Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/_W6Es6gabxq5wUQqpEtlQSW9Fu4.roa
File: _W6Es6gabxq5wUQqpEtlQSW9Fu4.roa (raw, json)
Hash identifier: rPKUnEGw69ybMMDSx1iXkhqoMYaz/Yosi0tz2B0/wDw=
Subject key identifier: FD:6E:84:B3:A8:1A:6F:1A:B9:C1:44:2A:A4:4B:65:41:25:BD:16:EE
Certificate issuer: /CN=ceb86983547113359bade1f3f38104091e3a6439
Certificate serial: 0190A7378F84AAB231DE21F58D0056E0541E
Authority key identifier: CE:B8:69:83:54:71:13:35:9B:AD:E1:F3:F3:81:04:09:1E:3A:64:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zrhpg1RxEzWbreHz84EECR46ZDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/_W6Es6gabxq5wUQqpEtlQSW9Fu4.roa
Signing time: Fri 12 Jul 2024 13:52:34 +0000
ROA not before: Fri 12 Jul 2024 13:52:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8612
IP address blocks: 82.84.0.0/15 maxlen: 24
82.85.26.128/26 maxlen: 26
82.85.53.0/26 maxlen: 26
82.85.53.64/26 maxlen: 26
84.220.0.0/16 maxlen: 24
84.221.0.0/16 maxlen: 24
94.32.0.0/14 maxlen: 14
94.32.0.0/19 maxlen: 24
94.32.64.0/18 maxlen: 24
94.32.115.0/24 maxlen: 24
94.32.128.0/17 maxlen: 24
94.33.0.0/16 maxlen: 24
94.34.0.0/16 maxlen: 24
94.35.0.0/16 maxlen: 24
193.43.2.0/24 maxlen: 24
193.43.3.180/30 maxlen: 30
193.43.3.184/29 maxlen: 29
193.43.3.192/26 maxlen: 26
193.207.24.0/21 maxlen: 24
193.207.48.0/20 maxlen: 24
193.207.64.0/18 maxlen: 24
193.207.96.0/20 maxlen: 21
193.207.128.0/17 maxlen: 22
195.130.224.0/19 maxlen: 19
212.123.64.0/19 maxlen: 19
213.205.0.0/18 maxlen: 18
213.205.0.251/32 maxlen: 32
217.133.0.0/16 maxlen: 16
217.133.170.0/24 maxlen: 24
2a01:7d0::/32 maxlen: 32
2a01:7d0:4800:1::/64 maxlen: 64
2a01:7d0:4811::/64 maxlen: 64
Validation: Failed, certificate revoked on Fri 26 Jul 2024 14:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:a7:37:8f:84:aa:b2:31:de:21:f5:8d:00:56:e0:54:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ceb86983547113359bade1f3f38104091e3a6439
Validity
Not Before: Jul 12 13:52:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fd6e84b3a81a6f1ab9c1442aa44b654125bd16ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c5:b5:e5:6e:22:83:31:0b:8c:91:f7:1d:f1:
94:93:98:1b:a2:43:b5:3b:d8:fe:22:07:02:3a:6e:
9d:4a:69:01:67:83:7e:47:19:bd:75:5c:92:28:da:
f6:6e:10:40:f2:fd:66:d9:98:a3:9a:18:42:c0:31:
d4:75:a7:67:51:cd:36:1b:27:56:65:f6:3f:78:bd:
85:1e:76:f0:ce:88:df:ca:65:e9:5e:26:87:23:0f:
ea:79:6f:d8:0b:8c:65:b1:d1:38:e8:6b:2f:c2:85:
ad:2a:92:b9:fc:3e:1b:d4:a6:28:d1:fd:c5:05:01:
ae:77:fa:ff:13:b7:cd:69:74:b7:fb:45:74:d1:df:
d5:8a:2c:e0:18:45:b9:30:58:12:25:fa:41:89:32:
de:69:65:9e:f9:7e:87:98:f6:01:98:f9:21:e3:0b:
83:fe:6d:78:c5:74:70:48:ca:79:e4:4f:24:23:f9:
d4:60:6c:9d:8d:b6:26:d3:97:4c:45:ea:0d:9c:10:
70:88:45:85:98:c2:8d:1d:91:2c:37:d4:98:b1:a7:
39:2a:cb:46:72:1f:cd:29:4f:11:81:48:c9:9d:cb:
ed:02:5e:df:56:33:b4:d6:20:f8:07:66:c7:23:88:
92:c0:1c:ec:26:32:b2:bc:31:e2:5c:e8:2b:dc:e7:
c7:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:6E:84:B3:A8:1A:6F:1A:B9:C1:44:2A:A4:4B:65:41:25:BD:16:EE
X509v3 Authority Key Identifier:
