Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/s0q_S-vRStBff4tKDCyBpeBEY80.roa
File: s0q_S-vRStBff4tKDCyBpeBEY80.roa (raw, json)
Hash identifier: NgNPDVB7sLDpn0TXyz4zvSOfIZpMo4Kh46Wzv266r7Q=
Subject key identifier: B3:4A:BF:4B:EB:D1:4A:D0:5F:7F:8B:4A:0C:2C:81:A5:E0:44:63:CD
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 018D4951E529DFE42BF274B1D112909BEFEA
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/s0q_S-vRStBff4tKDCyBpeBEY80.roa
Signing time: Sat 27 Jan 2024 05:08:40 +0000
ROA not before: Sat 27 Jan 2024 05:08:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203963
IP address blocks: 37.49.144.0/24 maxlen: 24
37.49.148.0/24 maxlen: 24
37.49.149.0/24 maxlen: 24
37.49.150.0/24 maxlen: 24
94.74.140.0/24 maxlen: 24
94.74.164.0/24 maxlen: 24
94.74.169.0/24 maxlen: 24
94.74.171.0/24 maxlen: 24
94.74.182.0/24 maxlen: 24
109.203.163.0/24 maxlen: 24
176.46.144.0/24 maxlen: 24
176.46.149.0/24 maxlen: 24
176.46.152.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 03 Feb 2024 06:24:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:49:51:e5:29:df:e4:2b:f2:74:b1:d1:12:90:9b:ef:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Jan 27 05:08:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b34abf4bebd14ad05f7f8b4a0c2c81a5e04463cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:8f:c3:69:f6:0e:bf:56:3e:f1:53:d6:98:ba:
87:99:03:0e:dd:b4:7a:84:d3:8d:a6:18:8c:d7:de:
44:8f:29:46:0c:5c:92:c9:36:c3:78:1b:a1:b2:61:
cd:f9:86:7a:5e:14:91:8c:db:b7:fb:18:4b:4f:6c:
bb:40:bd:84:cd:19:90:39:9b:36:fa:41:f6:9d:77:
58:d4:d5:68:c2:c1:23:a3:8b:c5:32:ed:af:76:45:
b3:e0:4a:2d:65:28:e7:f9:79:e2:1c:9a:d7:a9:91:
a1:23:aa:9c:a6:4c:d5:0e:d4:23:f3:9a:61:d7:19:
09:43:5c:32:d3:14:f3:0c:eb:b4:52:9e:19:e6:65:
5a:a6:66:ed:1a:59:e9:7c:7a:ef:5a:83:6b:d8:47:
db:e8:39:a2:39:c1:5f:6a:3e:4e:b4:da:af:f8:4a:
6a:d9:67:ed:bd:e2:d6:f8:a8:95:66:6d:01:d5:3e:
f0:2f:87:e1:ab:33:9a:76:39:49:60:e4:5e:4a:47:
f9:85:6c:0c:d4:ce:38:e6:a5:f7:46:4c:8c:c1:48:
04:8a:26:f6:81:bf:44:df:a6:b8:71:21:6d:76:5a:
6c:df:c0:aa:97:52:bd:2f:8f:dd:18:77:1f:e4:54:
25:03:5b:7b:aa:cc:bb:02:66:5a:c4:90:f2:d4:4a:
e7:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:4A:BF:4B:EB:D1:4A:D0:5F:7F:8B:4A:0C:2C:81:A5:E0:44:63:CD
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/s0q_S-vRStBff4tKDCyBpeBEY80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.49.144.0/24
37.49.148.0-37.49.150.255
94.74.140.0/24
94.74.164.0/24
94.74.169.0/24
94.74.171.0/24
94.74.182.0/24
109.203.163.0/24
176.46.144.0/24
176.46.149.0/24
176.46.152.0/24
