Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/30HVEdgmC7aJTz7gpjdlpVlNquo.roa
File: 30HVEdgmC7aJTz7gpjdlpVlNquo.roa (raw, json)
Hash identifier: 2Ll1DOtg3LbQv28RyhN2o0Dhc5QrX+9zIYWDiaRz8fo=
Subject key identifier: DF:41:D5:11:D8:26:0B:B6:89:4F:3E:E0:A6:37:65:A5:59:4D:AA:EA
Certificate issuer: /CN=e501815c6f98f3a2b6184afebf18ea341be882ea
Certificate serial: 018CC9BA721F0D0E2E616FB73059CC64117D
Authority key identifier: E5:01:81:5C:6F:98:F3:A2:B6:18:4A:FE:BF:18:EA:34:1B:E8:82:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/30HVEdgmC7aJTz7gpjdlpVlNquo.roa
Signing time: Tue 02 Jan 2024 10:31:28 +0000
ROA not before: Tue 02 Jan 2024 10:31:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47894
IP address blocks: 94.103.36.0/24 maxlen: 24
94.103.38.0/24 maxlen: 24
94.103.37.0/24 maxlen: 24
94.103.39.0/24 maxlen: 24
94.103.41.0/24 maxlen: 24
94.103.43.0/24 maxlen: 24
94.103.42.0/24 maxlen: 24
185.35.20.0/24 maxlen: 24
185.35.22.0/24 maxlen: 24
185.35.23.0/24 maxlen: 24
2a00:7300:42::/48 maxlen: 48
2a00:7300:1::/48 maxlen: 48
2a00:7300::/32 maxlen: 32
2a00:7300:100::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 28 Feb 2024 07:29:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:ba:72:1f:0d:0e:2e:61:6f:b7:30:59:cc:64:11:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e501815c6f98f3a2b6184afebf18ea341be882ea
Validity
Not Before: Jan 2 10:31:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=df41d511d8260bb6894f3ee0a63765a5594daaea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:f9:cb:b8:59:c0:95:a3:63:85:34:3c:e2:9a:
e2:d1:d2:1a:e6:b2:18:b5:dd:10:d3:0d:13:22:53:
30:55:bd:60:fd:f1:dd:f1:11:e6:69:70:b9:63:ca:
2c:7c:9f:14:3a:32:a9:13:40:fb:f1:06:bd:d7:cf:
21:e4:34:cf:5a:13:52:69:0e:f6:85:dc:41:f7:2b:
97:7f:69:6b:f2:b9:c8:04:9e:bc:e8:da:2b:1c:92:
e9:68:fc:99:c9:15:17:66:42:c8:7b:25:2a:00:96:
fa:fe:b3:ec:a6:0c:09:46:15:64:f8:77:eb:71:49:
52:79:da:2c:11:04:1a:7e:5a:ee:61:1f:5f:93:11:
6a:d1:9c:da:8f:ef:ae:86:1c:b3:95:17:7b:d5:12:
05:c6:4c:40:3f:b8:22:6b:03:be:27:50:4a:91:ec:
37:3a:0b:7e:d4:72:8a:3e:38:57:de:e3:44:28:c4:
79:5a:7e:56:07:94:60:9f:98:d6:bd:8a:63:b7:65:
cb:b0:69:dc:50:3d:6d:2d:7a:28:7b:cb:3f:ff:2f:
06:0d:bd:27:d7:38:96:82:7b:ac:81:6f:f3:db:69:
59:2d:52:0d:0d:32:29:fc:34:38:d1:c3:6d:d6:e4:
33:fd:92:bd:9a:b6:e0:f2:4f:ab:6b:ab:25:f2:02:
3a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:41:D5:11:D8:26:0B:B6:89:4F:3E:E0:A6:37:65:A5:59:4D:AA:EA
X509v3 Authority Key Identifier:
keyid:E5:01:81:5C:6F:98:F3:A2:B6:18:4A:FE:BF:18:EA:34:1B:E8:82:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/30HVEdgmC7aJTz7gpjdlpVlNquo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/5QGBXG-Y86K2GEr-vxjqNBvoguo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.103.36.0/22