keyid:CE:B8:69:83:54:71:13:35:9B:AD:E1:F3:F3:81:04:09:1E:3A:64:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zrhpg1RxEzWbreHz84EECR46ZDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/_W6Es6gabxq5wUQqpEtlQSW9Fu4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zrhpg1RxEzWbreHz84EECR46ZDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.84.0.0/15
84.220.0.0/15
94.32.0.0/14
193.43.2.0/24
193.43.3.180-193.43.3.255
193.207.24.0/21
193.207.48.0-193.207.255.255
195.130.224.0/19
212.123.64.0/19
213.205.0.0/18
217.133.0.0/16
IPv6:
2a01:7d0::/32
Signature Algorithm: sha256WithRSAEncryption
3e:bf:f2:4b:ce:cf:eb:ee:1d:df:9a:a3:fc:66:97:3f:2e:87:
c7:62:06:c5:37:ac:56:1f:4d:c5:78:2b:71:a0:09:38:be:9f:
92:36:53:c1:19:dd:6c:32:1d:14:1b:5f:75:0f:d4:12:1c:ee:
df:42:a8:6c:b8:37:2b:c1:28:71:7f:02:ba:4d:51:6b:8c:5f:
ec:60:d3:f9:15:f7:2f:e4:05:f1:70:f2:47:f6:1e:a8:44:26:
b7:f7:ad:0e:3c:c7:f5:27:8e:43:42:7b:9d:38:2a:5e:4c:67:
46:2f:bb:b9:1f:1b:54:2b:d7:4c:e3:32:71:9f:65:bc:bb:a4:
f7:16:04:c8:4c:70:b1:d4:03:1f:fb:5f:33:2d:26:81:ed:60:
78:3e:29:37:59:0f:c2:f6:93:6d:5d:bf:d6:6b:93:37:69:7d:
a1:c8:41:e3:01:2d:81:d6:23:27:2b:83:b2:d0:af:0f:2f:9a:
38:ec:8e:cb:13:a6:9d:5c:7c:7d:6f:df:56:4e:b4:32:81:0f:
07:c7:d8:f7:78:8f:72:ef:38:8c:7c:b1:e2:44:8d:67:44:7a:
40:f0:13:65:23:4d:43:ff:3a:2a:45:cb:bc:96:93:bf:e4:ff:
35:00:9b:b4:df:c6:e3:47:3c:fa:b0:f0:8b:e1:1c:d2:ea:b7:
f4:5c:28:3b
-----BEGIN CERTIFICATE-----
MIIFVDCCBDygAwIBAgISAZCnN4+EqrIx3iH1jQBW4FQeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlYjg2OTgzNTQ3MTEzMzU5YmFkZTFmM2YzODEwNDA5MWUz
YTY0MzkwHhcNMjQwNzEyMTM1MjM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZDZlODRiM2E4MWE2ZjFhYjljMTQ0MmFhNDRiNjU0MTI1YmQxNmVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3cW15W4igzELjJH3HfGUk5gbokO1
O9j+IgcCOm6dSmkBZ4N+Rxm9dVySKNr2bhBA8v1m2ZijmhhCwDHUdadnUc02GydW
ZfY/eL2FHnbwzojfymXpXiaHIw/qeW/YC4xlsdE46GsvwoWtKpK5/D4b1KYo0f3F
BQGud/r/E7fNaXS3+0V00d/ViizgGEW5MFgSJfpBiTLeaWWe+X6HmPYBmPkh4wuD
/m14xXRwSMp55E8kI/nUYGydjbYm05dMReoNnBBwiEWFmMKNHZEsN9SYsac5KstG
ch/NKU8RgUjJncvtAl7fVjO01iD4B2bHI4iSwBzsJjKyvDHiXOgr3OfHvwIDAQAB
o4ICYDCCAlwwHQYDVR0OBBYEFP1uhLOoGm8aucFEKqRLZUElvRbuMB8GA1UdIwQY
MBaAFM64aYNUcRM1m63h8/OBBAkeOmQ5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenJocGcxUnhFeldicmVIejg0RUVDUjQ2WkRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9mMzUzOWQtMzhjZC00NjVlLWE1N2Qt
ZGVlMmY2NTBkZDg2LzEvX1c2RXM2Z2FieHE1d1VRcXBFdGxRU1c5RnU0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS9mMzUzOWQtMzhjZC00NjVlLWE1N2QtZGVlMmY2NTBkZDg2
LzEvenJocGcxUnhFeldicmVIejg0RUVDUjQ2WkRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHYGCCsGAQUFBwEHAQH/BGcwZTBUBAIAATBOAwMBUlQDAwFU
3AMDAl4gAwQAwSsCMA0DBQLBKwO0AwQCwSsAAwQDwc8YMAsDBATBzzADAwTBwAME
BcOC4AMEBdR7QAMEBtXNAAMDANmFMA0EAgACMAcDBQAqAQfQMA0GCSqGSIb3DQEB
CwUAA4IBAQA+v/JLzs/r7h3fmqP8Zpc/LofHYgbFN6xWH03FeCtxoAk4vp+SNlPB
Gd1sMh0UG191D9QSHO7fQqhsuDcrwShxfwK6TVFrjF/sYNP5Ffcv5AXxcPJH9h6o
RCa3960OPMf1J45DQnudOCpeTGdGL7u5HxtUK9dM4zJxn2W8u6T3FgTITHCx1AMf
+18zLSaB7WB4Pik3WQ/C9pNtXb/Wa5M3aX2hyEHjAS2B1iMnK4Oy0K8PL5o47I7L
E6adXHx9b99WTrQygQ8Hx9j3eI9y7ziMfLHiRI1nRHpA8BNlI01D/zoqRcu8lpO/
5P81AJu038bjRzz6sPCL4RzS6rf0XCg7
-----END CERTIFICATE-----
Generated at Fri Jul 26 17:23:16 2024 by rpki-client on console-ams.rpki-client.org