Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/xQuhtXEKteKqJ5L52wMzFBPJ6SI.roa
File: xQuhtXEKteKqJ5L52wMzFBPJ6SI.roa (raw, json)
Hash identifier: C1dV21svNU4z22h0NEf1k49yS+p/Ha3NJx3p5HoTi2Q=
Subject key identifier: C5:0B:A1:B5:71:0A:B5:E2:AA:27:92:F9:DB:03:33:14:13:C9:E9:22
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 018DADBE8BF337C734F5B0EEB9F1078E91F7
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/xQuhtXEKteKqJ5L52wMzFBPJ6SI.roa
Signing time: Thu 15 Feb 2024 17:09:22 +0000
ROA not before: Thu 15 Feb 2024 17:09:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212667
IP address blocks: 2.59.48.0/24 maxlen: 24
37.221.80.0/24 maxlen: 24
45.11.22.0/24 maxlen: 24
45.14.221.0/24 maxlen: 24
94.158.188.0/24 maxlen: 24
176.124.34.0/24 maxlen: 24
194.32.240.0/24 maxlen: 24
195.18.26.0/24 maxlen: 24
195.69.148.0/24 maxlen: 24
195.69.150.0/24 maxlen: 24
212.18.100.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 20 Feb 2024 16:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ad:be:8b:f3:37:c7:34:f5:b0:ee:b9:f1:07:8e:91:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Feb 15 17:09:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c50ba1b5710ab5e2aa2792f9db03331413c9e922
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:3f:17:81:a1:f4:97:33:87:1b:46:b8:3b:27:
6b:11:42:69:73:54:0f:7c:55:70:ca:25:fc:17:7e:
79:15:98:80:b3:fc:47:b3:3b:b7:63:fe:31:4a:ca:
e2:25:c9:7d:20:73:ed:c9:b0:77:61:98:41:f7:66:
42:ce:68:89:22:53:e9:2d:e7:3d:49:bc:52:97:db:
cc:e7:7d:7b:37:dd:fa:6b:60:54:b0:f4:60:bf:2a:
48:fa:a1:d9:c4:ff:54:ee:ef:f7:86:3d:c2:34:aa:
49:36:3c:9e:9f:ef:33:c4:95:8e:94:ea:fe:e7:08:
b3:65:d9:1e:98:53:bf:8f:bf:a4:56:87:f2:bb:02:
23:fb:9a:ef:f3:1e:23:66:13:08:c3:df:08:a2:44:
82:f1:e1:69:c6:68:6c:42:53:c9:b9:ef:e7:d5:e3:
0d:9a:57:e0:45:aa:39:ea:86:8d:2e:57:61:ea:77:
e5:0d:40:76:60:31:bd:c9:1b:13:2a:50:23:75:6f:
ac:20:ac:4d:66:88:52:90:18:b3:c4:9e:23:a8:a9:
0e:a3:5f:fd:58:8a:b8:9b:ae:85:78:6d:eb:0c:0a:
50:17:2d:3d:cf:0c:1c:75:61:7a:1d:3a:80:4c:bf:
b1:45:79:3f:42:c5:b5:49:9d:22:4e:16:24:d0:7a:
d5:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:0B:A1:B5:71:0A:B5:E2:AA:27:92:F9:DB:03:33:14:13:C9:E9:22
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/xQuhtXEKteKqJ5L52wMzFBPJ6SI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.48.0/24
37.221.80.0/24
45.11.22.0/24
45.14.221.0/24
94.158.188.0/24
176.124.34.0/24
194.32.240.0/24
195.18.26.0/24
195.69.148.0/24
195.69.150.0/24
