Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/eN3W3QG6POLjRfINmPRM1LPlZpM.roa
File: eN3W3QG6POLjRfINmPRM1LPlZpM.roa (raw, json)
Hash identifier: oOiuv7aAST6cx8pFvnxvnMT8wIG6hbR5hoLEDuJVLSg=
Subject key identifier: 78:DD:D6:DD:01:BA:3C:E2:E3:45:F2:0D:98:F4:4C:D4:B3:E5:66:93
Certificate issuer: /CN=4b48cf146b4c73d274096d705708d24b729329f8
Certificate serial: 018D6439F59AFC12D5C42B81B7255B5A8466
Authority key identifier: 4B:48:CF:14:6B:4C:73:D2:74:09:6D:70:57:08:D2:4B:72:93:29:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S0jPFGtMc9J0CW1wVwjSS3KTKfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/eN3W3QG6POLjRfINmPRM1LPlZpM.roa
Signing time: Thu 01 Feb 2024 10:32:16 +0000
ROA not before: Thu 01 Feb 2024 10:32:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34305
IP address blocks: 85.12.32.0/20 maxlen: 20
85.12.48.0/21 maxlen: 21
85.12.58.0/23 maxlen: 24
85.12.60.0/22 maxlen: 22
91.148.208.0/20 maxlen: 20
185.91.28.0/24 maxlen: 24
193.138.220.0/24 maxlen: 24
195.200.84.0/24 maxlen: 24
195.200.85.0/24 maxlen: 24
2a01:788::/32 maxlen: 48
2a01:788:1000::/48 maxlen: 48
2a01:788:aaaa::/48 maxlen: 48
2a01:788:aaab::/48 maxlen: 48
2a01:788:aaac::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 01 Feb 2024 14:24:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:64:39:f5:9a:fc:12:d5:c4:2b:81:b7:25:5b:5a:84:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b48cf146b4c73d274096d705708d24b729329f8
Validity
Not Before: Feb 1 10:32:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=78ddd6dd01ba3ce2e345f20d98f44cd4b3e56693
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:d5:1d:9d:3b:a3:b1:20:e4:3e:8f:2b:c1:c3:
cf:60:3b:36:50:36:ee:64:c1:b5:94:07:31:88:33:
65:9d:c0:6d:57:99:98:62:80:7a:75:c8:bf:ac:fc:
21:7a:49:31:12:7f:e6:9d:1e:26:ab:d8:b5:1a:81:
1e:59:0a:5e:e6:32:20:75:9f:80:36:49:c5:90:0c:
96:78:0b:24:30:c1:41:13:d4:e2:f1:4a:3d:d9:af:
48:90:44:aa:27:a9:f4:7c:f2:3c:22:e2:09:c0:2f:
4e:cb:b9:c2:ed:03:3f:68:48:b4:28:6c:71:fe:5b:
7f:28:9e:54:b6:cb:c8:b7:dc:52:cd:7e:54:a2:63:
ae:12:63:54:74:fe:89:7e:58:33:d3:13:d7:f7:9a:
ee:a3:7c:e2:24:ed:67:5d:18:7a:f2:09:7e:5d:1d:
0d:3c:de:cf:88:0c:43:0f:38:3a:28:4a:7e:9d:6a:
45:19:6e:b2:c1:a8:50:db:97:41:21:d3:0e:84:c3:
c1:4d:b6:c4:84:46:7e:d1:7f:eb:9b:44:28:48:bb:
2f:f3:70:05:ac:99:cd:0c:b5:a1:c3:2c:2a:9f:ff:
a3:37:e0:f9:49:90:52:ab:1b:e6:4e:ba:a1:2b:e3:
cd:1c:64:22:bb:b3:7f:ec:86:7a:2c:07:79:cb:f4:
61:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:DD:D6:DD:01:BA:3C:E2:E3:45:F2:0D:98:F4:4C:D4:B3:E5:66:93
X509v3 Authority Key Identifier:
keyid:4B:48:CF:14:6B:4C:73:D2:74:09:6D:70:57:08:D2:4B:72:93:29:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S0jPFGtMc9J0CW1wVwjSS3KTKfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/eN3W3QG6POLjRfINmPRM1LPlZpM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.12.32.0-85.12.55.255
