Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/6a3215-6b62-4363-9abc-7a54db59ec2d/1/lQ0hMrvrUTkkXVsyKHjNMHy7lkk.roa
File: lQ0hMrvrUTkkXVsyKHjNMHy7lkk.roa (raw, json)
Hash identifier: yCP9+DdnAV6Mdz2gQqi8tJEkXFo2UxplxYtFcqmLub4=
Subject key identifier: 95:0D:21:32:BB:EB:51:39:24:5D:5B:32:28:78:CD:30:7C:BB:96:49
Certificate issuer: /CN=46bb8215b2266da3c0f6ca55cc7ba800e9ade2a2
Certificate serial: 018571FA028DAC599F2FC68D72D5B2515CFE
Authority key identifier: 46:BB:82:15:B2:26:6D:A3:C0:F6:CA:55:CC:7B:A8:00:E9:AD:E2:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RruCFbImbaPA9spVzHuoAOmt4qI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/6a3215-6b62-4363-9abc-7a54db59ec2d/1/lQ0hMrvrUTkkXVsyKHjNMHy7lkk.roa
Signing time: Mon 02 Jan 2023 10:14:48 +0000
ROA not before: Mon 02 Jan 2023 10:14:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29695
IP address blocks: 213.167.96.0/19 maxlen: 19
141.0.64.0/18 maxlen: 18
92.220.0.0/15 maxlen: 21
109.247.0.0/16 maxlen: 21
45.14.52.0/22 maxlen: 22
84.234.128.0/17 maxlen: 24
79.160.0.0/15 maxlen: 24
80.203.0.0/17 maxlen: 17
89.11.128.0/17 maxlen: 17
81.166.0.0/15 maxlen: 24
2a01:798::/29 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:fa:02:8d:ac:59:9f:2f:c6:8d:72:d5:b2:51:5c:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46bb8215b2266da3c0f6ca55cc7ba800e9ade2a2
Validity
Not Before: Jan 2 10:14:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=950d2132bbeb5139245d5b322878cd307cbb9649
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:4f:ff:46:f6:e8:ca:8d:59:20:44:bc:07:a0:
83:04:15:a2:2a:8a:3c:fb:fd:fe:13:64:d9:2a:3e:
14:d2:76:16:8a:65:31:a2:46:8f:0f:7f:81:ef:e5:
94:a9:b8:ac:ad:89:af:16:1f:b1:c4:41:af:e6:f1:
f2:84:b8:eb:c6:8c:9e:27:93:04:b8:4e:27:61:5d:
87:2e:a7:fb:95:95:7e:9b:58:5b:6a:a1:6e:10:4c:
3e:42:12:0b:de:64:5e:2d:10:4f:ae:3c:00:29:48:
8f:74:16:d3:01:6c:be:e7:6c:82:34:85:12:fa:16:
b6:5e:49:42:52:cb:46:38:46:f7:1b:ac:d3:6f:cc:
8c:f1:40:23:be:60:39:59:98:36:78:6c:04:35:0f:
14:98:be:0b:a1:08:3a:ef:24:9b:e1:7e:c3:7a:0a:
fc:07:30:c6:84:62:e1:06:3f:86:01:9d:d3:c2:3d:
df:5d:95:a4:45:1e:2e:c9:9e:62:47:5f:29:23:d2:
fa:11:3a:20:88:da:b1:22:b5:7e:3e:46:58:2b:c7:
a2:e8:0b:4e:aa:6b:fa:f7:d4:c3:50:6a:73:dc:ba:
05:20:8a:7d:28:10:9b:6b:00:e5:db:0b:ad:d9:aa:
66:06:55:06:3a:f7:fe:37:33:d0:b5:d0:f2:cf:2f:
d8:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:0D:21:32:BB:EB:51:39:24:5D:5B:32:28:78:CD:30:7C:BB:96:49
X509v3 Authority Key Identifier:
keyid:46:BB:82:15:B2:26:6D:A3:C0:F6:CA:55:CC:7B:A8:00:E9:AD:E2:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RruCFbImbaPA9spVzHuoAOmt4qI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/6a3215-6b62-4363-9abc-7a54db59ec2d/1/lQ0hMrvrUTkkXVsyKHjNMHy7lkk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/6a3215-6b62-4363-9abc-7a54db59ec2d/1/RruCFbImbaPA9spVzHuoAOmt4qI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.52.0/22
