Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/0xlf_I1-OWscV0laD7LBxBdGjuA.roa
File: 0xlf_I1-OWscV0laD7LBxBdGjuA.roa (raw, json)
Hash identifier: tRB/VB59lxZIGdZ0jvmc625las8YJWe9pN6QqHMlPQY=
Subject key identifier: D3:19:5F:FC:8D:7E:39:6B:1C:57:49:5A:0F:B2:C1:C4:17:46:8E:E0
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 018DCC6507D8D587B1AAA20F4DB894645829
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/0xlf_I1-OWscV0laD7LBxBdGjuA.roa
Signing time: Wed 21 Feb 2024 15:59:49 +0000
ROA not before: Wed 21 Feb 2024 15:59:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212667
IP address blocks: 2.59.48.0/24 maxlen: 24
37.221.80.0/24 maxlen: 24
45.11.22.0/24 maxlen: 24
45.14.221.0/24 maxlen: 24
45.89.68.0/24 maxlen: 24
45.89.71.0/24 maxlen: 24
94.158.188.0/24 maxlen: 24
176.124.34.0/24 maxlen: 24
185.212.112.0/24 maxlen: 24
193.3.18.0/24 maxlen: 24
194.32.240.0/24 maxlen: 24
195.18.26.0/24 maxlen: 24
195.69.148.0/24 maxlen: 24
195.69.150.0/24 maxlen: 24
212.18.100.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 22 Feb 2024 17:41:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:cc:65:07:d8:d5:87:b1:aa:a2:0f:4d:b8:94:64:58:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Feb 21 15:59:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d3195ffc8d7e396b1c57495a0fb2c1c417468ee0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:13:11:82:2b:d3:e0:03:4f:46:44:b4:8b:fd:
40:a0:0a:ff:77:79:53:a6:7e:9b:fb:e8:9b:33:1c:
6c:ca:4a:3d:40:d2:9f:1b:bd:07:9a:5e:3e:32:30:
c2:47:f5:df:d9:e0:08:b4:89:75:71:62:c3:92:00:
41:e8:ee:08:06:85:28:4e:c5:97:78:4e:60:07:0a:
84:3f:d3:57:8d:cc:b6:2c:00:33:36:59:dd:5e:0c:
1d:6d:40:f2:cd:63:d6:53:07:0e:cb:09:20:5c:f4:
f5:26:63:27:fb:a7:93:c2:39:c8:15:27:e7:8e:8d:
e7:e0:4f:00:2e:c9:0b:6c:b8:9d:02:05:73:f4:dc:
d8:f0:eb:48:69:c7:5a:2c:1a:13:69:e2:99:90:1e:
fa:0e:98:84:f0:3d:1a:a2:6e:b8:68:50:a6:7c:48:
42:23:91:a0:be:8d:54:0e:74:17:65:a1:21:aa:00:
b2:b5:e1:ba:fb:1a:b4:a5:5c:c4:fb:40:37:ab:9c:
69:87:78:94:3d:17:99:12:15:3b:94:a4:1e:90:fd:
0d:b3:01:0f:57:02:56:c1:85:aa:e4:36:8e:b2:ef:
a7:21:11:1e:1c:5f:7b:90:7b:19:fb:f8:35:ae:15:
17:b6:f0:4c:5f:d6:d5:a0:47:78:29:67:61:2c:26:
93:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:19:5F:FC:8D:7E:39:6B:1C:57:49:5A:0F:B2:C1:C4:17:46:8E:E0
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/0xlf_I1-OWscV0laD7LBxBdGjuA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.48.0/24
37.221.80.0/24
45.11.22.0/24
45.14.221.0/24
45.89.68.0/24
45.89.71.0/24
94.158.188.0/24
176.124.34.0/24
185.212.112.0/24
193.3.18.0/24
194.32.240.0/24
195.18.26.0/24
