Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/L9qVNG62hhBtea0_C2Kimp6UzHw.roa
File: L9qVNG62hhBtea0_C2Kimp6UzHw.roa (raw, json)
Hash identifier: ToWhyCiZLVfhVJSD/v1HB6iArd9xPyZyDX/xK3v3Bo4=
Subject key identifier: 2F:DA:95:34:6E:B6:86:10:6D:79:AD:3F:0B:62:A2:9A:9E:94:CC:7C
Certificate issuer: /CN=b62d4cec783305923e3497ed884f1c445b4e78fb
Certificate serial: 018D7596D7C9A00002AC43FA93EB8C8185E1
Authority key identifier: B6:2D:4C:EC:78:33:05:92:3E:34:97:ED:88:4F:1C:44:5B:4E:78:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ti1M7HgzBZI-NJftiE8cRFtOePs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/L9qVNG62hhBtea0_C2Kimp6UzHw.roa
Signing time: Sun 04 Feb 2024 19:27:16 +0000
ROA not before: Sun 04 Feb 2024 19:27:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44901
IP address blocks: 46.253.0.0/24 maxlen: 24
46.253.1.0/24 maxlen: 24
46.253.2.0/24 maxlen: 24
46.253.3.0/24 maxlen: 24
46.253.4.0/24 maxlen: 24
46.253.5.0/24 maxlen: 24
91.132.60.0/24 maxlen: 24
91.132.62.0/24 maxlen: 24
91.132.63.0/24 maxlen: 24
95.169.202.0/24 maxlen: 24
95.169.203.0/24 maxlen: 24
185.243.213.0/24 maxlen: 24
2a09:be80::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 07 Mar 2024 18:08:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:75:96:d7:c9:a0:00:02:ac:43:fa:93:eb:8c:81:85:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b62d4cec783305923e3497ed884f1c445b4e78fb
Validity
Not Before: Feb 4 19:27:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2fda95346eb686106d79ad3f0b62a29a9e94cc7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c6:a9:02:47:24:45:69:18:a4:6e:fd:10:64:
8e:d2:8d:61:1d:e5:c7:12:bb:5d:25:30:65:21:03:
f4:8d:a1:68:74:20:c1:c9:16:5e:68:ed:e8:95:c4:
96:0f:38:ea:4b:9f:47:00:ef:46:37:9f:fc:3d:4b:
e0:98:13:41:c7:eb:a4:d1:25:26:da:25:8d:78:8b:
bc:a6:45:cb:dd:29:02:19:7f:c5:12:d4:f7:c3:b1:
d2:c6:fc:af:a6:07:57:cb:dd:1b:31:ba:cb:aa:5b:
3d:b0:b6:b9:d1:70:d2:d1:bf:56:a6:bd:cc:2a:b0:
6e:49:94:65:5a:b7:10:3d:9c:0f:0d:6c:9a:94:fb:
be:17:c3:03:f0:ed:4b:50:af:b8:b7:e3:95:57:7e:
0b:15:98:ab:cf:24:ca:66:0f:9d:cf:89:9a:15:7c:
e1:ee:bf:ad:76:65:52:4b:b7:f5:ce:08:e2:4f:10:
b8:e3:b1:a5:70:c8:bf:d8:c3:ca:7d:29:71:7c:43:
cf:aa:ee:9e:b1:27:06:5f:c7:7f:23:2c:60:38:4a:
cd:94:dc:03:52:7f:bd:d8:7f:da:43:1e:4e:c5:7b:
cc:db:57:c2:cd:e8:b1:f3:a0:33:bb:43:a6:52:0c:
8a:f1:9a:59:41:a5:2d:5d:83:a2:d1:3a:b9:cf:68:
77:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:DA:95:34:6E:B6:86:10:6D:79:AD:3F:0B:62:A2:9A:9E:94:CC:7C
X509v3 Authority Key Identifier:
keyid:B6:2D:4C:EC:78:33:05:92:3E:34:97:ED:88:4F:1C:44:5B:4E:78:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ti1M7HgzBZI-NJftiE8cRFtOePs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/L9qVNG62hhBtea0_C2Kimp6UzHw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ti1M7HgzBZI-NJftiE8cRFtOePs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.253.0.0-46.253.5.255
