Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/2864c8-c042-428f-a02d-3b34c23b9c5a/1/IpNXLh277USzorImAYhx00BcT0k.roa
File: IpNXLh277USzorImAYhx00BcT0k.roa (raw, json)
Hash identifier: v+4Gf1YhNBCUuxtSm8vQe0j81fC+vDg+3zhLoooizxk=
Subject key identifier: 22:93:57:2E:1D:BB:ED:44:B3:A2:B2:26:01:88:71:D3:40:5C:4F:49
Certificate issuer: /CN=5d6c15ca903d7d25453eaeb5f724a04e3aa65908
Certificate serial: 01856E2F7F6BB482E6B4185F10F7398470CA
Authority key identifier: 5D:6C:15:CA:90:3D:7D:25:45:3E:AE:B5:F7:24:A0:4E:3A:A6:59:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XWwVypA9fSVFPq619ySgTjqmWQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/2864c8-c042-428f-a02d-3b34c23b9c5a/1/IpNXLh277USzorImAYhx00BcT0k.roa
Signing time: Sun 01 Jan 2023 16:34:44 +0000
ROA not before: Sun 01 Jan 2023 16:34:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6775
IP address blocks: 79.134.240.0/20 maxlen: 24
79.134.251.0/24 maxlen: 24
79.134.250.0/24 maxlen: 24
79.134.252.0/24 maxlen: 24
79.134.247.0/24 maxlen: 24
185.22.52.0/24 maxlen: 24
185.22.52.0/22 maxlen: 22
79.134.225.0/24 maxlen: 24
79.134.224.0/19 maxlen: 24
79.134.227.0/24 maxlen: 24
79.134.228.0/24 maxlen: 24
79.134.230.0/24 maxlen: 24
79.134.229.0/24 maxlen: 24
79.134.232.0/24 maxlen: 24
79.134.231.0/24 maxlen: 24
79.134.233.0/24 maxlen: 24
79.134.235.0/24 maxlen: 24
79.134.237.0/24 maxlen: 24
79.134.236.0/23 maxlen: 23
79.134.236.0/24 maxlen: 24
79.134.238.0/23 maxlen: 23
79.134.234.0/24 maxlen: 24
2a04:1d40::/29 maxlen: 29
2001:4b28::/32 maxlen: 32
2a04:1d40::/32 maxlen: 32
2a01:528::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:2f:7f:6b:b4:82:e6:b4:18:5f:10:f7:39:84:70:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d6c15ca903d7d25453eaeb5f724a04e3aa65908
Validity
Not Before: Jan 1 16:34:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2293572e1dbbed44b3a2b226018871d3405c4f49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b5:b1:6c:73:5f:35:52:85:53:ec:5f:c5:48:
e5:c3:3f:08:18:91:ad:80:16:54:66:fb:b6:f9:ac:
f3:d6:9d:44:11:86:39:e0:e6:5f:f6:eb:7e:14:59:
fd:13:82:6c:4d:47:ca:57:ea:89:34:81:c2:b8:7e:
aa:8a:18:a7:56:11:20:00:2b:59:71:34:06:62:5d:
48:71:9d:d6:d7:45:46:53:ef:ed:f8:ff:d7:c5:2d:
58:ea:3c:a6:e0:cb:dd:7c:b3:24:d9:42:d1:3a:c3:
5b:92:5e:f4:14:fc:b4:f9:1f:1e:3d:02:1d:78:08:
30:55:b5:f6:7a:a7:8f:2a:33:f8:87:0f:d9:50:ed:
bb:8a:da:c0:b6:38:42:10:b0:cf:cf:db:5f:30:de:
77:d9:39:0a:de:87:a2:f4:8d:93:5c:2e:97:e6:9f:
60:4b:e4:13:99:14:0d:7c:02:ed:48:24:f2:71:7c:
f0:29:ab:80:ec:33:7a:e1:ca:50:5f:fa:b3:54:38:
02:7b:c5:ae:00:7f:c4:99:f3:ff:98:93:ed:ff:72:
f2:0b:d4:09:82:be:e4:d4:f6:c5:0c:00:1d:22:13:
f5:8b:48:1f:d7:5e:66:e3:ac:7d:0c:93:7d:c0:f5:
5f:09:bd:f8:9e:04:3a:0b:2a:11:ec:14:cd:81:f9:
31:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:93:57:2E:1D:BB:ED:44:B3:A2:B2:26:01:88:71:D3:40:5C:4F:49
X509v3 Authority Key Identifier:
keyid:5D:6C:15:CA:90:3D:7D:25:45:3E:AE:B5:F7:24:A0:4E:3A:A6:59:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XWwVypA9fSVFPq619ySgTjqmWQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2864c8-c042-428f-a02d-3b34c23b9c5a/1/IpNXLh277USzorImAYhx00BcT0k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2864c8-c042-428f-a02d-3b34c23b9c5a/1/XWwVypA9fSVFPq619ySgTjqmWQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.134.224.0/19
185.22.52.0/22
IPv6:
2001:4b28::/32
2a01:528::/32
2a04:1d40::/29
Signature Algorithm: sha256WithRSAEncryption
6a:a0:8b:c0:9b:27:01:e2:19:6e:0f:86:a5:1d:14:14:44:38:
45:fd:65:18:3e:37:54:a1:8e:73:e8:1c:43:b5:ad:19:25:6a:
e4:22:3c:04:ca:a1:09:33:10:bc:37:e3:66:0a:48:76:f9:ba:
ec:43:ae:98:ed:17:6e:29:53:f5:3d:55:da:21:e4:a7:b5:aa:
93:3c:14:03:30:41:e1:e3:8c:99:46:b2:a6:fe:0d:e4:f3:45:
b7:89:4d:e9:67:65:bc:52:81:29:28:55:a0:3c:f3:3e:f1:5c:
ef:72:ff:b1:76:03:62:34:24:20:7a:4c:e9:e1:bc:86:71:a0:
8d:1e:9d:25:ff:74:8e:ed:14:40:bd:06:35:7a:b3:9f:11:06:
67:36:f9:9f:78:e2:97:38:ea:01:aa:83:09:e6:f6:d8:4a:11:
9a:70:da:4a:a6:37:91:99:5b:e4:f6:9e:51:9c:48:25:e2:dd:
09:19:0b:d6:71:73:5e:29:a2:d8:a7:06:2b:70:b0:a0:29:4a:
8c:3a:81:43:8b:c8:5d:fc:03:17:fa:79:1e:af:cb:bf:8d:fb:
9f:85:b6:be:08:94:d7:b3:2a:da:bc:e6:61:8a:3e:5e:6a:48:
43:8b:b1:40:66:88:53:da:ae:16:cb:73:97:06:da:bf:93:74:
6b:0e:d0:ab
-----BEGIN CERTIFICATE-----
MIIFIDCCBAigAwIBAgISAYVuL39rtILmtBhfEPc5hHDKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkNmMxNWNhOTAzZDdkMjU0NTNlYWViNWY3MjRhMDRlM2Fh
NjU5MDgwHhcNMjMwMTAxMTYzNDQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMjkzNTcyZTFkYmJlZDQ0YjNhMmIyMjYwMTg4NzFkMzQwNWM0ZjQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLWxbHNfNVKFU+xfxUjlwz8IGJGt
gBZUZvu2+azz1p1EEYY54OZf9ut+FFn9E4JsTUfKV+qJNIHCuH6qihinVhEgACtZ
cTQGYl1IcZ3W10VGU+/t+P/XxS1Y6jym4MvdfLMk2ULROsNbkl70FPy0+R8ePQId
eAgwVbX2eqePKjP4hw/ZUO27itrAtjhCELDPz9tfMN532TkK3oei9I2TXC6X5p9g
S+QTmRQNfALtSCTycXzwKauA7DN64cpQX/qzVDgCe8WuAH/EmfP/mJPt/3LyC9QJ
gr7k1PbFDAAdIhP1i0gf115m46x9DJN9wPVfCb34ngQ6CyoR7BTNgfkxuwIDAQAB
o4ICLDCCAigwHQYDVR0OBBYEFCKTVy4du+1Es6KyJgGIcdNAXE9JMB8GA1UdIwQY
MBaAFF1sFcqQPX0lRT6utfckoE46plkIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFd3VnlwQTlmU1ZGUHE2MTl5U2dUanFtV1FnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8yODY0YzgtYzA0Mi00MjhmLWEwMmQt
M2IzNGMyM2I5YzVhLzEvSXBOWExoMjc3VVN6b3JJbUFZaHgwMEJjVDBrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC8yODY0YzgtYzA0Mi00MjhmLWEwMmQtM2IzNGMyM2I5YzVh
LzEvWFd3VnlwQTlmU1ZGUHE2MTl5U2dUanFtV1FnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTASBAIAATAMAwQFT4bgAwQC
uRY0MBsEAgACMBUDBQAgAUsoAwUAKgEFKAMFAyoEHUAwDQYJKoZIhvcNAQELBQAD
ggEBAGqgi8CbJwHiGW4PhqUdFBREOEX9ZRg+N1ShjnPoHEO1rRklauQiPATKoQkz
ELw342YKSHb5uuxDrpjtF24pU/U9Vdoh5Ke1qpM8FAMwQeHjjJlGsqb+DeTzRbeJ
TelnZbxSgSkoVaA88z7xXO9y/7F2A2I0JCB6TOnhvIZxoI0enSX/dI7tFEC9BjV6
s58RBmc2+Z944pc46gGqgwnm9thKEZpw2kqmN5GZW+T2nlGcSCXi3QkZC9Zxc14p
otinBitwsKApSow6gUOLyF38Axf6eR6vy7+N+5+Ftr4IlNezKtq85mGKPl5qSEOL
sUBmiFParhbLc5cG2r+TdGsO0Ks=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:52 2024 by rpki-client on console-fra.rpki-client.org