Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/oX68rW8xnjxNqzaLZV3TRK4IO_Q.roa
File: oX68rW8xnjxNqzaLZV3TRK4IO_Q.roa (raw, json)
Hash identifier: EwzfEXfZv+Z+VLjR9MI4mEbSV0k/bbeInexmTGAFQ24=
Subject key identifier: A1:7E:BC:AD:6F:31:9E:3C:4D:AB:36:8B:65:5D:D3:44:AE:08:3B:F4
Certificate issuer: /CN=cd108c225f2478cd4230179890d07284be1636cd
Certificate serial: 018CC86FFF4465AED7585B76ADE32BA9FCAF
Authority key identifier: CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/oX68rW8xnjxNqzaLZV3TRK4IO_Q.roa
Signing time: Tue 02 Jan 2024 04:30:32 +0000
ROA not before: Tue 02 Jan 2024 04:30:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 136038
IP address blocks: 2.59.152.0/22 maxlen: 22
2.59.155.0/24 maxlen: 24
45.142.152.0/24 maxlen: 24
193.239.150.0/24 maxlen: 24
194.126.202.0/24 maxlen: 24
45.91.226.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 06 Jan 2024 14:54:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:ff:44:65:ae:d7:58:5b:76:ad:e3:2b:a9:fc:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd108c225f2478cd4230179890d07284be1636cd
Validity
Not Before: Jan 2 04:30:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a17ebcad6f319e3c4dab368b655dd344ae083bf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f1:5c:9d:21:70:bf:6a:04:c8:72:4e:94:77:
4c:a5:3c:06:d4:7e:85:e0:4d:59:98:3f:14:88:f1:
5e:ca:f5:dc:bb:4f:7d:b1:89:fd:71:bd:45:e1:e7:
d0:7b:a1:d2:31:0c:d6:5e:c5:ae:03:ac:b0:5b:81:
f0:f4:2d:7a:c3:6d:a8:59:d0:8a:fd:29:e5:31:73:
e9:e6:34:d2:62:b5:a6:6e:7c:d0:1a:15:22:79:42:
2c:9c:04:30:40:4b:07:e0:2b:0d:2a:76:2c:2c:4b:
1e:8c:dc:90:48:76:c3:40:fa:2a:b4:ac:a7:18:78:
f7:94:21:6f:30:31:bc:a7:0d:c6:c1:56:9e:56:51:
b9:82:da:d8:54:dc:4d:e2:fe:ed:e9:cc:dd:38:a8:
de:e1:2c:bb:a6:c2:26:99:e1:b4:5e:20:08:9e:97:
17:25:db:48:de:14:62:66:50:93:05:56:18:7d:4b:
60:a4:fd:af:62:73:2d:e0:c2:88:3e:70:d9:a6:5f:
49:d7:d9:1e:2f:8e:8d:10:bf:0e:00:04:85:fc:e1:
0f:cc:83:81:68:07:eb:5a:99:bc:c8:60:72:2f:33:
b0:b7:62:2a:37:9e:33:cc:46:fe:50:b9:a4:7e:a7:
bc:9c:d3:d9:1b:78:0d:19:70:a5:62:fe:a2:21:b8:
c3:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:7E:BC:AD:6F:31:9E:3C:4D:AB:36:8B:65:5D:D3:44:AE:08:3B:F4
X509v3 Authority Key Identifier:
keyid:CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/oX68rW8xnjxNqzaLZV3TRK4IO_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.152.0/22
45.91.226.0/24
45.142.152.0/24
193.239.150.0/24
194.126.202.0/24
Signature Algorithm: sha256WithRSAEncryption
02:ba:5b:c5:8e:c7:df:e9:8e:9f:0c:bb:fc:32:1b:c7:3b:af:
