Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/1w-nsj5v-ZXx89xPanRxckOjAsE.roa
File: 1w-nsj5v-ZXx89xPanRxckOjAsE.roa (raw, json)
Hash identifier: B+9i3lfNQo5AFf+ifHp81KQYMSEM0QG++bk2kTWa4Ss=
Subject key identifier: D7:0F:A7:B2:3E:6F:F9:95:F1:F3:DC:4F:6A:74:71:72:43:A3:02:C1
Certificate issuer: /CN=66df7742890173927935206a28efbf48123e787c
Certificate serial: 018E37E95FFB165266BEAB57F8D8630F95D5
Authority key identifier: 66:DF:77:42:89:01:73:92:79:35:20:6A:28:EF:BF:48:12:3E:78:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/1w-nsj5v-ZXx89xPanRxckOjAsE.roa
Signing time: Wed 13 Mar 2024 13:03:45 +0000
ROA not before: Wed 13 Mar 2024 13:03:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202
IP address blocks: 5.159.208.0/21 maxlen: 24
31.192.96.0/21 maxlen: 24
45.8.100.0/22 maxlen: 24
45.132.108.0/22 maxlen: 24
80.74.240.0/21 maxlen: 24
80.74.248.0/21 maxlen: 24
85.95.96.0/19 maxlen: 24
92.42.120.0/21 maxlen: 24
95.129.64.0/21 maxlen: 24
185.79.184.0/22 maxlen: 24
185.94.204.0/22 maxlen: 24
185.99.76.0/22 maxlen: 24
185.145.88.0/22 maxlen: 24
185.178.216.0/22 maxlen: 24
185.204.212.0/22 maxlen: 24
188.94.16.0/21 maxlen: 24
193.24.3.0/24 maxlen: 24
193.24.6.0/24 maxlen: 24
193.24.13.0/24 maxlen: 24
193.24.31.0/24 maxlen: 24
195.26.32.0/19 maxlen: 24
195.88.8.0/23 maxlen: 24
212.11.68.0/22 maxlen: 24
212.11.72.0/22 maxlen: 24
2a00:f1c0::/32 maxlen: 32
2a04:e9c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 14 Mar 2024 16:23:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:37:e9:5f:fb:16:52:66:be:ab:57:f8:d8:63:0f:95:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66df7742890173927935206a28efbf48123e787c
Validity
Not Before: Mar 13 13:03:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d70fa7b23e6ff995f1f3dc4f6a74717243a302c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:02:b9:f6:06:83:ed:08:85:b6:48:3b:3c:1a:
03:7a:c2:c2:4e:e9:19:c3:07:52:f0:92:15:e4:d3:
1e:93:73:e6:b3:f4:8d:b8:34:bf:fc:fb:24:7f:1a:
16:c3:f3:64:b9:09:6e:2e:d0:e7:c3:5c:be:74:56:
97:b1:44:a6:bd:42:fb:a6:01:88:c4:6c:94:8d:b6:
23:95:a4:2f:af:a8:b1:e8:fb:8e:d3:19:d8:9c:a0:
08:e7:99:e7:d2:43:3d:cc:87:8a:9b:fd:d1:ac:3b:
53:62:2d:66:8a:21:8b:6b:81:f1:1f:ef:bd:cb:dd:
c8:02:00:a2:73:9b:b6:0a:5b:e1:c4:b0:5f:e7:e4:
59:86:ce:6f:b5:e4:13:99:1c:87:d7:46:ee:22:ea:
36:27:e1:e1:f4:5c:46:63:ec:58:55:02:6c:62:ce:
4f:d3:d1:4c:2d:27:8c:70:c8:e5:37:e7:63:27:eb:
d8:ec:65:c8:ae:43:22:29:20:33:f2:0d:b8:72:d5:
e8:38:b2:b1:b4:35:1b:25:51:5d:bb:c6:31:6c:16:
65:66:ff:9f:bf:72:55:83:8c:b5:96:53:56:9f:ee:
7a:c7:b4:90:58:93:e5:ab:99:b5:1b:67:03:f5:32:
15:dd:13:99:14:f9:f0:28:3a:74:28:5d:b9:3c:68:
02:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:0F:A7:B2:3E:6F:F9:95:F1:F3:DC:4F:6A:74:71:72:43:A3:02:C1
X509v3 Authority Key Identifier:
keyid:66:DF:77:42:89:01:73:92:79:35:20:6A:28:EF:BF:48:12:3E:78:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/1w-nsj5v-ZXx89xPanRxckOjAsE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.159.208.0/21
31.192.96.0/21
45.8.100.0/22
45.132.108.0/22
80.74.240.0/20
85.95.96.0/19
92.42.120.0/21
