Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/62b909-1e3e-4a1b-9e24-b01e0297b070/1/9oLYmsWEUYJSCSlvxyU9V95db-w.roa
File: 9oLYmsWEUYJSCSlvxyU9V95db-w.roa (raw, json)
Hash identifier: opArLMyo1A7b+0cZIna1ptQ9GdcwvmJ7j+PlQkDYkZI=
Subject key identifier: F6:82:D8:9A:C5:84:51:82:52:09:29:6F:C7:25:3D:57:DE:5D:6F:EC
Certificate issuer: /CN=fdd2b36206439bbce15b363f09eeff1d738cecc7
Certificate serial: 01856E6FABE25DD358BC14BFAB7E42DFBD82
Authority key identifier: FD:D2:B3:62:06:43:9B:BC:E1:5B:36:3F:09:EE:FF:1D:73:8C:EC:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/62b909-1e3e-4a1b-9e24-b01e0297b070/1/9oLYmsWEUYJSCSlvxyU9V95db-w.roa
Signing time: Sun 01 Jan 2023 17:44:50 +0000
ROA not before: Sun 01 Jan 2023 17:44:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25249
IP address blocks: 94.100.224.0/21 maxlen: 21
94.100.224.0/20 maxlen: 20
94.100.224.0/24 maxlen: 24
94.100.229.0/24 maxlen: 24
94.100.231.0/24 maxlen: 24
94.100.232.0/21 maxlen: 21
94.100.237.0/24 maxlen: 24
94.100.238.0/24 maxlen: 24
94.100.234.0/24 maxlen: 24
94.100.235.0/24 maxlen: 24
185.115.4.0/22 maxlen: 22
81.95.160.0/20 maxlen: 20
81.95.160.0/21 maxlen: 21
81.95.160.0/24 maxlen: 24
185.115.5.0/24 maxlen: 24
185.115.6.0/24 maxlen: 24
185.115.7.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:6f:ab:e2:5d:d3:58:bc:14:bf:ab:7e:42:df:bd:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdd2b36206439bbce15b363f09eeff1d738cecc7
Validity
Not Before: Jan 1 17:44:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f682d89ac58451825209296fc7253d57de5d6fec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ac:3e:0d:01:ff:7b:0c:77:65:19:0a:5c:b7:
ce:cb:d0:75:2b:66:3b:87:a4:e8:ff:9e:11:7a:78:
8d:fa:8e:c0:ed:44:45:f8:de:79:40:66:e0:91:81:
f1:dc:8c:a3:1f:27:40:ca:a3:66:02:76:a7:26:d5:
a5:ef:3c:33:50:ef:f8:fb:1e:51:16:47:0e:3e:b7:
a8:04:a0:2a:c4:ea:49:96:50:0e:54:dd:71:fc:cf:
11:5a:af:20:24:e1:c7:bd:fc:4f:32:11:22:8c:5c:
48:f8:79:e4:53:b7:f4:0c:b5:94:69:5f:a3:46:18:
27:42:c1:a7:f6:69:81:c2:7a:9e:85:7a:d1:7b:62:
7f:53:91:a5:02:13:82:7c:ce:7e:c4:2d:7c:a6:38:
bc:9b:c3:fe:fb:fc:fb:67:6f:61:8d:9e:97:54:19:
2d:ff:91:fd:f9:7d:47:7c:58:e3:60:b5:b1:94:e9:
8d:1b:92:19:5f:cb:48:52:c5:58:96:8e:72:a9:92:
a2:40:6a:0f:9d:ec:a4:96:62:89:d8:c9:d4:8f:30:
d9:01:ea:21:df:70:06:d5:cb:9f:52:06:bb:71:3b:
2e:75:41:ad:63:26:86:3a:9c:b7:86:b3:d7:db:32:
d3:f8:b3:1e:de:d7:86:79:b1:4d:e6:bb:c4:87:76:
9f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:82:D8:9A:C5:84:51:82:52:09:29:6F:C7:25:3D:57:DE:5D:6F:EC
X509v3 Authority Key Identifier:
keyid:FD:D2:B3:62:06:43:9B:BC:E1:5B:36:3F:09:EE:FF:1D:73:8C:EC:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/62b909-1e3e-4a1b-9e24-b01e0297b070/1/9oLYmsWEUYJSCSlvxyU9V95db-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/62b909-1e3e-4a1b-9e24-b01e0297b070/1/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.95.160.0/20
