Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/4PLDVIfum4eq4MHn9gl309CUjso.roa
File: 4PLDVIfum4eq4MHn9gl309CUjso.roa (raw, json)
Hash identifier: 0ARaMg5I6POUgr5PVMZd4Invo5G/UM3onH+g9SHO7tg=
Subject key identifier: E0:F2:C3:54:87:EE:9B:87:AA:E0:C1:E7:F6:09:77:D3:D0:94:8E:CA
Certificate issuer: /CN=fb987244611b5230536744b6a89f044f32f462ea
Certificate serial: 018C633DD775118A6C1DC746DA1F5202F0F5
Authority key identifier: FB:98:72:44:61:1B:52:30:53:67:44:B6:A8:9F:04:4F:32:F4:62:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/4PLDVIfum4eq4MHn9gl309CUjso.roa
Signing time: Wed 13 Dec 2023 12:54:06 +0000
ROA not before: Wed 13 Dec 2023 12:54:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8764
IP address blocks: 88.119.0.0/18 maxlen: 24
85.206.176.0/20 maxlen: 24
195.12.160.0/19 maxlen: 24
88.118.192.0/18 maxlen: 24
194.176.32.0/19 maxlen: 24
85.206.128.0/19 maxlen: 24
85.206.244.0/22 maxlen: 24
85.206.248.0/21 maxlen: 24
213.190.32.0/19 maxlen: 24
88.119.128.0/19 maxlen: 24
188.69.0.0/16 maxlen: 24
85.206.192.0/19 maxlen: 24
88.119.64.0/18 maxlen: 24
85.206.224.0/20 maxlen: 24
212.47.96.0/19 maxlen: 24
212.59.0.0/19 maxlen: 24
88.118.0.0/17 maxlen: 24
88.119.184.0/21 maxlen: 24
88.119.192.0/18 maxlen: 24
78.56.0.0/13 maxlen: 24
195.22.160.0/19 maxlen: 24
82.135.128.0/17 maxlen: 24
81.7.64.0/18 maxlen: 24
62.212.192.0/19 maxlen: 24
85.206.0.0/17 maxlen: 24
88.118.128.0/18 maxlen: 24
2a00:1eb8::/32 maxlen: 48
2a02:118::/48 maxlen: 48
2a02:118:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:30:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:63:3d:d7:75:11:8a:6c:1d:c7:46:da:1f:52:02:f0:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb987244611b5230536744b6a89f044f32f462ea
Validity
Not Before: Dec 13 12:54:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e0f2c35487ee9b87aae0c1e7f60977d3d0948eca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:80:44:1a:20:a7:db:f2:0f:46:35:b6:e7:ef:
53:77:e0:27:7b:1d:bb:56:db:12:86:3e:89:7d:05:
b2:a4:79:cd:a0:8c:40:f0:3f:8e:10:46:3b:b8:fe:
b8:6b:9b:2a:ec:a2:a1:05:9f:98:b2:8c:ae:3e:d3:
02:33:bf:0f:31:2a:46:ce:7a:b7:18:b2:66:10:6b:
c5:91:e1:3b:f7:9c:bf:62:85:f0:cb:18:44:73:7a:
af:39:76:ba:12:ce:6d:17:ba:1d:13:df:5a:93:fd:
1a:a4:eb:83:79:c9:47:37:f5:29:ae:88:41:6d:43:
b2:84:d4:b2:b3:a7:d9:9f:76:d0:62:d2:3c:06:08:
d3:d5:cd:1e:dc:4a:19:1f:fc:7e:f7:7e:2c:57:01:
24:73:2b:69:7a:3c:4a:34:91:f8:13:5a:7e:63:81:
dc:44:2a:b6:10:f0:f5:3c:6e:c3:4a:fc:64:95:f5:
86:88:aa:50:d2:57:3b:5d:4b:82:ce:be:55:d4:60:
e1:ce:c5:71:b8:c0:18:1a:c3:4b:35:9c:d3:22:26:
21:42:59:6d:96:73:16:8a:05:ac:43:89:b6:d2:41:
d0:3b:b1:ed:d0:fb:7b:47:8e:e7:b3:05:58:37:72:
8b:e4:f8:a3:ee:84:8e:66:66:84:e4:71:0d:37:c9:
a0:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:F2:C3:54:87:EE:9B:87:AA:E0:C1:E7:F6:09:77:D3:D0:94:8E:CA
X509v3 Authority Key Identifier:
keyid:FB:98:72:44:61:1B:52:30:53:67:44:B6:A8:9F:04:4F:32:F4:62:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/4PLDVIfum4eq4MHn9gl309CUjso.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.212.192.0/19
78.56.0.0/13
81.7.64.0/18
82.135.128.0/17
