Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/2uoP80smkA5VR50Zdc7xBGwIsCo.roa
File: 2uoP80smkA5VR50Zdc7xBGwIsCo.roa (raw, json)
Hash identifier: 4hwehPGLIQZCQfT3561/bbCDWZmzoSr4ajdeBoP6zNc=
Subject key identifier: DA:EA:0F:F3:4B:26:90:0E:55:47:9D:19:75:CE:F1:04:6C:08:B0:2A
Certificate issuer: /CN=47e94ccb7b601da0ca09469f60f653640fed8c1c
Certificate serial: 01856D13BE91F60382B2760B37B57BF4A95E
Authority key identifier: 47:E9:4C:CB:7B:60:1D:A0:CA:09:46:9F:60:F6:53:64:0F:ED:8C:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R-lMy3tgHaDKCUafYPZTZA_tjBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/2uoP80smkA5VR50Zdc7xBGwIsCo.roa
Signing time: Sun 01 Jan 2023 11:24:48 +0000
ROA not before: Sun 01 Jan 2023 11:24:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34444
IP address blocks: 213.180.225.0/24 maxlen: 24
213.180.226.0/24 maxlen: 24
213.180.240.0/21 maxlen: 24
84.22.64.0/19 maxlen: 19
84.22.68.0/24 maxlen: 24
84.22.69.0/24 maxlen: 24
84.22.77.0/24 maxlen: 24
84.22.78.0/24 maxlen: 24
84.22.80.0/24 maxlen: 24
84.22.84.0/24 maxlen: 24
84.22.85.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:13:be:91:f6:03:82:b2:76:0b:37:b5:7b:f4:a9:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47e94ccb7b601da0ca09469f60f653640fed8c1c
Validity
Not Before: Jan 1 11:24:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=daea0ff34b26900e55479d1975cef1046c08b02a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:4a:77:d6:a2:3e:b5:26:4a:6e:22:5a:ae:61:
6c:40:b4:73:71:4c:c1:03:33:61:04:59:90:5c:49:
85:62:48:b3:79:46:b9:a8:b8:38:02:aa:b7:7f:2a:
dc:14:15:47:33:00:b6:97:5f:3c:22:9c:85:5f:f3:
9e:9a:bd:d9:0b:00:1e:fb:14:bd:93:f9:55:15:11:
15:bc:17:ef:65:8b:73:b5:fa:3c:1b:74:d4:0e:25:
1c:bb:14:3f:ef:7d:e3:13:ab:13:60:d4:21:fb:d6:
46:85:07:9f:93:e7:20:71:3c:6b:b8:fb:5c:1f:f2:
e4:d2:b5:b2:45:3b:97:ce:24:e6:ea:84:4d:82:32:
4a:f6:99:49:48:85:e7:8d:64:ba:b3:4c:a4:ee:8f:
d2:94:60:b9:e0:f1:cb:25:ab:f2:97:de:8f:45:ee:
5e:9b:3c:c7:c9:01:5e:80:ca:b5:cd:8a:7b:f0:9e:
01:2a:bf:3b:29:dc:97:89:e3:e0:98:c1:88:5b:cc:
c0:4c:2c:60:ab:e3:4a:ff:29:14:ac:c2:d1:77:16:
ab:c5:cb:0a:ac:2e:8a:20:01:43:d1:a2:7d:2c:ca:
de:8f:c4:27:cd:19:65:91:47:12:0e:b5:39:38:49:
6d:72:52:b7:29:36:19:a2:b1:5b:b0:cb:60:c1:0b:
c8:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:EA:0F:F3:4B:26:90:0E:55:47:9D:19:75:CE:F1:04:6C:08:B0:2A
X509v3 Authority Key Identifier:
keyid:47:E9:4C:CB:7B:60:1D:A0:CA:09:46:9F:60:F6:53:64:0F:ED:8C:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-lMy3tgHaDKCUafYPZTZA_tjBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/2uoP80smkA5VR50Zdc7xBGwIsCo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.22.64.0/19
