Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/vnMOo6SiSwvkN41Sl4cNn0SXrmE.roa
File: vnMOo6SiSwvkN41Sl4cNn0SXrmE.roa (raw, json)
Hash identifier: 3ILRSoW8cO6mEKyeP6+uo/Pe0NVLnCGMSbG1seLsFuQ=
Subject key identifier: BE:73:0E:A3:A4:A2:4B:0B:E4:37:8D:52:97:87:0D:9F:44:97:AE:61
Certificate issuer: /CN=01c38a06a39b20b8da40009237d76acdd28e71a5
Certificate serial: 018D606F7F2AFB9BD9C97923A46CF3BFDEDF
Authority key identifier: 01:C3:8A:06:A3:9B:20:B8:DA:40:00:92:37:D7:6A:CD:D2:8E:71:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AcOKBqObILjaQACSN9dqzdKOcaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/vnMOo6SiSwvkN41Sl4cNn0SXrmE.roa
Signing time: Wed 31 Jan 2024 16:52:16 +0000
ROA not before: Wed 31 Jan 2024 16:52:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16839
IP address blocks: 37.98.232.0/21 maxlen: 21
37.98.232.0/22 maxlen: 22
37.98.232.0/23 maxlen: 23
37.98.232.0/24 maxlen: 24
37.98.233.0/24 maxlen: 24
37.98.234.0/23 maxlen: 23
37.98.234.0/24 maxlen: 24
37.98.235.0/24 maxlen: 24
37.98.236.0/22 maxlen: 22
37.98.236.0/23 maxlen: 23
37.98.236.0/24 maxlen: 24
37.98.237.0/24 maxlen: 24
37.98.238.0/23 maxlen: 23
37.98.238.0/24 maxlen: 24
37.98.239.0/24 maxlen: 24
136.242.128.0/17 maxlen: 17
138.12.128.0/17 maxlen: 17
148.139.0.0/16 maxlen: 16
148.139.0.0/24 maxlen: 24
148.139.1.0/24 maxlen: 24
148.139.2.0/24 maxlen: 24
148.139.3.0/24 maxlen: 24
148.139.4.0/22 maxlen: 22
148.139.8.0/22 maxlen: 22
148.139.12.0/22 maxlen: 22
148.139.16.0/22 maxlen: 22
148.139.28.0/24 maxlen: 24
148.139.29.0/24 maxlen: 24
148.139.30.0/24 maxlen: 24
148.139.32.0/20 maxlen: 20
148.139.48.0/20 maxlen: 20
148.139.64.0/20 maxlen: 20
148.139.80.0/20 maxlen: 20
148.139.96.0/22 maxlen: 22
148.139.100.0/22 maxlen: 22
148.139.104.0/24 maxlen: 24
148.139.105.0/24 maxlen: 24
148.139.108.0/22 maxlen: 22
148.139.112.0/22 maxlen: 22
148.139.116.0/22 maxlen: 22
148.139.120.0/22 maxlen: 22
148.139.124.0/24 maxlen: 24
148.139.125.0/24 maxlen: 24
157.5.128.0/17 maxlen: 17
157.70.0.0/17 maxlen: 17
163.120.128.0/17 maxlen: 17
165.171.0.0/17 maxlen: 17
2a04:37c0::/29 maxlen: 48
2a04:37c0:3110::/48 maxlen: 48
2a04:37c0:3120::/48 maxlen: 48
2a04:37c0:3510::/48 maxlen: 48
2a04:37c0:3520::/48 maxlen: 48
2a04:37c0:4110::/48 maxlen: 48
2a04:37c0:4120::/48 maxlen: 48
