Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/uAjz0Sv63lgftoguv-FBtFfDxus.roa
File: uAjz0Sv63lgftoguv-FBtFfDxus.roa (raw, json)
Hash identifier: 95/CwrQalPVzCxZDBZt1L9KBOxzKeJQCQfLwZUu8Ovc=
Subject key identifier: B8:08:F3:D1:2B:FA:DE:58:1F:B6:88:2E:BF:E1:41:B4:57:C3:C6:EB
Certificate issuer: /CN=cd108c225f2478cd4230179890d07284be1636cd
Certificate serial: 01907BFD55BD0FDFC3789A0A7DA0DF746869
Authority key identifier: CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/uAjz0Sv63lgftoguv-FBtFfDxus.roa
Signing time: Thu 04 Jul 2024 04:25:18 +0000
ROA not before: Thu 04 Jul 2024 04:25:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205960
IP address blocks: 2.59.153.0/24 maxlen: 24
2.59.154.0/24 maxlen: 24
45.91.225.0/24 maxlen: 24
91.204.224.0/24 maxlen: 24
91.204.225.0/24 maxlen: 24
91.204.226.0/24 maxlen: 24
91.204.227.0/24 maxlen: 24
185.202.101.0/24 maxlen: 24
193.239.151.0/24 maxlen: 24
194.126.215.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 15 Jul 2024 14:28:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:7b:fd:55:bd:0f:df:c3:78:9a:0a:7d:a0:df:74:68:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd108c225f2478cd4230179890d07284be1636cd
Validity
Not Before: Jul 4 04:25:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b808f3d12bfade581fb6882ebfe141b457c3c6eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d3:3c:33:fe:f1:5c:3f:b7:56:7a:c3:99:6e:
4f:6a:16:0e:c3:1a:13:60:8b:07:53:a1:7e:fc:8b:
bd:7f:bc:92:33:f4:f8:87:67:da:80:ec:c5:c5:17:
43:80:ce:14:7e:39:60:12:f9:74:0c:bc:0d:65:6d:
22:41:76:30:8e:57:00:c4:f2:74:2a:77:51:fc:d7:
ec:51:04:2a:f1:40:8b:d2:52:e2:86:4d:84:96:b0:
4b:2d:19:34:55:0d:fd:77:88:77:65:d4:1a:2d:d3:
87:0b:e7:ea:f1:d8:70:c9:d6:f9:61:28:1f:62:b1:
71:53:22:5b:c5:d8:d2:47:27:e7:cb:0b:23:b8:0a:
73:9b:b2:62:46:c7:e2:54:6d:24:41:22:d8:16:94:
c5:09:b1:8d:f6:47:2c:a3:23:d6:7a:e9:21:6e:39:
58:d3:bd:96:e5:7d:42:df:2c:8f:2f:9e:8d:dc:80:
09:b6:48:36:30:3f:78:8c:14:06:a8:57:76:89:b0:
1b:19:1f:6e:39:ab:8d:7a:cd:07:ab:8f:45:94:cd:
17:d5:19:1a:d7:f2:14:79:e2:eb:dc:a4:f0:99:b8:
ca:28:b3:5b:dc:61:54:72:73:2c:bc:44:3f:a5:66:
de:2b:81:58:2b:7d:6a:07:2d:b2:aa:30:0d:70:a8:
38:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:08:F3:D1:2B:FA:DE:58:1F:B6:88:2E:BF:E1:41:B4:57:C3:C6:EB
X509v3 Authority Key Identifier:
keyid:CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/uAjz0Sv63lgftoguv-FBtFfDxus.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.153.0-2.59.154.255
45.91.225.0/24
91.204.224.0/22
185.202.101.0/24
193.239.151.0/24
194.126.215.0/24
Signature Algorithm: sha256WithRSAEncryption
