Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/07pVWDq_w3NS8eflaAsuihunZak.roa
File: 07pVWDq_w3NS8eflaAsuihunZak.roa (raw, json)
Hash identifier: 0HJmVqA79pJ0DptjnF9IvCZIXIitfTxwsNhaOw1fZFc=
Subject key identifier: D3:BA:55:58:3A:BF:C3:73:52:F1:E7:E5:68:0B:2E:8A:1B:A7:65:A9
Certificate issuer: /CN=3dfa29368c8be69c8edd5aa193557fcba2a57ec8
Certificate serial: 018A8ECB698F1AF81B1F9630E4E5B64B73FD
Authority key identifier: 3D:FA:29:36:8C:8B:E6:9C:8E:DD:5A:A1:93:55:7F:CB:A2:A5:7E:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PfopNoyL5pyO3Vqhk1V_y6Klfsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/07pVWDq_w3NS8eflaAsuihunZak.roa
Signing time: Wed 13 Sep 2023 13:46:50 +0000
ROA not before: Wed 13 Sep 2023 13:46:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206276
IP address blocks: 212.63.112.0/22 maxlen: 22
185.179.184.0/22 maxlen: 22
194.49.56.0/22 maxlen: 22
45.8.12.0/22 maxlen: 22
185.190.100.0/22 maxlen: 22
78.142.212.0/22 maxlen: 22
193.38.224.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:30:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:8e:cb:69:8f:1a:f8:1b:1f:96:30:e4:e5:b6:4b:73:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3dfa29368c8be69c8edd5aa193557fcba2a57ec8
Validity
Not Before: Sep 13 13:46:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d3ba55583abfc37352f1e7e5680b2e8a1ba765a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:2b:a6:2b:c6:19:8e:bf:72:f9:6e:57:59:8c:
ae:ad:53:6d:f1:57:5b:5d:ca:42:14:66:cd:18:e7:
42:ff:c3:fb:86:b4:74:ae:04:51:54:c4:01:1f:6f:
23:4b:d9:4c:8f:40:05:07:ca:45:06:3a:14:ef:59:
ee:da:91:5c:15:78:d2:63:8d:06:31:b1:44:b6:2b:
26:93:80:50:bd:d7:2f:22:79:85:f8:02:e5:16:c0:
a6:90:8c:5c:ef:e1:b9:53:39:38:cc:66:61:60:d7:
34:d4:10:5c:6e:a7:4b:3b:a8:67:5c:0e:2f:0b:cd:
6b:5a:9c:c1:9b:40:d4:b2:17:20:ae:09:93:b7:9b:
31:8a:84:d0:7d:a0:43:20:0b:76:a6:e8:9a:8d:55:
05:89:01:92:85:ed:ad:ba:34:ab:ef:bb:0c:1d:e8:
2c:3f:90:70:d0:b7:a5:68:55:e6:57:ec:37:ba:ea:
b4:30:62:7f:3c:13:30:26:a3:4a:95:07:9b:b5:fb:
39:23:67:c6:fd:61:06:c6:a4:6a:79:0f:c6:82:9d:
bd:8b:bb:bb:8e:ff:4a:a4:2b:cc:06:fc:b9:ba:93:
4b:fc:9d:46:23:25:22:f5:fb:f9:27:86:4f:79:6e:
40:3b:05:d8:ae:ec:46:ef:9a:be:0d:4e:5c:90:c6:
a4:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:BA:55:58:3A:BF:C3:73:52:F1:E7:E5:68:0B:2E:8A:1B:A7:65:A9
X509v3 Authority Key Identifier:
keyid:3D:FA:29:36:8C:8B:E6:9C:8E:DD:5A:A1:93:55:7F:CB:A2:A5:7E:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PfopNoyL5pyO3Vqhk1V_y6Klfsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/07pVWDq_w3NS8eflaAsuihunZak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.12.0/22
78.142.212.0/22
185.179.184.0/22
185.190.100.0/22