94.100.224.0/20
185.115.4.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:0e:a0:72:67:e6:1b:5e:71:2d:0a:e5:30:72:a1:84:71:5c:
f2:1c:57:4d:8c:6e:d8:92:3f:41:ed:15:7a:cb:88:89:64:b4:
54:81:28:86:82:e5:7b:64:a6:81:d5:ef:81:71:9e:f6:b3:03:
90:08:19:d6:c4:32:48:81:e1:fe:c2:9e:de:55:cf:94:72:48:
15:fd:33:aa:33:46:ec:f4:f4:00:78:5c:58:9d:56:b7:74:5c:
fb:5a:a8:ba:77:ba:80:ca:67:6a:b1:5f:94:69:a3:99:ca:49:
d4:93:da:0f:48:8f:cc:b2:99:82:27:34:57:89:0c:09:2c:e9:
1f:12:ca:c7:d2:d6:89:1e:96:70:28:d7:7b:e5:14:9c:0f:50:
13:70:2f:e9:6d:1e:26:d9:1c:83:82:f6:77:38:e9:48:9f:42:
a8:b9:13:56:e0:e7:bb:5d:e9:96:a6:cb:63:ca:46:09:e8:68:
38:bd:9c:31:c9:1f:5b:60:cd:9c:76:47:3a:4b:08:d7:92:03:
3c:f3:09:e8:38:99:7f:8b:61:68:b6:71:82:f5:44:62:1e:13:
79:03:67:9d:2f:47:0f:c5:22:11:44:21:d3:de:d4:95:d1:de:
dc:12:80:0e:7a:0d:59:97:04:95:3c:af:0d:09:00:31:ba:89:
c9:29:93:83
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYVub6viXdNYvBS/q35C372CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkZDJiMzYyMDY0MzliYmNlMTViMzYzZjA5ZWVmZjFkNzM4
Y2VjYzcwHhcNMjMwMTAxMTc0NDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNjgyZDg5YWM1ODQ1MTgyNTIwOTI5NmZjNzI1M2Q1N2RlNWQ2ZmVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6w+DQH/ewx3ZRkKXLfOy9B1K2Y7
h6To/54ReniN+o7A7URF+N55QGbgkYHx3IyjHydAyqNmAnanJtWl7zwzUO/4+x5R
FkcOPreoBKAqxOpJllAOVN1x/M8RWq8gJOHHvfxPMhEijFxI+HnkU7f0DLWUaV+j
RhgnQsGn9mmBwnqehXrRe2J/U5GlAhOCfM5+xC18pji8m8P++/z7Z29hjZ6XVBkt
/5H9+X1HfFjjYLWxlOmNG5IZX8tIUsVYlo5yqZKiQGoPneyklmKJ2MnUjzDZAeoh
33AG1cufUga7cTsudUGtYyaGOpy3hrPX2zLT+LMe3teGebFN5rvEh3afkQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFPaC2JrFhFGCUgkpb8clPVfeXW/sMB8GA1UdIwQY
MBaAFP3Ss2IGQ5u84Vs2Pwnu/x1zjOzHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2RLellnWkRtN3poV3pZX0NlN19IWE9NN01jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS82MmI5MDktMWUzZS00YTFiLTllMjQt
YjAxZTAyOTdiMDcwLzEvOW9MWW1zV0VVWUpTQ1Nsdnh5VTlWOTVkYi13LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS82MmI5MDktMWUzZS00YTFiLTllMjQtYjAxZTAyOTdiMDcw
LzEvX2RLellnWkRtN3poV3pZX0NlN19IWE9NN01jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQEUV+gAwQE
XmTgAwQCuXMEMA0GCSqGSIb3DQEBCwUAA4IBAQB7DqByZ+YbXnEtCuUwcqGEcVzy
HFdNjG7Ykj9B7RV6y4iJZLRUgSiGguV7ZKaB1e+BcZ72swOQCBnWxDJIgeH+wp7e
Vc+UckgV/TOqM0bs9PQAeFxYnVa3dFz7Wqi6d7qAymdqsV+UaaOZyknUk9oPSI/M
spmCJzRXiQwJLOkfEsrH0taJHpZwKNd75RScD1ATcC/pbR4m2RyDgvZ3OOlIn0Ko
uRNW4Oe7XemWpstjykYJ6Gg4vZwxyR9bYM2cdkc6SwjXkgM88wnoOJl/i2FotnGC
9URiHhN5A2edL0cPxSIRRCHT3tSV0d7cEoAOeg1ZlwSVPK8NCQAxuonJKZOD
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:53 2024 by rpki-client on console-ams.rpki-client.org