Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/3kGvVX_pQFdZXeS4An9Awrym5Ys.roa
File: 3kGvVX_pQFdZXeS4An9Awrym5Ys.roa (raw, json)
Hash identifier: M3JSJWQm3zryxhjcxpgnK7ushhQrQiJp6aSZZJ2m4To=
Subject key identifier: DE:41:AF:55:7F:E9:40:57:59:5D:E4:B8:02:7F:40:C2:BC:A6:E5:8B
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 018C87A73B802C2409E92C33A9947F2EB441
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/3kGvVX_pQFdZXeS4An9Awrym5Ys.roa
Signing time: Wed 20 Dec 2023 14:35:33 +0000
ROA not before: Wed 20 Dec 2023 14:35:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48678
IP address blocks: 188.132.129.0/24 maxlen: 24
77.92.145.0/24 maxlen: 24
77.92.146.0/24 maxlen: 24
188.132.153.0/24 maxlen: 24
77.92.153.0/24 maxlen: 24
188.132.168.0/24 maxlen: 24
31.210.48.0/24 maxlen: 24
31.210.50.0/24 maxlen: 24
188.132.186.0/24 maxlen: 24
188.132.185.0/24 maxlen: 24
78.135.66.0/24 maxlen: 24
188.132.201.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:32:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:87:a7:3b:80:2c:24:09:e9:2c:33:a9:94:7f:2e:b4:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Dec 20 14:35:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=de41af557fe94057595de4b8027f40c2bca6e58b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:db:a8:c9:39:34:15:1c:87:cf:f9:c8:94:98:
4a:54:95:57:9e:40:fe:06:cc:7b:9c:2e:73:d1:c7:
75:4e:09:7a:91:44:a7:47:f6:ad:7c:80:ef:7d:17:
34:49:49:52:74:37:1f:61:2a:d5:a3:42:c6:1c:b6:
ba:a9:ee:41:49:b5:b9:e9:86:e5:b6:1b:8d:79:45:
d6:d7:47:38:d9:70:c0:b8:c5:b3:94:87:51:d5:c8:
19:61:30:48:19:62:dd:a1:97:40:02:5e:ca:3d:be:
2f:18:4e:71:4a:d8:19:df:24:6c:ad:b3:81:4d:5b:
cb:63:9c:bb:60:7e:0a:1d:3b:d9:98:b6:f3:d4:8f:
fa:c2:94:01:58:64:1d:4b:58:33:af:85:2a:c9:71:
4a:83:22:e2:95:d9:ef:a3:75:22:6e:36:b6:18:1c:
12:b4:f3:17:c6:41:68:df:4c:ac:28:e4:48:83:a5:
1c:6f:08:be:8d:cb:3b:19:3a:7b:0f:ee:4e:3e:a5:
83:23:6c:2e:ac:fb:df:55:55:29:3b:a0:0f:27:1c:
f5:58:54:94:83:11:13:ae:a0:eb:5f:9c:4f:fd:03:
7d:4c:c3:08:0f:68:e8:74:f6:20:ad:e2:34:e7:2c:
58:5c:69:bc:b0:df:79:c8:42:ec:70:37:14:cc:de:
27:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:41:AF:55:7F:E9:40:57:59:5D:E4:B8:02:7F:40:C2:BC:A6:E5:8B
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/3kGvVX_pQFdZXeS4An9Awrym5Ys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.48.0/24
31.210.50.0/24
77.92.145.0-77.92.146.255
77.92.153.0/24
78.135.66.0/24
188.132.129.0/24
188.132.153.0/24
188.132.168.0/24