85.206.0.0-85.206.159.255
85.206.176.0-85.206.239.255
85.206.244.0-85.206.255.255
88.118.0.0-88.119.159.255
88.119.184.0-88.119.255.255
188.69.0.0/16
194.176.32.0/19
195.12.160.0/19
195.22.160.0/19
212.47.96.0/19
212.59.0.0/19
213.190.32.0/19
IPv6:
2a00:1eb8::/32
2a02:118::/47
Signature Algorithm: sha256WithRSAEncryption
71:7e:98:69:3a:b7:39:ab:37:f5:2d:18:3e:84:a1:53:88:6c:
32:f1:4d:2a:82:e5:e4:94:b8:19:25:29:fa:a7:ff:0c:f0:86:
08:99:73:2a:f5:c8:3a:12:3b:f7:1d:fa:55:e4:bb:7a:60:0f:
cc:46:80:60:2c:ff:cb:ce:05:06:8d:88:c7:2e:af:fa:e5:c6:
0f:8d:5a:70:5c:2b:4d:91:55:65:68:d0:43:08:5a:65:44:fe:
3e:11:d0:d2:91:52:bc:48:57:7a:68:8d:5b:11:af:be:2e:29:
4e:46:e9:ef:5c:c4:ec:9f:3f:79:86:de:89:d4:e0:de:d5:50:
a4:1e:64:45:dc:e5:53:87:d5:1e:2b:fe:54:4b:61:c0:75:18:
68:74:a1:ce:29:25:91:70:37:38:66:1a:1c:c9:ca:d6:25:41:
37:74:3b:13:95:ea:ff:c3:f6:3f:5f:1a:7f:f1:79:55:5a:7f:
f3:d7:dd:db:89:12:21:f5:aa:d6:0a:49:97:d4:2c:81:71:5e:
e2:57:12:1d:b0:c6:d9:be:57:a1:4f:ff:a6:54:05:23:87:cf:
b6:e0:06:1b:22:f3:00:22:7f:bf:f4:b1:55:fe:64:3f:bf:13:
8a:7e:81:f8:99:6b:d5:45:ab:de:e8:58:84:95:4e:63:a2:d4:
2a:1a:48:11
-----BEGIN CERTIFICATE-----
MIIFmDCCBICgAwIBAgISAYxjPdd1EYpsHcdG2h9SAvD1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiOTg3MjQ0NjExYjUyMzA1MzY3NDRiNmE4OWYwNDRmMzJm
NDYyZWEwHhcNMjMxMjEzMTI1NDA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMGYyYzM1NDg3ZWU5Yjg3YWFlMGMxZTdmNjA5NzdkM2QwOTQ4ZWNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYBEGiCn2/IPRjW25+9Td+Anex27
VtsShj6JfQWypHnNoIxA8D+OEEY7uP64a5sq7KKhBZ+YsoyuPtMCM78PMSpGznq3
GLJmEGvFkeE795y/YoXwyxhEc3qvOXa6Es5tF7odE99ak/0apOuDeclHN/UprohB
bUOyhNSys6fZn3bQYtI8BgjT1c0e3EoZH/x+934sVwEkcytpejxKNJH4E1p+Y4Hc
RCq2EPD1PG7DSvxklfWGiKpQ0lc7XUuCzr5V1GDhzsVxuMAYGsNLNZzTIiYhQllt
lnMWigWsQ4m20kHQO7Ht0Pt7R47nswVYN3KL5Pij7oSOZmaE5HENN8mgpQIDAQAB
o4ICpDCCAqAwHQYDVR0OBBYEFODyw1SH7puHquDB5/YJd9PQlI7KMB8GA1UdIwQY
MBaAFPuYckRhG1IwU2dEtqifBE8y9GLqMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS01aHlSR0ViVWpCVFowUzJxSjhFVHpMMFl1by5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDQvMzE5ZDdjLTdlNzYtNDMwOC1iYzAw
LWJlNTgzMmQ1ZjdhYS8xLzRQTERWSWZ1bTRlcTRNSG45Z2wzMDlDVWpzby5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNDQvMzE5ZDdjLTdlNzYtNDMwOC1iYzAwLWJlNTgzMmQ1Zjdh
YS8xLzEtNWh5UkdFYlVqQlRaMFMycUo4RVR6TDBZdW8uY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwgbcGCCsGAQUFBwEHAQH/BIGnMIGkMIGJBAIAATCBggME
BT7UwAMDA044AwQGUQdAAwQHUoeAMAsDAwFVzgMEBVXOgDAMAwQEVc6wAwQEVc7g
MAsDBAJVzvQDAwBVzjALAwMBWHYDBAVYd4AwCwMEA1h3uAMDA1hwAwMAvEUDBAXC
sCADBAXDDKADBAXDFqADBAXUL2ADBAXUOwADBAXVviAwFgQCAAIwEAMFACoAHrgD
BwEqAgEYAAAwDQYJKoZIhvcNAQELBQADggEBAHF+mGk6tzmrN/UtGD6EoVOIbDLx
TSqC5eSUuBklKfqn/wzwhgiZcyr1yDoSO/cd+lXku3pgD8xGgGAs/8vOBQaNiMcu
r/rlxg+NWnBcK02RVWVo0EMIWmVE/j4R0NKRUrxIV3pojVsRr74uKU5G6e9cxOyf
P3mG3onU4N7VUKQeZEXc5VOH1R4r/lRLYcB1GGh0oc4pJZFwNzhmGhzJytYlQTd0
OxOV6v/D9j9fGn/xeVVaf/PX3duJEiH1qtYKSZfULIFxXuJXEh2wxtm+V6FP/6ZU
BSOHz7bgBhsi8wAif7/0sVX+ZD+/E4p+gfiZa9VFq97oWISVTmOi1CoaSBE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:18 2024 by rpki-client on console-fra.rpki-client.org