Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/ad4e57-d901-4485-98d2-9196ce446527/1/01De1ASmQU282hrr55QAWfz21dE.roa
File: 01De1ASmQU282hrr55QAWfz21dE.roa (raw, json)
Hash identifier: BfqX4ENZbMlI7HGaemRigcb3NAhEw3+6k02gVrvAxKc=
Subject key identifier: D3:50:DE:D4:04:A6:41:4D:BC:DA:1A:EB:E7:94:00:59:FC:F6:D5:D1
Certificate issuer: /CN=ef3e71b96992da3d91c88dd74ef41f9b95b9485b
Certificate serial: 018DB181AC5833D3457E929EF14D49111ADD
Authority key identifier: EF:3E:71:B9:69:92:DA:3D:91:C8:8D:D7:4E:F4:1F:9B:95:B9:48:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7z5xuWmS2j2RyI3XTvQfm5W5SFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/ad4e57-d901-4485-98d2-9196ce446527/1/01De1ASmQU282hrr55QAWfz21dE.roa
Signing time: Fri 16 Feb 2024 10:41:21 +0000
ROA not before: Fri 16 Feb 2024 10:41:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12541
IP address blocks: 84.18.0.0/19 maxlen: 19
92.60.160.0/20 maxlen: 20
92.60.170.0/24 maxlen: 24
92.60.173.0/24 maxlen: 24
92.60.174.0/24 maxlen: 24
185.66.60.0/22 maxlen: 22
185.66.60.0/24 maxlen: 24
185.66.61.0/24 maxlen: 24
185.66.62.0/24 maxlen: 24
212.49.128.0/18 maxlen: 18
212.49.129.0/24 maxlen: 24
212.49.189.0/24 maxlen: 24
212.66.161.0/24 maxlen: 24
212.66.162.0/23 maxlen: 23
212.66.163.0/24 maxlen: 24
212.66.164.0/22 maxlen: 22
212.66.168.0/21 maxlen: 21
212.66.176.0/20 maxlen: 20
212.163.0.0/16 maxlen: 16
212.163.1.0/24 maxlen: 24
212.163.5.0/24 maxlen: 24
212.163.31.0/24 maxlen: 24
212.163.48.0/24 maxlen: 24
212.163.91.0/24 maxlen: 24
212.163.92.0/24 maxlen: 24
212.163.94.0/24 maxlen: 24
212.163.130.0/24 maxlen: 24
212.163.185.0/24 maxlen: 24
212.163.193.0/24 maxlen: 24
212.163.216.0/22 maxlen: 22
212.163.220.0/22 maxlen: 22
212.163.225.0/24 maxlen: 24
212.163.226.0/24 maxlen: 24
212.163.227.0/24 maxlen: 24
212.163.235.0/24 maxlen: 24
212.163.240.0/20 maxlen: 20
213.9.128.0/17 maxlen: 17
213.9.142.0/23 maxlen: 23
213.9.144.0/24 maxlen: 24
213.9.162.0/23 maxlen: 23
213.9.182.0/24 maxlen: 24
213.9.185.0/24 maxlen: 24
213.9.186.0/24 maxlen: 24
213.9.190.0/23 maxlen: 23
213.9.217.0/24 maxlen: 24
213.9.240.0/23 maxlen: 23
213.9.244.0/24 maxlen: 24
213.9.245.0/24 maxlen: 24
213.9.246.0/24 maxlen: 24
213.9.247.0/24 maxlen: 24
213.9.248.0/24 maxlen: 24
213.192.192.0/18 maxlen: 18
213.192.193.0/24 maxlen: 24
213.192.200.0/22 maxlen: 22
213.192.203.0/24 maxlen: 24
213.192.206.0/23 maxlen: 23
213.192.212.0/22 maxlen: 22
213.192.213.0/24 maxlen: 24
213.192.216.0/21 maxlen: 21
213.192.224.0/22 maxlen: 22
213.192.228.0/23 maxlen: 23
213.192.232.0/22 maxlen: 22
213.192.238.0/24 maxlen: 24