188.132.185.0-188.132.186.255
188.132.201.0/24
Signature Algorithm: sha256WithRSAEncryption
56:d8:65:29:74:8b:e0:24:d0:87:c6:c7:50:e5:d1:73:7a:80:
2c:6a:1e:86:15:f3:64:4f:9e:8b:4a:64:10:db:e6:8e:40:f8:
20:bd:63:49:16:3f:b8:72:c5:b5:97:22:8c:c0:db:80:f7:b2:
95:f9:b3:b1:19:e1:55:d4:94:43:44:fa:72:56:b0:de:b0:76:
2f:c9:01:28:e3:61:37:f8:c6:19:89:9f:7b:f8:17:a2:d0:ec:
a0:c7:01:e7:38:b6:99:c2:98:7e:29:1f:0f:95:b3:32:d5:0e:
e9:4c:97:e6:52:c3:cd:ec:b2:98:05:cc:73:a0:76:e2:74:9b:
51:0e:9f:aa:82:bd:47:b5:f3:a2:2f:67:28:52:42:49:6f:a0:
91:c2:54:93:eb:c1:d1:2a:2b:d2:d3:34:61:a9:d7:fb:50:0b:
17:b4:86:5d:f3:26:a0:88:c8:a0:94:b3:80:34:f9:72:80:6b:
ff:cd:f1:68:d4:b6:f5:76:a7:f2:3b:0a:ad:0d:05:3e:7b:70:
95:76:33:c6:60:d6:b8:12:7e:05:3c:fd:1e:b5:6b:66:e5:2e:
87:3e:4c:27:55:22:fd:ba:30:be:7b:9d:47:2d:35:f6:92:c7:
e5:44:87:a5:01:d6:07:59:b0:3e:34:a1:10:00:c1:8f:36:49:
1c:ba:74:5f
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgISAYyHpzuALCQJ6SwzqZR/LrRBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx
OTJjYTIwHhcNMjMxMjIwMTQzNTMzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZTQxYWY1NTdmZTk0MDU3NTk1ZGU0YjgwMjdmNDBjMmJjYTZlNThiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9uoyTk0FRyHz/nIlJhKVJVXnkD+
Bsx7nC5z0cd1Tgl6kUSnR/atfIDvfRc0SUlSdDcfYSrVo0LGHLa6qe5BSbW56Ybl
thuNeUXW10c42XDAuMWzlIdR1cgZYTBIGWLdoZdAAl7KPb4vGE5xStgZ3yRsrbOB
TVvLY5y7YH4KHTvZmLbz1I/6wpQBWGQdS1gzr4UqyXFKgyLildnvo3Uibja2GBwS
tPMXxkFo30ysKORIg6Ucbwi+jcs7GTp7D+5OPqWDI2wurPvfVVUpO6APJxz1WFSU
gxETrqDrX5xP/QN9TMMID2jodPYgreI05yxYXGm8sN95yELscDcUzN4ncwIDAQAB
o4ICTzCCAkswHQYDVR0OBBYEFN5Br1V/6UBXWV3kuAJ/QMK8puWLMB8GA1UdIwQY
MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt
NGUxOThmMGE2MDEzLzEvM2tHdlZYX3BRRmRaWGVTNEFuOUF3cnltNVlzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz
LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGUGCCsGAQUFBwEHAQH/BFYwVDBSBAIAATBMAwQAH9IwAwQA
H9IyMAwDBABNXJEDBABNXJIDBABNXJkDBABOh0IDBAC8hIEDBAC8hJkDBAC8hKgw
DAMEALyEuQMEALyEugMEALyEyTANBgkqhkiG9w0BAQsFAAOCAQEAVthlKXSL4CTQ
h8bHUOXRc3qALGoehhXzZE+ei0pkENvmjkD4IL1jSRY/uHLFtZcijMDbgPeylfmz
sRnhVdSUQ0T6claw3rB2L8kBKONhN/jGGYmfe/gXotDsoMcB5zi2mcKYfikfD5Wz
MtUO6UyX5lLDzeyymAXMc6B24nSbUQ6fqoK9R7Xzoi9nKFJCSW+gkcJUk+vB0Sor
0tM0YanX+1ALF7SGXfMmoIjIoJSzgDT5coBr/83xaNS29Xan8jsKrQ0FPntwlXYz
xmDWuBJ+BTz9HrVrZuUuhz5MJ1Ui/bowvnudRy019pLH5USHpQHWB1mwPjShEADB
jzZJHLp0Xw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:58 2024 by rpki-client on console-ams.rpki-client.org