:e6:b8:bc:29:0e:13:52:ad:32:98:d9:45:97:30:
95:a8:3d:94:f4:8d:2c:d0:13:09:66:d6:6f:54:8f:39:ed:a8:
ab:a9:46:64:7e:8a:ad:17:e1:66:72:a9:66:c2:20:21:8e:d1:
f3:a6:cb:07
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgISAYVuL72BirkvWPGitIvTeMhcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliN2QyNDQxNmFhOGE0NzhiM2VkMzZlMmU2NTg1NWQ0MjI1
OWQ5ZWUwHhcNMjMwMTAxMTYzNTAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NTRhNGYwOWU3M2RkZDg2ZmVjODMwNDliOTE2OTk2MzlmNDI2Mzg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0IxFqly1p3tDHicjuAv+rC3KSNHL
vNla3hIrlXG+te4SiIiZZYh1aewz/AqTQHJdSyLE2xXe2J8oZxjSP1GA4Q+IICwv
J01NJiwerQnKorb3PD8LLPZR5KbtF17IBRNawZqF3SF1+e/GAwjtD14Ly1qpXGmw
dMd1SZnsfvA4eTRGZ2f3SQvbZJcl7j3XXiuMkqPyQDcM6MbilcSrqLvjRPxkJBFu
UKf9Am9m7b5aBQ3Pyndp27iHPUdLFi9SGIE1VcLfV6tdLYuR9EBWWR5o3oXRBgDN
OVoELRu2o8ypcuYUGcRIKj1anWHuIWl2WHl0jCPgRw+UuUmhGp4+mSioXQIDAQAB
o4ICWjCCAlYwHQYDVR0OBBYEFIVKTwnnPd2G/sgwSbkWmWOfQmOFMB8GA1UdIwQY
MBaAFJt9JEFqqKR4s+024uZYVdQiWdnuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTMwa1FXcW9wSGl6N1RiaTVsaFYxQ0paMmU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8xYjhmMmEtMGFiZC00ZmZiLTgyZjYt
ZWYzYmJiMDU2NTVlLzEvaFVwUENlYzkzWWIteURCSnVSYVpZNTlDWTRVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi8xYjhmMmEtMGFiZC00ZmZiLTgyZjYtZWYzYmJiMDU2NTVl
LzEvbTMwa1FXcW9wSGl6N1RiaTVsaFYxQ0paMmU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHAGCCsGAQUFBwEHAQH/BGEwXzBOBAIAATBIAwQDJRBAAwQE
JeSgAwQDLqcQAwQDLujgAwQEURqgAwQFVXMAAwQCWNY8AwQDXb2YAwQDbW3IAwQC
uQmwAwQDuWoAAwQF1ZAAMA0EAgACMAcDBQMqAgeIMA0GCSqGSIb3DQEBCwUAA4IB
AQAFyM1oW0fudWr0FhvpuWs5r7GwpEy6/e4t3Wkfeab9Cq0un933QZxJUhBpX+Gj
kYINTn70nHCkLmPbbyBKkododk7DRjeDCouc7nyomGNuV8UoeAOGglZR6AIBeCZ/
ItViiLNgFPWed/SS019gSV1ggJFjZ4A5l3vH1zv7jueKYMJmG/z+7dzr7E1WhZsA
gBjkigFx9eal1iurCsb0tnt1kAS+2qdS8crT+CmtCMcoN8vn/bXCmUUFTYJqC/ru
F9A7M+cb2mBig79k5ri8KQ4TUq0ymNlFlzCVqD2U9I0s0BMJZtZvVI857airqUZk
foqtF+FmcqlmwiAhjtHzpssH
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:40 2024 by rpki-client on console-fra.rpki-client.org