Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7fed52-d043-453b-8dd1-cf1997c0250d/1/445Pln2p912XlToOWNdPM89CTwY.roa
File: 445Pln2p912XlToOWNdPM89CTwY.roa (raw, json)
Hash identifier: YSUSCa93HoVvGqalWYEjjXL9WMNpanAxjX5EMhtmQbY=
Subject key identifier: E3:8E:4F:96:7D:A9:F7:5D:97:95:3A:0E:58:D7:4F:33:CF:42:4F:06
Certificate issuer: /CN=ac97eb967438ffc4eb66633dd8c03501893667f7
Certificate serial: 018FDE3CA60BC911DBDC24656B665B623334
Authority key identifier: AC:97:EB:96:74:38:FF:C4:EB:66:63:3D:D8:C0:35:01:89:36:67:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7fed52-d043-453b-8dd1-cf1997c0250d/1/445Pln2p912XlToOWNdPM89CTwY.roa
Signing time: Mon 03 Jun 2024 13:14:27 +0000
ROA not before: Mon 03 Jun 2024 13:14:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204151
IP address blocks: 46.32.144.0/21 maxlen: 21
78.31.252.0/22 maxlen: 22
185.107.12.0/22 maxlen: 22
185.107.13.0/24 maxlen: 24
185.107.14.0/24 maxlen: 24
185.233.252.0/22 maxlen: 22
194.45.76.0/22 maxlen: 22
212.237.176.0/21 maxlen: 21
2a06:4000::/29 maxlen: 29
Validation: Failed, certificate revoked on Fri 14 Jun 2024 11:58:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:de:3c:a6:0b:c9:11:db:dc:24:65:6b:66:5b:62:33:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac97eb967438ffc4eb66633dd8c03501893667f7
Validity
Not Before: Jun 3 13:14:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e38e4f967da9f75d97953a0e58d74f33cf424f06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:76:cc:2c:e0:53:d6:b4:e7:4e:53:63:ef:85:
be:c0:4b:0c:d7:2a:32:c5:86:4f:7a:bf:f2:57:a4:
55:f1:3f:e7:c0:64:3a:a5:16:f3:62:5e:76:d6:87:
58:af:ad:89:a9:eb:2f:e4:e9:fc:53:03:ee:52:91:
30:d8:98:ad:95:94:0d:64:43:d9:20:ac:41:fd:cb:
b3:68:21:03:dc:05:05:d3:2f:94:da:f0:62:e8:49:
3b:67:33:4e:c9:e1:ab:03:01:b6:0b:88:ad:a9:48:
57:92:09:a4:2d:bf:ee:b7:a6:3c:09:cf:57:cb:25:
c6:69:65:a9:c0:c3:d6:34:17:6a:bf:ba:78:b0:40:
52:5a:f7:67:96:3d:a9:71:6a:dc:bb:f8:1f:30:85:
31:a3:32:1d:bc:9c:ba:08:a7:53:a6:7f:d9:64:ab:
2b:11:c6:dd:a0:95:4d:0d:9d:a1:1b:ac:3a:10:01:
9e:2a:16:f9:bc:ef:af:a4:a2:23:89:65:22:d3:52:
2f:81:cc:e8:78:69:f7:6f:07:ee:6d:0f:9e:c7:74:
fb:fe:eb:8f:d6:da:d6:08:96:d6:66:68:64:97:fb:
17:31:69:81:39:de:67:25:6e:8c:b2:db:b8:61:77:
f2:3a:ec:0b:a7:f6:bb:ce:30:ad:56:5a:32:b5:cd:
f5:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:8E:4F:96:7D:A9:F7:5D:97:95:3A:0E:58:D7:4F:33:CF:42:4F:06
X509v3 Authority Key Identifier:
keyid:AC:97:EB:96:74:38:FF:C4:EB:66:63:3D:D8:C0:35:01:89:36:67:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7fed52-d043-453b-8dd1-cf1997c0250d/1/445Pln2p912XlToOWNdPM89CTwY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7fed52-d043-453b-8dd1-cf1997c0250d/1/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.32.144.0/21
