Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/tIMjtQva8Nel1P3LCB0gEncCUss.roa
File: tIMjtQva8Nel1P3LCB0gEncCUss.roa (raw, json)
Hash identifier: lK28SsHtx+4EUU7Nbr56iRa7nsH3JEUrllsTfm/3gy0=
Subject key identifier: B4:83:23:B5:0B:DA:F0:D7:A5:D4:FD:CB:08:1D:20:12:77:02:52:CB
Certificate issuer: /CN=46eb11af9355da9a2b5df73ecdd7fd0967a4b58c
Certificate serial: 018CC94ABE99C6EDDDF4C9AB03215302EB60
Authority key identifier: 46:EB:11:AF:93:55:DA:9A:2B:5D:F7:3E:CD:D7:FD:09:67:A4:B5:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RusRr5NV2porXfc-zdf9CWektYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/tIMjtQva8Nel1P3LCB0gEncCUss.roa
Signing time: Tue 02 Jan 2024 08:29:27 +0000
ROA not before: Tue 02 Jan 2024 08:29:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16019
IP address blocks: 193.104.172.0/24 maxlen: 24
91.220.122.0/24 maxlen: 24
185.99.176.0/22 maxlen: 22
185.241.220.0/22 maxlen: 32
2a0c:b180::/29 maxlen: 48
2a00:8e80::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 19 Jun 2024 12:56:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4a:be:99:c6:ed:dd:f4:c9:ab:03:21:53:02:eb:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46eb11af9355da9a2b5df73ecdd7fd0967a4b58c
Validity
Not Before: Jan 2 08:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b48323b50bdaf0d7a5d4fdcb081d2012770252cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:19:53:fc:f9:e4:29:95:ea:03:79:47:bb:7c:
f1:4e:ee:2d:45:e0:74:34:46:86:b4:96:0a:0a:5a:
c9:8a:0c:db:98:75:17:21:c5:ad:19:73:bd:b1:79:
50:be:2d:0e:9c:62:ec:fc:df:4e:90:02:ef:c0:23:
f8:4a:95:ee:4e:c5:2b:a5:70:72:e6:64:e1:73:7d:
64:ff:60:31:1e:12:76:9e:a3:75:95:4a:f9:c1:12:
1a:29:73:f1:28:85:56:5c:f1:f1:e8:ea:2d:e1:79:
e3:6b:1b:af:d8:c4:45:95:6a:60:23:e2:39:21:23:
95:d9:95:e5:ee:76:da:ab:ef:cb:fe:36:9a:e1:f0:
6d:18:4f:c7:e0:8f:7b:ea:83:e8:32:fd:5c:e1:00:
5c:76:a9:d1:bb:52:10:e1:95:b2:87:ec:a6:6e:7d:
fd:2c:75:e1:61:fb:1e:d5:53:9f:dc:a2:73:94:26:
29:c3:e3:a2:f2:ac:29:51:e2:52:cc:40:42:42:46:
61:20:f2:f1:9a:fc:66:d4:5d:98:c5:f0:6a:f2:2d:
f4:da:dc:57:dd:86:d8:c1:20:6b:70:9f:b2:ab:90:
c9:78:cc:75:5d:26:bf:05:dc:2f:7d:7f:65:3e:02:
b7:ce:ea:72:d4:ff:e7:1f:4c:aa:bd:36:0b:f0:04:
ce:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:83:23:B5:0B:DA:F0:D7:A5:D4:FD:CB:08:1D:20:12:77:02:52:CB
X509v3 Authority Key Identifier:
keyid:46:EB:11:AF:93:55:DA:9A:2B:5D:F7:3E:CD:D7:FD:09:67:A4:B5:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RusRr5NV2porXfc-zdf9CWektYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/tIMjtQva8Nel1P3LCB0gEncCUss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/RusRr5NV2porXfc-zdf9CWektYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.122.0/24
