Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/3a3b2c-76b9-49b4-8218-d12f1e2456ba/1/kgNy-FHlLbSycv81H2ejSZopHzE.roa
File: kgNy-FHlLbSycv81H2ejSZopHzE.roa (raw, json)
Hash identifier: u3RF2Uzl22XE25dWKXeey+XCUxqGyCyyznKwwQ/qceg=
Subject key identifier: 92:03:72:F8:51:E5:2D:B4:B2:72:FF:35:1F:67:A3:49:9A:29:1F:31
Certificate issuer: /CN=c5a7c3f4b14693512202595a8a4f95b0d6b7a101
Certificate serial: 018CCA2A614D8641107DB4C748FBF2CE2D04
Authority key identifier: C5:A7:C3:F4:B1:46:93:51:22:02:59:5A:8A:4F:95:B0:D6:B7:A1:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xafD9LFGk1EiAllaik-VsNa3oQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/3a3b2c-76b9-49b4-8218-d12f1e2456ba/1/kgNy-FHlLbSycv81H2ejSZopHzE.roa
Signing time: Tue 02 Jan 2024 12:33:44 +0000
ROA not before: Tue 02 Jan 2024 12:33:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2200
IP address blocks: 134.158.159.0/24 maxlen: 24
134.158.72.0/23 maxlen: 23
134.158.78.0/24 maxlen: 24
134.158.195.0/24 maxlen: 24
134.158.120.0/21 maxlen: 21
Validation: Failed, certificate revoked on Thu 02 Jan 2025 11:49:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:61:4d:86:41:10:7d:b4:c7:48:fb:f2:ce:2d:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5a7c3f4b14693512202595a8a4f95b0d6b7a101
Validity
Not Before: Jan 2 12:33:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=920372f851e52db4b272ff351f67a3499a291f31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:fd:fa:28:ed:13:0d:50:10:d2:4d:a1:1c:77:
b4:71:b2:9e:45:d6:ff:17:dc:b0:15:0c:34:31:3d:
92:09:55:bd:fe:92:c0:77:be:61:fc:88:01:36:8b:
b6:03:35:81:e4:38:3a:35:95:8d:f6:4d:90:02:9a:
e1:ed:9c:b4:8a:96:1d:f3:0a:02:62:06:b4:e3:14:
c4:06:f9:b8:77:03:43:93:da:97:c4:2a:1e:8e:54:
3c:43:d7:25:40:a7:ed:8e:e8:0c:c0:81:04:ea:1d:
45:24:65:b6:a7:ae:c2:ac:37:bf:33:69:c2:c8:7d:
23:b2:0f:c6:03:23:58:4b:59:4f:a6:8e:15:da:05:
01:d2:cb:ec:ba:4f:55:ff:02:05:36:91:67:2d:25:
2c:42:54:95:90:1f:9f:78:67:d4:b1:24:08:07:6b:
95:b8:a9:70:3a:60:4f:7f:aa:1b:1e:22:ac:01:cd:
e6:24:9a:a7:ff:5c:71:ce:3c:b2:79:d2:70:89:d3:
66:ca:4c:5b:7a:63:51:df:41:46:99:50:83:c1:66:
d8:32:fd:8e:c4:95:62:29:e5:67:0f:7d:6f:7f:73:
a7:09:c6:22:a2:97:bc:b5:e0:94:fd:34:df:0c:6f:
43:c6:58:4f:25:65:b0:e4:19:cb:c8:3a:a4:96:77:
17:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:03:72:F8:51:E5:2D:B4:B2:72:FF:35:1F:67:A3:49:9A:29:1F:31
X509v3 Authority Key Identifier:
keyid:C5:A7:C3:F4:B1:46:93:51:22:02:59:5A:8A:4F:95:B0:D6:B7:A1:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xafD9LFGk1EiAllaik-VsNa3oQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/3a3b2c-76b9-49b4-8218-d12f1e2456ba/1/kgNy-FHlLbSycv81H2ejSZopHzE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/3a3b2c-76b9-49b4-8218-d12f1e2456ba/1/xafD9LFGk1EiAllaik-VsNa3oQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.158.72.0/23
