Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/Ick3kpxmfXpg2IOJVQjSBM1tpvE.roa
File: Ick3kpxmfXpg2IOJVQjSBM1tpvE.roa (raw, json)
Hash identifier: ws7xL9PdawQQncsU062c6ltpAABoJpIdham3TCHT8ig=
Subject key identifier: 21:C9:37:92:9C:66:7D:7A:60:D8:83:89:55:08:D2:04:CD:6D:A6:F1
Certificate issuer: /CN=8d11cb015df9baab61228dbbce17dd4e00e63c13
Certificate serial: 0193E2C5F475C81BB9D60B4E4D284C6712B9
Authority key identifier: 8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/Ick3kpxmfXpg2IOJVQjSBM1tpvE.roa
Signing time: Fri 20 Dec 2024 06:34:04 +0000
ROA not before: Fri 20 Dec 2024 06:34:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9009
IP address blocks: 158.46.132.0/22 maxlen: 22
158.46.136.0/21 maxlen: 21
158.46.144.0/20 maxlen: 24
158.46.148.0/24 maxlen: 24
158.46.152.0/24 maxlen: 24
158.46.156.0/24 maxlen: 24
158.46.158.0/24 maxlen: 24
158.46.160.0/23 maxlen: 23
158.46.164.0/22 maxlen: 22
158.46.168.0/21 maxlen: 21
158.46.184.0/23 maxlen: 23
158.46.186.0/23 maxlen: 23
158.46.188.0/22 maxlen: 24
158.46.204.0/24 maxlen: 24
158.46.205.0/24 maxlen: 24
158.46.207.0/24 maxlen: 24
178.171.20.0/22 maxlen: 24
178.171.36.0/23 maxlen: 23
178.171.86.0/24 maxlen: 24
178.171.103.0/24 maxlen: 24
178.171.105.0/24 maxlen: 24
178.171.106.0/23 maxlen: 23
178.171.108.0/23 maxlen: 23
178.171.112.0/23 maxlen: 23
178.171.114.0/23 maxlen: 23
178.171.116.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 02 Jan 2025 05:48:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:e2:c5:f4:75:c8:1b:b9:d6:0b:4e:4d:28:4c:67:12:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d11cb015df9baab61228dbbce17dd4e00e63c13
Validity
Not Before: Dec 20 06:34:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=21c937929c667d7a60d883895508d204cd6da6f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8f:06:fa:7e:9e:03:b3:b1:f3:53:49:9d:88:
78:e5:85:d1:b4:a5:88:de:e6:bd:60:fd:21:e8:64:
79:0a:60:4d:99:93:44:92:be:60:63:d3:b9:17:18:
3b:c9:d7:09:e6:54:a7:c7:99:43:ad:35:85:1e:40:
78:d2:ea:29:63:6d:3e:1e:63:3e:61:fe:f9:c5:29:
5b:0f:ae:4b:4f:63:5f:51:f6:67:de:17:7d:81:4b:
28:91:84:38:92:a3:40:b4:68:f1:29:45:d1:81:e4:
1e:c9:c0:1c:90:b9:ac:81:45:f3:ed:c5:88:ce:28:
17:3f:11:7b:2f:49:a7:73:f0:cf:80:0e:f8:6e:fc:
8f:c7:1c:a3:ce:65:4f:05:fd:49:b6:89:90:fb:08:
42:c2:62:9f:47:6e:30:b8:79:f6:d4:fc:32:45:2f:
88:02:b3:a7:39:e6:7d:be:d4:3b:c8:7e:2d:a6:51:
47:48:d5:cd:ce:28:2a:dc:b9:0d:fa:b9:c5:2f:05:
c1:83:b6:c7:43:0a:2e:52:8b:eb:4f:e4:8b:bd:5a:
23:59:38:38:70:f9:76:06:6c:95:4c:13:11:71:12:
f1:be:ba:b8:a0:20:fc:98:b2:a3:02:22:d3:bc:88:
02:a5:ad:5a:d9:ef:e5:57:d8:29:a6:ff:fa:c2:6c:
ee:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:C9:37:92:9C:66:7D:7A:60:D8:83:89:55:08:D2:04:CD:6D:A6:F1
X509v3 Authority Key Identifier:
keyid:8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/Ick3kpxmfXpg2IOJVQjSBM1tpvE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.46.132.0-158.46.161.255
