Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/eMNxj9nQRsnSPmoI7T6j378ojNE.roa
File: eMNxj9nQRsnSPmoI7T6j378ojNE.roa (raw, json)
Hash identifier: e4GJ3y+I8DbXTqaFxuy1k1CPzC906+RYkVgAgxAg1nA=
Subject key identifier: 78:C3:71:8F:D9:D0:46:C9:D2:3E:6A:08:ED:3E:A3:DF:BF:28:8C:D1
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 018F5FA716E65F05B71D9B238D2252B769C5
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/eMNxj9nQRsnSPmoI7T6j378ojNE.roa
Signing time: Thu 09 May 2024 23:18:56 +0000
ROA not before: Thu 09 May 2024 23:18:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 95.82.8.0/21 maxlen: 24
95.82.16.0/20 maxlen: 24
109.111.32.0/21 maxlen: 24
109.111.52.0/22 maxlen: 24
109.111.60.0/22 maxlen: 22
Validation: Failed, certificate revoked on Sun 12 May 2024 20:07:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:5f:a7:16:e6:5f:05:b7:1d:9b:23:8d:22:52:b7:69:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: May 9 23:18:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=78c3718fd9d046c9d23e6a08ed3ea3dfbf288cd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:40:af:b6:17:26:a3:99:04:19:3d:4e:f4:d3:
dc:29:cb:c8:22:a7:76:d7:f2:8b:43:33:bf:de:d3:
1f:6d:04:aa:71:d7:b7:f9:de:a3:90:27:b5:61:2b:
41:ea:ea:ce:ed:b2:5d:e0:3a:85:49:7a:fc:1f:51:
86:86:bf:09:5c:25:7f:54:74:d9:d3:eb:d9:ed:c2:
b2:5a:71:dd:3a:7d:e8:4f:00:4e:06:0d:65:3b:a8:
76:83:95:1f:fe:42:e5:ea:e0:ca:e2:01:ac:ef:0b:
cc:fb:f5:ee:c5:34:58:ad:46:f3:55:ac:67:34:b5:
eb:12:20:16:89:f7:78:85:f7:0c:dc:a3:bb:47:6c:
53:cd:81:04:9f:4a:69:53:11:09:c3:7c:52:7f:f9:
37:65:c2:29:e2:af:ae:10:a1:4b:15:e8:96:20:88:
26:2a:6f:2f:f4:2b:78:b1:4c:4a:05:02:50:65:11:
6f:ab:f5:e5:82:2d:11:c4:ac:dc:0c:23:1c:76:38:
ee:de:01:5a:3e:59:f0:95:61:cb:fc:14:0e:a6:09:
ed:20:0d:16:46:42:c4:aa:62:e4:24:e3:bc:3f:d2:
85:7a:6f:f8:77:91:c4:f1:46:10:80:3c:78:9e:18:
02:cd:c8:42:e9:41:f9:06:84:a3:51:55:d5:21:6d:
d5:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:C3:71:8F:D9:D0:46:C9:D2:3E:6A:08:ED:3E:A3:DF:BF:28:8C:D1
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/eMNxj9nQRsnSPmoI7T6j378ojNE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.82.8.0-95.82.31.255
109.111.32.0/21
109.111.52.0/22
109.111.60.0/22
Signature Algorithm: sha256WithRSAEncryption
a4:52:ac:a9:c2:da:ea:3b:d3:55:ea:f5:c5:5a:ff:23:c3:9e:
27:13:2a:cc:47:e3:56:3f:8b:7d:11:a8:00:48:8a:42:ac:d2:
14:cf:c6:df:63:12:1f:1b:5c:43:40:76:87:41:df:5f:60:9c:
1e:dd:a1:ab:7f:2f:6d:be:23:53:cd:66:e3:ae:68:6d:ba:2a:
0a:ef:99:55:51:78:d8:19:cb:6c:ef:0e:8c:42:fa:19:cc:68:
4c:b3:50:0a:56:d8:95:6b:eb:2d:bd:05:6e:1e:27:8f:84:da:
d2:e5:70:66:ba:63:f8:d0:db:53:d3:c6:ff:d2:5d:3c:c0:ca:
40:42:b6:8f:63:0d:73:79:24:ff:4e:3c:c7:60:c4:b2:bc:4e:
81:71:75:bd:9b:12:a5:5d:c9:68:4d:a5:57:f3:65:68:af:54:
d1:b1:3b:9b:be:10:73:67:3f:6b:55:b6:5c:59:75:dd:4b:c7:
96:65:cc:9e:15:63:7e:87:d9:f9:7d:e0:b4:7a:cb:bc:46:42:
f9:97:54:dd:dc:28:8b:cd:30:66:6a:23:3b:15:88:21:61:34:
49:0d:07:1d:ce:fc:35:b0:54:af:1f:8f:7b:c7:23:05:99:fa:
79:11:76:db:f4:70:29:95:58:13:f9:e2:c3:83:4f:b8:1c:eb:
6d:30:f0:b8
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAY9fpxbmXwW3HZsjjSJSt2nFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmNzVlNGU5NGI1Y2I3NDUxN2I3YjAxNTY4MDE1ZGE5ZTZl
ZWNkYjYwHhcNMjQwNTA5MjMxODU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OGMzNzE4ZmQ5ZDA0NmM5ZDIzZTZhMDhlZDNlYTNkZmJmMjg4Y2QxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUCvthcmo5kEGT1O9NPcKcvIIqd2
1/KLQzO/3tMfbQSqcde3+d6jkCe1YStB6urO7bJd4DqFSXr8H1GGhr8JXCV/VHTZ
0+vZ7cKyWnHdOn3oTwBOBg1lO6h2g5Uf/kLl6uDK4gGs7wvM+/XuxTRYrUbzVaxn
NLXrEiAWifd4hfcM3KO7R2xTzYEEn0ppUxEJw3xSf/k3ZcIp4q+uEKFLFeiWIIgm
Km8v9Ct4sUxKBQJQZRFvq/Xlgi0RxKzcDCMcdjju3gFaPlnwlWHL/BQOpgntIA0W
RkLEqmLkJOO8P9KFem/4d5HE8UYQgDx4nhgCzchC6UH5BoSjUVXVIW3VfQIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFHjDcY/Z0EbJ0j5qCO0+o9+/KIzRMB8GA1UdIwQY
MBaAFG915OlLXLdFF7ewFWgBXanm7s22MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjNYazZVdGN0MFVYdDdBVmFBRmRxZWJ1emJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi81N2EzNGYtZTMzYi00ZTE3LWJjMzIt
NjY0NTc3MjRjMmQzLzEvZU1OeGo5blFSc25TUG1vSTdUNmozNzhvak5FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi81N2EzNGYtZTMzYi00ZTE3LWJjMzItNjY0NTc3MjRjMmQz
LzEvYjNYazZVdGN0MFVYdDdBVmFBRmRxZWJ1emJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgMAwDBANfUggD
BAVfUgADBANtbyADBAJtbzQDBAJtbzwwDQYJKoZIhvcNAQELBQADggEBAKRSrKnC
2uo701Xq9cVa/yPDnicTKsxH41Y/i30RqABIikKs0hTPxt9jEh8bXENAdodB319g
nB7doat/L22+I1PNZuOuaG26KgrvmVVReNgZy2zvDoxC+hnMaEyzUApW2JVr6y29
BW4eJ4+E2tLlcGa6Y/jQ21PTxv/SXTzAykBCto9jDXN5JP9OPMdgxLK8ToFxdb2b
EqVdyWhNpVfzZWivVNGxO5u+EHNnP2tVtlxZdd1Lx5ZlzJ4VY36H2fl94LR6y7xG
QvmXVN3cKIvNMGZqIzsViCFhNEkNBx3O/DWwVK8fj3vHIwWZ+nkRdtv0cCmVWBP5
4sODT7gc620w8Lg=
Generated at Sun May 12 22:53:47 2024 by rpki-client on console-ams.rpki-client.org