Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/3LYrtU0eG2-yJMkNDN9dHsej4VQ.roa
File: 3LYrtU0eG2-yJMkNDN9dHsej4VQ.roa (raw, json)
Hash identifier: ccLDaPFPNMfrg+LIS3+g55AF7KvoPs+Ra8qnOVAAx3c=
Subject key identifier: DC:B6:2B:B5:4D:1E:1B:6F:B2:24:C9:0D:0C:DF:5D:1E:C7:A3:E1:54
Certificate issuer: /CN=94a32e445c24ded9b85212d479b88008165ebdba
Certificate serial: 0185718C3D68CB5D08370E01D5934826EA82
Authority key identifier: 94:A3:2E:44:5C:24:DE:D9:B8:52:12:D4:79:B8:80:08:16:5E:BD:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lKMuRFwk3tm4UhLUebiACBZevbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/3LYrtU0eG2-yJMkNDN9dHsej4VQ.roa
Signing time: Mon 02 Jan 2023 08:14:54 +0000
ROA not before: Mon 02 Jan 2023 08:14:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29608
IP address blocks: 178.20.64.0/21 maxlen: 21
193.47.70.0/24 maxlen: 24
193.47.75.0/24 maxlen: 24
193.47.86.0/24 maxlen: 24
193.46.252.0/24 maxlen: 24
185.101.208.0/22 maxlen: 22
185.152.24.0/22 maxlen: 22
185.152.24.0/23 maxlen: 23
185.226.48.0/22 maxlen: 22
185.152.26.0/23 maxlen: 23
193.239.192.0/23 maxlen: 23
2a07:81c0::/29 maxlen: 29
2a01:40c0::/29 maxlen: 29
2a0f:8340::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:29:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:8c:3d:68:cb:5d:08:37:0e:01:d5:93:48:26:ea:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94a32e445c24ded9b85212d479b88008165ebdba
Validity
Not Before: Jan 2 08:14:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dcb62bb54d1e1b6fb224c90d0cdf5d1ec7a3e154
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:64:30:0a:58:96:98:3c:51:48:aa:c8:9a:4f:
f5:41:ef:2d:29:ec:43:93:52:6a:13:1e:0b:2f:27:
20:a0:33:d3:66:7d:89:bb:a9:eb:ef:fb:a1:6f:9f:
bf:62:57:51:e6:dc:43:6c:9c:75:c5:f0:3f:20:3a:
92:3f:41:b7:0a:92:53:e5:c3:98:0f:f1:7f:83:3f:
b0:eb:57:41:82:40:af:a1:f1:59:c6:58:fa:a0:d6:
a8:cc:ef:89:51:d9:17:20:64:1f:1d:85:5f:5f:aa:
b5:5c:70:03:db:6e:73:ae:b6:5c:af:5c:67:ad:b6:
f1:50:6e:1d:6c:94:1d:d8:67:de:1b:f1:47:53:f9:
91:89:95:f6:3e:0f:cd:0c:19:30:0c:bb:cd:eb:31:
4a:c0:e3:79:38:16:66:4f:9b:95:7c:7b:21:f9:2b:
73:c3:00:2a:e5:3b:4a:af:68:a0:a1:79:c0:81:33:
4f:9f:b1:fb:58:8b:bf:1f:13:51:f4:ed:e4:0e:82:
9c:dd:c7:ed:ab:b1:d7:21:85:79:b6:6f:ca:49:2b:
07:33:0d:d7:21:5b:d8:46:94:3e:80:9b:bf:0c:00:
ee:bd:26:7b:50:75:33:7a:f4:c1:d2:c1:dc:3d:34:
66:22:98:56:a9:e6:24:65:15:a5:19:95:23:ec:f4:
50:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:B6:2B:B5:4D:1E:1B:6F:B2:24:C9:0D:0C:DF:5D:1E:C7:A3:E1:54
X509v3 Authority Key Identifier:
keyid:94:A3:2E:44:5C:24:DE:D9:B8:52:12:D4:79:B8:80:08:16:5E:BD:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lKMuRFwk3tm4UhLUebiACBZevbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/3LYrtU0eG2-yJMkNDN9dHsej4VQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.20.64.0/21
185.101.208.0/22
