Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/IoyrO7G2o5ghbppTnxQSsbenGwA.roa
File: IoyrO7G2o5ghbppTnxQSsbenGwA.roa (raw, json)
Hash identifier: 54UDHEESSLkTBsGDBdZ0JCXuu+1eSpN19DVmctgAqLM=
Subject key identifier: 22:8C:AB:3B:B1:B6:A3:98:21:6E:9A:53:9F:14:12:B1:B7:A7:1B:00
Certificate issuer: /CN=fc4d06978969a8bdab6d6359062d7781e03449ca
Certificate serial: 018CC26D21AEBD804714B598FA78F86DE7F0
Authority key identifier: FC:4D:06:97:89:69:A8:BD:AB:6D:63:59:06:2D:77:81:E0:34:49:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_E0Gl4lpqL2rbWNZBi13geA0Sco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/IoyrO7G2o5ghbppTnxQSsbenGwA.roa
Signing time: Mon 01 Jan 2024 00:29:41 +0000
ROA not before: Mon 01 Jan 2024 00:29:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21412
IP address blocks: 185.198.32.0/22 maxlen: 22
77.87.8.0/21 maxlen: 21
185.26.132.0/22 maxlen: 22
80.240.0.0/20 maxlen: 20
178.250.32.0/21 maxlen: 21
37.157.144.0/21 maxlen: 21
178.16.32.0/20 maxlen: 20
5.20.0.0/21 maxlen: 32
5.20.8.0/21 maxlen: 21
5.20.16.0/20 maxlen: 20
212.52.32.0/19 maxlen: 19
5.20.32.0/19 maxlen: 19
87.247.64.0/18 maxlen: 18
5.20.112.0/21 maxlen: 21
5.20.120.0/21 maxlen: 21
5.20.128.0/19 maxlen: 19
87.239.112.0/21 maxlen: 21
31.209.64.0/20 maxlen: 20
5.20.64.0/19 maxlen: 19
185.54.12.0/22 maxlen: 22
5.20.96.0/21 maxlen: 21
5.20.104.0/21 maxlen: 21
46.251.32.0/19 maxlen: 19
5.20.224.0/21 maxlen: 21
91.187.160.0/19 maxlen: 19
5.20.232.0/21 maxlen: 21
5.20.240.0/20 maxlen: 20
212.117.0.0/19 maxlen: 19
79.133.224.0/19 maxlen: 19
5.20.160.0/19 maxlen: 19
81.29.16.0/20 maxlen: 20
217.17.80.0/20 maxlen: 20
80.243.16.0/20 maxlen: 20
5.20.192.0/19 maxlen: 19
77.221.64.0/19 maxlen: 19
2a00:7600::/32 maxlen: 32
2a04:eb00::/29 maxlen: 29
2a01:a1c0::/32 maxlen: 32
2a04:ce00::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 18 Mar 2024 12:27:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:21:ae:bd:80:47:14:b5:98:fa:78:f8:6d:e7:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc4d06978969a8bdab6d6359062d7781e03449ca
Validity
Not Before: Jan 1 00:29:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=228cab3bb1b6a398216e9a539f1412b1b7a71b00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:5f:2a:93:d8:48:ad:7f:5f:7b:ac:0e:e5:d0:
76:68:47:c7:7b:f1:6c:43:f8:01:ae:0e:27:ab:1c:
36:b4:67:11:ef:88:42:e2:57:05:b7:2e:c5:da:a8:
a9:e3:b9:6f:7e:47:55:c5:be:03:c5:b4:24:64:1b:
91:cd:2d:f6:d2:06:50:79:63:26:6b:bb:dd:ba:02:
30:90:56:27:82:3c:10:8a:0f:53:dc:15:d6:e7:d9:
d4:05:6c:9e:17:cd:ba:16:14:31:ca:f9:68:cb:92:
10:0f:2f:ab:0d:40:09:a3:1a:fb:d1:a5:f8:34:65:
ea:39:ec:31:ca:4f:09:09:7f:3d:bb:20:1e:08:28:
81:38:85:0b:6c:79:8f:62:dd:7a:60:e3:e2:f4:3a:
1a:be:da:a3:c2:4b:a2:ad:3e:af:da:60:4c:53:62:
68:38:a8:38:60:48:81:fe:77:95:e6:42:e8:3f:9d:
70:24:32:8b:17:4c:45:b1:92:8b:a1:2c:34:97:a6:
dd:a6:64:34:4c:89:90:4a:9c:72:cf:db:98:8b:57:
3e:1b:28:4f:6a:be:9a:40:30:a2:b3:c5:67:ce:dc:
61:4d:12:16:51:4f:85:d2:aa:5a:87:c1:1b:4d:c6:
05:69:be:8b:ce:d0:e0:b4:9b:f6:11:fc:ca:e5:5e:
22:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:8C:AB:3B:B1:B6:A3:98:21:6E:9A:53:9F:14:12:B1:B7:A7:1B:00
X509v3 Authority Key Identifier:
keyid:FC:4D:06:97:89:69:A8:BD:AB:6D:63:59:06:2D:77:81:E0:34:49:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_E0Gl4lpqL2rbWNZBi13geA0Sco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/IoyrO7G2o5ghbppTnxQSsbenGwA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/_E0Gl4lpqL2rbWNZBi13geA0Sco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.20.0.0/16
