Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/ajhd9yFGsHvyTrAIkGsm-Wd3Gqg.roa
File: ajhd9yFGsHvyTrAIkGsm-Wd3Gqg.roa (raw, json)
Hash identifier: H8+Vi5BO/Mm/X/DiUsHUvbVWPbcZLRCt5Jgb0Ifl47o=
Subject key identifier: 6A:38:5D:F7:21:46:B0:7B:F2:4E:B0:08:90:6B:26:F9:67:77:1A:A8
Certificate issuer: /CN=622276db9d9b34cdec2620c7257dc5ad4aeb832d
Certificate serial: 0185711E4C0C0201373B3E2F5695DEFCD63D
Authority key identifier: 62:22:76:DB:9D:9B:34:CD:EC:26:20:C7:25:7D:C5:AD:4A:EB:83:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiJ2252bNM3sJiDHJX3FrUrrgy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/ajhd9yFGsHvyTrAIkGsm-Wd3Gqg.roa
Signing time: Mon 02 Jan 2023 06:14:48 +0000
ROA not before: Mon 02 Jan 2023 06:14:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 397735
IP address blocks: 45.142.248.0/24 maxlen: 24
45.142.251.0/24 maxlen: 24
45.142.250.0/24 maxlen: 24
45.142.249.0/24 maxlen: 24
193.53.2.0/24 maxlen: 24
193.53.7.0/24 maxlen: 24
193.53.5.0/24 maxlen: 24
193.53.12.0/24 maxlen: 24
2a0e:dd40::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:30:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:1e:4c:0c:02:01:37:3b:3e:2f:56:95:de:fc:d6:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=622276db9d9b34cdec2620c7257dc5ad4aeb832d
Validity
Not Before: Jan 2 06:14:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6a385df72146b07bf24eb008906b26f967771aa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:60:d7:5a:dc:c0:2f:f3:44:2b:8d:76:a2:d3:
b1:6e:05:a1:96:ef:ba:f4:35:a6:10:31:8e:9b:42:
94:75:51:f2:0e:b9:06:31:e9:22:7a:e6:c6:aa:ce:
0a:17:27:98:9d:eb:e3:d9:9c:27:a8:cf:e6:34:9b:
6d:0f:c3:18:7a:af:72:53:25:53:2b:1b:12:6d:81:
1d:40:31:eb:75:dc:92:22:92:1f:ee:e7:a6:f8:06:
73:7e:d5:2a:f5:c2:08:d6:11:66:57:2d:5d:e6:32:
1a:da:8c:7d:e0:14:fd:97:62:75:96:a4:53:b3:eb:
43:6e:61:78:6c:73:9b:db:75:ff:48:4b:82:eb:52:
75:13:0e:c7:32:3f:9b:68:cd:23:f7:20:e7:42:5d:
a4:e0:9c:32:81:e5:9a:9e:e1:9d:de:6e:8c:26:9f:
1a:03:bc:2a:09:f5:c7:43:25:a9:12:62:76:b6:05:
7f:7c:73:df:0a:a9:d5:4a:9a:b6:d7:11:1b:a1:87:
b5:71:7e:f2:1d:c9:34:79:92:db:56:2b:cf:65:17:
28:60:0a:20:b3:d3:ea:b1:1e:fa:b4:39:42:e9:b5:
d0:ab:cc:f0:54:41:d3:bd:0b:3f:7e:e1:7f:07:c6:
68:48:8f:d7:ad:ee:41:7b:85:e5:10:6a:1d:19:3f:
ab:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:38:5D:F7:21:46:B0:7B:F2:4E:B0:08:90:6B:26:F9:67:77:1A:A8
X509v3 Authority Key Identifier:
keyid:62:22:76:DB:9D:9B:34:CD:EC:26:20:C7:25:7D:C5:AD:4A:EB:83:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiJ2252bNM3sJiDHJX3FrUrrgy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/ajhd9yFGsHvyTrAIkGsm-Wd3Gqg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.248.0/22