213.192.239.0/24 maxlen: 24
213.192.240.0/24 maxlen: 24
213.192.241.0/24 maxlen: 24
213.192.242.0/23 maxlen: 23
213.192.244.0/23 maxlen: 23
213.192.246.0/24 maxlen: 24
213.192.247.0/24 maxlen: 24
213.192.248.0/21 maxlen: 21
213.192.249.0/24 maxlen: 24
213.192.251.0/24 maxlen: 24
213.192.252.0/23 maxlen: 23
213.192.253.0/24 maxlen: 24
213.192.254.0/24 maxlen: 24
213.192.255.0/24 maxlen: 24
2001:ac0::/32 maxlen: 32
2001:ac0:30fd::/48 maxlen: 48
2001:ac0:c040::/44 maxlen: 44
2001:ac0:c0c0::/44 maxlen: 44
2001:ac0:c880::/44 maxlen: 44
Validation: Failed, certificate revoked on Wed 21 Feb 2024 17:28:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:b1:81:ac:58:33:d3:45:7e:92:9e:f1:4d:49:11:1a:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef3e71b96992da3d91c88dd74ef41f9b95b9485b
Validity
Not Before: Feb 16 10:41:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d350ded404a6414dbcda1aebe7940059fcf6d5d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:30:89:e9:04:a3:13:18:49:30:72:21:7c:84:
05:c1:af:1e:34:d7:40:97:94:df:bb:95:77:e3:08:
ca:68:e2:f4:c7:c1:54:c7:e8:1e:d1:5a:74:20:cc:
62:52:f0:81:ff:42:74:3a:07:e9:ba:0f:a0:e9:13:
e0:5a:c9:6e:89:ef:4a:2f:32:cb:30:11:32:26:de:
83:d2:0d:4f:83:bf:65:7a:85:22:c7:a5:f2:7f:7c:
2b:5a:37:02:3d:d7:df:98:7d:49:cb:22:25:9f:11:
4c:2d:65:f8:05:ae:82:ba:ab:4a:48:13:52:e1:04:
18:15:92:3c:e6:f9:65:7f:e7:2c:2a:b0:4a:a2:fb:
79:b0:30:3a:76:ea:80:29:67:59:97:42:fb:a1:ab:
05:5d:37:7d:8c:a8:08:46:1c:e8:2e:08:cf:41:9f:
e8:de:35:35:ad:82:97:71:b5:9e:21:56:f2:64:c0:
11:b7:e5:79:78:9d:ef:69:17:c8:b3:8d:20:47:af:
02:a1:d3:04:ef:99:73:bc:09:59:eb:af:df:ad:78:
75:bb:17:25:9c:b1:f2:b5:8b:21:4d:f4:27:7b:f4:
e5:ed:9f:1c:9a:89:26:53:8b:9e:2c:a8:8d:8d:4a:
59:de:5d:86:82:8d:a0:e5:5f:80:24:3f:93:08:0d:
79:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:50:DE:D4:04:A6:41:4D:BC:DA:1A:EB:E7:94:00:59:FC:F6:D5:D1
X509v3 Authority Key Identifier:
keyid:EF:3E:71:B9:69:92:DA:3D:91:C8:8D:D7:4E:F4:1F:9B:95:B9:48:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7z5xuWmS2j2RyI3XTvQfm5W5SFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/ad4e57-d901-4485-98d2-9196ce446527/1/01De1ASmQU282hrr55QAWfz21dE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/ad4e57-d901-4485-98d2-9196ce446527/1/7z5xuWmS2j2RyI3XTvQfm5W5SFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.18.0.0/19
92.60.160.0/20
185.66.60.0/22
212.49.128.0/18
212.66.161.0-212.66.191.255
212.163.0.0/16
213.9.128.0/17
213.192.192.0/18
IPv6:
2001:ac0::/32
Signature Algorithm: sha256WithRSAEncryption
83:3f:e9:57:22:66:6c:6f:22:1e:da:26:95:61:fe:2e:31:27:
b0:78:d8:21:ad:4b:d1:d5:c6:81:c3:95:92:6f:09:81:a9:ba:
2e:77:b8:7b:cd:6a:69:ba:56:95:cf:9d:8a:00:0d:e9:6f:78:
a9:28:18:1f:51:f9:39:7a:c9:64:af:67:bb:4d:27:6d:05:64:
cf:e4:d8:39:8e:4d:86:93:df:3e:15:9d:c5:b4:74:3a:38:23:
ff:34:93:25:a7:4e:10:38:a8:eb:da:e5:c4:38:fb:0c:e2:fd:
71:7a:a1:d8:6b:9f:17:c6:80:10:2f:de:6c:86:c0:95:bf:6b:
51:cc:2c:74:9e:5c:8c:ac:c6:ff:73:a5:64:71:9c:65:13:2e:
19:a7:4e:c5:26:f4:0f:be:18:5f:f0:d3:f8:da:ec:1a:8e:1c:
e4:be:46:e2:32:99:1d:bd:3d:6b:3d:48:3b:d8:2d:93:f8:04:
57:85:38:e8:a0:5a:bb:3a:ce:65:83:d2:4c:df:b2:48:08:3c:
42:7e:61:95:c6:d1:52:45:82:01:ea:14:b9:6d:1c:71:a4:98:
11:51:c0:fc:0b:82:08:bd:85:5b:fa:60:81:9d:ea:9a:3a:09:
89:5c:c9:45:ef:f2:35:82:f3:18:c3:d1:81:80:4e:81:3c:d7:
9f:79:a5:f2
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgISAY2xgaxYM9NFfpKe8U1JERrdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmM2U3MWI5Njk5MmRhM2Q5MWM4OGRkNzRlZjQxZjliOTVi
OTQ4NWIwHhcNMjQwMjE2MTA0MTIxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMzUwZGVkNDA0YTY0MTRkYmNkYTFhZWJlNzk0MDA1OWZjZjZkNWQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTCJ6QSjExhJMHIhfIQFwa8eNNdA
l5Tfu5V34wjKaOL0x8FUx+ge0Vp0IMxiUvCB/0J0Ogfpug+g6RPgWsluie9KLzLL
MBEyJt6D0g1Pg79leoUix6Xyf3wrWjcCPdffmH1JyyIlnxFMLWX4Ba6CuqtKSBNS
4QQYFZI85vllf+csKrBKovt5sDA6duqAKWdZl0L7oasFXTd9jKgIRhzoLgjPQZ/o
3jU1rYKXcbWeIVbyZMARt+V5eJ3vaRfIs40gR68CodME75lzvAlZ66/frXh1uxcl
nLHytYshTfQne/Tl7Z8cmokmU4ueLKiNjUpZ3l2Ggo2g5V+AJD+TCA15rQIDAQAB
o4ICSTCCAkUwHQYDVR0OBBYEFNNQ3tQEpkFNvNoa6+eUAFn89tXRMB8GA1UdIwQY
MBaAFO8+cblpkto9kciN1070H5uVuUhbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3o1eHVXbVMyajJSeUkzWFR2UWZtNVc1U0ZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9hZDRlNTctZDkwMS00NDg1LTk4ZDIt
OTE5NmNlNDQ2NTI3LzEvMDFEZTFBU21RVTI4MmhycjU1UUFXZnoyMWRFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS9hZDRlNTctZDkwMS00NDg1LTk4ZDItOTE5NmNlNDQ2NTI3
LzEvN3o1eHVXbVMyajJSeUkzWFR2UWZtNVc1U0ZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMF8GCCsGAQUFBwEHAQH/BFAwTjA9BAIAATA3AwQFVBIAAwQE
XDygAwQCuUI8AwQG1DGAMAwDBADUQqEDBAbUQoADAwDUowMEB9UJgAMEBtXAwDAN
BAIAAjAHAwUAIAEKwDANBgkqhkiG9w0BAQsFAAOCAQEAgz/pVyJmbG8iHtomlWH+
LjEnsHjYIa1L0dXGgcOVkm8Jgam6Lne4e81qabpWlc+digAN6W94qSgYH1H5OXrJ
ZK9nu00nbQVkz+TYOY5NhpPfPhWdxbR0Ojgj/zSTJadOEDio69rlxDj7DOL9cXqh
2GufF8aAEC/ebIbAlb9rUcwsdJ5cjKzG/3OlZHGcZRMuGadOxSb0D74YX/DT+Nrs
Go4c5L5G4jKZHb09az1IO9gtk/gEV4U46KBauzrOZYPSTN+ySAg8Qn5hlcbRUkWC
AeoUuW0ccaSYEVHA/AuCCL2FW/pggZ3qmjoJiVzJRe/yNYLzGMPRgYBOgTzXn3ml
8g==
-----END CERTIFICATE-----
Generated at Wed Feb 21 21:05:18 2024 by rpki-client on console-fra.rpki-client.org