195.69.148.0/24
195.69.150.0/24
212.18.100.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:c1:85:68:66:0a:0b:a7:82:93:c3:b1:16:5b:f6:d5:09:7d:
de:6b:a2:81:9e:d6:f6:91:13:7f:e7:5a:c6:47:94:98:84:31:
6c:36:52:c8:c9:b3:6e:0d:07:f7:6f:07:e0:28:b1:05:90:5f:
56:d8:4d:e1:4b:42:aa:5c:eb:dc:97:32:59:f5:a5:00:61:ce:
3e:e4:12:0a:6c:1c:20:7c:9d:56:4c:1c:13:7a:20:aa:0f:77:
85:eb:6b:5a:94:3b:14:76:e0:9b:13:e2:27:c8:86:51:58:6d:
9b:03:2a:15:ba:33:87:f7:d7:c0:ac:02:9e:14:4b:07:b0:a4:
72:61:5e:1e:55:38:65:8e:63:f9:49:90:13:51:64:de:43:57:
ba:dc:35:80:fa:f0:05:08:12:a6:d8:85:6d:d1:06:e3:f4:21:
ad:4a:e7:6e:28:a9:3d:7a:af:9e:a0:4f:ea:05:ba:9b:92:bd:
4f:f4:7b:31:60:3a:73:3a:c3:f9:f8:2c:bb:a6:19:6f:d8:7e:
63:7c:e5:54:c5:df:e4:ba:f4:50:01:da:b2:ba:b6:4a:92:77:
dd:29:e9:fe:66:8b:97:ac:d4:9a:f5:85:04:a4:af:60:0e:82:
7c:04:56:14:d9:19:23:35:f1:27:f0:39:35:bb:8f:d7:b0:16:
1a:86:8b:99
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgISAY3MZQfY1YexqqIPTbiUZFgpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3NmJiNDhlOTNlOGEwMDU4YzVjNzJhODFhODc5OTQ1NTMw
N2VlNTYwHhcNMjQwMjIxMTU1OTQ5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMzE5NWZmYzhkN2UzOTZiMWM1NzQ5NWEwZmIyYzFjNDE3NDY4ZWUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2RMRgivT4ANPRkS0i/1AoAr/d3lT
pn6b++ibMxxsyko9QNKfG70Hml4+MjDCR/Xf2eAItIl1cWLDkgBB6O4IBoUoTsWX
eE5gBwqEP9NXjcy2LAAzNlndXgwdbUDyzWPWUwcOywkgXPT1JmMn+6eTwjnIFSfn
jo3n4E8ALskLbLidAgVz9NzY8OtIacdaLBoTaeKZkB76DpiE8D0aom64aFCmfEhC
I5Ggvo1UDnQXZaEhqgCyteG6+xq0pVzE+0A3q5xph3iUPReZEhU7lKQekP0NswEP
VwJWwYWq5DaOsu+nIREeHF97kHsZ+/g1rhUXtvBMX9bVoEd4KWdhLCaTrQIDAQAB
o4ICXTCCAlkwHQYDVR0OBBYEFNMZX/yNfjlrHFdJWg+ywcQXRo7gMB8GA1UdIwQY
MBaAFNdrtI6T6KAFjFxyqBqHmUVTB+5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgt
OGJmYmRkNDVjYjYyLzEvMHhsZl9JMS1PV3NjVjBsYUQ3TEJ4QmRHanVBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgtOGJmYmRkNDVjYjYy
LzEvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHMGCCsGAQUFBwEHAQH/BGQwYjBgBAIAATBaAwQAAjswAwQA
Jd1QAwQALQsWAwQALQ7dAwQALVlEAwQALVlHAwQAXp68AwQAsHwiAwQAudRwAwQA
wQMSAwQAwiDwAwQAwxIaAwQAw0WUAwQAw0WWAwQA1BJkMA0GCSqGSIb3DQEBCwUA
A4IBAQCOwYVoZgoLp4KTw7EWW/bVCX3ea6KBntb2kRN/51rGR5SYhDFsNlLIybNu
DQf3bwfgKLEFkF9W2E3hS0KqXOvclzJZ9aUAYc4+5BIKbBwgfJ1WTBwTeiCqD3eF
62talDsUduCbE+InyIZRWG2bAyoVujOH99fArAKeFEsHsKRyYV4eVThljmP5SZAT
UWTeQ1e63DWA+vAFCBKm2IVt0Qbj9CGtSuduKKk9eq+eoE/qBbqbkr1P9HsxYDpz
OsP5+Cy7phlv2H5jfOVUxd/kuvRQAdqyurZKknfdKen+ZouXrNSa9YUEpK9gDoJ8
BFYU2RkjNfEn8Dk1u4/XsBYahouZ
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:22 2024 by rpki-client on console-fra.rpki-client.org