193.38.224.0/22
194.49.56.0/22
212.63.112.0/22
Signature Algorithm: sha256WithRSAEncryption
6f:1f:14:59:49:3b:68:30:e5:46:59:b5:14:47:5e:15:f2:19:
1a:a0:44:22:4d:1b:ff:8a:7e:67:e9:ac:82:ab:d9:db:60:03:
18:df:ff:c8:19:50:b5:d3:20:ab:be:de:d0:41:59:0d:d5:8f:
3e:12:f0:5e:de:6b:20:0a:64:2f:e6:2d:f4:71:e0:e9:c7:fa:
ae:e7:5c:8a:85:9c:b4:88:96:60:09:a5:56:c0:2e:ed:ef:16:
16:7b:70:41:cd:fe:87:3a:7c:5f:d7:4c:6b:56:25:42:a2:9f:
bd:3e:2b:1f:93:1a:df:24:13:3d:2c:84:bb:a6:ea:72:de:a8:
78:00:5e:d2:3b:92:3b:0c:32:dd:da:af:bd:a2:17:0f:79:ef:
72:94:1c:af:8b:d6:10:7a:b0:00:5a:e3:d9:27:c0:66:38:1a:
2b:87:4a:1e:d1:bd:3a:80:7a:8b:85:02:9e:63:85:90:d6:08:
65:92:89:14:61:d0:8b:65:bb:be:02:5a:7f:bf:81:a0:67:dc:
e7:63:c3:d0:4f:2b:5d:6f:59:8e:68:1b:b6:37:99:06:aa:f1:
aa:76:d7:44:dd:43:2a:7e:1c:2c:a6:c9:54:78:86:9c:e0:ec:
e4:63:a0:6e:62:fe:c1:ef:11:19:cf:34:2e:c6:1d:ff:10:d2:
71:44:cd:a3
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAYqOy2mPGvgbH5Yw5OW2S3P9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkZmEyOTM2OGM4YmU2OWM4ZWRkNWFhMTkzNTU3ZmNiYTJh
NTdlYzgwHhcNMjMwOTEzMTM0NjUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkM2JhNTU1ODNhYmZjMzczNTJmMWU3ZTU2ODBiMmU4YTFiYTc2NWE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmiumK8YZjr9y+W5XWYyurVNt8Vdb
XcpCFGbNGOdC/8P7hrR0rgRRVMQBH28jS9lMj0AFB8pFBjoU71nu2pFcFXjSY40G
MbFEtismk4BQvdcvInmF+ALlFsCmkIxc7+G5Uzk4zGZhYNc01BBcbqdLO6hnXA4v
C81rWpzBm0DUshcgrgmTt5sxioTQfaBDIAt2puiajVUFiQGShe2tujSr77sMHegs
P5Bw0LelaFXmV+w3uuq0MGJ/PBMwJqNKlQebtfs5I2fG/WEGxqRqeQ/Ggp29i7u7
jv9KpCvMBvy5upNL/J1GIyUi9fv5J4ZPeW5AOwXYruxG75q+DU5ckMakpQIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFNO6VVg6v8NzUvHn5WgLLoobp2WpMB8GA1UdIwQY
MBaAFD36KTaMi+acjt1aoZNVf8uipX7IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGZvcE5veUw1cHlPM1ZxaGsxVl95NktsZnNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My8yZDRmN2YtMTZlNy00ZmU2LWExODkt
YmQ1OGQwMDIxYTA5LzEvMDdwVldEcV93M05TOGVmbGFBc3VpaHVuWmFrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My8yZDRmN2YtMTZlNy00ZmU2LWExODktYmQ1OGQwMDIxYTA5
LzEvUGZvcE5veUw1cHlPM1ZxaGsxVl95NktsZnNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQCLQgMAwQC
To7UAwQCubO4AwQCub5kAwQCwSbgAwQCwjE4AwQC1D9wMA0GCSqGSIb3DQEBCwUA
A4IBAQBvHxRZSTtoMOVGWbUUR14V8hkaoEQiTRv/in5n6ayCq9nbYAMY3//IGVC1
0yCrvt7QQVkN1Y8+EvBe3msgCmQv5i30ceDpx/qu51yKhZy0iJZgCaVWwC7t7xYW
e3BBzf6HOnxf10xrViVCop+9PisfkxrfJBM9LIS7pupy3qh4AF7SO5I7DDLd2q+9
ohcPee9ylByvi9YQerAAWuPZJ8BmOBorh0oe0b06gHqLhQKeY4WQ1ghlkokUYdCL
Zbu+Alp/v4GgZ9znY8PQTytdb1mOaBu2N5kGqvGqdtdE3UMqfhwspslUeIac4Ozk
Y6BuYv7B7xEZzzQuxh3/ENJxRM2j
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:32 2024 by rpki-client on console-ams.rpki-client.org