Signature Algorithm: sha256WithRSAEncryption
90:e8:64:f8:7a:09:d1:c2:bf:c1:99:18:ed:50:7d:8c:69:49:
f8:6f:07:51:23:ff:55:14:f2:a6:48:d3:74:e0:00:13:28:3b:
ab:35:8f:81:f9:d1:8f:3d:9f:7c:93:a5:f3:43:ad:83:46:28:
71:cd:51:fd:aa:a2:27:d3:bb:d7:5f:45:eb:e5:51:60:71:2f:
ad:d2:f1:51:f2:94:8e:87:c1:37:a2:4e:01:e6:e3:00:a4:09:
a7:be:1b:0b:a5:5f:a1:c2:5f:6a:ef:6f:1d:49:a3:a9:1b:37:
1e:c8:5a:cd:5d:29:8f:54:45:e4:b5:1d:0f:72:d6:8c:19:10:
9a:90:c5:74:16:d7:c9:bb:e5:01:c5:c1:60:93:01:7c:91:7b:
ec:92:c4:1d:78:e3:80:d7:47:a2:47:d0:dd:4e:78:6e:60:a1:
23:0a:c1:2c:11:1e:ee:a7:dc:5c:4a:6d:51:b1:59:54:8d:af:
2d:8f:64:7e:b0:f0:fc:3f:1c:e4:4b:81:a4:21:5c:b4:41:8e:
33:0a:cc:7a:04:a9:5e:b2:53:64:23:0d:73:8d:29:fd:f1:57:
e9:04:24:d4:62:92:ef:35:6a:31:32:07:3c:9d:3a:de:b0:94:
12:48:40:1d:34:76:d5:c3:25:38:7d:a9:7c:5b:b5:09:c6:78:
7f:7c:6d:43
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgISAY1JUeUp3+Qr8nSx0RKQm+/qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2MDQ3NWViZTdmMDdkNzQxNTNjYjFjY2EzMzhjMTZkODAx
ZjQ1ZjcwHhcNMjQwMTI3MDUwODQwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMzRhYmY0YmViZDE0YWQwNWY3ZjhiNGEwYzJjODFhNWUwNDQ2M2NkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgI/DafYOv1Y+8VPWmLqHmQMO3bR6
hNONphiM195EjylGDFySyTbDeBuhsmHN+YZ6XhSRjNu3+xhLT2y7QL2EzRmQOZs2
+kH2nXdY1NVowsEjo4vFMu2vdkWz4EotZSjn+XniHJrXqZGhI6qcpkzVDtQj85ph
1xkJQ1wy0xTzDOu0Up4Z5mVapmbtGlnpfHrvWoNr2Efb6DmiOcFfaj5OtNqv+Epq
2WftveLW+KiVZm0B1T7wL4fhqzOadjlJYOReSkf5hWwM1M445qX3RkyMwUgEiib2
gb9E36a4cSFtdlps38Cql1K9L4/dGHcf5FQlA1t7qsy7AmZaxJDy1ErnMwIDAQAB
o4ICTTCCAkkwHQYDVR0OBBYEFLNKv0vr0UrQX3+LSgwsgaXgRGPNMB8GA1UdIwQY
MBaAFNYEdevn8H10FTyxzKM4wW2AH0X3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC81MmViYWUtZTAwNi00Nzc4LWFjM2Mt
NDk2ZjhlYmIyZDYxLzEvczBxX1MtdlJTdEJmZjR0S0RDeUJwZUJFWTgwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC81MmViYWUtZTAwNi00Nzc4LWFjM2MtNDk2ZjhlYmIyZDYx
LzEvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGMGCCsGAQUFBwEHAQH/BFQwUjBQBAIAATBKAwQAJTGQMAwD
BAIlMZQDBAAlMZYDBABeSowDBABeSqQDBABeSqkDBABeSqsDBABeSrYDBABty6MD
BACwLpADBACwLpUDBACwLpgwDQYJKoZIhvcNAQELBQADggEBAJDoZPh6CdHCv8GZ
GO1QfYxpSfhvB1Ej/1UU8qZI03TgABMoO6s1j4H50Y89n3yTpfNDrYNGKHHNUf2q
oifTu9dfRevlUWBxL63S8VHylI6HwTeiTgHm4wCkCae+GwulX6HCX2rvbx1Jo6kb
Nx7IWs1dKY9UReS1HQ9y1owZEJqQxXQW18m75QHFwWCTAXyRe+ySxB1444DXR6JH
0N1OeG5goSMKwSwRHu6n3FxKbVGxWVSNry2PZH6w8Pw/HORLgaQhXLRBjjMKzHoE
qV6yU2QjDXONKf3xV+kEJNRiku81ajEyBzydOt6wlBJIQB00dtXDJTh9qXxbtQnG
eH98bUM=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:08:22 2025 by rpki-client