31.209.64.0/20
37.157.144.0/21
46.251.32.0/19
77.87.8.0/21
77.221.64.0/19
79.133.224.0/19
80.240.0.0/20
80.243.16.0/20
81.29.16.0/20
87.239.112.0/21
87.247.64.0/18
91.187.160.0/19
178.16.32.0/20
178.250.32.0/21
185.26.132.0/22
185.54.12.0/22
185.198.32.0/22
212.52.32.0/19
212.117.0.0/19
217.17.80.0/20
IPv6:
2a00:7600::/32
2a01:a1c0::/32
2a04:ce00::/29
2a04:eb00::/29
Signature Algorithm: sha256WithRSAEncryption
6e:97:f8:ca:32:6f:a7:56:83:8e:5f:12:4d:90:36:64:24:e9:
69:c7:87:73:f8:a9:f6:54:61:57:a8:14:34:8b:ab:69:ef:e4:
b2:fe:25:7c:6b:bb:7b:cb:c3:a9:13:bb:36:b0:e7:88:3a:3b:
03:ff:e9:bb:4b:b4:13:eb:94:2a:2c:bb:5e:56:02:ef:a5:a5:
67:55:e2:1a:2c:58:5c:cc:5a:26:22:24:fc:75:b5:3e:90:fd:
68:39:ad:f6:e9:4a:04:5c:e2:5a:94:ef:f0:4d:97:0d:35:b0:
77:02:01:0f:f8:aa:36:22:62:bf:59:17:f0:27:ae:cb:86:f2:
57:eb:b0:8c:ca:57:3a:57:d8:2b:24:b0:f3:5d:d9:a2:05:e7:
8f:54:2f:e6:8d:3d:fa:f8:77:72:48:27:a8:dc:bf:5a:5a:4e:
16:b6:26:c7:eb:54:7b:89:d5:39:5a:d3:fc:52:78:a0:4c:6a:
26:cc:7a:b9:42:9e:ae:d9:46:13:b0:91:0a:24:02:20:2f:e0:
9a:9b:5b:e0:65:c9:48:b8:25:fc:40:e5:b2:3b:10:30:1e:51:
fd:87:45:0a:2b:3e:4f:4e:c1:b8:3b:c9:e3:e0:15:1c:62:db:
79:7f:7b:43:ed:47:10:98:bf:d0:08:f8:5a:84:54:83:2b:4c:
66:11:b6:2d
-----BEGIN CERTIFICATE-----
MIIFnDCCBISgAwIBAgISAYzCbSGuvYBHFLWY+nj4befwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjNGQwNjk3ODk2OWE4YmRhYjZkNjM1OTA2MmQ3NzgxZTAz
NDQ5Y2EwHhcNMjQwMTAxMDAyOTQxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMjhjYWIzYmIxYjZhMzk4MjE2ZTlhNTM5ZjE0MTJiMWI3YTcxYjAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg18qk9hIrX9fe6wO5dB2aEfHe/Fs
Q/gBrg4nqxw2tGcR74hC4lcFty7F2qip47lvfkdVxb4DxbQkZBuRzS320gZQeWMm
a7vdugIwkFYngjwQig9T3BXW59nUBWyeF826FhQxyvloy5IQDy+rDUAJoxr70aX4
NGXqOewxyk8JCX89uyAeCCiBOIULbHmPYt16YOPi9DoavtqjwkuirT6v2mBMU2Jo
OKg4YEiB/neV5kLoP51wJDKLF0xFsZKLoSw0l6bdpmQ0TImQSpxyz9uYi1c+GyhP
ar6aQDCis8VnztxhTRIWUU+F0qpah8EbTcYFab6LztDgtJv2EfzK5V4i6wIDAQAB
o4ICqDCCAqQwHQYDVR0OBBYEFCKMqzuxtqOYIW6aU58UErG3pxsAMB8GA1UdIwQY
MBaAFPxNBpeJaai9q21jWQYtd4HgNEnKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0UwR2w0bHBxTDJyYldOWkJpMTNnZUEwU2NvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8wODJjMzEtZjRlZi00YWNiLTkwZjEt
ZGEwM2JmN2EyZWMyLzEvSW95ck83RzJvNWdoYnBwVG54UVNzYmVuR3dBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC8wODJjMzEtZjRlZi00YWNiLTkwZjEtZGEwM2JmN2EyZWMy
LzEvX0UwR2w0bHBxTDJyYldOWkJpMTNnZUEwU2NvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIG9BggrBgEFBQcBBwEB/wSBrTCBqjCBgwQCAAEwfQMDAAUU
AwQEH9FAAwQDJZ2QAwQFLvsgAwQDTVcIAwQFTd1AAwQFT4XgAwQEUPAAAwQEUPMQ
AwQEUR0QAwQDV+9wAwQGV/dAAwQFW7ugAwQEshAgAwQDsvogAwQCuRqEAwQCuTYM
AwQCucYgAwQF1DQgAwQF1HUAAwQE2RFQMCIEAgACMBwDBQAqAHYAAwUAKgGhwAMF
AyoEzgADBQMqBOsAMA0GCSqGSIb3DQEBCwUAA4IBAQBul/jKMm+nVoOOXxJNkDZk
JOlpx4dz+Kn2VGFXqBQ0i6tp7+Sy/iV8a7t7y8OpE7s2sOeIOjsD/+m7S7QT65Qq
LLteVgLvpaVnVeIaLFhczFomIiT8dbU+kP1oOa326UoEXOJalO/wTZcNNbB3AgEP
+Ko2ImK/WRfwJ67LhvJX67CMylc6V9grJLDzXdmiBeePVC/mjT36+HdySCeo3L9a
Wk4WtibH61R7idU5WtP8UnigTGomzHq5Qp6u2UYTsJEKJAIgL+Cam1vgZclIuCX8
QOWyOxAwHlH9h0UKKz5PTsG4O8nj4BUcYtt5f3tD7UcQmL/QCPhahFSDK0xmEbYt
-----END CERTIFICATE-----
Generated at Mon Mar 18 17:05:22 2024 by rpki-client on console-fra.rpki-client.org