95.129.64.0/21
185.79.184.0/22
185.94.204.0/22
185.99.76.0/22
185.145.88.0/22
185.178.216.0/22
185.204.212.0/22
188.94.16.0/21
193.24.3.0/24
193.24.6.0/24
193.24.13.0/24
193.24.31.0/24
195.26.32.0/19
195.88.8.0/23
212.11.68.0-212.11.75.255
IPv6:
2a00:f1c0::/32
2a04:e9c0::/29
Signature Algorithm: sha256WithRSAEncryption
5c:18:b3:c4:8e:13:0a:7a:b4:f3:4d:29:19:e6:7a:76:cc:20:
1d:c5:7d:ed:9a:b8:2e:11:c8:4e:e0:27:d9:26:84:3f:55:2f:
bf:3f:03:91:56:9d:69:dc:68:76:87:2f:c6:0f:9a:33:5e:4c:
88:c9:21:1d:cf:1b:59:eb:e2:cd:00:49:a6:ea:f7:74:83:9e:
cd:b1:90:9f:80:d5:18:2b:9e:50:69:6f:14:57:5b:02:be:28:
09:6f:ba:84:46:63:02:fa:6a:67:45:69:27:ee:d9:18:d4:77:
11:aa:26:06:ff:75:a7:0d:25:8e:75:22:81:7c:47:59:e0:48:
49:6c:29:94:3d:98:5b:68:e1:f1:d0:d6:d7:e3:3f:69:e8:1f:
77:01:25:bd:61:33:9b:54:aa:3f:04:ee:26:02:c6:62:55:c9:
6c:39:a9:98:d5:99:eb:a1:2e:59:a9:42:de:45:d3:f0:68:65:
a8:e6:8d:6a:dc:a2:95:5e:4c:fc:7c:c2:02:95:d5:7c:da:e2:
50:c3:91:ab:63:ed:f4:26:c5:1a:94:df:a4:0f:9e:96:7e:cd:
54:b9:0c:80:37:7f:02:15:24:0f:da:32:ee:44:1e:46:05:1d:
d6:2f:18:ea:fd:bf:f1:1e:5c:17:1b:c1:5e:11:78:47:49:55:
29:8b:f0:37
-----BEGIN CERTIFICATE-----
MIIFnjCCBIagAwIBAgISAY436V/7FlJmvqtX+NhjD5XVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2ZGY3NzQyODkwMTczOTI3OTM1MjA2YTI4ZWZiZjQ4MTIz
ZTc4N2MwHhcNMjQwMzEzMTMwMzQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNzBmYTdiMjNlNmZmOTk1ZjFmM2RjNGY2YTc0NzE3MjQzYTMwMmMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQK59gaD7QiFtkg7PBoDesLCTukZ
wwdS8JIV5NMek3Pms/SNuDS//PskfxoWw/NkuQluLtDnw1y+dFaXsUSmvUL7pgGI
xGyUjbYjlaQvr6ix6PuO0xnYnKAI55nn0kM9zIeKm/3RrDtTYi1miiGLa4HxH++9
y93IAgCic5u2ClvhxLBf5+RZhs5vteQTmRyH10buIuo2J+Hh9FxGY+xYVQJsYs5P
09FMLSeMcMjlN+djJ+vY7GXIrkMiKSAz8g24ctXoOLKxtDUbJVFdu8YxbBZlZv+f
v3JVg4y1llNWn+56x7SQWJPlq5m1G2cD9TIV3ROZFPnwKDp0KF25PGgCJQIDAQAB
o4ICqjCCAqYwHQYDVR0OBBYEFNcPp7I+b/mV8fPcT2p0cXJDowLBMB8GA1UdIwQY
MBaAFGbfd0KJAXOSeTUgaijvv0gSPnh8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnQ5M1Fva0JjNUo1TlNCcUtPLV9TQkktZUh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9lODQzNDAtMTI4YS00NDk3LTk0NmYt
MDk3ODdmMTUyYWRlLzEvMXctbnNqNXYtWlh4ODl4UGFuUnhja09qQXNFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS9lODQzNDAtMTI4YS00NDk3LTk0NmYtMDk3ODdmMTUyYWRl
LzEvWnQ5M1Fva0JjNUo1TlNCcUtPLV9TQkktZUh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIG/BggrBgEFBQcBBwEB/wSBrzCBrDCBkwQCAAEwgYwDBAMF
n9ADBAMfwGADBAItCGQDBAIthGwDBARQSvADBAVVX2ADBANcKngDBANfgUADBAK5
T7gDBAK5XswDBAK5Y0wDBAK5kVgDBAK5stgDBAK5zNQDBAO8XhADBADBGAMDBADB
GAYDBADBGA0DBADBGB8DBAXDGiADBAHDWAgwDAMEAtQLRAMEAtQLSDAUBAIAAjAO
AwUAKgDxwAMFAyoE6cAwDQYJKoZIhvcNAQELBQADggEBAFwYs8SOEwp6tPNNKRnm
enbMIB3Ffe2auC4RyE7gJ9kmhD9VL78/A5FWnWncaHaHL8YPmjNeTIjJIR3PG1nr
4s0ASabq93SDns2xkJ+A1RgrnlBpbxRXWwK+KAlvuoRGYwL6amdFaSfu2RjUdxGq
Jgb/dacNJY51IoF8R1ngSElsKZQ9mFto4fHQ1tfjP2noH3cBJb1hM5tUqj8E7iYC
xmJVyWw5qZjVmeuhLlmpQt5F0/BoZajmjWrcopVeTPx8wgKV1Xza4lDDkatj7fQm
xRqU36QPnpZ+zVS5DIA3fwIVJA/aMu5EHkYFHdYvGOr9v/EeXBcbwV4ReEdJVSmL
8Dc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:55 2024 by rpki-client on console-ams.rpki-client.org