Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/1YXwrdnSrfT4v3KjA6KlLlwIyws.roa
File: 1YXwrdnSrfT4v3KjA6KlLlwIyws.roa (raw, json)
Hash identifier: KBxddSHS+lVdBXrWQk6wKKpKgKffhRSISD07EPzkyYw=
Subject key identifier: D5:85:F0:AD:D9:D2:AD:F4:F8:BF:72:A3:03:A2:A5:2E:5C:08:CB:0B
Certificate issuer: /CN=3ad65216812ed24fd1c719871a59a971dec30a26
Certificate serial: 018CC3B67511F66CA35125784A2E2F1F66E5
Authority key identifier: 3A:D6:52:16:81:2E:D2:4F:D1:C7:19:87:1A:59:A9:71:DE:C3:0A:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OtZSFoEu0k_RxxmHGlmpcd7DCiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/1YXwrdnSrfT4v3KjA6KlLlwIyws.roa
Signing time: Mon 01 Jan 2024 06:29:23 +0000
ROA not before: Mon 01 Jan 2024 06:29:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35579
IP address blocks: 92.63.213.0/24 maxlen: 24
78.142.66.0/23 maxlen: 23
78.142.85.0/24 maxlen: 24
78.142.80.0/22 maxlen: 24
78.142.86.0/23 maxlen: 23
78.142.91.0/24 maxlen: 24
78.142.90.0/24 maxlen: 24
78.142.88.0/23 maxlen: 23
195.16.244.0/24 maxlen: 24
195.16.252.0/24 maxlen: 24
2a04:5080::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 19 Sep 2024 08:23:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:75:11:f6:6c:a3:51:25:78:4a:2e:2f:1f:66:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ad65216812ed24fd1c719871a59a971dec30a26
Validity
Not Before: Jan 1 06:29:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d585f0add9d2adf4f8bf72a303a2a52e5c08cb0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:93:57:65:92:ec:25:b7:bf:ef:5c:6c:80:c9:
03:99:f7:67:e3:45:b7:4c:7c:77:36:8c:bf:14:57:
21:af:a0:82:a6:32:8c:dc:89:01:71:ca:e8:d1:31:
92:8b:ed:ea:98:b8:ce:9c:77:df:bf:ea:7a:07:e7:
f2:d8:be:8e:10:af:7a:34:97:96:b7:72:0c:31:27:
61:ab:36:06:9a:63:42:09:f8:b5:33:1c:66:a6:e2:
5b:ee:c3:33:db:ee:ed:88:c1:81:c4:34:33:fd:9b:
0b:51:48:99:d2:dd:93:8f:bb:ff:6c:6c:01:90:19:
dd:ca:37:af:21:c9:90:19:15:e8:3b:68:c4:70:72:
50:52:62:13:c4:07:b7:9c:67:41:3c:db:5d:d7:32:
f2:94:5c:43:e8:25:ee:6b:f4:b3:fd:a1:9c:9f:95:
24:c6:c7:4d:9c:b6:7e:9e:16:3e:fe:82:61:48:e2:
0b:29:df:92:9d:9b:35:58:82:db:45:fb:b9:f0:cc:
90:29:fc:dc:96:dc:80:3c:dd:46:b9:3a:f0:48:92:
6d:7f:27:51:16:1c:1c:8e:dc:2c:6a:90:dd:c2:ca:
26:77:b1:dc:11:83:a8:9f:cd:8e:82:b8:e9:34:bf:
78:bc:16:d3:10:53:b3:5c:29:3c:32:9d:11:91:8e:
43:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:85:F0:AD:D9:D2:AD:F4:F8:BF:72:A3:03:A2:A5:2E:5C:08:CB:0B
X509v3 Authority Key Identifier:
keyid:3A:D6:52:16:81:2E:D2:4F:D1:C7:19:87:1A:59:A9:71:DE:C3:0A:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtZSFoEu0k_RxxmHGlmpcd7DCiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/1YXwrdnSrfT4v3KjA6KlLlwIyws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/OtZSFoEu0k_RxxmHGlmpcd7DCiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.142.66.0/23
