Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/eCtPEkrZJ0I6e4P48gdilP5gA9E.roa
File: eCtPEkrZJ0I6e4P48gdilP5gA9E.roa (raw, json)
Hash identifier: yJKqDn2qNDvgmQ8LcUuw9WPrRQU35GfBzGfrunDTfsg=
Subject key identifier: 78:2B:4F:12:4A:D9:27:42:3A:7B:83:F8:F2:07:62:94:FE:60:03:D1
Certificate issuer: /CN=408af485b4fd0f03717cd4a709ef11c61d3ef46e
Certificate serial: 0190250EF14F135F238E073886028915A1A5
Authority key identifier: 40:8A:F4:85:B4:FD:0F:03:71:7C:D4:A7:09:EF:11:C6:1D:3E:F4:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/eCtPEkrZJ0I6e4P48gdilP5gA9E.roa
Signing time: Mon 17 Jun 2024 07:17:34 +0000
ROA not before: Mon 17 Jun 2024 07:17:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34358
IP address blocks: 37.251.128.0/19 maxlen: 19
37.251.160.0/20 maxlen: 20
37.251.248.0/21 maxlen: 24
37.251.255.0/24 maxlen: 24
86.105.192.0/24 maxlen: 24
89.32.44.0/22 maxlen: 22
89.32.44.0/24 maxlen: 24
89.36.128.0/23 maxlen: 23
89.36.128.0/24 maxlen: 24
89.36.129.0/24 maxlen: 24
89.36.130.0/24 maxlen: 24
89.36.132.0/23 maxlen: 24
89.36.134.0/24 maxlen: 24
89.36.135.0/24 maxlen: 24
89.38.248.0/24 maxlen: 24
89.38.249.0/24 maxlen: 24
89.38.250.0/23 maxlen: 23
89.38.252.0/22 maxlen: 22
89.42.11.0/24 maxlen: 24
89.45.192.0/21 maxlen: 21
89.45.192.0/23 maxlen: 23
91.200.120.0/22 maxlen: 22
91.200.120.0/23 maxlen: 23
91.200.122.0/23 maxlen: 23
91.208.142.0/24 maxlen: 24
94.24.29.0/24 maxlen: 24
94.24.48.0/21 maxlen: 21
94.24.72.0/22 maxlen: 22
94.24.76.0/23 maxlen: 23
94.24.78.0/24 maxlen: 24
109.95.8.0/21 maxlen: 21
188.215.48.0/21 maxlen: 21
193.239.130.0/23 maxlen: 23
193.242.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 22 Aug 2024 07:50:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:25:0e:f1:4f:13:5f:23:8e:07:38:86:02:89:15:a1:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=408af485b4fd0f03717cd4a709ef11c61d3ef46e
Validity
Not Before: Jun 17 07:17:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=782b4f124ad927423a7b83f8f2076294fe6003d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:81:50:23:c0:a1:ef:03:c1:26:8a:9d:81:bf:
fb:99:9f:52:45:a2:80:fe:76:61:0f:46:04:ac:f0:
2a:a3:b6:3d:4c:9a:f8:24:1b:d1:a6:9e:4e:d6:fd:
d8:d5:bc:92:bb:49:5a:cc:51:f4:7d:da:a4:4a:a2:
4b:23:da:ae:f4:ca:44:19:da:b8:07:01:81:a7:b4:
75:bd:b2:b8:4f:30:6b:47:aa:7c:0b:90:0f:c8:c1:
22:74:5e:69:6b:40:25:0b:5e:94:9b:41:7b:04:d2:
49:92:69:36:2e:3e:db:c4:f0:cb:11:e7:3c:e0:60:
5f:a1:17:4a:56:fe:a6:c9:5e:62:f0:44:32:8c:47:
7a:b1:f0:fb:fc:80:c2:06:88:99:95:08:64:e8:e0:
8c:2a:c3:7c:25:84:15:19:e1:76:be:42:50:f9:ab:
d1:8d:ab:ea:fa:7f:3b:68:3e:64:35:46:9e:37:66:
b7:9b:9f:da:82:de:22:46:fa:73:8d:b1:75:70:ba:
c5:9e:7b:fe:c7:34:4b:79:3e:32:84:17:1f:88:8c:
3c:2e:98:95:f9:6f:19:48:90:22:b7:93:b7:95:ca:
6c:5a:c3:c6:7a:8e:2e:a1:23:e8:eb:b9:37:d0:84:
af:c4:b6:71:cf:4b:1b:fd:29:77:37:69:ef:b7:69:
59:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:2B:4F:12:4A:D9:27:42:3A:7B:83:F8:F2:07:62:94:FE:60:03:D1
X509v3 Authority Key Identifier:
keyid:40:8A:F4:85:B4:FD:0F:03:71:7C:D4:A7:09:EF:11:C6:1D:3E:F4:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/eCtPEkrZJ0I6e4P48gdilP5gA9E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.251.128.0-37.251.175.255