2a04:37c0:4410::/48 maxlen: 48
2a04:37c0:4420::/48 maxlen: 48
2a04:37c0:4430::/48 maxlen: 48
2a04:37c0:4910::/48 maxlen: 48
2a04:37c0:4920::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 05 Apr 2024 13:23:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:60:6f:7f:2a:fb:9b:d9:c9:79:23:a4:6c:f3:bf:de:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01c38a06a39b20b8da40009237d76acdd28e71a5
Validity
Not Before: Jan 31 16:52:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=be730ea3a4a24b0be4378d5297870d9f4497ae61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c2:7b:03:f8:22:18:e8:9d:69:a6:b7:e2:03:
c4:43:2f:cb:81:2c:79:04:5a:7a:0d:98:a0:32:fb:
e5:97:9d:f3:d3:6f:19:7e:d1:1d:0f:2d:01:39:0b:
89:14:24:89:e3:80:a7:82:31:37:a8:b3:28:7d:72:
37:74:df:7c:e0:95:d8:e1:e4:ea:3a:a0:47:1f:7a:
e3:54:36:c2:4d:60:23:31:e3:1c:df:1b:86:24:0d:
e9:7b:f3:e9:39:32:ab:f0:7b:79:fd:6c:7b:36:97:
36:ef:e1:0f:12:7d:44:80:86:60:fb:ff:94:42:76:
9e:56:fc:fe:e4:0d:1e:25:49:5b:2c:05:a1:d4:30:
c4:70:23:53:ef:c7:60:48:db:1d:28:55:12:71:fd:
6e:ee:b7:c9:c2:4f:70:b8:14:d7:b5:76:84:93:01:
f9:9f:70:3b:73:36:45:e7:66:1b:06:3b:a5:0e:1e:
a1:77:af:4f:91:be:fc:78:5d:40:4c:a5:a9:8c:0f:
55:93:0f:1d:fa:aa:8d:5a:c7:2d:16:22:88:0e:2c:
d6:9d:0e:9c:a4:e9:9c:7f:bc:ae:c4:bd:7f:c3:b3:
1a:93:83:f2:6f:ed:d4:a6:47:60:2e:8a:b1:bd:5f:
61:55:5c:38:37:46:49:42:74:1f:32:14:19:01:a2:
4c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:73:0E:A3:A4:A2:4B:0B:E4:37:8D:52:97:87:0D:9F:44:97:AE:61
X509v3 Authority Key Identifier:
keyid:01:C3:8A:06:A3:9B:20:B8:DA:40:00:92:37:D7:6A:CD:D2:8E:71:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcOKBqObILjaQACSN9dqzdKOcaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/vnMOo6SiSwvkN41Sl4cNn0SXrmE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.98.232.0/21
136.242.128.0/17
138.12.128.0/17
148.139.0.0/16
157.5.128.0/17
157.70.0.0/17
163.120.128.0/17
165.171.0.0/17
IPv6:
2a04:37c0::/29
Signature Algorithm: sha256WithRSAEncryption
0d:a4:be:82:e8:96:5a:3b:18:6e:61:63:48:62:b6:d4:f8:af:
cc:a4:be:4c:d8:bb:0d:8d:3c:09:05:c8:ad:cc:2b:3d:a1:d4:
8d:b6:e7:65:03:35:86:ed:da:5a:b6:5b:7c:b8:cf:0c:43:4a:
2f:b3:e5:b6:17:6c:6f:17:fb:de:56:03:b2:41:da:14:c2:c5:
19:2e:66:c4:8f:d1:96:47:34:94:f8:e6:2b:7c:8d:51:83:d0:
45:a5:f3:3a:0e:14:49:0b:0e:cb:ee:0c:83:f6:02:30:8f:8c:
34:d6:4c:ab:2f:40:94:3c:29:7d:06:bf:2f:ea:f1:76:ad:61:
c0:de:dc:83:18:8e:c2:5d:00:18:83:8f:2a:6c:ed:91:8a:e4:
d6:24:97:fe:b5:5d:9e:0b:c4:77:a2:e7:bb:2c:39:46:ec:2e:
cd:a7:66:55:ef:a9:51:99:7e:36:67:2c:c9:6d:69:0e:24:bf:
6a:4f:2b:b1:99:f5:35:a7:af:21:32:cb:90:d7:27:4b:a1:ec:
9d:2b:8b:d3:1b:f4:4d:3c:05:01:d4:be:16:32:a1:91:33:ab:
16:ac:c4:5d:04:b2:37:82:aa:a3:fc:50:23:4d:1d:50:a0:6f:
54:77:7e:c1:6b:3d:fa:9d:7c:2f:78:07:95:5f:82:56:e1:b7:
eb:37:ec:44
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgISAY1gb38q+5vZyXkjpGzzv97fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxYzM4YTA2YTM5YjIwYjhkYTQwMDA5MjM3ZDc2YWNkZDI4
ZTcxYTUwHhcNMjQwMTMxMTY1MjE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZTczMGVhM2E0YTI0YjBiZTQzNzhkNTI5Nzg3MGQ5ZjQ0OTdhZTYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMJ7A/giGOidaaa34gPEQy/LgSx5
BFp6DZigMvvll53z028ZftEdDy0BOQuJFCSJ44CngjE3qLMofXI3dN984JXY4eTq
OqBHH3rjVDbCTWAjMeMc3xuGJA3pe/PpOTKr8Ht5/Wx7Npc27+EPEn1EgIZg+/+U
QnaeVvz+5A0eJUlbLAWh1DDEcCNT78dgSNsdKFUScf1u7rfJwk9wuBTXtXaEkwH5
n3A7czZF52YbBjulDh6hd69Pkb78eF1ATKWpjA9Vkw8d+qqNWsctFiKIDizWnQ6c
pOmcf7yuxL1/w7Mak4Pyb+3UpkdgLoqxvV9hVVw4N0ZJQnQfMhQZAaJMkwIDAQAB
o4ICQTCCAj0wHQYDVR0OBBYEFL5zDqOkoksL5DeNUpeHDZ9El65hMB8GA1UdIwQY
MBaAFAHDigajmyC42kAAkjfXas3SjnGlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWNPS0JxT2JJTGphUUFDU045ZHF6ZEtPY2FVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS82YThlNWUtMzliNi00N2UzLWJiYjAt
YjI5ZjEwY2MwMzI4LzEvdm5NT282U2lTd3ZrTjQxU2w0Y05uMFNYcm1FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS82YThlNWUtMzliNi00N2UzLWJiYjAtYjI5ZjEwY2MwMzI4
LzEvQWNPS0JxT2JJTGphUUFDU045ZHF6ZEtPY2FVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFcGCCsGAQUFBwEHAQH/BEgwRjA1BAIAATAvAwQDJWLoAwQH
iPKAAwQHigyAAwMAlIsDBAedBYADBAedRgADBAejeIADBAelqwAwDQQCAAIwBwMF
AyoEN8AwDQYJKoZIhvcNAQELBQADggEBAA2kvoLollo7GG5hY0hittT4r8ykvkzY
uw2NPAkFyK3MKz2h1I2252UDNYbt2lq2W3y4zwxDSi+z5bYXbG8X+95WA7JB2hTC
xRkuZsSP0ZZHNJT45it8jVGD0EWl8zoOFEkLDsvuDIP2AjCPjDTWTKsvQJQ8KX0G
vy/q8XatYcDe3IMYjsJdABiDjyps7ZGK5NYkl/61XZ4LxHei57ssOUbsLs2nZlXv
qVGZfjZnLMltaQ4kv2pPK7GZ9TWnryEyy5DXJ0uh7J0ri9Mb9E08BQHUvhYyoZEz
qxasxF0EsjeCqqP8UCNNHVCgb1R3fsFrPfqdfC94B5Vfglbht+s37EQ=
-----END CERTIFICATE-----
Generated at Fri Apr 5 18:37:49 2024 by rpki-client on console-fra.rpki-client.org