91.132.60.0/24
91.132.62.0/23
95.169.202.0/23
185.243.213.0/24
IPv6:
2a09:be80::/32
Signature Algorithm: sha256WithRSAEncryption
4d:79:8c:6b:d1:5d:95:70:18:e7:11:7e:8b:fd:5f:25:b9:8b:
26:e4:4d:26:8e:68:53:02:75:bd:5c:28:98:ff:ef:17:68:4b:
97:9e:df:37:ec:9f:73:91:a8:58:47:df:6e:37:a9:55:f0:09:
76:3e:59:9e:5b:a7:40:b5:68:59:76:38:8c:6c:01:5e:ff:66:
8c:f2:5e:0e:db:6f:df:13:1d:8e:a7:e5:44:2f:1c:d8:b4:54:
c6:04:41:e9:0f:e8:b5:2f:d8:29:3a:a5:d3:3b:68:28:1a:85:
93:da:62:8c:a7:21:e7:67:39:c8:b3:1b:52:66:de:93:ea:02:
8c:2c:1c:d1:43:e4:5a:30:33:d4:5f:c0:21:2f:f4:2e:87:c6:
26:1c:1e:7e:c4:60:f2:c5:e9:c4:40:b3:6b:c3:a9:45:ce:cf:
05:24:60:d8:78:23:86:4f:35:a1:ba:1b:7c:44:6e:c4:43:24:
8e:9a:ce:29:0c:cb:a6:10:f6:f5:cb:33:2a:e5:10:2d:09:a5:
1a:11:ac:15:b0:4a:2f:93:7a:c4:96:10:77:28:49:4e:8d:24:
89:37:a4:8c:36:49:8d:2c:3f:ce:42:97:4b:e1:31:2b:e2:9a:
ed:ff:70:c8:d1:af:fb:73:b6:c6:b0:db:b4:44:48:a1:d1:7c:
e0:eb:31:8e
-----BEGIN CERTIFICATE-----
MIIFKzCCBBOgAwIBAgISAY11ltfJoAACrEP6k+uMgYXhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2MmQ0Y2VjNzgzMzA1OTIzZTM0OTdlZDg4NGYxYzQ0NWI0
ZTc4ZmIwHhcNMjQwMjA0MTkyNzE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZmRhOTUzNDZlYjY4NjEwNmQ3OWFkM2YwYjYyYTI5YTllOTRjYzdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncapAkckRWkYpG79EGSO0o1hHeXH
ErtdJTBlIQP0jaFodCDByRZeaO3olcSWDzjqS59HAO9GN5/8PUvgmBNBx+uk0SUm
2iWNeIu8pkXL3SkCGX/FEtT3w7HSxvyvpgdXy90bMbrLqls9sLa50XDS0b9Wpr3M
KrBuSZRlWrcQPZwPDWyalPu+F8MD8O1LUK+4t+OVV34LFZirzyTKZg+dz4maFXzh
7r+tdmVSS7f1zgjiTxC447GlcMi/2MPKfSlxfEPPqu6esScGX8d/IyxgOErNlNwD
Un+92H/aQx5OxXvM21fCzeix86Azu0OmUgyK8ZpZQaUtXYOi0Tq5z2h3awIDAQAB
o4ICNzCCAjMwHQYDVR0OBBYEFC/alTRutoYQbXmtPwtiopqelMx8MB8GA1UdIwQY
MBaAFLYtTOx4MwWSPjSX7YhPHERbTnj7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGkxTTdIZ3pCWkktTkpmdGlFOGNSRnRPZVBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9mMWIzZGEtYmViZi00NGIwLWFiMTIt
ZDMyZTI3ZmI3ZTU5LzEvTDlxVk5HNjJoaEJ0ZWEwX0MyS2ltcDZVekh3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9mMWIzZGEtYmViZi00NGIwLWFiMTItZDMyZTI3ZmI3ZTU5
LzEvdGkxTTdIZ3pCWkktTkpmdGlFOGNSRnRPZVBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME0GCCsGAQUFBwEHAQH/BD4wPDArBAIAATAlMAsDAwAu/QME
AS79BAMEAFuEPAMEAVuEPgMEAV+pygMEALnz1TANBAIAAjAHAwUAKgm+gDANBgkq
hkiG9w0BAQsFAAOCAQEATXmMa9FdlXAY5xF+i/1fJbmLJuRNJo5oUwJ1vVwomP/v
F2hLl57fN+yfc5GoWEffbjepVfAJdj5ZnlunQLVoWXY4jGwBXv9mjPJeDttv3xMd
jqflRC8c2LRUxgRB6Q/otS/YKTql0ztoKBqFk9pijKch52c5yLMbUmbek+oCjCwc
0UPkWjAz1F/AIS/0LofGJhwefsRg8sXpxECza8OpRc7PBSRg2Hgjhk81obobfERu
xEMkjprOKQzLphD29cszKuUQLQmlGhGsFbBKL5N6xJYQdyhJTo0kiTekjDZJjSw/
zkKXS+ExK+Ka7f9wyNGv+3O2xrDbtERIodF84Osxjg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:16 2024 by rpki-client on console-fra.rpki-client.org