212.18.100.0/24
Signature Algorithm: sha256WithRSAEncryption
01:1a:c0:1b:1f:11:89:17:85:69:fe:c5:3b:0f:9e:12:41:e8:
7c:1e:11:22:81:6e:d8:38:cd:c3:a8:39:ed:d6:73:d6:14:0e:
91:e6:62:17:a4:4c:a8:47:76:8a:54:41:76:59:f2:06:6b:85:
66:e4:33:a2:89:6a:e8:4e:ee:b8:00:2c:f8:12:eb:6f:5f:53:
51:42:d8:d7:c3:13:4f:a3:0f:47:1a:1d:2c:7a:e3:5d:4b:88:
44:d1:2c:a5:b1:15:9c:0d:fe:12:05:fc:40:0c:56:57:ed:4f:
7d:16:66:e8:5c:ca:a4:cc:91:fe:1e:04:15:51:a8:92:42:ac:
c9:c3:1c:12:52:0f:6b:35:c8:cf:c3:15:9d:15:ab:8a:62:e4:
c1:26:13:3b:68:13:80:01:9d:9b:67:0d:9b:2c:0c:05:38:b4:
11:8e:1a:f1:fa:22:36:32:03:1d:43:60:ed:a3:24:46:39:0f:
7e:4f:07:fa:e6:81:20:8e:83:76:d1:5f:69:2d:f0:83:40:51:
7b:2b:50:fa:20:d5:f3:c9:15:e7:52:ff:89:16:9d:be:b9:a0:
44:ce:6b:a5:3b:7f:af:97:3a:1b:db:03:33:70:01:eb:04:df:
47:4e:f3:9d:d3:d0:e4:db:e6:1a:94:0b:b5:39:b2:d7:67:5a:
a8:d2:11:53
-----BEGIN CERTIFICATE-----
MIIFOTCCBCGgAwIBAgISAY2tvovzN8c09bDuufEHjpH3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3NmJiNDhlOTNlOGEwMDU4YzVjNzJhODFhODc5OTQ1NTMw
N2VlNTYwHhcNMjQwMjE1MTcwOTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNTBiYTFiNTcxMGFiNWUyYWEyNzkyZjlkYjAzMzMxNDEzYzllOTIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnT8XgaH0lzOHG0a4OydrEUJpc1QP
fFVwyiX8F355FZiAs/xHszu3Y/4xSsriJcl9IHPtybB3YZhB92ZCzmiJIlPpLec9
SbxSl9vM5317N936a2BUsPRgvypI+qHZxP9U7u/3hj3CNKpJNjyen+8zxJWOlOr+
5wizZdkemFO/j7+kVofyuwIj+5rv8x4jZhMIw98IokSC8eFpxmhsQlPJue/n1eMN
mlfgRao56oaNLldh6nflDUB2YDG9yRsTKlAjdW+sIKxNZohSkBizxJ4jqKkOo1/9
WIq4m66FeG3rDApQFy09zwwcdWF6HTqATL+xRXk/QsW1SZ0iThYk0HrV1QIDAQAB
o4ICRTCCAkEwHQYDVR0OBBYEFMULobVxCrXiqieS+dsDMxQTyekiMB8GA1UdIwQY
MBaAFNdrtI6T6KAFjFxyqBqHmUVTB+5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgt
OGJmYmRkNDVjYjYyLzEveFF1aHRYRUt0ZUtxSjVMNTJ3TXpGQlBKNlNJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgtOGJmYmRkNDVjYjYy
LzEvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQAAjswAwQA
Jd1QAwQALQsWAwQALQ7dAwQAXp68AwQAsHwiAwQAwiDwAwQAwxIaAwQAw0WUAwQA
w0WWAwQA1BJkMA0GCSqGSIb3DQEBCwUAA4IBAQABGsAbHxGJF4Vp/sU7D54SQeh8
HhEigW7YOM3DqDnt1nPWFA6R5mIXpEyoR3aKVEF2WfIGa4Vm5DOiiWroTu64ACz4
EutvX1NRQtjXwxNPow9HGh0seuNdS4hE0SylsRWcDf4SBfxADFZX7U99FmboXMqk
zJH+HgQVUaiSQqzJwxwSUg9rNcjPwxWdFauKYuTBJhM7aBOAAZ2bZw2bLAwFOLQR
jhrx+iI2MgMdQ2DtoyRGOQ9+Twf65oEgjoN20V9pLfCDQFF7K1D6INXzyRXnUv+J
Fp2+uaBEzmulO3+vlzob2wMzcAHrBN9HTvOd09Dk2+YalAu1ObLXZ1qo0hFT
-----END CERTIFICATE-----
Generated at Tue Feb 20 20:55:24 2024 by rpki-client on console-ams.rpki-client.org