Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/6MRUp1Y0LzBb9ruzT1SZehvPjHQ.roa
File: 6MRUp1Y0LzBb9ruzT1SZehvPjHQ.roa (raw, json)
Hash identifier: JT7B0Q7ZO3ZucSRzbsyj+S3sFJwhqs3KI9g4WWihFic=
Subject key identifier: E8:C4:54:A7:56:34:2F:30:5B:F6:BB:B3:4F:54:99:7A:1B:CF:8C:74
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0192B8E6F71FACAC1CC26390174971084182
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/6MRUp1Y0LzBb9ruzT1SZehvPjHQ.roa
Signing time: Wed 23 Oct 2024 10:23:17 +0000
ROA not before: Wed 23 Oct 2024 10:23:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215439
IP address blocks: 31.13.208.0/24 maxlen: 24
45.66.228.0/24 maxlen: 24
45.133.251.0/24 maxlen: 24
84.21.173.0/24 maxlen: 24
87.120.165.0/24 maxlen: 24
171.22.31.0/24 maxlen: 24
185.246.223.0/24 maxlen: 24
193.222.99.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 07 Nov 2024 07:04:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:b8:e6:f7:1f:ac:ac:1c:c2:63:90:17:49:71:08:41:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 23 10:23:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e8c454a756342f305bf6bbb34f54997a1bcf8c74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d1:f1:c6:74:ad:9b:ed:e5:4c:59:5d:1e:6a:
55:43:ff:09:4e:aa:24:43:ab:c0:c4:2f:25:0d:e4:
04:17:52:a6:cd:b3:0c:88:9d:7f:83:8f:b5:3e:47:
ba:8e:1a:60:68:5f:64:8b:40:c4:7e:e9:0a:4e:7e:
1e:94:82:ec:65:b2:e3:36:eb:90:31:92:d5:63:50:
e3:8f:c6:0d:5f:05:3f:16:15:72:42:c9:63:cd:ec:
77:80:92:3e:50:d0:23:15:05:7f:38:46:6d:e3:f0:
bd:a0:9a:d7:2b:61:fb:d7:7d:b5:d7:c8:a3:65:00:
87:35:9b:b5:d1:99:1c:ec:43:40:8d:b9:91:8e:1e:
81:89:b5:21:ed:c8:5a:b3:0a:f2:90:64:14:2a:75:
2c:a2:54:27:0d:b0:d0:46:83:61:9b:e2:fd:d0:13:
a2:87:9a:8e:3c:c1:73:71:70:90:ea:a6:ba:03:18:
d7:ec:a3:72:9d:6e:a9:86:fe:da:da:42:28:27:73:
af:5f:cc:8c:f3:20:e7:bf:fb:1d:15:c0:c1:4d:20:
8a:be:3a:69:b7:f0:f9:8f:2e:39:5b:07:bf:da:78:
5f:e3:93:96:e5:e6:27:5b:ee:e2:8a:28:cb:30:4b:
29:d2:33:8d:f1:06:48:56:b7:3f:b3:90:20:67:1d:
b0:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:C4:54:A7:56:34:2F:30:5B:F6:BB:B3:4F:54:99:7A:1B:CF:8C:74
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/6MRUp1Y0LzBb9ruzT1SZehvPjHQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.13.208.0/24
45.66.228.0/24
45.133.251.0/24
84.21.173.0/24
