Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/83df5b-d153-4cb6-baf3-4cd38b758d5c/1/iJNzkhM_3_U5Q5UYxfiJASZpWVw.roa
File: iJNzkhM_3_U5Q5UYxfiJASZpWVw.roa (raw, json)
Hash identifier: ++VU+xlWv1hLLQhZDlmZgk+7jGvzeyAcxZ5sVA4TQLU=
Subject key identifier: 88:93:73:92:13:3F:DF:F5:39:43:95:18:C5:F8:89:01:26:69:59:5C
Certificate issuer: /CN=1e5aaf3d0683dc8a0d58c643826e166d3c28cca9
Certificate serial: 018DF4B21793790AC83C59EDD90F2CB88DA9
Authority key identifier: 1E:5A:AF:3D:06:83:DC:8A:0D:58:C6:43:82:6E:16:6D:3C:28:CC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlqvPQaD3IoNWMZDgm4WbTwozKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/83df5b-d153-4cb6-baf3-4cd38b758d5c/1/iJNzkhM_3_U5Q5UYxfiJASZpWVw.roa
Signing time: Thu 29 Feb 2024 11:48:48 +0000
ROA not before: Thu 29 Feb 2024 11:48:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57910
IP address blocks: 46.18.72.0/21 maxlen: 24
185.11.236.0/22 maxlen: 24
194.56.236.0/22 maxlen: 24
194.127.158.0/23 maxlen: 24
194.127.162.0/23 maxlen: 24
2a00:b5c0::/32 maxlen: 32
2a02:2110::/32 maxlen: 32
2a0c:7a00::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 04 Mar 2024 08:45:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:f4:b2:17:93:79:0a:c8:3c:59:ed:d9:0f:2c:b8:8d:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e5aaf3d0683dc8a0d58c643826e166d3c28cca9
Validity
Not Before: Feb 29 11:48:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=88937392133fdff539439518c5f889012669595c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f9:7a:10:20:d0:6f:92:df:6e:43:65:2a:60:
4a:84:a8:91:00:11:4d:92:d6:f0:50:21:35:19:07:
da:f6:c2:19:52:9d:35:35:74:23:cb:5c:56:7f:6f:
14:28:da:de:f2:ec:88:0d:91:93:c5:31:7e:50:c1:
10:d9:67:0a:f4:68:2a:e3:a2:da:76:72:56:58:87:
8d:20:d9:da:99:44:95:b3:7e:f0:85:ae:1e:fb:53:
ef:6a:24:13:20:3f:14:a8:c1:e2:7a:21:99:e5:d4:
35:81:96:de:3c:c0:1d:d3:33:68:b0:e2:52:7a:05:
b4:1d:7a:1a:b2:80:f0:a9:09:71:50:7a:3a:d6:a4:
ea:7d:19:ee:a7:d4:38:ed:a6:c7:9f:d3:69:20:55:
11:80:2e:37:b5:37:aa:d5:bb:eb:d3:6b:02:d6:90:
45:de:8e:76:fe:bd:a8:b8:94:67:71:77:df:a2:a9:
fe:94:f9:1b:e6:f3:a6:fa:d9:9f:3b:f6:f2:e6:58:
33:c2:68:7c:6c:63:8b:0c:94:03:11:e5:29:97:e8:
06:1e:69:53:56:90:32:e6:bc:07:75:8f:be:f3:70:
7f:e9:d3:36:b6:70:81:01:c1:44:22:d0:6f:10:32:
b9:60:3c:09:ef:ce:4b:8f:12:9b:f7:84:f7:fa:5f:
af:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:93:73:92:13:3F:DF:F5:39:43:95:18:C5:F8:89:01:26:69:59:5C
X509v3 Authority Key Identifier:
keyid:1E:5A:AF:3D:06:83:DC:8A:0D:58:C6:43:82:6E:16:6D:3C:28:CC:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlqvPQaD3IoNWMZDgm4WbTwozKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/83df5b-d153-4cb6-baf3-4cd38b758d5c/1/iJNzkhM_3_U5Q5UYxfiJASZpWVw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/83df5b-d153-4cb6-baf3-4cd38b758d5c/1/HlqvPQaD3IoNWMZDgm4WbTwozKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.18.72.0/21