134.158.78.0/24
134.158.120.0/21
134.158.159.0/24
134.158.195.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:c0:24:70:dc:ea:e7:4d:cf:2d:5d:47:d8:e7:0a:33:00:32:
00:9f:df:4e:86:0a:22:e7:22:f1:08:f4:df:df:ae:9b:04:8f:
52:e8:7b:ba:23:6c:37:d7:63:27:69:8d:98:aa:f9:3f:08:bf:
53:29:d1:13:86:e7:a5:3c:30:a8:1f:ee:39:85:72:d7:0b:11:
8c:29:e0:da:fc:8b:0e:c8:8a:5d:79:0e:46:3e:e6:ae:66:1a:
59:1a:02:a7:4e:d9:f6:de:eb:53:2e:1b:b2:31:36:d0:f2:ab:
77:71:94:ed:a0:af:e7:64:04:11:26:6e:09:99:8e:15:e4:ac:
41:e7:52:36:4a:4d:c7:b4:38:e9:bf:06:75:e6:4f:7a:70:98:
6f:5b:64:dd:3d:75:2b:a9:54:ac:ce:36:50:a0:ec:2d:93:4a:
cd:4b:69:ba:a7:69:09:ff:5f:cc:14:97:d9:ff:71:39:5b:74:
36:8a:8c:1c:00:6c:a9:f6:ae:82:dc:8c:27:1d:c1:b8:90:18:
e7:6e:04:8f:78:42:31:5c:d1:f5:0e:c7:51:f2:36:cc:ad:a9:
0d:9b:bc:18:19:6d:84:24:a2:4f:0e:5b:0b:1e:04:93:85:a4:
2a:6b:52:f9:47:36:c0:de:cd:1a:22:d4:ba:37:47:b8:dd:0d:
f0:7c:87:1a
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYzKKmFNhkEQfbTHSPvyzi0EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1YTdjM2Y0YjE0NjkzNTEyMjAyNTk1YThhNGY5NWIwZDZi
N2ExMDEwHhcNMjQwMTAyMTIzMzQ0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MjAzNzJmODUxZTUyZGI0YjI3MmZmMzUxZjY3YTM0OTlhMjkxZjMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+/36KO0TDVAQ0k2hHHe0cbKeRdb/
F9ywFQw0MT2SCVW9/pLAd75h/IgBNou2AzWB5Dg6NZWN9k2QAprh7Zy0ipYd8woC
Yga04xTEBvm4dwNDk9qXxCoejlQ8Q9clQKftjugMwIEE6h1FJGW2p67CrDe/M2nC
yH0jsg/GAyNYS1lPpo4V2gUB0svsuk9V/wIFNpFnLSUsQlSVkB+feGfUsSQIB2uV
uKlwOmBPf6obHiKsAc3mJJqn/1xxzjyyedJwidNmykxbemNR30FGmVCDwWbYMv2O
xJViKeVnD31vf3OnCcYiope8teCU/TTfDG9DxlhPJWWw5BnLyDqklncXDQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFJIDcvhR5S20snL/NR9no0maKR8xMB8GA1UdIwQY
MBaAFMWnw/SxRpNRIgJZWopPlbDWt6EBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGFmRDlMRkdrMUVpQWxsYWlrLVZzTmEzb1FFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8zYTNiMmMtNzZiOS00OWI0LTgyMTgt
ZDEyZjFlMjQ1NmJhLzEva2dOeS1GSGxMYlN5Y3Y4MUgyZWpTWm9wSHpFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS8zYTNiMmMtNzZiOS00OWI0LTgyMTgtZDEyZjFlMjQ1NmJh
LzEveGFmRDlMRkdrMUVpQWxsYWlrLVZzTmEzb1FFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQBhp5IAwQA
hp5OAwQDhp54AwQAhp6fAwQAhp7DMA0GCSqGSIb3DQEBCwUAA4IBAQDGwCRw3Orn
Tc8tXUfY5wozADIAn99Ohgoi5yLxCPTf366bBI9S6Hu6I2w312MnaY2Yqvk/CL9T
KdEThuelPDCoH+45hXLXCxGMKeDa/IsOyIpdeQ5GPuauZhpZGgKnTtn23utTLhuy
MTbQ8qt3cZTtoK/nZAQRJm4JmY4V5KxB51I2Sk3HtDjpvwZ15k96cJhvW2TdPXUr
qVSszjZQoOwtk0rNS2m6p2kJ/1/MFJfZ/3E5W3Q2iowcAGyp9q6C3IwnHcG4kBjn
bgSPeEIxXNH1DsdR8jbMrakNm7wYGW2EJKJPDlsLHgSThaQqa1L5RzbA3s0aItS6
N0e43Q3wfIca
-----END CERTIFICATE-----
Generated at Thu Apr 17 23:32:53 2025 by rpki-client