78.31.252.0/22
185.107.12.0/22
185.233.252.0/22
194.45.76.0/22
212.237.176.0/21
IPv6:
2a06:4000::/29
Signature Algorithm: sha256WithRSAEncryption
35:b0:52:68:d9:a7:82:5f:53:86:d6:01:26:09:05:f4:1a:e5:
c4:04:5c:1d:d4:d7:a6:59:10:97:0f:65:a0:9a:36:c9:50:6e:
73:b1:c7:3d:36:6b:82:6c:cb:8c:2a:fe:d4:51:b1:98:a0:96:
06:ee:da:7a:29:a9:1a:47:b4:0f:7a:bd:dc:80:00:36:ec:47:
fd:2b:25:b7:ab:f2:92:e3:14:42:e8:81:f4:aa:c1:94:15:f8:
07:4b:1e:5b:65:51:d6:55:34:95:01:c3:fa:b9:10:80:84:3e:
1b:5e:f5:59:97:87:5b:df:26:d3:d4:64:ad:65:84:fc:fd:cf:
97:c5:54:d8:f9:29:ed:98:11:35:a0:46:a8:bf:ec:b1:b0:2f:
a4:be:86:d3:4d:13:eb:bb:f7:ee:43:72:66:eb:a6:08:2d:ad:
f7:8c:78:3e:1a:b1:45:7f:a1:50:20:7d:de:f3:0e:07:0e:06:
84:9e:0e:a4:2a:4a:5b:fb:73:74:44:21:95:9f:ee:1d:f3:18:
74:a4:73:ec:a5:96:48:53:31:7f:fb:3b:0b:23:a5:26:22:24:
87:c1:47:93:e0:54:1a:7a:c7:e3:81:a3:c8:20:0d:94:e8:d9:
5e:98:df:b9:6d:da:8d:eb:92:c1:f1:95:79:b2:43:65:89:8a:
6b:e5:9b:7a
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgISAY/ePKYLyRHb3CRla2ZbYjM0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjOTdlYjk2NzQzOGZmYzRlYjY2NjMzZGQ4YzAzNTAxODkz
NjY3ZjcwHhcNMjQwNjAzMTMxNDI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMzhlNGY5NjdkYTlmNzVkOTc5NTNhMGU1OGQ3NGYzM2NmNDI0ZjA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXbMLOBT1rTnTlNj74W+wEsM1yoy
xYZPer/yV6RV8T/nwGQ6pRbzYl521odYr62Jqesv5On8UwPuUpEw2JitlZQNZEPZ
IKxB/cuzaCED3AUF0y+U2vBi6Ek7ZzNOyeGrAwG2C4itqUhXkgmkLb/ut6Y8Cc9X
yyXGaWWpwMPWNBdqv7p4sEBSWvdnlj2pcWrcu/gfMIUxozIdvJy6CKdTpn/ZZKsr
EcbdoJVNDZ2hG6w6EAGeKhb5vO+vpKIjiWUi01IvgczoeGn3bwfubQ+ex3T7/uuP
1trWCJbWZmhkl/sXMWmBOd5nJW6Mstu4YXfyOuwLp/a7zjCtVloytc316QIDAQAB
o4ICNjCCAjIwHQYDVR0OBBYEFOOOT5Z9qfddl5U6DljXTzPPQk8GMB8GA1UdIwQY
MBaAFKyX65Z0OP/E62ZjPdjANQGJNmf3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckpmcmxuUTRfOFRyWm1NOTJNQTFBWWsyWl9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS83ZmVkNTItZDA0My00NTNiLThkZDEt
Y2YxOTk3YzAyNTBkLzEvNDQ1UGxuMnA5MTJYbFRvT1dOZFBNODlDVHdZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS83ZmVkNTItZDA0My00NTNiLThkZDEtY2YxOTk3YzAyNTBk
LzEvckpmcmxuUTRfOFRyWm1NOTJNQTFBWWsyWl9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQDLiCQAwQC
Th/8AwQCuWsMAwQCuen8AwQCwi1MAwQD1O2wMA0EAgACMAcDBQMqBkAAMA0GCSqG
SIb3DQEBCwUAA4IBAQA1sFJo2aeCX1OG1gEmCQX0GuXEBFwd1NemWRCXD2WgmjbJ
UG5zscc9NmuCbMuMKv7UUbGYoJYG7tp6KakaR7QPer3cgAA27Ef9KyW3q/KS4xRC
6IH0qsGUFfgHSx5bZVHWVTSVAcP6uRCAhD4bXvVZl4db3ybT1GStZYT8/c+XxVTY
+SntmBE1oEaov+yxsC+kvobTTRPru/fuQ3Jm66YILa33jHg+GrFFf6FQIH3e8w4H
DgaEng6kKkpb+3N0RCGVn+4d8xh0pHPspZZIUzF/+zsLI6UmIiSHwUeT4FQaesfj
gaPIIA2U6NlemN+5bdqN65LB8ZV5skNliYpr5Zt6
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:20:35 2025 by rpki-client