78.142.80.0/22
78.142.85.0-78.142.91.255
92.63.213.0/24
195.16.244.0/24
195.16.252.0/24
IPv6:
2a04:5080::/29
Signature Algorithm: sha256WithRSAEncryption
1a:7b:43:1b:c3:33:e4:dc:26:56:62:7b:15:c3:df:89:da:21:
33:1b:fb:aa:38:a0:fa:18:da:a7:7d:2e:83:aa:81:41:90:da:
63:c4:20:95:e0:10:9c:a8:a5:97:93:50:39:57:00:fb:66:eb:
d0:f6:37:10:63:07:92:06:49:c0:52:d3:8a:a2:43:de:a9:22:
92:94:f9:cc:ca:5b:bd:2b:3e:57:42:2d:df:f5:91:ac:33:9f:
76:32:f7:5b:cb:c0:88:ca:80:97:c8:30:9a:1d:01:8e:e7:5c:
a8:fb:e9:04:cf:43:dd:dc:0f:a9:b8:0f:1d:75:e3:ca:98:d3:
3a:61:fe:d5:5a:77:95:93:2f:8f:f3:b5:97:e0:ee:2e:07:a5:
29:fc:5a:51:e3:db:d1:92:ea:29:6f:59:b4:ac:99:a1:d2:a6:
50:3a:3c:b8:7f:7b:4a:08:e1:bc:0a:58:1e:00:6b:1e:ff:4e:
0a:ca:25:86:21:ec:77:72:f6:5a:9e:a4:d2:3a:1f:d3:4c:1a:
2f:81:e8:de:b9:1a:f2:83:ad:f7:d5:66:5a:f5:38:cd:23:42:
97:8f:e2:8c:a5:12:44:c3:4b:80:5b:75:ec:31:85:86:aa:90:
4f:95:c0:c0:32:36:d3:74:5b:85:5e:a1:88:a5:3f:e0:29:3f:
71:52:b6:63
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgISAYzDtnUR9myjUSV4Si4vH2blMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhZDY1MjE2ODEyZWQyNGZkMWM3MTk4NzFhNTlhOTcxZGVj
MzBhMjYwHhcNMjQwMTAxMDYyOTIzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNTg1ZjBhZGQ5ZDJhZGY0ZjhiZjcyYTMwM2EyYTUyZTVjMDhjYjBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspNXZZLsJbe/71xsgMkDmfdn40W3
THx3Noy/FFchr6CCpjKM3IkBccro0TGSi+3qmLjOnHffv+p6B+fy2L6OEK96NJeW
t3IMMSdhqzYGmmNCCfi1MxxmpuJb7sMz2+7tiMGBxDQz/ZsLUUiZ0t2Tj7v/bGwB
kBndyjevIcmQGRXoO2jEcHJQUmITxAe3nGdBPNtd1zLylFxD6CXua/Sz/aGcn5Uk
xsdNnLZ+nhY+/oJhSOILKd+SnZs1WILbRfu58MyQKfzcltyAPN1GuTrwSJJtfydR
FhwcjtwsapDdwsomd7HcEYOon82OgrjpNL94vBbTEFOzXCk8Mp0RkY5DoQIDAQAB
o4ICPjCCAjowHQYDVR0OBBYEFNWF8K3Z0q30+L9yowOipS5cCMsLMB8GA1UdIwQY
MBaAFDrWUhaBLtJP0ccZhxpZqXHewwomMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3RaU0ZvRXUwa19SeHhtSEdsbXBjZDdEQ2lZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9iOGNhZTQtYjVhZi00MzgwLTk4MTct
NDY1MzhjYTUzODNjLzEvMVlYd3JkblNyZlQ0djNLakE2S2xMbHdJeXdzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS9iOGNhZTQtYjVhZi00MzgwLTk4MTctNDY1MzhjYTUzODNj
LzEvT3RaU0ZvRXUwa19SeHhtSEdsbXBjZDdEQ2lZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFQGCCsGAQUFBwEHAQH/BEUwQzAyBAIAATAsAwQBTo5CAwQC
To5QMAwDBABOjlUDBAJOjlgDBABcP9UDBADDEPQDBADDEPwwDQQCAAIwBwMFAyoE
UIAwDQYJKoZIhvcNAQELBQADggEBABp7QxvDM+TcJlZiexXD34naITMb+6o4oPoY
2qd9LoOqgUGQ2mPEIJXgEJyopZeTUDlXAPtm69D2NxBjB5IGScBS04qiQ96pIpKU
+czKW70rPldCLd/1kawzn3Yy91vLwIjKgJfIMJodAY7nXKj76QTPQ93cD6m4Dx11
48qY0zph/tVad5WTL4/ztZfg7i4HpSn8WlHj29GS6ilvWbSsmaHSplA6PLh/e0oI
4bwKWB4Aax7/TgrKJYYh7Hdy9lqepNI6H9NMGi+B6N65GvKDrffVZlr1OM0jQpeP
4oylEkTDS4BbdewxhYaqkE+VwMAyNtN0W4VeoYilP+ApP3FStmM=
-----END CERTIFICATE-----
Generated at Thu Sep 19 10:53:28 2024 by rpki-client on console-fra.rpki-client.org