1d:c1:cd:16:0a:8e:ea:c6:ae:0c:61:5c:24:e8:b9:4e:3e:46:
b7:e8:6d:94:e5:94:31:80:44:f6:09:c5:d3:55:5d:3b:d1:b9:
40:a7:5a:9e:69:72:8d:40:3d:ef:6c:f8:00:da:8a:db:af:18:
98:6c:35:ef:6d:82:fb:c1:e9:3e:cb:5a:9e:eb:2f:c8:b0:a0:
13:68:fb:20:15:c4:c8:b8:6b:4f:6f:ff:48:9b:79:73:d7:7b:
f5:ee:06:d8:cf:11:eb:15:89:b0:9a:fb:87:52:a1:21:17:d4:
35:aa:09:50:80:c4:17:c6:6b:65:52:bb:38:dd:b9:bd:fe:eb:
87:66:61:14:09:0f:9f:2f:e2:28:b5:74:8b:3c:d8:ed:ba:e1:
b2:b1:e5:77:b3:16:29:9d:6b:1a:0a:c8:8d:92:55:60:26:c1:
da:e5:52:87:e2:b6:ce:67:df:a9:1a:e8:d2:42:d8:c7:4f:53:
99:31:65:04:dd:b4:a6:7a:db:7f:05:40:50:7c:82:02:e0:ff:
6b:80:95:59:06:9d:68:23:0d:ba:95:67:b0:24:9f:75:13:1b:
e8:76:06:ef:95:f7:84:7d:43:d6:72:17:8d:39:d5:5e:65:a6:
5d:66:d7:a8
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYzIb/9EZa7XWFt2reMrqfyvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkMTA4YzIyNWYyNDc4Y2Q0MjMwMTc5ODkwZDA3Mjg0YmUx
NjM2Y2QwHhcNMjQwMTAyMDQzMDMyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMTdlYmNhZDZmMzE5ZTNjNGRhYjM2OGI2NTVkZDM0NGFlMDgzYmY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPFcnSFwv2oEyHJOlHdMpTwG1H6F
4E1ZmD8UiPFeyvXcu099sYn9cb1F4efQe6HSMQzWXsWuA6ywW4Hw9C16w22oWdCK
/SnlMXPp5jTSYrWmbnzQGhUieUIsnAQwQEsH4CsNKnYsLEsejNyQSHbDQPoqtKyn
GHj3lCFvMDG8pw3GwVaeVlG5gtrYVNxN4v7t6czdOKje4Sy7psImmeG0XiAInpcX
JdtI3hRiZlCTBVYYfUtgpP2vYnMt4MKIPnDZpl9J19keL46NEL8OAASF/OEPzIOB
aAfrWpm8yGByLzOwt2IqN54zzEb+ULmkfqe8nNPZG3gNGXClYv6iIbjDqQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFKF+vK1vMZ48Tas2i2Vd00SuCDv0MB8GA1UdIwQY
MBaAFM0QjCJfJHjNQjAXmJDQcoS+FjbNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelJDTUlsOGtlTTFDTUJlWWtOQnloTDRXTnMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8zNDhjZTUtY2EyMC00ODQ4LTg4NDQt
YWU1MDI3MzY4MWE3LzEvb1g2OHJXOHhuanhOcXphTFpWM1RSSzRJT19RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy8zNDhjZTUtY2EyMC00ODQ4LTg4NDQtYWU1MDI3MzY4MWE3
LzEvelJDTUlsOGtlTTFDTUJlWWtOQnloTDRXTnMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQCAjuYAwQA
LVviAwQALY6YAwQAwe+WAwQAwn7KMA0GCSqGSIb3DQEBCwUAA4IBAQACulvFjsff
6Y6fDLv8MhvHO68dwc0WCo7qxq4MYVwk6LlOPka36G2U5ZQxgET2CcXTVV070blA
p1qeaXKNQD3vbPgA2orbrxiYbDXvbYL7wek+y1qe6y/IsKATaPsgFcTIuGtPb/9I
m3lz13v17gbYzxHrFYmwmvuHUqEhF9Q1qglQgMQXxmtlUrs43bm9/uuHZmEUCQ+f
L+IotXSLPNjtuuGyseV3sxYpnWsaCsiNklVgJsHa5VKH4rbOZ9+pGujSQtjHT1OZ
MWUE3bSmett/BUBQfIIC4P9rgJVZBp1oIw26lWewJJ91ExvodgbvlfeEfUPWcheN
OdVeZaZdZteo
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:56 2024 by rpki-client on console-fra.rpki-client.org