Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/1FJe7qO3Owt2N2Pe9OQ80FKWqgU.roa
File: 1FJe7qO3Owt2N2Pe9OQ80FKWqgU.roa (raw, json)
Hash identifier: pbo/y7MY6Y0v90UOOw6JiBLN0Y+S7f5SVrzN38D3mdU=
Subject key identifier: D4:52:5E:EE:A3:B7:3B:0B:76:37:63:DE:F4:E4:3C:D0:52:96:AA:05
Certificate issuer: /CN=5e400ac2396ae228d2b2e56f4b06739969379e44
Certificate serial: 018CC26D354D66BF9FEBD13578551A306678
Authority key identifier: 5E:40:0A:C2:39:6A:E2:28:D2:B2:E5:6F:4B:06:73:99:69:37:9E:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/1FJe7qO3Owt2N2Pe9OQ80FKWqgU.roa
Signing time: Mon 01 Jan 2024 00:29:46 +0000
ROA not before: Mon 01 Jan 2024 00:29:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 4455
IP address blocks: 31.217.128.0/19 maxlen: 24
31.217.128.0/24 maxlen: 24
31.217.130.0/24 maxlen: 24
31.217.129.0/24 maxlen: 24
185.55.16.0/22 maxlen: 24
46.18.168.0/21 maxlen: 24
89.30.68.0/22 maxlen: 24
91.196.184.0/22 maxlen: 24
194.126.217.0/24 maxlen: 24
89.30.0.0/17 maxlen: 24
83.243.16.0/21 maxlen: 24
2a01:8200::/32 maxlen: 64
2a02:27f0::/32 maxlen: 48
Validation: Failed, certificate revoked on Wed 15 May 2024 10:36:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:35:4d:66:bf:9f:eb:d1:35:78:55:1a:30:66:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e400ac2396ae228d2b2e56f4b06739969379e44
Validity
Not Before: Jan 1 00:29:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d4525eeea3b73b0b763763def4e43cd05296aa05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4b:44:7c:b5:46:3b:04:91:1d:2f:de:98:b2:
98:20:ec:c7:e1:a7:0f:63:c6:46:4c:a7:99:38:a8:
36:4a:f4:c8:12:f5:5a:21:5b:8c:22:60:6b:d2:4d:
02:b5:b8:65:23:b9:ce:bd:4e:d4:9f:4f:82:e1:3d:
5b:03:33:bf:ed:3d:e4:6f:62:47:da:86:af:90:84:
34:d4:c5:15:4f:c1:65:fb:ed:19:ad:31:9a:8b:29:
f0:6f:9b:a1:b4:29:d3:32:cb:fe:c0:d9:b7:3b:ca:
49:f6:5a:06:d6:41:8d:6c:73:cd:b1:07:1a:44:f3:
a8:a8:10:f1:c9:52:ee:62:02:1d:08:6f:b6:9d:19:
52:4a:f1:09:b8:ef:c4:d0:6c:b4:ac:a3:b9:d9:41:
0d:e2:7c:f1:88:02:42:4d:5b:35:61:5c:ef:37:39:
00:8f:d4:1e:49:42:e7:0d:be:84:fe:8d:d2:5e:0d:
82:95:9f:5b:88:bd:66:15:a1:cd:90:6d:e7:dc:de:
c5:ce:cb:6a:26:cb:dd:69:96:63:7f:9e:5f:7e:e7:
dc:82:05:b1:80:60:30:b9:53:49:0c:e9:25:d2:32:
05:8e:33:df:74:45:64:14:ff:44:1d:22:e7:0c:6e:
a6:08:93:a6:d0:cb:dd:13:6c:06:df:d1:6b:65:39:
9c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:52:5E:EE:A3:B7:3B:0B:76:37:63:DE:F4:E4:3C:D0:52:96:AA:05
X509v3 Authority Key Identifier:
keyid:5E:40:0A:C2:39:6A:E2:28:D2:B2:E5:6F:4B:06:73:99:69:37:9E:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/1FJe7qO3Owt2N2Pe9OQ80FKWqgU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.217.128.0/19
46.18.168.0/21
83.243.16.0/21
89.30.0.0/17
91.196.184.0/22
185.55.16.0/22
