Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/lqOKnjC3lG_10yT05AwnmZBPtgk.roa
File: lqOKnjC3lG_10yT05AwnmZBPtgk.roa (raw, json)
Hash identifier: wOyZ+364h96jcE9B0vNCqJFDkG1fpfigAq93DW3jG/8=
Subject key identifier: 96:A3:8A:9E:30:B7:94:6F:F5:D3:24:F4:E4:0C:27:99:90:4F:B6:09
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 01882895AC3701D2ED2D561E339E6650CB15
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/lqOKnjC3lG_10yT05AwnmZBPtgk.roa
Signing time: Wed 17 May 2023 07:21:17 +0000
ROA not before: Wed 17 May 2023 07:21:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.199.213.0/24 maxlen: 24
45.157.209.0/24 maxlen: 24
185.225.170.0/24 maxlen: 24
185.225.171.0/24 maxlen: 24
185.250.26.0/24 maxlen: 24
79.98.246.0/24 maxlen: 24
185.199.148.0/24 maxlen: 24
185.199.149.0/24 maxlen: 24
185.250.25.0/24 maxlen: 24
176.125.251.0/24 maxlen: 24
45.155.252.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 17 May 2023 15:17:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:28:95:ac:37:01:d2:ed:2d:56:1e:33:9e:66:50:cb:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: May 17 07:21:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=96a38a9e30b7946ff5d324f4e40c2799904fb609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a0:32:03:62:ed:94:fb:7e:c0:af:79:a4:d6:
71:af:14:67:f4:8a:8a:40:f4:db:cd:2c:68:5f:97:
75:13:91:a7:17:6b:95:cc:d5:fd:a4:ac:d1:6e:5e:
48:f1:17:1b:4e:60:67:1e:4a:a3:0c:11:84:9d:17:
7f:73:91:f2:1c:de:79:64:b2:da:2a:06:79:e4:a7:
93:ec:0e:24:6b:d6:08:a9:c3:e0:0f:08:a8:60:ab:
9b:54:6c:5e:8f:ae:ca:c5:ed:39:eb:e1:62:6b:11:
45:98:c8:12:8c:23:c0:d6:ca:91:ef:24:3c:8d:c6:
93:22:e9:86:94:8a:c0:8e:b1:70:22:bb:85:e0:5b:
78:b5:bf:15:e8:71:7f:fb:b1:84:11:b9:e8:85:6f:
13:42:83:bd:1b:28:28:f9:1e:ff:c5:d9:3b:82:32:
31:53:fc:67:b0:42:cc:fb:48:60:9d:28:1b:be:08:
92:dd:d1:b4:69:bf:6f:48:c4:0f:0d:aa:4f:0a:0a:
43:1d:3a:16:9b:b9:00:55:97:0b:34:5c:db:c5:54:
e8:a1:f5:c9:f2:e9:7b:d1:17:68:15:2a:d7:67:7d:
b1:18:df:4b:80:32:5f:77:c1:b7:a9:5b:43:08:0b:
99:2e:8a:63:a8:32:c6:00:1d:10:55:b2:e0:20:0d:
68:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:A3:8A:9E:30:B7:94:6F:F5:D3:24:F4:E4:0C:27:99:90:4F:B6:09
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/lqOKnjC3lG_10yT05AwnmZBPtgk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.252.0/24
45.157.209.0/24
79.98.246.0/24
176.125.251.0/24
185.199.148.0/23
185.199.213.0/24
185.225.170.0/23
185.250.25.0-185.250.26.255
Signature Algorithm: sha256WithRSAEncryption