185.99.176.0/22
185.241.220.0/22
193.104.172.0/24
IPv6:
2a00:8e80::/29
2a0c:b180::/29
Signature Algorithm: sha256WithRSAEncryption
72:40:0a:10:cc:85:04:c7:15:65:9a:82:a8:a4:12:1f:b2:92:
86:b6:ea:2f:74:8d:40:73:3a:94:20:77:4a:fc:cf:b0:69:c3:
f3:aa:4e:64:2b:fc:d1:de:e5:c1:07:db:4a:83:bb:9e:8e:01:
0e:b0:77:dd:4f:71:f6:71:f4:21:ab:0b:2b:00:47:03:3a:18:
14:93:54:15:26:93:51:7e:8f:15:f0:c0:5b:2b:a2:fb:6d:65:
32:33:b9:8e:be:38:02:97:3a:89:7f:c6:28:3c:fa:d6:9f:50:
48:fb:27:ac:03:45:48:ec:86:dd:43:aa:3a:d2:2a:f4:f8:32:
89:70:c8:d6:9c:cf:95:87:a3:23:30:21:2d:68:da:15:9b:10:
9c:18:c4:14:1e:30:cb:6b:ff:8a:e8:e8:de:2c:b1:b8:ab:f7:
d4:06:29:c1:f8:8a:75:27:7e:8b:1d:dd:86:86:3c:1b:6f:e2:
a2:e6:43:26:01:63:b4:a0:67:d1:fe:9e:4b:d9:3b:c4:f3:d8:
a0:47:22:be:54:ad:d6:9a:e5:a6:bb:29:85:eb:69:8d:87:4c:
ba:9d:d2:e9:93:88:84:f7:1d:23:5c:ba:19:a5:9c:db:df:b1:
a3:bb:5d:a9:db:cd:a4:0e:02:3f:36:38:aa:f7:e7:34:a5:bc:
f6:50:4d:f9
-----BEGIN CERTIFICATE-----
MIIFJTCCBA2gAwIBAgISAYzJSr6Zxu3d9MmrAyFTAutgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2ZWIxMWFmOTM1NWRhOWEyYjVkZjczZWNkZDdmZDA5Njdh
NGI1OGMwHhcNMjQwMTAyMDgyOTI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNDgzMjNiNTBiZGFmMGQ3YTVkNGZkY2IwODFkMjAxMjc3MDI1MmNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAihlT/PnkKZXqA3lHu3zxTu4tReB0
NEaGtJYKClrJigzbmHUXIcWtGXO9sXlQvi0OnGLs/N9OkALvwCP4SpXuTsUrpXBy
5mThc31k/2AxHhJ2nqN1lUr5wRIaKXPxKIVWXPHx6Oot4Xnjaxuv2MRFlWpgI+I5
ISOV2ZXl7nbaq+/L/jaa4fBtGE/H4I976oPoMv1c4QBcdqnRu1IQ4ZWyh+ymbn39
LHXhYfse1VOf3KJzlCYpw+Oi8qwpUeJSzEBCQkZhIPLxmvxm1F2YxfBq8i302txX
3YbYwSBrcJ+yq5DJeMx1XSa/BdwvfX9lPgK3zupy1P/nH0yqvTYL8ATOaQIDAQAB
o4ICMTCCAi0wHQYDVR0OBBYEFLSDI7UL2vDXpdT9ywgdIBJ3AlLLMB8GA1UdIwQY
MBaAFEbrEa+TVdqaK133Ps3X/QlnpLWMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnVzUnI1TlYycG9yWGZjLXpkZjlDV2VrdFl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS8xYTQzZjAtYzAyNy00ZmRjLTg1MTUt
NDVmNDk2ZjJmZTc1LzEvdElNanRRdmE4TmVsMVAzTENCMGdFbmNDVXNzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS8xYTQzZjAtYzAyNy00ZmRjLTg1MTUtNDVmNDk2ZjJmZTc1
LzEvUnVzUnI1TlYycG9yWGZjLXpkZjlDV2VrdFl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEcGCCsGAQUFBwEHAQH/BDgwNjAeBAIAATAYAwQAW9x6AwQC
uWOwAwQCufHcAwQAwWisMBQEAgACMA4DBQMqAI6AAwUDKgyxgDANBgkqhkiG9w0B
AQsFAAOCAQEAckAKEMyFBMcVZZqCqKQSH7KShrbqL3SNQHM6lCB3SvzPsGnD86pO
ZCv80d7lwQfbSoO7no4BDrB33U9x9nH0IasLKwBHAzoYFJNUFSaTUX6PFfDAWyui
+21lMjO5jr44Apc6iX/GKDz61p9QSPsnrANFSOyG3UOqOtIq9PgyiXDI1pzPlYej
IzAhLWjaFZsQnBjEFB4wy2v/iujo3iyxuKv31AYpwfiKdSd+ix3dhoY8G2/iouZD
JgFjtKBn0f6eS9k7xPPYoEcivlSt1prlprsphetpjYdMup3S6ZOIhPcdI1y6GaWc
29+xo7tdqdvNpA4CPzY4qvfnNKW89lBN+Q==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:21:50 2025 by rpki-client