37.251.248.0/21
86.105.192.0/24
89.32.44.0/22
89.36.128.0-89.36.130.255
89.36.132.0/22
89.38.248.0/21
89.42.11.0/24
89.45.192.0/21
91.200.120.0/22
91.208.142.0/24
94.24.29.0/24
94.24.48.0/21
94.24.72.0-94.24.78.255
109.95.8.0/21
188.215.48.0/21
193.239.130.0/23
193.242.120.0/24
Signature Algorithm: sha256WithRSAEncryption
88:33:06:63:55:15:dc:db:b4:cd:65:6a:48:1c:ef:81:a4:31:
01:27:38:91:04:a3:b0:d2:1d:cd:17:2e:bd:80:48:53:44:f1:
5c:db:00:40:96:8f:67:a2:1b:1b:da:fc:3f:dc:d9:09:e2:6a:
a9:4f:10:31:d2:cc:44:df:e6:c0:2d:9a:b8:cb:92:a6:5a:d2:
e3:f2:a3:58:dc:50:11:88:bd:90:10:cf:a6:79:76:05:05:b3:
cf:1d:e9:96:62:93:e9:1d:c3:86:90:c7:14:5c:85:3d:18:e0:
b5:f9:0b:9e:cd:b5:0a:08:82:99:fd:ef:b7:08:c6:bf:cd:eb:
b7:b3:e7:56:2a:b2:63:ea:13:67:c0:75:c6:9a:b0:c4:a8:02:
01:9e:c2:ae:0c:ec:87:b8:64:3f:fc:e1:3e:54:37:5f:ba:9a:
4c:bb:27:17:e3:d2:34:ab:d0:8d:44:7e:1c:18:05:1d:1a:87:
76:a2:39:6f:e1:1a:62:2c:e4:f8:cb:b2:84:53:04:79:8f:b2:
a9:09:57:3b:e2:a7:d3:26:cc:6f:7e:d6:cc:5c:91:2b:2f:40:
e0:42:ec:2a:f3:a9:27:cf:ee:b6:d8:48:cc:0b:10:b5:99:4c:
ec:51:1c:cb:df:ab:95:85:aa:b8:77:22:2a:7c:d0:51:cd:b6:
00:83:cc:c0
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgISAZAlDvFPE18jjgc4hgKJFaGlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwOGFmNDg1YjRmZDBmMDM3MTdjZDRhNzA5ZWYxMWM2MWQz
ZWY0NmUwHhcNMjQwNjE3MDcxNzM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ODJiNGYxMjRhZDkyNzQyM2E3YjgzZjhmMjA3NjI5NGZlNjAwM2QxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIFQI8Ch7wPBJoqdgb/7mZ9SRaKA
/nZhD0YErPAqo7Y9TJr4JBvRpp5O1v3Y1bySu0lazFH0fdqkSqJLI9qu9MpEGdq4
BwGBp7R1vbK4TzBrR6p8C5APyMEidF5pa0AlC16Um0F7BNJJkmk2Lj7bxPDLEec8
4GBfoRdKVv6myV5i8EQyjEd6sfD7/IDCBoiZlQhk6OCMKsN8JYQVGeF2vkJQ+avR
javq+n87aD5kNUaeN2a3m5/agt4iRvpzjbF1cLrFnnv+xzRLeT4yhBcfiIw8LpiV
+W8ZSJAit5O3lcpsWsPGeo4uoSPo67k30ISvxLZxz0sb/Sl3N2nvt2lZBwIDAQAB
o4ICjDCCAogwHQYDVR0OBBYEFHgrTxJK2SdCOnuD+PIHYpT+YAPRMB8GA1UdIwQY
MBaAFECK9IW0/Q8DcXzUpwnvEcYdPvRuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUlyMGhiVDlEd054Zk5TbkNlOFJ4aDAtOUc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9lMTE3MWMtNTI3MC00OWNkLTkzNzkt
Yjk1YjA4YTIzYWUxLzEvZUN0UEVrclpKMEk2ZTRQNDhnZGlsUDVnQTlFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9lMTE3MWMtNTI3MC00OWNkLTkzNzktYjk1YjA4YTIzYWUx
LzEvUUlyMGhiVDlEd054Zk5TbkNlOFJ4aDAtOUc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGhBggrBgEFBQcBBwEB/wSBkTCBjjCBiwQCAAEwgYQwDAME
ByX7gAMEBCX7oAMEAyX7+AMEAFZpwAMEAlkgLDAMAwQHWSSAAwQAWSSCAwQCWSSE
AwQDWSb4AwQAWSoLAwQDWS3AAwQCW8h4AwQAW9COAwQAXhgdAwQDXhgwMAwDBANe
GEgDBABeGE4DBANtXwgDBAO81zADBAHB74IDBADB8ngwDQYJKoZIhvcNAQELBQAD
ggEBAIgzBmNVFdzbtM1lakgc74GkMQEnOJEEo7DSHc0XLr2ASFNE8VzbAECWj2ei
Gxva/D/c2QniaqlPEDHSzETf5sAtmrjLkqZa0uPyo1jcUBGIvZAQz6Z5dgUFs88d
6ZZik+kdw4aQxxRchT0Y4LX5C57NtQoIgpn977cIxr/N67ez51YqsmPqE2fAdcaa
sMSoAgGewq4M7Ie4ZD/84T5UN1+6mky7Jxfj0jSr0I1EfhwYBR0ah3aiOW/hGmIs
5PjLsoRTBHmPsqkJVzvip9MmzG9+1sxckSsvQOBC7CrzqSfP7rbYSMwLELWZTOxR
HMvfq5WFqrh3Iip80FHNtgCDzMA=
-----END CERTIFICATE-----
Generated at Thu Aug 22 09:45:30 2024 by rpki-client on console-ams.rpki-client.org