213.180.225.0-213.180.226.255
213.180.240.0/21
Signature Algorithm: sha256WithRSAEncryption
77:93:39:50:87:5f:4a:15:50:f4:71:c2:5a:13:81:83:e1:d5:
50:8a:f7:ee:6d:51:7c:6c:a0:d3:4c:fb:a1:8c:3d:11:f9:ec:
8a:a0:e4:e7:b6:f0:5e:c3:da:63:8b:55:a6:39:3a:a1:39:43:
70:80:d3:fa:d0:d1:b9:2c:af:b8:b0:66:bf:75:87:f0:42:d9:
c3:87:cc:0f:a8:9d:84:4d:3b:b8:79:0e:07:d8:3a:6c:c8:01:
f0:1b:03:02:d5:dd:3e:14:bf:ae:be:db:5c:98:18:15:ba:35:
a5:37:db:37:bf:1c:39:a7:f7:d4:f9:a8:b1:5b:03:0b:d8:15:
3a:e4:6f:f3:25:8c:ae:13:02:fe:28:82:4a:9d:58:45:ed:4b:
53:6b:86:12:73:85:11:fe:c4:94:11:d5:77:59:aa:86:22:36:
86:a5:e6:26:70:d0:b3:53:0f:ac:eb:37:ca:b0:01:89:2b:5f:
e9:6d:52:f0:cd:18:49:40:3c:b5:29:a5:8f:34:74:b0:08:63:
76:3f:2a:e9:7a:e3:8d:51:b8:bf:5a:32:38:79:47:dc:1d:92:
e1:82:4a:17:d0:c0:33:96:cb:63:15:77:7e:18:14:c1:01:8b:
62:99:cf:50:ef:07:0a:8f:29:11:1f:43:f7:98:77:c2:86:a3:
12:ee:7d:f8
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAYVtE76R9gOCsnYLN7V79KleMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3ZTk0Y2NiN2I2MDFkYTBjYTA5NDY5ZjYwZjY1MzY0MGZl
ZDhjMWMwHhcNMjMwMTAxMTEyNDQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYWVhMGZmMzRiMjY5MDBlNTU0NzlkMTk3NWNlZjEwNDZjMDhiMDJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlUp31qI+tSZKbiJarmFsQLRzcUzB
AzNhBFmQXEmFYkizeUa5qLg4Aqq3fyrcFBVHMwC2l188IpyFX/Oemr3ZCwAe+xS9
k/lVFREVvBfvZYtztfo8G3TUDiUcuxQ/733jE6sTYNQh+9ZGhQefk+cgcTxruPtc
H/Lk0rWyRTuXziTm6oRNgjJK9plJSIXnjWS6s0yk7o/SlGC54PHLJavyl96PRe5e
mzzHyQFegMq1zYp78J4BKr87KdyXiePgmMGIW8zATCxgq+NK/ykUrMLRdxarxcsK
rC6KIAFD0aJ9LMrej8QnzRllkUcSDrU5OEltclK3KTYZorFbsMtgwQvIvQIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFNrqD/NLJpAOVUedGXXO8QRsCLAqMB8GA1UdIwQY
MBaAFEfpTMt7YB2gyglGn2D2U2QP7YwcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUi1sTXkzdGdIYURLQ1VhZllQWlRaQV90akJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC85ZTI5ZGMtY2VjOS00OWUyLWJjZTQt
YmQ5MGEzZjA2ZTE2LzEvMnVvUDgwc21rQTVWUjUwWmRjN3hCR3dJc0NvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC85ZTI5ZGMtY2VjOS00OWUyLWJjZTQtYmQ5MGEzZjA2ZTE2
LzEvUi1sTXkzdGdIYURLQ1VhZllQWlRaQV90akJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQFVBZAMAwD
BADVtOEDBADVtOIDBAPVtPAwDQYJKoZIhvcNAQELBQADggEBAHeTOVCHX0oVUPRx
wloTgYPh1VCK9+5tUXxsoNNM+6GMPRH57Iqg5Oe28F7D2mOLVaY5OqE5Q3CA0/rQ
0bksr7iwZr91h/BC2cOHzA+onYRNO7h5DgfYOmzIAfAbAwLV3T4Uv66+21yYGBW6
NaU32ze/HDmn99T5qLFbAwvYFTrkb/MljK4TAv4ogkqdWEXtS1NrhhJzhRH+xJQR
1XdZqoYiNoal5iZw0LNTD6zrN8qwAYkrX+ltUvDNGElAPLUppY80dLAIY3Y/Kul6
441RuL9aMjh5R9wdkuGCShfQwDOWy2MVd34YFMEBi2KZz1DvBwqPKREfQ/eYd8KG
oxLuffg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:47 2024 by rpki-client on console-fra.rpki-client.org