158.46.164.0-158.46.175.255
158.46.184.0/21
158.46.204.0/23
158.46.207.0/24
178.171.20.0/22
178.171.36.0/23
178.171.86.0/24
178.171.103.0/24
178.171.105.0-178.171.109.255
178.171.112.0-178.171.117.255
Signature Algorithm: sha256WithRSAEncryption
01:f6:a0:78:11:e0:0b:17:fe:2c:15:19:94:6c:5b:ed:fd:9a:
5a:65:a1:d2:fc:30:a6:5e:03:f9:d6:0a:5d:2d:cf:46:db:7a:
af:fc:a6:74:63:c9:ff:39:7d:9a:f3:92:05:88:0e:68:ac:be:
4d:6f:5f:54:8a:95:7a:7b:55:0b:f7:53:d4:6a:89:d4:4f:76:
f5:1f:8c:0f:49:50:e9:a1:ef:db:27:a5:da:0e:c7:c3:43:70:
81:5d:dc:d4:09:75:a1:7e:d7:a6:ae:e1:cc:1d:34:e2:b9:cd:
fa:16:b9:b7:cd:37:a4:94:86:9b:26:ae:21:60:c0:54:2d:80:
8a:99:6b:0d:e6:9c:10:60:84:c8:3c:93:c0:85:f7:ad:73:a2:
7a:c1:a6:01:b1:22:66:f3:6e:f3:aa:7e:0d:8c:9f:62:67:88:
4d:ba:8c:32:5c:8f:bb:13:9e:08:25:87:1d:9e:b6:51:32:f0:
3b:8f:26:40:e8:9b:e9:61:52:e4:d3:69:87:36:33:aa:10:59:
94:fd:fe:ae:31:a8:50:5d:d0:57:21:b8:bb:bc:ab:ff:2c:10:
6a:c1:37:42:f6:20:a4:5c:ee:2d:24:0a:1b:a2:b0:24:83:aa:
ec:e1:ee:8a:5e:df:08:08:ae:b7:72:2d:e8:c9:22:33:36:ff:
b8:42:f5:4c
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgISAZPixfR1yBu51gtOTShMZxK5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkMTFjYjAxNWRmOWJhYWI2MTIyOGRiYmNlMTdkZDRlMDBl
NjNjMTMwHhcNMjQxMjIwMDYzNDA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMWM5Mzc5MjljNjY3ZDdhNjBkODgzODk1NTA4ZDIwNGNkNmRhNmYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAto8G+n6eA7Ox81NJnYh45YXRtKWI
3ua9YP0h6GR5CmBNmZNEkr5gY9O5Fxg7ydcJ5lSnx5lDrTWFHkB40uopY20+HmM+
Yf75xSlbD65LT2NfUfZn3hd9gUsokYQ4kqNAtGjxKUXRgeQeycAckLmsgUXz7cWI
zigXPxF7L0mnc/DPgA74bvyPxxyjzmVPBf1JtomQ+whCwmKfR24wuHn21PwyRS+I
ArOnOeZ9vtQ7yH4tplFHSNXNzigq3LkN+rnFLwXBg7bHQwouUovrT+SLvVojWTg4
cPl2BmyVTBMRcRLxvrq4oCD8mLKjAiLTvIgCpa1a2e/lV9gppv/6wmzupwIDAQAB
o4ICZTCCAmEwHQYDVR0OBBYEFCHJN5KcZn16YNiDiVUI0gTNbabxMB8GA1UdIwQY
MBaAFI0RywFd+bqrYSKNu84X3U4A5jwTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalJITEFWMzV1cXRoSW8yN3poZmRUZ0RtUEJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni81ZDg5MTUtYzQ0OC00MGU3LThjYWEt
YmE3NzFmZmQyNjljLzEvSWNrM2tweG1mWHBnMklPSlZRalNCTTF0cHZFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni81ZDg5MTUtYzQ0OC00MGU3LThjYWEtYmE3NzFmZmQyNjlj
LzEvalJITEFWMzV1cXRoSW8yN3poZmRUZ0RtUEJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHsGCCsGAQUFBwEHAQH/BGwwajBoBAIAATBiMAwDBAKeLoQD
BAGeLqAwDAMEAp4upAMEBJ4uoAMEA54uuAMEAZ4uzAMEAJ4uzwMEArKrFAMEAbKr
JAMEALKrVgMEALKrZzAMAwQAsqtpAwQBsqtsMAwDBASyq3ADBAGyq3QwDQYJKoZI
hvcNAQELBQADggEBAAH2oHgR4AsX/iwVGZRsW+39mlplodL8MKZeA/nWCl0tz0bb
eq/8pnRjyf85fZrzkgWIDmisvk1vX1SKlXp7VQv3U9RqidRPdvUfjA9JUOmh79sn
pdoOx8NDcIFd3NQJdaF+16au4cwdNOK5zfoWubfNN6SUhpsmriFgwFQtgIqZaw3m
nBBghMg8k8CF961zonrBpgGxImbzbvOqfg2Mn2JniE26jDJcj7sTngglhx2etlEy
8DuPJkDom+lhUuTTaYc2M6oQWZT9/q4xqFBd0FchuLu8q/8sEGrBN0L2IKRc7i0k
ChuisCSDquzh7ope3wgIrrdyLejJIjM2/7hC9Uw=
-----END CERTIFICATE-----
Generated at Fri Apr 18 02:06:31 2025 by rpki-client