194.126.217.0/24
IPv6:
2a01:8200::/32
2a02:27f0::/32
Signature Algorithm: sha256WithRSAEncryption
6e:6d:30:a2:d6:98:cc:1f:49:42:f8:a2:d2:94:e6:80:0c:b9:
72:d3:e7:8e:02:48:6a:bf:0c:a0:7a:65:55:fa:3f:18:ce:02:
ca:bf:fd:10:43:1c:36:5f:30:08:85:bc:6d:8f:25:6c:19:3e:
a3:4b:34:03:fc:67:fa:41:a3:ed:fa:9d:87:7d:74:89:38:64:
24:69:13:5e:52:44:f1:c4:f1:47:6f:f1:d8:f8:ba:54:ae:4d:
aa:ad:88:03:66:07:91:32:76:5b:7a:b3:b9:17:35:f3:80:39:
de:5f:00:01:8d:d2:09:79:e1:fa:27:a8:7a:60:ea:10:96:69:
aa:10:84:94:4c:07:c4:ec:2b:19:87:1a:15:97:cf:13:03:e9:
46:5d:4f:c9:5e:31:30:a1:e4:44:61:2e:a1:00:12:3c:cd:4a:
8e:66:8f:f5:ae:89:30:7a:60:05:d5:52:3a:b4:66:f0:bc:0d:
ea:20:da:75:ed:41:37:84:77:84:06:88:b7:45:a6:c0:ba:c0:
3c:80:e2:45:70:d3:f2:54:b3:e9:eb:ca:97:74:fa:75:0c:14:
c5:af:38:fe:19:10:30:4f:b9:07:e5:e3:b9:4a:5a:77:fa:4c:
6d:93:8b:1e:f2:f3:18:2e:0e:23:b7:fc:34:2e:15:90:4d:8a:
18:06:10:a8
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgISAYzCbTVNZr+f69E1eFUaMGZ4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlNDAwYWMyMzk2YWUyMjhkMmIyZTU2ZjRiMDY3Mzk5Njkz
NzllNDQwHhcNMjQwMTAxMDAyOTQ2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNDUyNWVlZWEzYjczYjBiNzYzNzYzZGVmNGU0M2NkMDUyOTZhYTA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEtEfLVGOwSRHS/emLKYIOzH4acP
Y8ZGTKeZOKg2SvTIEvVaIVuMImBr0k0CtbhlI7nOvU7Un0+C4T1bAzO/7T3kb2JH
2oavkIQ01MUVT8Fl++0ZrTGaiynwb5uhtCnTMsv+wNm3O8pJ9loG1kGNbHPNsQca
RPOoqBDxyVLuYgIdCG+2nRlSSvEJuO/E0Gy0rKO52UEN4nzxiAJCTVs1YVzvNzkA
j9QeSULnDb6E/o3SXg2ClZ9biL1mFaHNkG3n3N7FzstqJsvdaZZjf55ffufcggWx
gGAwuVNJDOkl0jIFjjPfdEVkFP9EHSLnDG6mCJOm0MvdE2wG39FrZTmcWwIDAQAB
o4ICQzCCAj8wHQYDVR0OBBYEFNRSXu6jtzsLdjdj3vTkPNBSlqoFMB8GA1UdIwQY
MBaAFF5ACsI5auIo0rLlb0sGc5lpN55EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGtBS3dqbHE0aWpTc3VWdlN3WnptV2szbmtRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9kNjdhOTUtY2IzNi00OTM3LTkyMjYt
ZGZlZDEyZjFhMDFlLzEvMUZKZTdxTzNPd3QyTjJQZTlPUTgwRktXcWdVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC9kNjdhOTUtY2IzNi00OTM3LTkyMjYtZGZlZDEyZjFhMDFl
LzEvWGtBS3dqbHE0aWpTc3VWdlN3WnptV2szbmtRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFkGCCsGAQUFBwEHAQH/BEowSDAwBAIAATAqAwQFH9mAAwQD
LhKoAwQDU/MQAwQHWR4AAwQCW8S4AwQCuTcQAwQAwn7ZMBQEAgACMA4DBQAqAYIA
AwUAKgIn8DANBgkqhkiG9w0BAQsFAAOCAQEAbm0wotaYzB9JQvii0pTmgAy5ctPn
jgJIar8MoHplVfo/GM4Cyr/9EEMcNl8wCIW8bY8lbBk+o0s0A/xn+kGj7fqdh310
iThkJGkTXlJE8cTxR2/x2Pi6VK5Nqq2IA2YHkTJ2W3qzuRc184A53l8AAY3SCXnh
+ieoemDqEJZpqhCElEwHxOwrGYcaFZfPEwPpRl1PyV4xMKHkRGEuoQASPM1KjmaP
9a6JMHpgBdVSOrRm8LwN6iDade1BN4R3hAaIt0WmwLrAPIDiRXDT8lSz6evKl3T6
dQwUxa84/hkQME+5B+XjuUpad/pMbZOLHvLzGC4OI7f8NC4VkE2KGAYQqA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:45 2024 by rpki-client on console-ams.rpki-client.org