185.11.236.0/22
194.56.236.0/22
194.127.158.0/23
194.127.162.0/23
IPv6:
2a00:b5c0::/32
2a02:2110::/32
2a0c:7a00::/29
Signature Algorithm: sha256WithRSAEncryption
32:53:73:ab:e3:ce:01:fa:5a:e1:cc:cf:23:cb:05:33:e1:c7:
b7:cb:f0:76:38:0f:e4:8f:6e:02:7c:33:18:04:41:74:f5:b1:
10:aa:4f:16:12:97:68:1a:e9:0d:03:22:6f:d3:d6:cc:13:8b:
53:f6:3b:be:03:cc:68:8f:cd:f9:05:c7:09:07:43:3b:44:1d:
a5:2c:4a:c1:d5:a1:6d:88:a0:30:10:5b:7f:52:05:88:ae:d8:
c3:a6:fb:57:44:a8:11:14:17:17:1a:48:74:ba:0d:24:a6:6c:
b2:49:9d:29:04:f2:24:58:2c:d6:a2:13:a4:94:99:d7:41:82:
5e:e3:af:9b:68:19:a5:34:fd:e1:63:d3:da:9a:fc:73:21:ff:
2c:3a:40:18:2f:a2:35:73:f6:ca:d1:48:50:e0:66:5b:c2:bc:
9e:ed:28:38:a7:21:83:e3:7c:e5:e4:67:dc:df:18:c6:36:41:
3d:29:7d:69:2c:57:bb:6c:f6:85:c4:bf:3c:c4:99:6e:7b:94:
55:f3:e5:93:cf:ec:a4:52:b2:f3:eb:53:25:f4:c8:e2:30:39:
a0:b3:8c:83:0a:5d:4a:7c:c6:73:2a:03:c7:42:32:d2:b3:32:
d8:97:d1:f5:04:ad:bb:67:a0:f7:fa:a1:b2:00:d8:ef:39:ea:
26:0b:dc:38
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgISAY30sheTeQrIPFnt2Q8suI2pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlNWFhZjNkMDY4M2RjOGEwZDU4YzY0MzgyNmUxNjZkM2My
OGNjYTkwHhcNMjQwMjI5MTE0ODQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ODkzNzM5MjEzM2ZkZmY1Mzk0Mzk1MThjNWY4ODkwMTI2Njk1OTVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufl6ECDQb5LfbkNlKmBKhKiRABFN
ktbwUCE1GQfa9sIZUp01NXQjy1xWf28UKNre8uyIDZGTxTF+UMEQ2WcK9Ggq46La
dnJWWIeNINnamUSVs37wha4e+1PvaiQTID8UqMHieiGZ5dQ1gZbePMAd0zNosOJS
egW0HXoasoDwqQlxUHo61qTqfRnup9Q47abHn9NpIFURgC43tTeq1bvr02sC1pBF
3o52/r2ouJRncXffoqn+lPkb5vOm+tmfO/by5lgzwmh8bGOLDJQDEeUpl+gGHmlT
VpAy5rwHdY++83B/6dM2tnCBAcFEItBvEDK5YDwJ785LjxKb94T3+l+vNwIDAQAB
o4ICPjCCAjowHQYDVR0OBBYEFIiTc5ITP9/1OUOVGMX4iQEmaVlcMB8GA1UdIwQY
MBaAFB5arz0Gg9yKDVjGQ4JuFm08KMypMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGxxdlBRYUQzSW9OV01aRGdtNFdiVHdvektrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi84M2RmNWItZDE1My00Y2I2LWJhZjMt
NGNkMzhiNzU4ZDVjLzEvaUpOemtoTV8zX1U1UTVVWXhmaUpBU1pwV1Z3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi84M2RmNWItZDE1My00Y2I2LWJhZjMtNGNkMzhiNzU4ZDVj
LzEvSGxxdlBRYUQzSW9OV01aRGdtNFdiVHdvektrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFQGCCsGAQUFBwEHAQH/BEUwQzAkBAIAATAeAwQDLhJIAwQC
uQvsAwQCwjjsAwQBwn+eAwQBwn+iMBsEAgACMBUDBQAqALXAAwUAKgIhEAMFAyoM
egAwDQYJKoZIhvcNAQELBQADggEBADJTc6vjzgH6WuHMzyPLBTPhx7fL8HY4D+SP
bgJ8MxgEQXT1sRCqTxYSl2ga6Q0DIm/T1swTi1P2O74DzGiPzfkFxwkHQztEHaUs
SsHVoW2IoDAQW39SBYiu2MOm+1dEqBEUFxcaSHS6DSSmbLJJnSkE8iRYLNaiE6SU
mddBgl7jr5toGaU0/eFj09qa/HMh/yw6QBgvojVz9srRSFDgZlvCvJ7tKDinIYPj
fOXkZ9zfGMY2QT0pfWksV7ts9oXEvzzEmW57lFXz5ZPP7KRSsvPrUyX0yOIwOaCz
jIMKXUp8xnMqA8dCMtKzMtiX0fUErbtnoPf6obIA2O856iYL3Dg=
-----END CERTIFICATE-----
Generated at Mon Mar 4 12:18:09 2024 by rpki-client on console-ams.rpki-client.org