Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/2C1j0heQE7O9KTqoU7V-4qxcrTo.roa
File: 2C1j0heQE7O9KTqoU7V-4qxcrTo.roa (raw, json)
Hash identifier: REKkDV6mwdpRf8fzeMboVDd8KtO+bkOCEzqDk/9r5zI=
Subject key identifier: D8:2D:63:D2:17:90:13:B3:BD:29:3A:A8:53:B5:7E:E2:AC:5C:AD:3A
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 0191EFB3E1417C2B56F5960750BBA03F202B
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/2C1j0heQE7O9KTqoU7V-4qxcrTo.roa
Signing time: Sat 14 Sep 2024 08:43:48 +0000
ROA not before: Sat 14 Sep 2024 08:43:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 5.181.84.0/24 maxlen: 24
5.181.85.0/24 maxlen: 24
45.13.189.0/24 maxlen: 24
45.13.190.0/24 maxlen: 24
45.94.170.0/24 maxlen: 24
91.223.110.0/24 maxlen: 24
195.211.188.0/24 maxlen: 24
195.211.189.0/24 maxlen: 24
195.211.190.0/24 maxlen: 24
195.211.191.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 17 Sep 2024 08:38:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:ef:b3:e1:41:7c:2b:56:f5:96:07:50:bb:a0:3f:20:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Sep 14 08:43:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d82d63d2179013b3bd293aa853b57ee2ac5cad3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ab:d0:69:70:b7:09:a7:5f:db:46:8b:0a:38:
82:af:76:bc:78:c1:dc:b6:e7:df:46:4f:96:b5:8b:
f2:1a:11:a5:40:f8:5e:64:06:e9:94:61:71:61:a4:
d8:75:03:6e:1f:64:82:ed:f2:1f:98:f1:55:39:5d:
8f:4d:c2:6c:7f:9f:72:41:ea:f9:7c:12:8e:a9:5c:
18:5d:2d:66:48:10:d4:22:81:23:3f:dd:8c:8b:3f:
66:e6:58:2e:63:e4:5d:d7:02:fb:37:46:f6:12:4f:
fc:3a:10:c7:aa:b8:87:83:68:0b:08:1e:75:86:ef:
24:e9:1e:4f:28:80:0e:b8:a5:33:aa:5a:04:fc:38:
77:2d:af:b4:ae:83:bf:fe:10:6e:da:23:e8:3b:6f:
6c:b5:0a:e2:a8:5b:dc:01:9c:5f:0b:96:93:8a:c9:
c9:40:34:8f:b8:19:d2:bd:0e:27:f0:f0:b0:26:c2:
21:19:4e:25:10:c5:48:63:2f:9d:31:c2:1d:f5:bb:
ec:24:c3:d0:18:cd:bd:70:98:e4:ac:99:09:16:03:
30:d4:79:da:2e:38:ad:cb:27:f1:18:9e:ac:7f:3e:
52:8b:cd:57:f4:e6:99:fc:19:36:11:df:43:5c:bb:
3b:3b:f2:21:1f:b3:5b:4e:e3:26:be:8d:43:b1:a9:
08:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:2D:63:D2:17:90:13:B3:BD:29:3A:A8:53:B5:7E:E2:AC:5C:AD:3A
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/2C1j0heQE7O9KTqoU7V-4qxcrTo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.84.0/23
45.13.189.0-45.13.190.255
45.94.170.0/24
91.223.110.0/24
195.211.188.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:92:8c:7a:af:e6:74:5b:02:76:7c:a9:a6:e3:3b:6e:2b:a9:
2e:e5:92:5a:9e:23:ea:b8:74:b6:f0:32:17:07:70:21:f3:eb:
0a:a7:99:cd:4f:c6:d7:6c:53:e2:e2:c4:ed:5a:20:a4:2f:4f:
7c:f7:56:f4:93:9d:2e:36:45:1b:86:40:8f:be:45:89:dd:07:
8c:6a:fa:86:8a:20:d7:e1:da:60:ec:7b:9a:03:11:d5:99:db:
be:75:b8:4e:c0:66:9e:9b:ac:26:b7:9b:40:2a:0e:47:11:51:
48:1b:d4:e3:6f:13:0a:1b:8f:b2:ae:b1:24:07:57:c7:24:d8:
cc:ff:a3:42:6d:3e:28:8c:4b:d7:e2:bf:9a:fc:24:f6:f6:b5:
56:80:ef:5e:5c:eb:dd:e4:a4:b6:ad:c5:77:e1:1a:ad:08:5c:
aa:5d:28:1e:f2:cd:f6:69:25:15:dc:47:b0:f6:a2:49:6c:59:
9b:ee:d1:57:75:c7:37:87:da:5e:09:68:9d:ba:38:fd:97:f8:
48:84:31:3c:a6:f2:ba:09:3d:66:6b:be:56:1f:42:2d:bc:76:
a4:b6:fb:9c:41:f2:d2:38:4f:73:0a:cb:86:07:22:f7:5f:99:
cf:da:30:a8:9b:30:fc:61:5b:a7:e6:2e:0b:7e:6b:3e:d1:a7:
cf:cd:2f:8b
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAZHvs+FBfCtW9ZYHULugPyArMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy
YTI4YTEwHhcNMjQwOTE0MDg0MzQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkODJkNjNkMjE3OTAxM2IzYmQyOTNhYTg1M2I1N2VlMmFjNWNhZDNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6vQaXC3Cadf20aLCjiCr3a8eMHc
tuffRk+WtYvyGhGlQPheZAbplGFxYaTYdQNuH2SC7fIfmPFVOV2PTcJsf59yQer5
fBKOqVwYXS1mSBDUIoEjP92Miz9m5lguY+Rd1wL7N0b2Ek/8OhDHqriHg2gLCB51
hu8k6R5PKIAOuKUzqloE/Dh3La+0roO//hBu2iPoO29stQriqFvcAZxfC5aTisnJ
QDSPuBnSvQ4n8PCwJsIhGU4lEMVIYy+dMcId9bvsJMPQGM29cJjkrJkJFgMw1Hna
LjityyfxGJ6sfz5Si81X9OaZ/Bk2Ed9DXLs7O/IhH7NbTuMmvo1DsakIbwIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFNgtY9IXkBOzvSk6qFO1fuKsXK06MB8GA1UdIwQY
MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt
ZWVmMzUxMWY2YzYwLzEvMkMxajBoZVFFN085S1Rxb1U3Vi00cXhjclRvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw
LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQBBbVUMAwD
BAAtDb0DBAAtDb4DBAAtXqoDBABb324DBALD07wwDQYJKoZIhvcNAQELBQADggEB
AHqSjHqv5nRbAnZ8qabjO24rqS7lklqeI+q4dLbwMhcHcCHz6wqnmc1PxtdsU+Li
xO1aIKQvT3z3VvSTnS42RRuGQI++RYndB4xq+oaKINfh2mDse5oDEdWZ2751uE7A
Zp6brCa3m0AqDkcRUUgb1ONvEwobj7KusSQHV8ck2Mz/o0JtPiiMS9fiv5r8JPb2
tVaA715c693kpLatxXfhGq0IXKpdKB7yzfZpJRXcR7D2oklsWZvu0Vd1xzeH2l4J
aJ26OP2X+EiEMTym8roJPWZrvlYfQi28dqS2+5xB8tI4T3MKy4YHIvdfmc/aMKib
MPxhW6fmLgt+az7Rp8/NL4s=
-----END CERTIFICATE-----
Generated at Tue Sep 17 12:46:10 2024 by rpki-client on console-fra.rpki-client.org