Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/ae09fb-f536-47a1-9787-f1f603f91971/1/PRptcRNu-julxwkgoI9DHRxYZ40.roa
File: PRptcRNu-julxwkgoI9DHRxYZ40.roa (raw, json)
Hash identifier: qMV6s7wD1aolzHzPCGdynJz4XT1T8u43dB94VnMedLg=
Subject key identifier: 3D:1A:6D:71:13:6E:FA:3B:A5:C7:09:20:A0:8F:43:1D:1C:58:67:8D
Certificate issuer: /CN=4aafe45b30fa7f594925dd395ba14cefb673e2c0
Certificate serial: 018CC425483CECB87BF42FDD98C292985BB6
Authority key identifier: 4A:AF:E4:5B:30:FA:7F:59:49:25:DD:39:5B:A1:4C:EF:B6:73:E2:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sq_kWzD6f1lJJd05W6FM77Zz4sA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/ae09fb-f536-47a1-9787-f1f603f91971/1/PRptcRNu-julxwkgoI9DHRxYZ40.roa
Signing time: Mon 01 Jan 2024 08:30:26 +0000
ROA not before: Mon 01 Jan 2024 08:30:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35032
IP address blocks: 109.124.224.0/21 maxlen: 21
109.124.232.0/21 maxlen: 21
109.124.240.0/21 maxlen: 21
109.124.252.0/23 maxlen: 23
109.124.248.0/22 maxlen: 22
109.124.254.0/23 maxlen: 23
85.236.160.0/20 maxlen: 20
185.224.8.0/22 maxlen: 22
85.236.176.0/20 maxlen: 20
109.124.192.0/19 maxlen: 19
2a13:73c7::/32 maxlen: 32
2a13:73c0:c000::/34 maxlen: 34
2a13:73c0:8000::/34 maxlen: 34
2a13:73c0:4000::/34 maxlen: 34
2a13:73c0::/34 maxlen: 34
2a13:73c4::/31 maxlen: 31
2a13:73c6::/32 maxlen: 32
2a13:73c1:c000::/34 maxlen: 34
2a13:73c1:8000::/34 maxlen: 34
2a13:73c1:4000::/34 maxlen: 34
2a13:73c1::/34 maxlen: 34
2a13:73c2::/31 maxlen: 31
Validation: Failed, certificate revoked on Wed 01 Jan 2025 21:47:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:48:3c:ec:b8:7b:f4:2f:dd:98:c2:92:98:5b:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aafe45b30fa7f594925dd395ba14cefb673e2c0
Validity
Not Before: Jan 1 08:30:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3d1a6d71136efa3ba5c70920a08f431d1c58678d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:58:5f:af:98:a9:53:81:d4:96:c1:91:9a:d0:
39:1d:79:b9:bd:16:92:41:35:28:cd:82:cb:5d:71:
cf:3f:24:82:ee:bf:84:bf:4f:b1:60:29:34:6b:1b:
6c:6b:c0:05:8d:27:20:65:fe:0e:3d:ff:03:97:77:
ae:74:89:54:5d:10:10:40:3e:0e:46:93:26:79:c8:
41:42:2b:05:78:d3:a4:68:e6:62:97:3b:fa:5d:0a:
a7:ea:80:e6:1d:b6:21:50:2c:bb:cf:37:91:00:44:
6e:18:7b:56:7c:d2:89:a7:f0:ca:52:3e:8b:40:f1:
22:a8:a0:34:55:63:3a:ab:86:85:d6:66:9f:ab:f1:
08:53:8c:e2:e7:00:07:77:b0:00:c6:0e:05:76:4b:
01:9a:c3:a7:f4:13:5c:08:16:3e:bd:36:73:75:de:
6a:42:81:c1:af:5f:e0:b5:a7:46:8d:ac:f2:c8:dc:
17:20:b2:5c:16:5f:bb:4e:57:35:ff:f5:63:91:88:
7f:c2:28:33:cc:3f:82:54:4b:69:c3:a5:93:d0:b0:
fe:f1:3f:fd:97:ef:8e:67:87:f8:d0:de:ba:5d:6f:
f4:03:af:b8:12:45:b3:3d:95:48:3a:9d:0d:93:ff:
70:f2:14:92:b4:d8:35:36:33:c7:c9:72:36:41:5b:
58:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:1A:6D:71:13:6E:FA:3B:A5:C7:09:20:A0:8F:43:1D:1C:58:67:8D
X509v3 Authority Key Identifier:
keyid:4A:AF:E4:5B:30:FA:7F:59:49:25:DD:39:5B:A1:4C:EF:B6:73:E2:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sq_kWzD6f1lJJd05W6FM77Zz4sA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ae09fb-f536-47a1-9787-f1f603f91971/1/PRptcRNu-julxwkgoI9DHRxYZ40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ae09fb-f536-47a1-9787-f1f603f91971/1/Sq_kWzD6f1lJJd05W6FM77Zz4sA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.236.160.0/19
109.124.192.0/18
185.224.8.0/22
IPv6:
2a13:73c0::/29
Signature Algorithm: sha256WithRSAEncryption
b1:1f:b2:f3:b8:8f:32:21:7d:2d:c1:31:7f:c3:c0:42:9d:26:
c4:f5:95:33:57:fa:3f:9e:36:8b:b6:9b:d5:d2:99:bb:fa:ab:
bf:e3:a0:32:84:bc:a1:70:bc:8c:28:39:6c:21:5f:33:4a:14:
75:d0:0e:b0:75:5f:5a:11:d0:9b:03:f8:7e:04:fc:89:48:63:
c7:cc:69:ac:62:6c:2a:2e:94:bb:29:1d:24:f1:28:ae:1a:4c:
1f:99:d5:2c:89:e0:56:cc:ef:64:4c:a7:bf:ac:83:8e:dd:d1:
c8:6e:90:4f:e6:03:4d:98:67:6e:6f:c5:95:7f:bd:31:0e:e1:
ab:67:0d:b4:fd:a0:2c:4e:70:0d:6a:f2:1e:71:65:01:c8:1e:
fd:a3:f3:d2:d1:fc:72:bb:96:79:76:26:40:ac:30:a6:71:47:
13:0e:5f:e8:ac:f6:4d:e7:f2:e5:0d:14:a9:bb:64:66:56:88:
9f:aa:06:9f:68:8c:31:3f:13:c2:f7:49:36:17:6f:99:c3:cd:
a7:4a:d1:cb:c9:50:64:a9:e8:0d:de:b1:a2:8b:36:fc:a5:3a:
cb:d0:1a:a5:23:5e:74:4e:8a:3e:31:4b:60:e5:b8:10:74:4d:
42:f4:15:41:6f:bb:f3:c2:48:71:62:85:9c:aa:7c:60:b3:5f:
f1:b1:d6:42
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAYzEJUg87Lh79C/dmMKSmFu2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhYWZlNDViMzBmYTdmNTk0OTI1ZGQzOTViYTE0Y2VmYjY3
M2UyYzAwHhcNMjQwMTAxMDgzMDI2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZDFhNmQ3MTEzNmVmYTNiYTVjNzA5MjBhMDhmNDMxZDFjNTg2NzhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFhfr5ipU4HUlsGRmtA5HXm5vRaS
QTUozYLLXXHPPySC7r+Ev0+xYCk0axtsa8AFjScgZf4OPf8Dl3eudIlUXRAQQD4O
RpMmechBQisFeNOkaOZilzv6XQqn6oDmHbYhUCy7zzeRAERuGHtWfNKJp/DKUj6L
QPEiqKA0VWM6q4aF1mafq/EIU4zi5wAHd7AAxg4FdksBmsOn9BNcCBY+vTZzdd5q
QoHBr1/gtadGjazyyNwXILJcFl+7Tlc1//VjkYh/wigzzD+CVEtpw6WT0LD+8T/9
l++OZ4f40N66XW/0A6+4EkWzPZVIOp0Nk/9w8hSStNg1NjPHyXI2QVtYAwIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFD0abXETbvo7pccJIKCPQx0cWGeNMB8GA1UdIwQY
MBaAFEqv5Fsw+n9ZSSXdOVuhTO+2c+LAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3Ffa1d6RDZmMWxKSmQwNVc2Rk03N1p6NHNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9hZTA5ZmItZjUzNi00N2ExLTk3ODct
ZjFmNjAzZjkxOTcxLzEvUFJwdGNSTnUtanVseHdrZ29JOURIUnhZWjQwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS9hZTA5ZmItZjUzNi00N2ExLTk3ODctZjFmNjAzZjkxOTcx
LzEvU3Ffa1d6RDZmMWxKSmQwNVc2Rk03N1p6NHNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQFVeygAwQG
bXzAAwQCueAIMA0EAgACMAcDBQMqE3PAMA0GCSqGSIb3DQEBCwUAA4IBAQCxH7Lz
uI8yIX0twTF/w8BCnSbE9ZUzV/o/njaLtpvV0pm7+qu/46AyhLyhcLyMKDlsIV8z
ShR10A6wdV9aEdCbA/h+BPyJSGPHzGmsYmwqLpS7KR0k8SiuGkwfmdUsieBWzO9k
TKe/rIOO3dHIbpBP5gNNmGdub8WVf70xDuGrZw20/aAsTnANavIecWUByB79o/PS
0fxyu5Z5diZArDCmcUcTDl/orPZN5/LlDRSpu2RmVoifqgafaIwxPxPC90k2F2+Z
w82nStHLyVBkqegN3rGiizb8pTrL0BqlI150Too+MUtg5bgQdE1C9BVBb7vzwkhx
YoWcqnxgs1/xsdZC
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:13:01 2025 by rpki-client