00:ce:17:07:81:27:1a:e1:e6:b7:19:f8:22:88:c5:4d:8b:bd:
ab:f2:54:74:5d:e7:52:a0:18:74:d6:20:d6:2b:d2:ac:d7:74:
ab:c7:59:d8:a8:f5:75:7d:70:ab:e0:70:65:93:ac:bc:d9:3d:
83:cd:bb:a7:09:d1:8c:0f:27:53:7b:e9:f1:a3:6d:f3:95:f4:
9e:3d:83:35:aa:01:d0:eb:b1:1b:45:6b:95:82:47:1b:4f:b3:
f0:dd:56:6d:5d:fc:d6:46:78:14:fa:ee:49:a7:47:ab:95:0a:
99:b2:fb:8c:87:f7:df:28:53:65:b3:57:f0:fb:9d:78:20:62:
5e:a1:66:12:f0:f1:dd:3a:24:5d:dd:c4:1e:12:8b:c2:a3:52:
4a:40:11:13:44:70:33:fb:be:03:01:ef:8e:b4:ed:0f:71:ed:
1c:1f:b6:7a:2a:66:09:c5:96:a8:2c:ce:d3:f9:a9:9a:04:4c:
9b:2e:68:e7:20:31:95:92:d3:60:8a:58:4a:2c:43:06:98:c9:
15:45:85:4a:ca:e5:08:e1:b2:92:8c:a7:7a:ea:b2:8a:20:4e:
77:6a:8e:83:38:64:4c:be:b4:ad:ef:95:b5:af:f4:56:ff:8a:
7a:db:ef:ef:92:77:c3:a9:9c:8d:05:40:3e:62:a1:4d:72:81:
d8:a9:73:85
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgISAZB7/VW9D9/DeJoKfaDfdGhpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkMTA4YzIyNWYyNDc4Y2Q0MjMwMTc5ODkwZDA3Mjg0YmUx
NjM2Y2QwHhcNMjQwNzA0MDQyNTE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiODA4ZjNkMTJiZmFkZTU4MWZiNjg4MmViZmUxNDFiNDU3YzNjNmViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9M8M/7xXD+3VnrDmW5PahYOwxoT
YIsHU6F+/Iu9f7ySM/T4h2fagOzFxRdDgM4UfjlgEvl0DLwNZW0iQXYwjlcAxPJ0
KndR/NfsUQQq8UCL0lLihk2ElrBLLRk0VQ39d4h3ZdQaLdOHC+fq8dhwydb5YSgf
YrFxUyJbxdjSRyfnywsjuApzm7JiRsfiVG0kQSLYFpTFCbGN9kcsoyPWeukhbjlY
072W5X1C3yyPL56N3IAJtkg2MD94jBQGqFd2ibAbGR9uOauNes0Hq49FlM0X1Rka
1/IUeeLr3KTwmbjKKLNb3GFUcnMsvEQ/pWbeK4FYK31qBy2yqjANcKg4swIDAQAB
o4ICLzCCAiswHQYDVR0OBBYEFLgI89Er+t5YH7aILr/hQbRXw8brMB8GA1UdIwQY
MBaAFM0QjCJfJHjNQjAXmJDQcoS+FjbNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelJDTUlsOGtlTTFDTUJlWWtOQnloTDRXTnMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8zNDhjZTUtY2EyMC00ODQ4LTg4NDQt
YWU1MDI3MzY4MWE3LzEvdUFqejBTdjYzbGdmdG9ndXYtRkJ0RmZEeHVzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy8zNDhjZTUtY2EyMC00ODQ4LTg4NDQtYWU1MDI3MzY4MWE3
LzEvelJDTUlsOGtlTTFDTUJlWWtOQnloTDRXTnMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsMAwDBAACO5kD
BAACO5oDBAAtW+EDBAJbzOADBAC5ymUDBADB75cDBADCftcwDQYJKoZIhvcNAQEL
BQADggEBAADOFweBJxrh5rcZ+CKIxU2LvavyVHRd51KgGHTWINYr0qzXdKvHWdio
9XV9cKvgcGWTrLzZPYPNu6cJ0YwPJ1N76fGjbfOV9J49gzWqAdDrsRtFa5WCRxtP
s/DdVm1d/NZGeBT67kmnR6uVCpmy+4yH998oU2WzV/D7nXggYl6hZhLw8d06JF3d
xB4Si8KjUkpAERNEcDP7vgMB74607Q9x7RwftnoqZgnFlqgsztP5qZoETJsuaOcg
MZWS02CKWEosQwaYyRVFhUrK5QjhspKMp3rqsoogTndqjoM4ZEy+tK3vlbWv9Fb/
inrb7++Sd8OpnI0FQD5ioU1ygdipc4U=
-----END CERTIFICATE-----
Generated at Mon Jul 15 16:58:15 2024 by rpki-client on console-fra.rpki-client.org