Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/y0EqpZkSpFodi91AZ2wWcG7lG30.roa
File: y0EqpZkSpFodi91AZ2wWcG7lG30.roa (raw, json)
Hash identifier: 5Qu0xePlza4wOiORHVcBq3VRV2i3ynpPMd6i0cL5wac=
Subject key identifier: CB:41:2A:A5:99:12:A4:5A:1D:8B:DD:40:67:6C:16:70:6E:E5:1B:7D
Certificate issuer: /CN=3ad65216812ed24fd1c719871a59a971dec30a26
Certificate serial: 019222FF49C9B47C416FCD8E7CB7A4BAA36E
Authority key identifier: 3A:D6:52:16:81:2E:D2:4F:D1:C7:19:87:1A:59:A9:71:DE:C3:0A:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OtZSFoEu0k_RxxmHGlmpcd7DCiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/y0EqpZkSpFodi91AZ2wWcG7lG30.roa
Signing time: Tue 24 Sep 2024 07:46:48 +0000
ROA not before: Tue 24 Sep 2024 07:46:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35579
IP address blocks: 37.122.220.0/22 maxlen: 24
78.142.66.0/23 maxlen: 23
78.142.80.0/22 maxlen: 24
78.142.85.0/24 maxlen: 24
78.142.86.0/23 maxlen: 23
78.142.88.0/23 maxlen: 23
78.142.90.0/24 maxlen: 24
78.142.91.0/24 maxlen: 24
78.142.118.0/24 maxlen: 24
78.142.119.0/24 maxlen: 24
78.142.120.0/24 maxlen: 24
78.142.121.0/24 maxlen: 24
92.63.213.0/24 maxlen: 24
195.16.244.0/24 maxlen: 24
195.16.252.0/24 maxlen: 24
2a04:5080::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 24 Sep 2024 13:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:22:ff:49:c9:b4:7c:41:6f:cd:8e:7c:b7:a4:ba:a3:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ad65216812ed24fd1c719871a59a971dec30a26
Validity
Not Before: Sep 24 07:46:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cb412aa59912a45a1d8bdd40676c16706ee51b7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:13:c5:5b:21:b8:96:be:b2:a9:62:f9:20:5e:
5c:38:4e:bb:74:a0:8f:cf:61:19:56:bd:08:d9:01:
2c:34:9d:0f:17:d8:67:aa:69:95:22:1d:dd:db:c4:
ee:d8:4d:16:43:bd:0b:69:41:fe:6f:c1:93:e3:0a:
41:76:49:82:03:68:03:b8:97:5e:04:1e:b1:79:e7:
f2:81:f3:1d:64:64:5c:eb:a1:2c:f5:3a:c5:eb:6f:
08:23:01:99:e3:b8:cd:34:42:b7:d2:65:21:4f:1f:
49:44:cc:62:fa:9f:16:a5:8f:41:67:fe:8a:0f:87:
b6:02:24:ac:3b:b6:18:ed:1d:8d:3f:99:4e:d5:ea:
64:8d:22:31:f3:c4:a1:08:0f:ea:85:0a:52:9b:fa:
fa:2d:66:81:be:8f:73:37:32:00:35:f1:ba:ee:ba:
12:82:ab:fa:d8:b4:da:85:b5:38:4f:28:04:a1:e8:
da:ea:6a:47:fc:00:2e:f8:9f:d9:d5:44:ee:2e:ff:
2b:5d:f6:51:08:de:7f:47:5c:7a:9a:4e:40:a5:f6:
d8:2d:2c:2d:a3:7b:f7:7f:23:dc:83:63:9c:f1:bb:
25:17:6b:d9:a4:a8:31:f1:5b:6d:ec:f3:3b:36:b2:
50:b5:35:ad:2b:a5:13:b7:73:dd:6f:87:f8:41:99:
ff:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:41:2A:A5:99:12:A4:5A:1D:8B:DD:40:67:6C:16:70:6E:E5:1B:7D
X509v3 Authority Key Identifier:
keyid:3A:D6:52:16:81:2E:D2:4F:D1:C7:19:87:1A:59:A9:71:DE:C3:0A:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtZSFoEu0k_RxxmHGlmpcd7DCiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/y0EqpZkSpFodi91AZ2wWcG7lG30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/OtZSFoEu0k_RxxmHGlmpcd7DCiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.122.220.0/22
