Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/7a6545-5277-40f3-b366-2ea87e6ea2a0/1/82dURYzhEifKwQp8PHS5-5V9JOE.roa
File: 82dURYzhEifKwQp8PHS5-5V9JOE.roa (raw, json)
Hash identifier: iBaOaoS9WuijuZT5zACMJgWReOaqKCubBB1GLNuRJO0=
Subject key identifier: F3:67:54:45:8C:E1:12:27:CA:C1:0A:7C:3C:74:B9:FB:95:7D:24:E1
Certificate issuer: /CN=d356ae625d9506df4a3e577b24a86fce3c73a8f8
Certificate serial: 018CC26D1EE19015670D0D59301F0FFC48B4
Authority key identifier: D3:56:AE:62:5D:95:06:DF:4A:3E:57:7B:24:A8:6F:CE:3C:73:A8:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/01auYl2VBt9KPld7JKhvzjxzqPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/7a6545-5277-40f3-b366-2ea87e6ea2a0/1/82dURYzhEifKwQp8PHS5-5V9JOE.roa
Signing time: Mon 01 Jan 2024 00:29:40 +0000
ROA not before: Mon 01 Jan 2024 00:29:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2603
IP address blocks: 109.105.120.0/22 maxlen: 22
109.105.96.0/20 maxlen: 20
185.174.116.0/22 maxlen: 22
109.105.112.0/21 maxlen: 21
2001:948::/29 maxlen: 29
2001:948:feed::/48 maxlen: 48
2001:948::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 01 Jan 2025 17:49:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:1e:e1:90:15:67:0d:0d:59:30:1f:0f:fc:48:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d356ae625d9506df4a3e577b24a86fce3c73a8f8
Validity
Not Before: Jan 1 00:29:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f36754458ce11227cac10a7c3c74b9fb957d24e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:98:0c:9a:b1:75:85:04:ee:6a:c8:a3:34:62:
4d:e0:3b:8d:40:0f:55:5e:0f:62:11:68:66:22:eb:
ec:73:6c:92:9e:45:0f:0d:b8:ce:c0:11:52:6c:8a:
08:ab:cb:34:e1:47:89:96:9d:b1:68:f4:b4:49:d0:
0b:11:31:96:71:aa:0d:74:82:ac:c3:c3:40:85:38:
a4:76:47:b6:14:0a:fd:a5:88:93:52:58:9d:1e:51:
8b:bc:a9:4e:63:0e:dc:b8:df:35:f1:f3:60:02:38:
17:9b:f4:50:30:60:57:12:dd:88:32:e7:a6:18:28:
ad:72:47:4d:6b:42:72:06:95:fe:ab:53:58:6b:8c:
0e:7b:af:1f:7e:c9:31:3e:fa:72:8d:4e:64:5b:a4:
e7:e7:19:1f:58:45:18:87:5c:7c:a6:89:00:53:12:
dd:da:10:34:9a:04:af:e4:ac:2b:50:2f:a5:c5:e0:
f9:f1:10:4f:68:11:2b:e2:8c:47:cb:72:5b:21:9a:
9e:cc:94:69:5a:b2:f9:7a:a5:7f:5b:fc:7a:59:7f:
3b:a4:5a:e3:99:63:f7:b2:bc:1f:00:42:d6:a4:73:
c6:62:62:af:e6:ce:65:ed:08:8a:62:76:b1:55:46:
e5:29:4a:31:f6:f6:64:cf:83:26:aa:15:40:5a:df:
b1:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:67:54:45:8C:E1:12:27:CA:C1:0A:7C:3C:74:B9:FB:95:7D:24:E1
X509v3 Authority Key Identifier:
keyid:D3:56:AE:62:5D:95:06:DF:4A:3E:57:7B:24:A8:6F:CE:3C:73:A8:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01auYl2VBt9KPld7JKhvzjxzqPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7a6545-5277-40f3-b366-2ea87e6ea2a0/1/82dURYzhEifKwQp8PHS5-5V9JOE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7a6545-5277-40f3-b366-2ea87e6ea2a0/1/01auYl2VBt9KPld7JKhvzjxzqPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.105.96.0-109.105.123.255