85.12.58.0-85.12.63.255
91.148.208.0/20
185.91.28.0/24
193.138.220.0/24
195.200.84.0/23
IPv6:
2a01:788::/32
Signature Algorithm: sha256WithRSAEncryption
6e:87:ab:61:e8:47:79:22:21:f4:61:e5:da:96:77:34:75:1e:
6a:7d:49:ca:58:33:67:4e:75:c4:62:2a:72:c0:37:a1:a6:37:
fe:5e:55:a8:22:1d:7d:4c:87:e8:94:03:f7:b8:ed:04:de:c9:
01:31:c9:81:9d:0b:e0:28:98:46:41:10:7d:29:da:67:ab:fb:
ff:95:c7:5f:e0:d8:2c:33:f6:5a:2d:ea:22:7e:94:58:c5:a2:
14:79:09:5c:fa:05:42:8b:06:b0:72:cc:63:f5:46:ef:65:fd:
3f:65:86:61:11:f1:4c:2b:ad:47:d2:84:03:ea:ab:2e:1e:ea:
08:14:7d:60:61:72:70:ac:b9:e4:53:13:e4:fa:3e:e6:99:fe:
26:8d:70:d0:e5:c7:dc:43:6c:4a:fa:58:30:14:8a:86:38:a3:
e9:6f:6c:08:dd:e0:85:e2:5f:d6:3b:c8:9e:fa:ed:47:9b:68:
fc:4a:9c:38:bd:96:1d:cf:99:f3:0d:65:de:b5:14:38:cd:17:
26:c0:d3:de:98:e6:d5:ff:4a:53:70:f4:f8:55:8b:3b:1c:be:
f5:90:c6:2d:e9:37:6e:5a:d5:71:3f:92:b4:c2:5a:b6:00:02:
76:44:a9:68:a8:bb:2b:42:ed:99:01:8d:c0:9b:c8:29:7b:04:
31:d4:2e:d7
-----BEGIN CERTIFICATE-----
MIIFOjCCBCKgAwIBAgISAY1kOfWa/BLVxCuBtyVbWoRmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiNDhjZjE0NmI0YzczZDI3NDA5NmQ3MDU3MDhkMjRiNzI5
MzI5ZjgwHhcNMjQwMjAxMTAzMjE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OGRkZDZkZDAxYmEzY2UyZTM0NWYyMGQ5OGY0NGNkNGIzZTU2NjkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9UdnTujsSDkPo8rwcPPYDs2UDbu
ZMG1lAcxiDNlncBtV5mYYoB6dci/rPwhekkxEn/mnR4mq9i1GoEeWQpe5jIgdZ+A
NknFkAyWeAskMMFBE9Ti8Uo92a9IkESqJ6n0fPI8IuIJwC9Oy7nC7QM/aEi0KGxx
/lt/KJ5UtsvIt9xSzX5UomOuEmNUdP6Jflgz0xPX95ruo3ziJO1nXRh68gl+XR0N
PN7PiAxDDzg6KEp+nWpFGW6ywahQ25dBIdMOhMPBTbbEhEZ+0X/rm0QoSLsv83AF
rJnNDLWhwywqn/+jN+D5SZBSqxvmTrqhK+PNHGQiu7N/7IZ6LAd5y/RhDQIDAQAB
o4ICRjCCAkIwHQYDVR0OBBYEFHjd1t0Bujzi40XyDZj0TNSz5WaTMB8GA1UdIwQY
MBaAFEtIzxRrTHPSdAltcFcI0ktykyn4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzBqUEZHdE1jOUowQ1cxd1Z3alNTM0tUS2ZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8zYmJiNTItMzkzZS00NzYyLWE3MGMt
NjRhNmEwNWI5OTA1LzEvZU4zVzNRRzZQT0xqUmZJTm1QUk0xTFBsWnBNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi8zYmJiNTItMzkzZS00NzYyLWE3MGMtNjRhNmEwNWI5OTA1
LzEvUzBqUEZHdE1jOUowQ1cxd1Z3alNTM0tUS2ZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFwGCCsGAQUFBwEHAQH/BE0wSzA6BAIAATA0MAwDBAVVDCAD
BANVDDAwDAMEAVUMOgMEBlUMAAMEBFuU0AMEALlbHAMEAMGK3AMEAcPIVDANBAIA
AjAHAwUAKgEHiDANBgkqhkiG9w0BAQsFAAOCAQEAboerYehHeSIh9GHl2pZ3NHUe
an1JylgzZ051xGIqcsA3oaY3/l5VqCIdfUyH6JQD97jtBN7JATHJgZ0L4CiYRkEQ
fSnaZ6v7/5XHX+DYLDP2Wi3qIn6UWMWiFHkJXPoFQosGsHLMY/VG72X9P2WGYRHx
TCutR9KEA+qrLh7qCBR9YGFycKy55FMT5Po+5pn+Jo1w0OXH3ENsSvpYMBSKhjij
6W9sCN3gheJf1jvInvrtR5to/EqcOL2WHc+Z8w1l3rUUOM0XJsDT3pjm1f9KU3D0
+FWLOxy+9ZDGLek3blrVcT+StMJatgACdkSpaKi7K0LtmQGNwJvIKXsEMdQu1w==
-----END CERTIFICATE-----
Generated at Thu Feb 1 19:04:39 2024 by rpki-client on console-fra.rpki-client.org