Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/Dh3m_UsAJP4OVfWTUIIkeyUZl7E.roa
File: Dh3m_UsAJP4OVfWTUIIkeyUZl7E.roa (raw, json)
Hash identifier: 7iCh8ZzYv99kKj5cx5zlz8yI3bhXtOS8sbm6gfOmMBA=
Subject key identifier: 0E:1D:E6:FD:4B:00:24:FE:0E:55:F5:93:50:82:24:7B:25:19:97:B1
Certificate issuer: /CN=88b213bf1627548efdfb1b2e2645baaf1d983aa0
Certificate serial: 018F964439654B8CF54E0D9731251AA3F95F
Authority key identifier: 88:B2:13:BF:16:27:54:8E:FD:FB:1B:2E:26:45:BA:AF:1D:98:3A:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iLITvxYnVI79-xsuJkW6rx2YOqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/Dh3m_UsAJP4OVfWTUIIkeyUZl7E.roa
Signing time: Mon 20 May 2024 13:50:04 +0000
ROA not before: Mon 20 May 2024 13:50:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56884
IP address blocks: 62.122.188.0/24 maxlen: 24
84.246.111.0/24 maxlen: 24
91.247.178.0/24 maxlen: 24
176.97.213.0/24 maxlen: 24
178.23.188.0/24 maxlen: 24
194.26.223.0/24 maxlen: 24
213.232.252.0/24 maxlen: 24
2a11:a100::/29 maxlen: 29
2a13:8e00::/29 maxlen: 29
2a13:9300::/29 maxlen: 29
2a13:a700::/29 maxlen: 29
2a13:da00::/29 maxlen: 29
2a13:fe00::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 28 May 2024 22:04:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:96:44:39:65:4b:8c:f5:4e:0d:97:31:25:1a:a3:f9:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88b213bf1627548efdfb1b2e2645baaf1d983aa0
Validity
Not Before: May 20 13:50:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0e1de6fd4b0024fe0e55f5935082247b251997b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:82:dd:69:32:a4:2a:e2:31:89:61:76:21:8c:
e2:bf:9b:f6:c1:fc:b3:56:b9:ae:b2:a9:6a:4d:98:
da:cd:cb:7a:67:60:2d:12:65:8b:b5:d4:33:5e:6d:
f9:bf:2e:66:d3:3e:dd:fd:0a:b5:39:37:64:64:60:
fd:bf:5b:05:a6:d5:0f:b3:53:93:e5:fa:c2:6d:a9:
57:a2:af:f9:1f:db:aa:13:d0:aa:6f:d8:ac:69:d5:
48:99:11:0e:71:0c:a2:70:bf:ab:5f:a8:3b:d2:29:
f7:28:81:3a:bf:e7:60:94:dd:f3:63:e9:b0:c9:5c:
df:e9:e1:4e:71:01:28:14:97:e0:7f:8f:08:4b:62:
52:1f:4f:7f:a6:a9:c2:4b:13:5c:07:38:ae:fd:a2:
4d:a4:70:6d:a2:38:48:d7:4d:ab:e6:9a:b1:0f:48:
b2:9b:bf:9a:42:80:c1:09:6e:c1:c3:89:2a:9c:e0:
dc:d5:76:fe:88:1a:8c:c4:22:6f:5a:90:d3:b2:04:
5b:f9:3d:ca:ee:79:8e:23:82:ad:ef:c4:7a:fc:94:
06:b8:a8:41:50:10:b3:50:02:7c:d7:e1:0a:ab:16:
f8:23:44:00:39:8c:b0:96:99:fc:2b:ec:de:8e:8e:
e2:2b:a1:77:c4:49:27:6a:ef:1b:83:10:66:69:ab:
54:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:1D:E6:FD:4B:00:24:FE:0E:55:F5:93:50:82:24:7B:25:19:97:B1
X509v3 Authority Key Identifier:
keyid:88:B2:13:BF:16:27:54:8E:FD:FB:1B:2E:26:45:BA:AF:1D:98:3A:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iLITvxYnVI79-xsuJkW6rx2YOqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/Dh3m_UsAJP4OVfWTUIIkeyUZl7E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/iLITvxYnVI79-xsuJkW6rx2YOqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.122.188.0/24