185.152.24.0/22
185.226.48.0/22
193.46.252.0/24
193.47.70.0/24
193.47.75.0/24
193.47.86.0/24
193.239.192.0/23
IPv6:
2a01:40c0::/29
2a07:81c0::/29
2a0f:8340::/29
Signature Algorithm: sha256WithRSAEncryption
1d:34:52:3f:e8:2e:b4:96:83:36:67:52:54:3d:78:da:22:3b:
db:23:77:5a:77:23:77:78:16:a6:ae:7b:06:45:24:4f:03:ad:
04:2f:ca:a5:73:8f:b9:d4:3f:44:90:b0:98:cc:e0:05:02:1f:
19:47:90:34:28:14:5a:58:93:99:96:62:5a:be:5d:f9:78:c7:
f8:31:4a:db:7e:a9:bb:8c:13:2f:1e:f6:cb:20:8e:cb:c3:1b:
3c:70:87:a6:77:71:de:3e:b0:9a:68:b6:45:4c:d1:19:26:d8:
fe:e4:ad:b9:33:c6:76:3c:6d:91:61:3f:c9:29:dd:cc:ca:a0:
b2:a7:93:1c:3b:73:05:49:1d:57:db:7a:86:e1:e9:76:a9:74:
1d:c6:ab:13:14:d8:de:48:f3:f5:a2:c4:29:27:97:03:60:34:
94:c9:5e:10:7e:0b:60:cc:d4:d1:3e:1c:0f:7b:1c:cd:f7:4c:
41:cd:d6:7a:a0:eb:a5:f6:5d:8f:59:c5:24:dd:c7:70:d1:2c:
7c:9c:b2:dd:f1:69:04:7f:ff:11:68:a5:6c:82:c4:80:52:d6:
0e:63:0d:cd:4f:5c:2a:7a:8d:95:43:e5:07:c9:fd:94:e3:56:
9a:0a:ee:5b:95:0e:83:5b:da:86:18:4a:9e:dd:13:40:ad:29:
2c:27:a7:d9
-----BEGIN CERTIFICATE-----
MIIFSjCCBDKgAwIBAgISAYVxjD1oy10INw4B1ZNIJuqCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0YTMyZTQ0NWMyNGRlZDliODUyMTJkNDc5Yjg4MDA4MTY1
ZWJkYmEwHhcNMjMwMTAyMDgxNDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkY2I2MmJiNTRkMWUxYjZmYjIyNGM5MGQwY2RmNWQxZWM3YTNlMTU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWQwCliWmDxRSKrImk/1Qe8tKexD
k1JqEx4LLycgoDPTZn2Ju6nr7/uhb5+/YldR5txDbJx1xfA/IDqSP0G3CpJT5cOY
D/F/gz+w61dBgkCvofFZxlj6oNaozO+JUdkXIGQfHYVfX6q1XHAD225zrrZcr1xn
rbbxUG4dbJQd2GfeG/FHU/mRiZX2Pg/NDBkwDLvN6zFKwON5OBZmT5uVfHsh+Stz
wwAq5TtKr2igoXnAgTNPn7H7WIu/HxNR9O3kDoKc3cftq7HXIYV5tm/KSSsHMw3X
IVvYRpQ+gJu/DADuvSZ7UHUzevTB0sHcPTRmIphWqeYkZRWlGZUj7PRQbQIDAQAB
o4ICVjCCAlIwHQYDVR0OBBYEFNy2K7VNHhtvsiTJDQzfXR7Ho+FUMB8GA1UdIwQY
MBaAFJSjLkRcJN7ZuFIS1Hm4gAgWXr26MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEtNdVJGd2szdG00VWhMVWViaUFDQlpldmJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9mODkxYzQtMTlhYy00MzdjLWI3ODIt
ZTE0ODdhNTRjMWU1LzEvM0xZcnRVMGVHMi15Sk1rTkROOWRIc2VqNFZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9mODkxYzQtMTlhYy00MzdjLWI3ODItZTE0ODdhNTRjMWU1
LzEvbEtNdVJGd2szdG00VWhMVWViaUFDQlpldmJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGwGCCsGAQUFBwEHAQH/BF0wWzA8BAIAATA2AwQDshRAAwQC
uWXQAwQCuZgYAwQCueIwAwQAwS78AwQAwS9GAwQAwS9LAwQAwS9WAwQBwe/AMBsE
AgACMBUDBQMqAUDAAwUDKgeBwAMFAyoPg0AwDQYJKoZIhvcNAQELBQADggEBAB00
Uj/oLrSWgzZnUlQ9eNoiO9sjd1p3I3d4FqauewZFJE8DrQQvyqVzj7nUP0SQsJjM
4AUCHxlHkDQoFFpYk5mWYlq+Xfl4x/gxStt+qbuMEy8e9ssgjsvDGzxwh6Z3cd4+
sJpotkVM0Rkm2P7krbkzxnY8bZFhP8kp3czKoLKnkxw7cwVJHVfbeobh6XapdB3G
qxMU2N5I8/WixCknlwNgNJTJXhB+C2DM1NE+HA97HM33TEHN1nqg66X2XY9ZxSTd
x3DRLHycst3xaQR//xFopWyCxIBS1g5jDc1PXCp6jZVD5QfJ/ZTjVpoK7luVDoNb
2oYYSp7dE0CtKSwnp9k=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:53 2024 by rpki-client on console-fra.rpki-client.org