Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/c0147a-fabf-40a4-9ef5-2214e96e382f/1/R9-OkSgtHaN41kEZDH2V7OrpsR4.roa
File: R9-OkSgtHaN41kEZDH2V7OrpsR4.roa (raw, json)
Hash identifier: Or/rV1GIyjsXQU9+uYzgfdt+bCZVzgkJZmkH5sHs2ck=
Subject key identifier: 47:DF:8E:91:28:2D:1D:A3:78:D6:41:19:0C:7D:95:EC:EA:E9:B1:1E
Certificate issuer: /CN=926cc6b46295cbbc1bdf986302d0271b8b7d7af0
Certificate serial: 018CC26D873A8DA397DF21CE847C6ED89AB0
Authority key identifier: 92:6C:C6:B4:62:95:CB:BC:1B:DF:98:63:02:D0:27:1B:8B:7D:7A:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmzGtGKVy7wb35hjAtAnG4t9evA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/c0147a-fabf-40a4-9ef5-2214e96e382f/1/R9-OkSgtHaN41kEZDH2V7OrpsR4.roa
Signing time: Mon 01 Jan 2024 00:30:07 +0000
ROA not before: Mon 01 Jan 2024 00:30:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25472
IP address blocks: 79.107.64.0/19 maxlen: 24
109.242.0.0/16 maxlen: 24
176.58.128.0/17 maxlen: 24
81.92.48.0/20 maxlen: 24
79.107.0.0/17 maxlen: 17
79.107.0.0/19 maxlen: 24
79.107.0.0/16 maxlen: 24
37.6.0.0/17 maxlen: 17
37.6.0.0/16 maxlen: 24
79.107.160.0/19 maxlen: 24
79.107.192.0/19 maxlen: 24
109.242.128.0/17 maxlen: 24
62.169.192.0/18 maxlen: 24
46.190.0.0/17 maxlen: 24
84.254.0.0/18 maxlen: 24
79.107.128.0/17 maxlen: 17
80.245.160.0/20 maxlen: 24
37.6.128.0/17 maxlen: 17
91.140.0.0/17 maxlen: 24
91.140.32.0/19 maxlen: 24
185.3.220.0/22 maxlen: 24
2a03:f000::/32 maxlen: 40
2a03:f003:2::/48 maxlen: 48
2a03:f002::/32 maxlen: 32
2a03:f000::/29 maxlen: 48
2a03:f003::/32 maxlen: 32
2a03:f003:300::/40 maxlen: 40
2a03:f003:200::/40 maxlen: 40
2a03:f003:100::/40 maxlen: 40
2a03:f003:1::/48 maxlen: 48
2a03:f003:3::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 12 Feb 2024 09:32:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:87:3a:8d:a3:97:df:21:ce:84:7c:6e:d8:9a:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=926cc6b46295cbbc1bdf986302d0271b8b7d7af0
Validity
Not Before: Jan 1 00:30:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=47df8e91282d1da378d641190c7d95eceae9b11e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c5:2c:c8:b8:90:ae:fc:27:14:66:bf:07:6a:
d5:4d:40:b2:11:17:7c:91:e5:f8:95:c9:36:69:8b:
3c:d1:c9:c1:2a:a8:1c:96:b3:7c:9b:f6:c1:44:2d:
4a:fd:a7:81:88:6e:18:f5:2d:9f:2e:49:d2:fc:3e:
d3:00:fc:2c:99:02:27:83:de:70:68:3d:25:fd:26:
a9:e5:30:38:4f:98:be:91:a1:53:7b:75:88:b4:af:
87:7e:90:d3:19:86:e5:9b:01:0e:0c:87:5f:5d:17:
bf:42:e7:8d:ae:d1:78:db:9f:5b:e6:b7:f7:ee:69:
49:b4:9d:2e:74:73:ce:43:21:31:d0:d9:d0:63:c0:
05:ab:19:30:90:f7:b4:d1:0c:3b:d9:4e:f1:73:b0:
e6:9b:98:80:f2:2c:7a:f3:df:7a:65:36:e3:8f:03:
3f:35:6f:da:9f:7a:38:f9:f4:20:87:02:74:c3:9d:
21:c0:7e:b9:4f:bd:19:c2:6d:e9:08:1c:33:67:2e:
26:6a:20:a1:4f:1f:d9:90:ae:31:f4:36:d3:a5:7f:
b9:fb:c9:26:6f:8c:b2:00:90:1f:3c:1f:61:04:41:
4d:72:43:89:f6:df:b6:45:9e:9a:2b:35:46:5a:59:
44:f0:d0:a2:ec:2b:c2:d4:d0:1e:64:d2:0e:18:b5:
3c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:DF:8E:91:28:2D:1D:A3:78:D6:41:19:0C:7D:95:EC:EA:E9:B1:1E
X509v3 Authority Key Identifier:
keyid:92:6C:C6:B4:62:95:CB:BC:1B:DF:98:63:02:D0:27:1B:8B:7D:7A:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmzGtGKVy7wb35hjAtAnG4t9evA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/c0147a-fabf-40a4-9ef5-2214e96e382f/1/R9-OkSgtHaN41kEZDH2V7OrpsR4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/c0147a-fabf-40a4-9ef5-2214e96e382f/1/kmzGtGKVy7wb35hjAtAnG4t9evA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.6.0.0/16
46.190.0.0/17
62.169.192.0/18
79.107.0.0/16
80.245.160.0/20
81.92.48.0/20
84.254.0.0/18
91.140.0.0/17
109.242.0.0/16
176.58.128.0/17
185.3.220.0/22
IPv6:
2a03:f000::/29
Signature Algorithm: sha256WithRSAEncryption
52:3d:4a:df:45:23:49:f2:65:67:7f:05:48:75:83:24:31:38:
97:49:ee:b5:76:11:fd:99:8e:68:a4:67:df:e6:0f:d3:32:66:
b9:c5:6f:90:03:bc:9d:b2:d5:f5:91:2a:15:d9:1a:21:89:e8:
28:c8:55:bb:f9:88:61:fc:d9:20:55:1b:14:68:d0:3a:e7:ad:
60:99:4a:e7:61:19:ef:39:d7:d7:56:0d:6b:3d:b9:93:3d:d3:
3a:b7:c7:32:be:49:6f:83:b2:a8:92:aa:d5:8d:ce:04:84:21:
ca:b7:43:d2:8f:83:e8:f0:06:cd:50:aa:58:bc:5e:cc:40:d7:
15:06:f7:cc:25:7a:ce:16:ff:81:b7:88:c0:60:ba:a7:89:18:
fb:7b:6a:d9:64:45:5d:03:15:51:41:67:16:f8:18:96:4f:3e:
a1:0c:13:0e:42:a0:d8:8a:60:92:86:94:59:7e:36:79:d7:ed:
1b:c3:60:2a:12:77:bb:f8:a8:d5:39:de:82:4b:06:cb:83:31:
71:40:7d:ef:ac:78:6c:63:29:1a:ea:8c:df:5b:26:a0:70:f9:
93:ce:c4:8a:1b:b3:6f:40:b1:da:19:37:c8:fa:e9:bc:3d:b5:
c8:07:b8:98:69:b8:de:8e:64:1c:af:b9:dc:b2:7e:ec:f0:dd:
d8:c6:ce:79
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgISAYzCbYc6jaOX3yHOhHxu2JqwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyNmNjNmI0NjI5NWNiYmMxYmRmOTg2MzAyZDAyNzFiOGI3
ZDdhZjAwHhcNMjQwMTAxMDAzMDA3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0N2RmOGU5MTI4MmQxZGEzNzhkNjQxMTkwYzdkOTVlY2VhZTliMTFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosUsyLiQrvwnFGa/B2rVTUCyERd8
keX4lck2aYs80cnBKqgclrN8m/bBRC1K/aeBiG4Y9S2fLknS/D7TAPwsmQIng95w
aD0l/Sap5TA4T5i+kaFTe3WItK+HfpDTGYblmwEODIdfXRe/QueNrtF4259b5rf3
7mlJtJ0udHPOQyEx0NnQY8AFqxkwkPe00Qw72U7xc7Dmm5iA8ix68996ZTbjjwM/
NW/an3o4+fQghwJ0w50hwH65T70Zwm3pCBwzZy4maiChTx/ZkK4x9DbTpX+5+8km
b4yyAJAfPB9hBEFNckOJ9t+2RZ6aKzVGWllE8NCi7CvC1NAeZNIOGLU8XwIDAQAB
o4ICUTCCAk0wHQYDVR0OBBYEFEffjpEoLR2jeNZBGQx9lezq6bEeMB8GA1UdIwQY
MBaAFJJsxrRilcu8G9+YYwLQJxuLfXrwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva216R3RHS1Z5N3diMzVoakF0QW5HNHQ5ZXZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9jMDE0N2EtZmFiZi00MGE0LTllZjUt
MjIxNGU5NmUzODJmLzEvUjktT2tTZ3RIYU40MWtFWkRIMlY3T3Jwc1I0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9jMDE0N2EtZmFiZi00MGE0LTllZjUtMjIxNGU5NmUzODJm
LzEva216R3RHS1Z5N3diMzVoakF0QW5HNHQ5ZXZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGcGCCsGAQUFBwEHAQH/BFgwVjBFBAIAATA/AwMAJQYDBAcu
vgADBAY+qcADAwBPawMEBFD1oAMEBFFcMAMEBlT+AAMEB1uMAAMDAG3yAwQHsDqA
AwQCuQPcMA0EAgACMAcDBQMqA/AAMA0GCSqGSIb3DQEBCwUAA4IBAQBSPUrfRSNJ
8mVnfwVIdYMkMTiXSe61dhH9mY5opGff5g/TMma5xW+QA7ydstX1kSoV2Rohiego
yFW7+Yhh/NkgVRsUaNA6561gmUrnYRnvOdfXVg1rPbmTPdM6t8cyvklvg7KokqrV
jc4EhCHKt0PSj4Po8AbNUKpYvF7MQNcVBvfMJXrOFv+Bt4jAYLqniRj7e2rZZEVd
AxVRQWcW+BiWTz6hDBMOQqDYimCShpRZfjZ51+0bw2AqEne7+KjVOd6CSwbLgzFx
QH3vrHhsYyka6ozfWyagcPmTzsSKG7NvQLHaGTfI+um8PbXIB7iYabjejmQcr7nc
sn7s8N3Yxs55
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:47 2024 by rpki-client on console-ams.rpki-client.org