193.53.2.0/24
193.53.5.0/24
193.53.7.0/24
193.53.12.0/24
IPv6:
2a0e:dd40::/32
Signature Algorithm: sha256WithRSAEncryption
61:43:22:12:b4:dc:8a:42:25:d5:19:78:90:82:eb:33:e4:09:
c0:82:d8:06:8a:3e:12:53:39:86:64:76:9e:e3:5d:17:47:89:
32:59:93:19:94:c0:6e:bb:3a:1c:42:2e:2d:f0:f6:c6:ec:ed:
de:7f:55:c7:a2:62:17:05:96:d3:18:54:4b:2c:e4:50:27:aa:
3e:e8:33:2d:17:6e:c2:3b:95:6a:db:37:48:11:9a:ec:60:2f:
40:a3:3e:2b:fd:4f:59:5f:fe:83:22:9b:4f:a3:8e:4c:90:29:
00:f2:8a:64:ba:8d:74:28:eb:fd:4f:6a:6d:94:03:b1:2d:cd:
96:69:13:9c:2d:ca:f7:e5:a7:a7:72:ad:bc:cd:19:bf:f8:30:
9a:25:cc:56:b3:36:af:4c:1f:98:f7:ab:b6:6c:0a:79:ad:d9:
62:2c:23:92:20:b1:31:a9:7a:b1:2b:26:10:41:2e:00:7e:52:
70:6b:ca:2f:52:1b:ac:58:e6:e9:03:b5:be:60:05:c9:40:d2:
1f:56:b7:6f:ae:c2:a8:3f:5b:ed:37:27:ef:1e:19:7f:da:6b:
7d:44:00:13:1c:90:df:ff:27:ae:10:ac:17:e3:d0:dc:81:eb:
bf:ed:be:d0:73:85:94:32:38:7c:3f:42:6e:fd:50:0f:f8:f4:
1e:46:fe:d0
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgISAYVxHkwMAgE3Oz4vVpXe/NY9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyMjI3NmRiOWQ5YjM0Y2RlYzI2MjBjNzI1N2RjNWFkNGFl
YjgzMmQwHhcNMjMwMTAyMDYxNDQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YTM4NWRmNzIxNDZiMDdiZjI0ZWIwMDg5MDZiMjZmOTY3NzcxYWE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1WDXWtzAL/NEK412otOxbgWhlu+6
9DWmEDGOm0KUdVHyDrkGMekieubGqs4KFyeYnevj2ZwnqM/mNJttD8MYeq9yUyVT
KxsSbYEdQDHrddySIpIf7uem+AZzftUq9cII1hFmVy1d5jIa2ox94BT9l2J1lqRT
s+tDbmF4bHOb23X/SEuC61J1Ew7HMj+baM0j9yDnQl2k4JwygeWanuGd3m6MJp8a
A7wqCfXHQyWpEmJ2tgV/fHPfCqnVSpq21xEboYe1cX7yHck0eZLbVivPZRcoYAog
s9PqsR76tDlC6bXQq8zwVEHTvQs/fuF/B8ZoSI/Xre5Be4XlEGodGT+rfQIDAQAB
o4ICMDCCAiwwHQYDVR0OBBYEFGo4XfchRrB78k6wCJBrJvlndxqoMB8GA1UdIwQY
MBaAFGIidtudmzTN7CYgxyV9xa1K64MtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWlKMjI1MmJOTTNzSmlESEpYM0ZyVXJyZ3kwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC84N2FhM2QtY2E1ZS00NTEzLWFhOWUt
ZTZlZTU4MzRjOTk1LzEvYWpoZDl5RkdzSHZ5VHJBSWtHc20tV2QzR3FnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC84N2FhM2QtY2E1ZS00NTEzLWFhOWUtZTZlZTU4MzRjOTk1
LzEvWWlKMjI1MmJOTTNzSmlESEpYM0ZyVXJyZ3kwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQCLY74AwQA
wTUCAwQAwTUFAwQAwTUHAwQAwTUMMA0EAgACMAcDBQAqDt1AMA0GCSqGSIb3DQEB
CwUAA4IBAQBhQyIStNyKQiXVGXiQgusz5AnAgtgGij4SUzmGZHae410XR4kyWZMZ
lMBuuzocQi4t8PbG7O3ef1XHomIXBZbTGFRLLORQJ6o+6DMtF27CO5Vq2zdIEZrs
YC9Aoz4r/U9ZX/6DIptPo45MkCkA8opkuo10KOv9T2ptlAOxLc2WaROcLcr35aen
cq28zRm/+DCaJcxWszavTB+Y96u2bAp5rdliLCOSILExqXqxKyYQQS4AflJwa8ov
UhusWObpA7W+YAXJQNIfVrdvrsKoP1vtNyfvHhl/2mt9RAATHJDf/yeuEKwX49Dc
geu/7b7Qc4WUMjh8P0Ju/VAP+PQeRv7Q
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:41 2024 by rpki-client on console-fra.rpki-client.org