94.103.41.0-94.103.43.255
185.35.20.0/24
185.35.22.0/23
IPv6:
2a00:7300::/32
Signature Algorithm: sha256WithRSAEncryption
01:c4:86:31:46:18:f6:dc:67:f7:49:c1:e4:53:72:43:23:dc:
2d:b8:ec:99:02:ce:b8:02:8c:36:69:12:45:79:79:46:90:d4:
02:a6:23:5b:d3:a1:49:b3:a9:62:58:ea:67:a1:e0:d0:cb:19:
f5:45:b4:37:66:09:08:b1:1a:d8:5b:f8:ac:8c:ff:72:c1:6a:
ef:38:24:e3:31:69:d4:84:58:ca:69:2c:72:70:40:72:11:fe:
04:43:3f:c9:da:1b:6e:9e:7b:17:df:25:7b:af:89:9d:29:f7:
0a:83:c0:54:bd:27:67:2a:14:77:1d:2e:2f:2b:fd:dc:e2:d7:
47:80:e1:98:7f:e7:c9:d5:e3:87:95:da:f6:9f:cf:37:94:ae:
03:2f:65:e4:36:67:6c:38:8d:f1:83:08:1b:4b:54:1c:38:e7:
25:62:78:d9:e4:07:d4:e9:39:d3:71:fc:40:22:27:8c:44:b7:
68:63:13:75:ac:38:19:9b:65:58:10:e3:1a:0a:4e:e7:74:f5:
50:19:46:19:f9:6c:37:96:50:f4:7d:b1:14:b1:ff:1e:d8:6a:
48:11:96:b7:0e:cb:99:45:d0:d5:51:11:2a:23:99:b3:2a:b1:
20:77:09:77:8d:8f:cf:8d:f7:6e:05:de:63:25:0d:83:ac:cb:
0c:f1:93:21
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgISAYzJunIfDQ4uYW+3MFnMZBF9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1MDE4MTVjNmY5OGYzYTJiNjE4NGFmZWJmMThlYTM0MWJl
ODgyZWEwHhcNMjQwMTAyMTAzMTI4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZjQxZDUxMWQ4MjYwYmI2ODk0ZjNlZTBhNjM3NjVhNTU5NGRhYWVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgPnLuFnAlaNjhTQ84pri0dIa5rIY
td0Q0w0TIlMwVb1g/fHd8RHmaXC5Y8osfJ8UOjKpE0D78Qa9188h5DTPWhNSaQ72
hdxB9yuXf2lr8rnIBJ686NorHJLpaPyZyRUXZkLIeyUqAJb6/rPspgwJRhVk+Hfr
cUlSedosEQQaflruYR9fkxFq0Zzaj++uhhyzlRd71RIFxkxAP7giawO+J1BKkew3
Ogt+1HKKPjhX3uNEKMR5Wn5WB5Rgn5jWvYpjt2XLsGncUD1tLXooe8s//y8GDb0n
1ziWgnusgW/z22lZLVINDTIp/DQ40cNt1uQz/ZK9mrbg8k+ra6sl8gI6EwIDAQAB
o4ICMjCCAi4wHQYDVR0OBBYEFN9B1RHYJgu2iU8+4KY3ZaVZTarqMB8GA1UdIwQY
MBaAFOUBgVxvmPOithhK/r8Y6jQb6ILqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVFHQlhHLVk4NksyR0VyLXZ4anFOQnZvZ3VvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy81YjAyMjItZWQ2NC00ZjU1LWI0NWIt
MDA1OWY3MzdlZjA1LzEvMzBIVkVkZ21DN2FKVHo3Z3BqZGxwVmxOcXVvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy81YjAyMjItZWQ2NC00ZjU1LWI0NWItMDA1OWY3MzdlZjA1
LzEvNVFHQlhHLVk4NksyR0VyLXZ4anFOQnZvZ3VvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEgGCCsGAQUFBwEHAQH/BDkwNzAmBAIAATAgAwQCXmckMAwD
BABeZykDBAJeZygDBAC5IxQDBAG5IxYwDQQCAAIwBwMFACoAcwAwDQYJKoZIhvcN
AQELBQADggEBAAHEhjFGGPbcZ/dJweRTckMj3C247JkCzrgCjDZpEkV5eUaQ1AKm
I1vToUmzqWJY6meh4NDLGfVFtDdmCQixGthb+KyM/3LBau84JOMxadSEWMppLHJw
QHIR/gRDP8naG26eexffJXuviZ0p9wqDwFS9J2cqFHcdLi8r/dzi10eA4Zh/58nV
44eV2vafzzeUrgMvZeQ2Z2w4jfGDCBtLVBw45yVieNnkB9TpOdNx/EAiJ4xEt2hj
E3WsOBmbZVgQ4xoKTud09VAZRhn5bDeWUPR9sRSx/x7YakgRlrcOy5lF0NVRESoj
mbMqsSB3CXeNj8+N924F3mMlDYOsywzxkyE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:31 2024 by rpki-client on console-fra.rpki-client.org