Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/7yQshRYCc-Xd55T17LRej_6-mzk.roa
File: 7yQshRYCc-Xd55T17LRej_6-mzk.roa (raw, json)
Hash identifier: qlCf1qK7EKsSlFKIYdzUEiI0FD12WnDWXoosahTq+lw=
Subject key identifier: EF:24:2C:85:16:02:73:E5:DD:E7:94:F5:EC:B4:5E:8F:FE:BE:9B:39
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 0190FF2616C409C0887FAC17F6F74F3B7EB0
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/7yQshRYCc-Xd55T17LRej_6-mzk.roa
Signing time: Mon 29 Jul 2024 15:40:04 +0000
ROA not before: Mon 29 Jul 2024 15:40:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2856
IP address blocks: 37.97.112.0/22 maxlen: 24
46.173.252.0/23 maxlen: 23
81.161.52.0/22 maxlen: 24
91.237.92.0/23 maxlen: 23
91.246.200.0/23 maxlen: 23
94.232.100.0/22 maxlen: 24
109.197.236.0/22 maxlen: 22
176.96.88.0/22 maxlen: 22
176.110.112.0/23 maxlen: 23
176.110.216.0/22 maxlen: 22
193.36.220.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 23 Oct 2024 09:38:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:ff:26:16:c4:09:c0:88:7f:ac:17:f6:f7:4f:3b:7e:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: Jul 29 15:40:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ef242c85160273e5dde794f5ecb45e8ffebe9b39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:16:38:7c:06:9a:7c:4c:47:8f:e6:0d:f0:ef:
85:10:ea:e8:22:b9:24:6b:3f:6a:91:50:2d:ad:b2:
15:fd:85:e8:d9:c0:64:6b:b7:56:a6:64:90:4f:34:
80:e8:91:7a:38:a9:20:f3:0d:ff:03:53:78:9c:57:
18:06:80:8f:40:5c:aa:b4:17:28:8c:9d:cb:9c:36:
6e:43:f9:e0:c5:24:7c:1e:44:4f:db:48:37:c3:e2:
31:0f:18:8a:a2:78:d2:fa:b0:af:6b:4a:f9:99:7f:
21:c3:e3:cf:57:9a:e6:cd:11:75:c7:78:cd:02:8d:
4f:2c:c2:81:b0:79:19:05:e9:b0:ae:2d:84:2d:58:
e4:ab:ec:db:08:3c:e9:9b:b2:d4:70:15:99:fb:32:
52:4e:1a:fb:26:34:4b:3c:43:d9:cc:e6:23:f4:27:
c4:d4:23:12:4d:e7:4b:dd:1e:c0:ab:b5:97:2f:f6:
c6:ef:0a:cb:06:75:d8:83:cc:b7:b9:d6:87:79:99:
f9:11:a0:38:86:66:fb:d6:ff:e4:6d:34:60:d0:32:
9c:31:83:db:ef:6b:30:e3:10:bd:0c:9b:ce:b9:49:
01:53:44:2f:5f:41:e5:de:5a:7a:95:f6:54:2c:d4:
ac:ec:39:ba:1d:04:18:30:2c:f3:cd:89:c0:a0:26:
4c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:24:2C:85:16:02:73:E5:DD:E7:94:F5:EC:B4:5E:8F:FE:BE:9B:39
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/7yQshRYCc-Xd55T17LRej_6-mzk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.97.112.0/22
46.173.252.0/23
81.161.52.0/22
91.237.92.0/23
91.246.200.0/23
94.232.100.0/22
109.197.236.0/22
176.96.88.0/22
176.110.112.0/23
176.110.216.0/22
193.36.220.0/23
Signature Algorithm: sha256WithRSAEncryption