78.142.66.0/23
78.142.80.0/22
78.142.85.0-78.142.91.255
78.142.118.0-78.142.121.255
92.63.213.0/24
195.16.244.0/24
195.16.252.0/24
IPv6:
2a04:5080::/29
Signature Algorithm: sha256WithRSAEncryption
47:c9:1d:10:30:89:9d:2d:eb:d3:73:61:d3:03:ec:1a:73:09:
58:b4:66:42:06:2b:c2:0e:25:5b:06:0f:49:f6:79:09:b4:03:
0c:71:2c:ec:2d:7f:3a:88:77:fd:b8:98:29:f0:2d:3a:75:9a:
fb:88:f3:fd:4d:d4:e5:98:75:38:11:c5:47:23:82:cb:0f:78:
4e:20:32:e6:87:22:1b:c9:f2:41:10:47:2a:20:aa:7d:ee:18:
94:08:d8:bc:e2:bd:b4:0a:84:9a:f7:96:3e:d1:91:07:dd:6c:
b2:a8:5b:31:e7:a3:bf:2d:99:7c:2c:c0:e3:b8:f1:c9:95:22:
7d:5d:7c:be:ff:39:98:54:a7:bc:b2:38:2a:df:fe:f7:7b:e6:
b0:81:93:87:0f:63:36:70:e3:ab:ba:ac:71:ef:66:86:33:d7:
89:e5:21:d6:aa:e3:b6:57:16:62:a8:68:9c:e6:87:a1:14:66:
45:92:5a:54:95:12:2d:85:f5:1f:be:a7:38:9e:eb:04:a8:28:
d5:69:39:72:ec:8d:b1:88:8f:38:ed:c4:f3:6c:f0:ed:aa:fb:
15:5f:9e:5a:28:16:12:8a:55:71:ae:e8:72:82:70:7a:52:7a:
10:43:5e:0f:b6:62:c4:5b:6b:c1:09:7d:30:f9:f7:36:86:3d:
32:38:90:9d
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgISAZIi/0nJtHxBb82OfLekuqNuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhZDY1MjE2ODEyZWQyNGZkMWM3MTk4NzFhNTlhOTcxZGVj
MzBhMjYwHhcNMjQwOTI0MDc0NjQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYjQxMmFhNTk5MTJhNDVhMWQ4YmRkNDA2NzZjMTY3MDZlZTUxYjdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4BPFWyG4lr6yqWL5IF5cOE67dKCP
z2EZVr0I2QEsNJ0PF9hnqmmVIh3d28Tu2E0WQ70LaUH+b8GT4wpBdkmCA2gDuJde
BB6xeefygfMdZGRc66Es9TrF628IIwGZ47jNNEK30mUhTx9JRMxi+p8WpY9BZ/6K
D4e2AiSsO7YY7R2NP5lO1epkjSIx88ShCA/qhQpSm/r6LWaBvo9zNzIANfG67roS
gqv62LTahbU4TygEoeja6mpH/AAu+J/Z1UTuLv8rXfZRCN5/R1x6mk5ApfbYLSwt
o3v3fyPcg2Oc8bslF2vZpKgx8Vtt7PM7NrJQtTWtK6UTt3Pdb4f4QZn/FwIDAQAB
o4ICUjCCAk4wHQYDVR0OBBYEFMtBKqWZEqRaHYvdQGdsFnBu5Rt9MB8GA1UdIwQY
MBaAFDrWUhaBLtJP0ccZhxpZqXHewwomMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3RaU0ZvRXUwa19SeHhtSEdsbXBjZDdEQ2lZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9iOGNhZTQtYjVhZi00MzgwLTk4MTct
NDY1MzhjYTUzODNjLzEveTBFcXBaa1NwRm9kaTkxQVoyd1djRzdsRzMwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS9iOGNhZTQtYjVhZi00MzgwLTk4MTctNDY1MzhjYTUzODNj
LzEvT3RaU0ZvRXUwa19SeHhtSEdsbXBjZDdEQ2lZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGgGCCsGAQUFBwEHAQH/BFkwVzBGBAIAATBAAwQCJXrcAwQB
To5CAwQCTo5QMAwDBABOjlUDBAJOjlgwDAMEAU6OdgMEAU6OeAMEAFw/1QMEAMMQ
9AMEAMMQ/DANBAIAAjAHAwUDKgRQgDANBgkqhkiG9w0BAQsFAAOCAQEAR8kdEDCJ
nS3r03Nh0wPsGnMJWLRmQgYrwg4lWwYPSfZ5CbQDDHEs7C1/Ooh3/biYKfAtOnWa
+4jz/U3U5Zh1OBHFRyOCyw94TiAy5ociG8nyQRBHKiCqfe4YlAjYvOK9tAqEmveW
PtGRB91ssqhbMeejvy2ZfCzA47jxyZUifV18vv85mFSnvLI4Kt/+93vmsIGThw9j
NnDjq7qsce9mhjPXieUh1qrjtlcWYqhonOaHoRRmRZJaVJUSLYX1H76nOJ7rBKgo
1Wk5cuyNsYiPOO3E82zw7ar7FV+eWigWEopVca7ocoJwelJ6EENeD7ZixFtrwQl9
MPn3NoY9MjiQnQ==
-----END CERTIFICATE-----
Generated at Tue Sep 24 17:14:22 2024 by rpki-client on console-ams.rpki-client.org