Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/0T_5NG2ZnEA-GDlj9m-qXU79_2w.roa
File: 0T_5NG2ZnEA-GDlj9m-qXU79_2w.roa (raw, json)
Hash identifier: icXYOstown0mm5dCORwNtQxcEi8flZpJPf3MQJUPPLk=
Subject key identifier: D1:3F:F9:34:6D:99:9C:40:3E:18:39:63:F6:6F:AA:5D:4E:FD:FF:6C
Certificate issuer: /CN=7e65dab23940cb394f9aaa664fea4d6f8f42e318
Certificate serial: 018945F85D0A14DEE29D5BED6910C368607C
Authority key identifier: 7E:65:DA:B2:39:40:CB:39:4F:9A:AA:66:4F:EA:4D:6F:8F:42:E3:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fmXasjlAyzlPmqpmT-pNb49C4xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/0T_5NG2ZnEA-GDlj9m-qXU79_2w.roa
Signing time: Tue 11 Jul 2023 17:20:51 +0000
ROA not before: Tue 11 Jul 2023 17:20:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43541
IP address blocks: 185.64.216.0/22 maxlen: 22
185.59.208.0/22 maxlen: 22
93.185.96.0/20 maxlen: 20
46.243.48.0/24 maxlen: 24
46.243.48.0/21 maxlen: 21
185.14.252.0/22 maxlen: 22
46.243.55.0/24 maxlen: 24
217.16.176.0/20 maxlen: 20
178.251.184.0/21 maxlen: 21
78.24.8.0/21 maxlen: 21
185.115.2.0/24 maxlen: 24
185.115.1.0/24 maxlen: 24
2a00:1ed0::/32 maxlen: 32
2a00:1ed1::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 28 Aug 2023 15:38:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:45:f8:5d:0a:14:de:e2:9d:5b:ed:69:10:c3:68:60:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e65dab23940cb394f9aaa664fea4d6f8f42e318
Validity
Not Before: Jul 11 17:20:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d13ff9346d999c403e183963f66faa5d4efdff6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c7:66:0d:c5:e5:fe:dd:6a:4d:dd:43:5d:4e:
ac:8c:8f:88:06:8e:9a:16:81:e8:8f:7e:bf:5c:24:
5f:4f:a4:14:0b:04:be:ae:2a:42:c0:c7:15:ef:6d:
30:f9:4b:bf:4e:17:90:97:8e:13:a2:c5:f8:46:d5:
80:c8:94:c7:3d:4c:0b:d6:b5:69:b2:ef:94:1c:ab:
72:3d:fa:04:27:b0:ea:bf:12:bd:fa:26:37:c0:b5:
58:1f:5d:80:61:45:7f:2b:7b:27:d6:eb:5d:63:9a:
4a:91:8a:80:a9:5e:8d:cb:87:bc:38:61:62:9a:32:
32:7d:40:1b:17:00:6d:41:98:f9:d6:fc:85:6b:b5:
91:da:40:21:a3:f1:4a:1a:e2:a9:c9:b1:77:18:2d:
1a:09:4e:65:46:80:e3:29:56:10:d4:f6:0a:9e:82:
69:65:75:18:c9:62:44:6b:d0:65:1e:aa:05:f9:ae:
db:ea:e2:2e:9b:8e:f0:af:0f:48:58:ea:f4:46:a2:
31:1a:ef:95:14:85:76:88:b9:33:f4:c9:a5:5b:62:
85:52:7b:5e:7f:80:cb:b8:c5:b0:02:09:e5:d8:38:
51:42:07:50:79:55:24:72:a8:58:ef:22:c7:de:44:
b9:d7:9d:89:88:e1:74:85:6d:4e:b6:f4:53:86:4d:
b4:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:3F:F9:34:6D:99:9C:40:3E:18:39:63:F6:6F:AA:5D:4E:FD:FF:6C
X509v3 Authority Key Identifier:
keyid:7E:65:DA:B2:39:40:CB:39:4F:9A:AA:66:4F:EA:4D:6F:8F:42:E3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fmXasjlAyzlPmqpmT-pNb49C4xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/0T_5NG2ZnEA-GDlj9m-qXU79_2w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.48.0/21
78.24.8.0/21