79.160.0.0/15
80.203.0.0/17
81.166.0.0/15
84.234.128.0/17
89.11.128.0/17
92.220.0.0/15
109.247.0.0/16
141.0.64.0/18
213.167.96.0/19
IPv6:
2a01:798::/29
Signature Algorithm: sha256WithRSAEncryption
b3:1e:4a:8a:2c:bb:34:a3:d7:0b:bf:6f:ed:40:de:b4:50:9e:
8e:87:46:63:fc:5f:f9:7c:c3:bf:33:ac:7b:2f:70:60:f6:95:
bc:bf:03:89:0b:13:29:f8:c1:7f:8f:27:ec:72:b1:7d:02:ce:
e3:e9:73:c9:cc:7a:13:b0:7c:02:38:cb:bf:33:21:50:e7:bd:
60:8b:0a:ce:01:98:e1:14:ba:b2:c4:ca:a2:d6:dc:08:81:4c:
d9:c1:35:a1:9b:a2:25:54:02:c0:9a:68:47:a0:77:d7:ed:19:
85:b7:c5:1f:3f:b7:4f:0b:fc:2a:07:fc:e1:f5:cc:76:c0:c6:
36:ed:a6:ba:24:d8:06:48:36:c4:ee:9e:0b:2e:1a:c6:59:1d:
bd:75:dc:c2:87:92:b4:5a:a4:89:1c:e0:a1:2e:72:4f:19:7b:
68:50:f8:f2:8c:73:ba:43:22:a8:22:19:86:21:bf:fa:7e:e1:
d9:5b:07:63:19:3e:5d:b2:30:db:e2:4a:1b:8b:ba:f2:87:7c:
43:77:c3:df:c1:de:55:4c:8e:a8:7e:44:67:09:4e:1e:5a:d1:
b3:1e:f3:fe:9f:20:86:af:92:f6:f2:99:89:95:03:84:71:af:
65:b1:78:00:c5:f3:36:62:5b:d8:9f:0d:c3:a6:c2:81:2d:75:
d5:a2:8e:5c
-----BEGIN CERTIFICATE-----
MIIFPjCCBCagAwIBAgISAYVx+gKNrFmfL8aNctWyUVz+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2YmI4MjE1YjIyNjZkYTNjMGY2Y2E1NWNjN2JhODAwZTlh
ZGUyYTIwHhcNMjMwMTAyMTAxNDQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NTBkMjEzMmJiZWI1MTM5MjQ1ZDViMzIyODc4Y2QzMDdjYmI5NjQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjU//Rvboyo1ZIES8B6CDBBWiKoo8
+/3+E2TZKj4U0nYWimUxokaPD3+B7+WUqbisrYmvFh+xxEGv5vHyhLjrxoyeJ5ME
uE4nYV2HLqf7lZV+m1hbaqFuEEw+QhIL3mReLRBPrjwAKUiPdBbTAWy+52yCNIUS
+ha2XklCUstGOEb3G6zTb8yM8UAjvmA5WZg2eGwENQ8UmL4LoQg67ySb4X7Degr8
BzDGhGLhBj+GAZ3Twj3fXZWkRR4uyZ5iR18pI9L6ETogiNqxIrV+PkZYK8ei6AtO
qmv699TDUGpz3LoFIIp9KBCbawDl2wut2apmBlUGOvf+NzPQtdDyzy/YUwIDAQAB
o4ICSjCCAkYwHQYDVR0OBBYEFJUNITK761E5JF1bMih4zTB8u5ZJMB8GA1UdIwQY
MBaAFEa7ghWyJm2jwPbKVcx7qADpreKiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnJ1Q0ZiSW1iYVBBOXNwVnpIdW9BT210NHFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny82YTMyMTUtNmI2Mi00MzYzLTlhYmMt
N2E1NGRiNTllYzJkLzEvbFEwaE1ydnJVVGtrWFZzeUtIak5NSHk3bGtrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny82YTMyMTUtNmI2Mi00MzYzLTlhYmMtN2E1NGRiNTllYzJk
LzEvUnJ1Q0ZiSW1iYVBBOXNwVnpIdW9BT210NHFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGAGCCsGAQUFBwEHAQH/BFEwTzA+BAIAATA4AwQCLQ40AwMB
T6ADBAdQywADAwFRpgMEB1TqgAMEB1kLgAMDAVzcAwMAbfcDBAaNAEADBAXVp2Aw
DQQCAAIwBwMFAyoBB5gwDQYJKoZIhvcNAQELBQADggEBALMeSoosuzSj1wu/b+1A
3rRQno6HRmP8X/l8w78zrHsvcGD2lby/A4kLEyn4wX+PJ+xysX0CzuPpc8nMehOw
fAI4y78zIVDnvWCLCs4BmOEUurLEyqLW3AiBTNnBNaGboiVUAsCaaEegd9ftGYW3
xR8/t08L/CoH/OH1zHbAxjbtprok2AZINsTungsuGsZZHb113MKHkrRapIkc4KEu
ck8Ze2hQ+PKMc7pDIqgiGYYhv/p+4dlbB2MZPl2yMNviShuLuvKHfEN3w9/B3lVM
jqh+RGcJTh5a0bMe8/6fIIavkvbymYmVA4Rxr2WxeADF8zZiW9ifDcOmwoEtddWi
jlw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:46 2024 by rpki-client on console-fra.rpki-client.org