87.120.165.0/24
171.22.31.0/24
185.246.223.0/24
193.222.99.0/24
Signature Algorithm: sha256WithRSAEncryption
50:80:94:99:fa:71:17:9d:b6:b4:d9:13:08:76:55:a0:e1:4f:
38:ac:97:e2:f3:8e:b7:d9:77:cb:a6:42:9a:0e:13:22:d1:5c:
fa:7d:4e:51:28:71:6b:9f:f4:3c:a0:24:82:01:96:ad:e1:ca:
33:c4:af:21:b6:53:fb:34:a3:01:66:26:8c:c9:7a:90:2f:5d:
cd:64:c5:40:b8:dc:c8:0c:47:8f:bd:e6:fa:d7:42:44:f4:ec:
46:92:fd:56:80:04:04:d0:92:db:3a:53:e2:d1:34:fa:9e:53:
c5:e4:d7:a2:dc:33:81:17:d2:e3:5b:9a:00:f5:8a:93:4a:73:
0b:d7:e2:64:e6:f6:78:fb:e5:c6:6b:6f:b8:e6:0e:a0:f6:c7:
b5:9f:b7:8a:7b:49:b8:00:c4:a0:e9:fb:cb:a9:7d:eb:e0:49:
aa:37:21:a6:0f:56:e2:07:26:86:0c:9c:cb:6b:aa:ae:7f:8e:
b2:75:f2:f0:b1:b1:ff:98:9a:f3:b4:88:fd:81:c0:fc:b0:2b:
c2:ee:71:4c:4c:76:40:a7:1d:38:f4:10:82:5b:82:69:0f:7a:
66:f4:d9:3e:e8:70:b5:49:af:68:cb:17:36:f3:b9:83:a9:43:
cd:34:d9:bd:af:b6:1b:a5:16:56:f2:90:f8:ad:75:39:5e:2b:
e8:f1:97:c5
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgISAZK45vcfrKwcwmOQF0lxCEGCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjQxMDIzMTAyMzE3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOGM0NTRhNzU2MzQyZjMwNWJmNmJiYjM0ZjU0OTk3YTFiY2Y4Yzc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9HxxnStm+3lTFldHmpVQ/8JTqok
Q6vAxC8lDeQEF1KmzbMMiJ1/g4+1Pke6jhpgaF9ki0DEfukKTn4elILsZbLjNuuQ
MZLVY1Djj8YNXwU/FhVyQsljzex3gJI+UNAjFQV/OEZt4/C9oJrXK2H7132118ij
ZQCHNZu10Zkc7ENAjbmRjh6BibUh7chaswrykGQUKnUsolQnDbDQRoNhm+L90BOi
h5qOPMFzcXCQ6qa6AxjX7KNynW6phv7a2kIoJ3OvX8yM8yDnv/sdFcDBTSCKvjpp
t/D5jy45Wwe/2nhf45OW5eYnW+7iiijLMEsp0jON8QZIVrc/s5AgZx2wgQIDAQAB
o4ICMzCCAi8wHQYDVR0OBBYEFOjEVKdWNC8wW/a7s09UmXobz4x0MB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvNk1SVXAxWTBMekJiOXJ1elQxU1plaHZQakhRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQAHw3QAwQA
LULkAwQALYX7AwQAVBWtAwQAV3ilAwQAqxYfAwQAufbfAwQAwd5jMA0GCSqGSIb3
DQEBCwUAA4IBAQBQgJSZ+nEXnba02RMIdlWg4U84rJfi84632XfLpkKaDhMi0Vz6
fU5RKHFrn/Q8oCSCAZat4cozxK8htlP7NKMBZiaMyXqQL13NZMVAuNzIDEePveb6
10JE9OxGkv1WgAQE0JLbOlPi0TT6nlPF5Nei3DOBF9LjW5oA9YqTSnML1+Jk5vZ4
++XGa2+45g6g9se1n7eKe0m4AMSg6fvLqX3r4EmqNyGmD1biByaGDJzLa6quf46y
dfLwsbH/mJrztIj9gcD8sCvC7nFMTHZApx049BCCW4JpD3pm9Nk+6HC1Sa9oyxc2
87mDqUPNNNm9r7YbpRZW8pD4rXU5Xivo8ZfF
-----END CERTIFICATE-----
Generated at Thu Nov 7 08:10:31 2024 by rpki-client on console-fra.rpki-client.org