5a:f8:bf:35:1e:66:f7:4d:c8:76:9b:8d:e5:2a:35:bd:66:17:
2d:84:80:e0:14:04:ea:6a:a1:be:45:f4:92:d2:b1:4b:43:1a:
e5:ad:06:dc:73:5b:57:03:46:8f:ea:db:c3:15:91:ca:ea:c3:
d9:48:63:76:a8:fc:92:87:8e:7c:86:95:3b:d9:55:03:4c:5d:
f4:e8:b2:f7:a8:66:6e:c4:16:f9:12:e0:87:6f:ae:d3:0a:97:
56:72:c9:35:89:ef:23:2d:5f:c7:d0:cc:6b:ce:36:35:eb:fe:
05:2f:4c:62:e2:76:34:94:79:85:bd:fd:fa:b1:66:4e:f0:34:
5d:84:96:f7:a8:40:12:9d:68:fe:a1:2a:81:79:e5:6c:7f:51:
a9:e4:84:8e:9b:c9:38:95:c6:fe:18:da:de:04:0d:2f:a4:63:
e2:ff:e4:f1:0a:41:dc:80:93:fd:65:09:7a:d9:82:65:d1:b3:
a3:8e:70:bc:b7:62:e3:41:05:fa:a4:87:69:e9:30:e6:af:33:
3b:da:00:81:fc:50:d3:5e:c1:8f:e2:cb:f8:f5:49:ae:9e:62:
7c:fe:f4:97:a1:61:8f:ee:8b:84:46:25:2d:05:a8:fc:c1:3c:
d3:9f:e4:9b:06:07:d2:22:3e:ab:4e:da:20:5d:92:3b:08:2a:
41:35:e5:8d
-----BEGIN CERTIFICATE-----
MIIFOTCCBCGgAwIBAgISAZD/JhbECcCIf6wX9vdPO36wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0OWNiYmQ1YzJjZjQxOTVjYzZlYzdmMjFmNjA3NTgxYTAy
MjRkYWEwHhcNMjQwNzI5MTU0MDA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZjI0MmM4NTE2MDI3M2U1ZGRlNzk0ZjVlY2I0NWU4ZmZlYmU5YjM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxY4fAaafExHj+YN8O+FEOroIrkk
az9qkVAtrbIV/YXo2cBka7dWpmSQTzSA6JF6OKkg8w3/A1N4nFcYBoCPQFyqtBco
jJ3LnDZuQ/ngxSR8HkRP20g3w+IxDxiKonjS+rCva0r5mX8hw+PPV5rmzRF1x3jN
Ao1PLMKBsHkZBemwri2ELVjkq+zbCDzpm7LUcBWZ+zJSThr7JjRLPEPZzOYj9CfE
1CMSTedL3R7Aq7WXL/bG7wrLBnXYg8y3udaHeZn5EaA4hmb71v/kbTRg0DKcMYPb
72sw4xC9DJvOuUkBU0QvX0Hl3lp6lfZULNSs7Dm6HQQYMCzzzYnAoCZMAwIDAQAB
o4ICRTCCAkEwHQYDVR0OBBYEFO8kLIUWAnPl3eeU9ey0Xo/+vps5MB8GA1UdIwQY
MBaAFDScu9XCz0GVzG7H8h9gdYGgIk2qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkp5NzFjTFBRWlhNYnNmeUgyQjFnYUFpVGFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUt
ZGMwNmRkODA1OTYwLzEvN3lRc2hSWUNjLVhkNTVUMTdMUmVqXzYtbXprLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUtZGMwNmRkODA1OTYw
LzEvTkp5NzFjTFBRWlhNYnNmeUgyQjFnYUFpVGFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQCJWFwAwQB
Lq38AwQCUaE0AwQBW+1cAwQBW/bIAwQCXuhkAwQCbcXsAwQCsGBYAwQBsG5wAwQC
sG7YAwQBwSTcMA0GCSqGSIb3DQEBCwUAA4IBAQBa+L81Hmb3Tch2m43lKjW9Zhct
hIDgFATqaqG+RfSS0rFLQxrlrQbcc1tXA0aP6tvDFZHK6sPZSGN2qPySh458hpU7
2VUDTF306LL3qGZuxBb5EuCHb67TCpdWcsk1ie8jLV/H0MxrzjY16/4FL0xi4nY0
lHmFvf36sWZO8DRdhJb3qEASnWj+oSqBeeVsf1Gp5ISOm8k4lcb+GNreBA0vpGPi
/+TxCkHcgJP9ZQl62YJl0bOjjnC8t2LjQQX6pIdp6TDmrzM72gCB/FDTXsGP4sv4
9UmunmJ8/vSXoWGP7ouERiUtBaj8wTzTn+SbBgfSIj6rTtogXZI7CCpBNeWN
-----END CERTIFICATE-----
Generated at Wed Oct 23 13:19:16 2024 by rpki-client on console-ams.rpki-client.org