93.185.96.0/20
178.251.184.0/21
185.14.252.0/22
185.59.208.0/22
185.64.216.0/22
185.115.1.0-185.115.2.255
217.16.176.0/20
IPv6:
2a00:1ed0::/31
Signature Algorithm: sha256WithRSAEncryption
26:12:b6:ad:9e:72:f7:4b:b1:13:08:91:75:6f:3c:f4:82:c4:
ed:b9:a8:fa:d7:46:b1:ab:d3:98:f7:2b:9a:c5:11:56:49:fe:
f1:ce:9a:1c:3c:6a:90:e8:59:d1:32:85:85:6b:7c:eb:7c:27:
05:25:24:c0:c8:66:b5:50:68:f8:f9:1d:9e:29:f4:78:5e:45:
ab:54:32:9b:0c:10:1f:33:81:b3:d9:19:bc:f7:90:0a:37:77:
9f:f7:ea:51:3c:c2:b3:3b:5c:76:c0:8b:06:88:e1:37:fd:3e:
d6:60:c9:ea:87:78:b0:c1:ae:98:94:e3:48:42:71:25:9d:f9:
32:69:e3:d4:c0:1b:75:92:43:39:4e:5b:b4:d4:93:c4:a9:9f:
82:09:0c:90:1f:59:6c:95:9e:58:e6:58:da:fd:8f:84:70:b6:
78:37:f0:c9:a3:e2:d7:29:b5:84:d9:08:62:ca:11:cc:73:e6:
87:ca:fd:a3:9c:36:ae:46:ad:c2:f9:4d:b5:3f:5a:a6:48:80:
e7:bf:2a:42:f6:1d:25:5c:9a:11:0e:bf:3b:1f:a4:a6:26:20:
8b:49:40:5a:02:4c:a5:1a:59:4e:87:f5:b4:c0:49:4f:12:53:
0d:26:b6:0c:c8:35:29:65:fa:b6:87:28:eb:d4:54:7d:15:5b:
61:a4:1f:73
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgISAYlF+F0KFN7inVvtaRDDaGB8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlNjVkYWIyMzk0MGNiMzk0ZjlhYWE2NjRmZWE0ZDZmOGY0
MmUzMTgwHhcNMjMwNzExMTcyMDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMTNmZjkzNDZkOTk5YzQwM2UxODM5NjNmNjZmYWE1ZDRlZmRmZjZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8dmDcXl/t1qTd1DXU6sjI+IBo6a
FoHoj36/XCRfT6QUCwS+ripCwMcV720w+Uu/TheQl44TosX4RtWAyJTHPUwL1rVp
su+UHKtyPfoEJ7DqvxK9+iY3wLVYH12AYUV/K3sn1utdY5pKkYqAqV6Ny4e8OGFi
mjIyfUAbFwBtQZj51vyFa7WR2kAho/FKGuKpybF3GC0aCU5lRoDjKVYQ1PYKnoJp
ZXUYyWJEa9BlHqoF+a7b6uIum47wrw9IWOr0RqIxGu+VFIV2iLkz9MmlW2KFUnte
f4DLuMWwAgnl2DhRQgdQeVUkcqhY7yLH3kS5152JiOF0hW1OtvRThk208wIDAQAB
o4ICUDCCAkwwHQYDVR0OBBYEFNE/+TRtmZxAPhg5Y/Zvql1O/f9sMB8GA1UdIwQY
MBaAFH5l2rI5QMs5T5qqZk/qTW+PQuMYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZm1YYXNqbEF5emxQbXFwbVQtcE5iNDlDNHhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC81OGViYjEtZGJlYy00N2Y5LWJiOTYt
ODQ5Y2ZjYWJiNjU3LzEvMFRfNU5HMlpuRUEtR0RsajltLXFYVTc5XzJ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC81OGViYjEtZGJlYy00N2Y5LWJiOTYtODQ5Y2ZjYWJiNjU3
LzEvZm1YYXNqbEF5emxQbXFwbVQtcE5iNDlDNHhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGYGCCsGAQUFBwEHAQH/BFcwVTBEBAIAATA+AwQDLvMwAwQD
ThgIAwQEXblgAwQDsvu4AwQCuQ78AwQCuTvQAwQCuUDYMAwDBAC5cwEDBAC5cwID
BATZELAwDQQCAAIwBwMFASoAHtAwDQYJKoZIhvcNAQELBQADggEBACYStq2ecvdL
sRMIkXVvPPSCxO25qPrXRrGr05j3K5rFEVZJ/vHOmhw8apDoWdEyhYVrfOt8JwUl
JMDIZrVQaPj5HZ4p9HheRatUMpsMEB8zgbPZGbz3kAo3d5/36lE8wrM7XHbAiwaI
4Tf9PtZgyeqHeLDBrpiU40hCcSWd+TJp49TAG3WSQzlOW7TUk8Spn4IJDJAfWWyV
nljmWNr9j4Rwtng38Mmj4tcptYTZCGLKEcxz5ofK/aOcNq5GrcL5TbU/WqZIgOe/
KkL2HSVcmhEOvzsfpKYmIItJQFoCTKUaWU6H9bTASU8SUw0mtgzINSll+raHKOvU
VH0VW2GkH3M=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:54 2024 by rpki-client on console-ams.rpki-client.org