1b:70:e0:7d:62:c5:0f:b4:3d:a9:21:26:e2:99:86:e3:89:52:
0f:5f:16:14:98:df:a3:48:7f:ce:59:90:7b:bf:9f:65:1f:7e:
35:c2:df:03:47:85:58:94:83:96:fc:de:7c:fb:7a:ff:2a:db:
95:cf:70:64:9a:aa:58:0e:ac:d7:c3:28:86:10:ac:b4:ef:74:
84:3b:2c:57:08:fc:6d:70:dc:a9:7f:45:6f:9e:b6:82:bf:50:
bb:22:31:67:fd:d0:3f:7a:39:86:a5:7d:7f:25:37:18:b7:c8:
5f:46:3b:ff:f1:84:dd:82:07:ec:31:3b:b0:7d:63:5d:81:3c:
63:60:33:66:30:d2:98:03:0a:d0:c0:7b:f0:b6:eb:4b:e5:2f:
e0:94:75:37:f7:54:b2:59:4b:c5:90:16:3c:cd:b5:3c:dc:08:
af:27:b4:62:5f:5d:1e:d4:56:68:09:30:42:d1:e0:a5:32:94:
a2:e2:f4:a0:8f:63:61:ee:13:81:2c:3d:0f:00:1e:1b:4b:e3:
3a:0d:dc:67:a3:ad:6e:08:c0:2a:d0:8c:a6:cc:85:15:90:73:
a9:8b:bc:04:d7:2c:79:e1:79:44:09:fd:9b:2f:3e:2f:8d:67:
30:de:72:fc:50:62:28:83:a5:be:3d:33:16:2a:1d:ed:ad:99:
70:25:36:6c
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgISAYgolaw3AdLtLVYeM55mUMsVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2OGJmYjhhNWVlZTQ5MDgyZWE2MjhkZjI1YTRhNWQ1MGYz
YWE5YjMwHhcNMjMwNTE3MDcyMTE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NmEzOGE5ZTMwYjc5NDZmZjVkMzI0ZjRlNDBjMjc5OTkwNGZiNjA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi6AyA2LtlPt+wK95pNZxrxRn9IqK
QPTbzSxoX5d1E5GnF2uVzNX9pKzRbl5I8RcbTmBnHkqjDBGEnRd/c5HyHN55ZLLa
KgZ55KeT7A4ka9YIqcPgDwioYKubVGxej67Kxe056+FiaxFFmMgSjCPA1sqR7yQ8
jcaTIumGlIrAjrFwIruF4Ft4tb8V6HF/+7GEEbnohW8TQoO9Gygo+R7/xdk7gjIx
U/xnsELM+0hgnSgbvgiS3dG0ab9vSMQPDapPCgpDHToWm7kAVZcLNFzbxVToofXJ
8ul70RdoFSrXZ32xGN9LgDJfd8G3qVtDCAuZLopjqDLGAB0QVbLgIA1oDQIDAQAB
o4ICOzCCAjcwHQYDVR0OBBYEFJajip4wt5Rv9dMk9OQMJ5mQT7YJMB8GA1UdIwQY
MBaAFDaL+4pe7kkILqYo3yWkpdUPOqmzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUt
MGFlMmU5MjJhMjkyLzEvbHFPS25qQzNsR18xMHlUMDVBd25tWkJQdGdrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUtMGFlMmU5MjJhMjky
LzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFEGCCsGAQUFBwEHAQH/BEIwQDA+BAIAATA4AwQALZv8AwQA
LZ3RAwQAT2L2AwQAsH37AwQBuceUAwQAucfVAwQBueGqMAwDBAC5+hkDBAC5+how
DQYJKoZIhvcNAQELBQADggEBABtw4H1ixQ+0PakhJuKZhuOJUg9fFhSY36NIf85Z
kHu/n2UffjXC3wNHhViUg5b83nz7ev8q25XPcGSaqlgOrNfDKIYQrLTvdIQ7LFcI
/G1w3Kl/RW+etoK/ULsiMWf90D96OYalfX8lNxi3yF9GO//xhN2CB+wxO7B9Y12B
PGNgM2Yw0pgDCtDAe/C260vlL+CUdTf3VLJZS8WQFjzNtTzcCK8ntGJfXR7UVmgJ
MELR4KUylKLi9KCPY2HuE4EsPQ8AHhtL4zoN3GejrW4IwCrQjKbMhRWQc6mLvATX
LHnheUQJ/ZsvPi+NZzDecvxQYiiDpb49MxYqHe2tmXAlNmw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:35 2024 by rpki-client on console-ams.rpki-client.org