185.174.116.0/22
IPv6:
2001:948::/29
Signature Algorithm: sha256WithRSAEncryption
15:24:a0:b8:e3:bf:14:0f:06:02:63:77:0c:2e:66:85:01:81:
b2:89:b2:1f:b6:65:90:ac:5a:2e:27:f9:c5:0b:2a:56:56:83:
1d:80:f4:7b:e4:66:8d:12:26:58:07:a3:f7:11:46:88:4c:d9:
7f:b2:58:1e:36:94:1b:e0:46:09:17:6e:89:1c:0a:3f:a7:fc:
48:79:2b:90:ce:e9:36:53:f1:84:fe:b0:d6:53:5b:cf:76:ed:
67:4e:5c:a9:55:d9:c6:36:c6:98:90:f6:a7:db:cc:33:9a:84:
c0:c2:8b:3f:57:26:96:66:22:2c:14:74:fb:39:41:3d:a2:e4:
7f:de:08:72:55:49:cd:72:fc:5e:f7:0e:d2:d6:90:e7:83:e1:
df:95:5f:cf:3a:35:69:54:2f:d6:ed:41:58:e8:75:e1:0a:6b:
06:08:35:37:04:8b:94:f9:fb:a7:4c:c7:fd:ef:89:68:8f:dc:
3d:e1:6d:05:e0:77:95:31:20:06:0b:d6:be:7c:10:dd:58:4a:
47:7b:7f:75:ae:f1:39:a5:79:1e:77:17:84:ea:ba:bb:04:3a:
f6:70:5a:ce:2b:0f:f9:0c:ad:c4:68:19:c7:42:d8:30:c7:de:
52:a0:e8:b6:e6:b4:7f:1d:89:25:7b:2e:83:29:e3:ba:d5:bf:
4c:ea:cd:72
-----BEGIN CERTIFICATE-----
MIIFGjCCBAKgAwIBAgISAYzCbR7hkBVnDQ1ZMB8P/Ei0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzNTZhZTYyNWQ5NTA2ZGY0YTNlNTc3YjI0YTg2ZmNlM2M3
M2E4ZjgwHhcNMjQwMTAxMDAyOTQwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMzY3NTQ0NThjZTExMjI3Y2FjMTBhN2MzYzc0YjlmYjk1N2QyNGUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpgMmrF1hQTuasijNGJN4DuNQA9V
Xg9iEWhmIuvsc2ySnkUPDbjOwBFSbIoIq8s04UeJlp2xaPS0SdALETGWcaoNdIKs
w8NAhTikdke2FAr9pYiTUlidHlGLvKlOYw7cuN818fNgAjgXm/RQMGBXEt2IMuem
GCitckdNa0JyBpX+q1NYa4wOe68ffskxPvpyjU5kW6Tn5xkfWEUYh1x8pokAUxLd
2hA0mgSv5KwrUC+lxeD58RBPaBEr4oxHy3JbIZqezJRpWrL5eqV/W/x6WX87pFrj
mWP3srwfAELWpHPGYmKv5s5l7QiKYnaxVUblKUox9vZkz4MmqhVAWt+xAwIDAQAB
o4ICJjCCAiIwHQYDVR0OBBYEFPNnVEWM4RInysEKfDx0ufuVfSThMB8GA1UdIwQY
MBaAFNNWrmJdlQbfSj5XeySob848c6j4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDFhdVlsMlZCdDlLUGxkN0pLaHZ6anh6cVBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS83YTY1NDUtNTI3Ny00MGYzLWIzNjYt
MmVhODdlNmVhMmEwLzEvODJkVVJZemhFaWZLd1FwOFBIUzUtNVY5Sk9FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS83YTY1NDUtNTI3Ny00MGYzLWIzNjYtMmVhODdlNmVhMmEw
LzEvMDFhdVlsMlZCdDlLUGxkN0pLaHZ6anh6cVBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAaBAIAATAUMAwDBAVtaWAD
BAJtaXgDBAK5rnQwDQQCAAIwBwMFAyABCUgwDQYJKoZIhvcNAQELBQADggEBABUk
oLjjvxQPBgJjdwwuZoUBgbKJsh+2ZZCsWi4n+cULKlZWgx2A9HvkZo0SJlgHo/cR
RohM2X+yWB42lBvgRgkXbokcCj+n/Eh5K5DO6TZT8YT+sNZTW8927WdOXKlV2cY2
xpiQ9qfbzDOahMDCiz9XJpZmIiwUdPs5QT2i5H/eCHJVSc1y/F73DtLWkOeD4d+V
X886NWlUL9btQVjodeEKawYINTcEi5T5+6dMx/3viWiP3D3hbQXgd5UxIAYL1r58
EN1YSkd7f3Wu8TmleR53F4TqursEOvZwWs4rD/kMrcRoGcdC2DDH3lKg6LbmtH8d
iSV7LoMp47rVv0zqzXI=
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:44:50 2025 by rpki-client