84.246.111.0/24
91.247.178.0/24
176.97.213.0/24
178.23.188.0/24
194.26.223.0/24
213.232.252.0/24
IPv6:
2a11:a100::/29
2a13:8e00::/29
2a13:9300::/29
2a13:a700::/29
2a13:da00::/29
2a13:fe00::/29
Signature Algorithm: sha256WithRSAEncryption
bb:1f:7a:1c:ac:99:08:46:18:81:01:66:55:37:ad:9f:2e:4a:
72:d0:1a:47:a6:6a:39:54:97:39:96:9c:7a:ea:32:48:e8:9f:
64:ce:16:fc:0b:56:c2:9e:96:2c:89:54:dc:97:8a:55:aa:20:
be:26:a8:35:23:cd:d6:37:8a:cd:e7:80:a6:31:58:cc:13:ee:
8e:e9:fb:b0:c5:3e:1c:2a:49:35:07:df:39:bd:11:71:29:ff:
ff:81:f8:df:e7:a1:58:54:ab:6a:52:af:aa:05:e9:75:c2:c0:
9a:06:41:1c:6e:6c:3b:ee:7b:6c:b5:30:f2:3a:05:ac:90:48:
50:fd:41:fb:49:5f:f4:f2:27:1f:f5:1f:1b:8b:9b:c8:19:92:
36:74:51:37:2f:9e:5f:07:b9:fc:ba:00:a5:4c:72:9b:3c:51:
28:62:45:f7:c3:6e:4d:ef:11:79:5e:6d:be:0f:9f:db:c3:d0:
5b:4d:0a:62:61:f3:2c:74:86:01:e0:b9:7c:19:d2:60:af:7e:
4b:df:54:53:f9:1f:a7:da:20:85:89:71:32:69:fc:41:40:df:
4c:7c:bb:97:64:f9:72:7c:a9:75:a1:56:d7:e6:0d:07:03:50:
b4:b1:d7:03:b1:9a:02:9b:5b:c9:38:80:43:cf:b3:b3:d8:49:
ec:1a:23:bf
-----BEGIN CERTIFICATE-----
MIIFUzCCBDugAwIBAgISAY+WRDllS4z1Tg2XMSUao/lfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4YjIxM2JmMTYyNzU0OGVmZGZiMWIyZTI2NDViYWFmMWQ5
ODNhYTAwHhcNMjQwNTIwMTM1MDA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZTFkZTZmZDRiMDAyNGZlMGU1NWY1OTM1MDgyMjQ3YjI1MTk5N2IxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA04LdaTKkKuIxiWF2IYziv5v2wfyz
VrmusqlqTZjazct6Z2AtEmWLtdQzXm35vy5m0z7d/Qq1OTdkZGD9v1sFptUPs1OT
5frCbalXoq/5H9uqE9Cqb9isadVImREOcQyicL+rX6g70in3KIE6v+dglN3zY+mw
yVzf6eFOcQEoFJfgf48IS2JSH09/pqnCSxNcBziu/aJNpHBtojhI102r5pqxD0iy
m7+aQoDBCW7Bw4kqnODc1Xb+iBqMxCJvWpDTsgRb+T3K7nmOI4Kt78R6/JQGuKhB
UBCzUAJ81+EKqxb4I0QAOYywlpn8K+zejo7iK6F3xEknau8bgxBmaatUqwIDAQAB
o4ICXzCCAlswHQYDVR0OBBYEFA4d5v1LACT+DlX1k1CCJHslGZexMB8GA1UdIwQY
MBaAFIiyE78WJ1SO/fsbLiZFuq8dmDqgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUxJVHZ4WW5WSTc5LXhzdUprVzZyeDJZT3FBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8zYzAyNjktYzE5NC00ZTZkLWFiY2Ut
NzI3MzVlMTE4ZDUxLzEvRGgzbV9Vc0FKUDRPVmZXVFVJSWtleVVabDdFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS8zYzAyNjktYzE5NC00ZTZkLWFiY2UtNzI3MzVlMTE4ZDUx
LzEvaUxJVHZ4WW5WSTc5LXhzdUprVzZyeDJZT3FBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHUGCCsGAQUFBwEHAQH/BGYwZDAwBAIAATAqAwQAPnq8AwQA
VPZvAwQAW/eyAwQAsGHVAwQAshe8AwQAwhrfAwQA1ej8MDAEAgACMCoDBQMqEaEA
AwUDKhOOAAMFAyoTkwADBQMqE6cAAwUDKhPaAAMFAyoT/gAwDQYJKoZIhvcNAQEL
BQADggEBALsfehysmQhGGIEBZlU3rZ8uSnLQGkemajlUlzmWnHrqMkjon2TOFvwL
VsKeliyJVNyXilWqIL4mqDUjzdY3is3ngKYxWMwT7o7p+7DFPhwqSTUH3zm9EXEp
//+B+N/noVhUq2pSr6oF6XXCwJoGQRxubDvue2y1MPI6BayQSFD9QftJX/TyJx/1
HxuLm8gZkjZ0UTcvnl8Hufy6AKVMcps8UShiRffDbk3vEXlebb4Pn9vD0FtNCmJh
8yx0hgHguXwZ0mCvfkvfVFP5H6faIIWJcTJp/EFA30x8u5dk+XJ8qXWhVtfmDQcD
ULSx1wOxmgKbW8k4gEPPs7PYSewaI78=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:01 2024 by rpki-client on console-fra.rpki-client.org