Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/32UJTTj8bmhv4FnhIUEeJucxPpg.roa
File: 32UJTTj8bmhv4FnhIUEeJucxPpg.roa (raw, json)
Hash identifier: 0tulucD1fq8qXLWewQpt9kRI6IMexTADWTFE6K+xiGc=
Subject key identifier: DF:65:09:4D:38:FC:6E:68:6F:E0:59:E1:21:41:1E:26:E7:31:3E:98
Certificate issuer: /CN=1c5c72ee422c61667e3056de6b3ffce034305175
Certificate serial: 01856C4A53A258E60990AB97F79F5276AC15
Authority key identifier: 1C:5C:72:EE:42:2C:61:66:7E:30:56:DE:6B:3F:FC:E0:34:30:51:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HFxy7kIsYWZ-MFbeaz_84DQwUXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/32UJTTj8bmhv4FnhIUEeJucxPpg.roa
Signing time: Sun 01 Jan 2023 07:44:48 +0000
ROA not before: Sun 01 Jan 2023 07:44:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50556
IP address blocks: 95.66.232.0/22 maxlen: 22
95.66.236.0/24 maxlen: 24
95.66.175.0/24 maxlen: 24
95.66.178.0/24 maxlen: 24
95.66.179.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:4a:53:a2:58:e6:09:90:ab:97:f7:9f:52:76:ac:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c5c72ee422c61667e3056de6b3ffce034305175
Validity
Not Before: Jan 1 07:44:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=df65094d38fc6e686fe059e121411e26e7313e98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:43:cc:fa:a0:be:90:ac:68:1a:6d:a7:92:91:
95:9a:6d:35:ae:02:be:40:c9:53:55:25:07:77:16:
27:6f:35:0c:25:3e:79:9c:e8:83:5b:ab:9f:a5:11:
52:bd:a7:b9:ab:40:42:3a:f2:01:8b:57:fa:a5:8d:
eb:59:c9:af:1d:10:46:7e:e7:8f:08:d2:67:da:3c:
46:86:a7:f3:db:23:49:e6:04:69:ad:00:2f:5a:a7:
69:cd:f1:cd:66:5c:2e:ab:85:77:6a:19:e9:a8:4c:
a8:05:16:5e:65:ab:8a:57:92:44:21:b6:14:64:27:
fb:8d:cb:d8:8d:21:ce:0e:7f:e7:0a:fe:47:b8:ae:
36:c3:0f:53:40:18:03:17:70:82:93:84:0a:b2:17:
98:41:1c:fc:c0:85:7c:b6:51:29:55:f7:7a:46:b3:
21:d7:c4:0f:48:83:47:76:5c:67:d5:2c:dc:66:3f:
a6:94:32:19:a6:42:c8:24:aa:99:9d:6a:6d:a9:8e:
84:c1:6f:e9:67:e5:82:54:7a:35:6d:5f:4e:66:05:
01:4b:92:3c:2e:0f:72:fb:69:0e:db:f2:db:33:b8:
27:68:a9:60:b3:54:08:e1:d3:49:e8:d2:14:b9:4e:
92:7f:27:3a:5d:96:0b:27:5a:3d:e4:f5:58:65:36:
7e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:65:09:4D:38:FC:6E:68:6F:E0:59:E1:21:41:1E:26:E7:31:3E:98
X509v3 Authority Key Identifier:
keyid:1C:5C:72:EE:42:2C:61:66:7E:30:56:DE:6B:3F:FC:E0:34:30:51:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HFxy7kIsYWZ-MFbeaz_84DQwUXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/32UJTTj8bmhv4FnhIUEeJucxPpg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/HFxy7kIsYWZ-MFbeaz_84DQwUXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.66.175.0/24
95.66.178.0/23
95.66.232.0-95.66.236.255
Signature Algorithm: sha256WithRSAEncryption
c5:c1:00:65:8c:b9:32:5a:d8:28:00:1a:fd:77:a4:24:ed:85:
a8:ca:9e:bf:db:e2:7c:f7:e1:85:f7:59:50:9f:cd:f2:a3:b3:
59:6a:bf:cb:85:a6:d0:db:95:0b:59:bd:e6:52:87:59:50:eb:
76:0d:fd:1c:03:1c:ea:1b:bd:05:4d:02:a8:e1:7d:a2:c3:0c:
11:4e:77:22:8c:9c:21:8a:bb:6d:1d:6a:61:53:25:d7:61:b7:
3f:7c:a6:19:f0:00:3f:d9:2f:1e:bb:c2:fd:a0:06:dc:97:d7:
aa:05:23:10:e2:34:f1:d4:bf:98:4c:a1:90:6c:57:39:39:92:
45:a5:0e:b0:a9:73:48:46:ca:a0:52:5a:66:50:05:eb:6c:0a:
78:96:c9:11:96:3f:17:48:ec:7c:9a:a6:2a:ba:8c:63:e8:b6:
f3:b5:f1:73:64:d8:71:aa:7a:9a:2a:27:46:6a:19:b8:34:5d:
04:0e:0e:5c:12:6c:cc:7c:79:b3:2e:37:88:80:32:45:04:18:
34:b6:5a:f1:c3:f2:a7:00:66:8c:26:7e:9e:45:1c:c9:6c:dc:
fd:70:3b:8d:90:a7:06:8b:17:89:61:c8:1b:91:e8:83:92:16:
6c:fa:d3:55:92:9f:c7:5c:6e:48:12:6b:8a:4c:a2:b7:cf:bf:
f2:3b:ba:8f
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAYVsSlOiWOYJkKuX959SdqwVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjNWM3MmVlNDIyYzYxNjY3ZTMwNTZkZTZiM2ZmY2UwMzQz
MDUxNzUwHhcNMjMwMTAxMDc0NDQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZjY1MDk0ZDM4ZmM2ZTY4NmZlMDU5ZTEyMTQxMWUyNmU3MzEzZTk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkPM+qC+kKxoGm2nkpGVmm01rgK+
QMlTVSUHdxYnbzUMJT55nOiDW6ufpRFSvae5q0BCOvIBi1f6pY3rWcmvHRBGfueP
CNJn2jxGhqfz2yNJ5gRprQAvWqdpzfHNZlwuq4V3ahnpqEyoBRZeZauKV5JEIbYU
ZCf7jcvYjSHODn/nCv5HuK42ww9TQBgDF3CCk4QKsheYQRz8wIV8tlEpVfd6RrMh
18QPSINHdlxn1SzcZj+mlDIZpkLIJKqZnWptqY6EwW/pZ+WCVHo1bV9OZgUBS5I8
Lg9y+2kO2/LbM7gnaKlgs1QI4dNJ6NIUuU6Sfyc6XZYLJ1o95PVYZTZ+hwIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFN9lCU04/G5ob+BZ4SFBHibnMT6YMB8GA1UdIwQY
MBaAFBxccu5CLGFmfjBW3ms//OA0MFF1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEZ4eTdrSXNZV1otTUZiZWF6Xzg0RFF3VVhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9lMDhkMGUtZWU0Yy00YWUxLTllMGIt
MTI3OGE0MmUwOTJhLzEvMzJVSlRUajhibWh2NEZuaElVRWVKdWN4UHBnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9lMDhkMGUtZWU0Yy00YWUxLTllMGItMTI3OGE0MmUwOTJh
LzEvSEZ4eTdrSXNZV1otTUZiZWF6Xzg0RFF3VVhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQAX0KvAwQB
X0KyMAwDBANfQugDBABfQuwwDQYJKoZIhvcNAQELBQADggEBAMXBAGWMuTJa2CgA
Gv13pCTthajKnr/b4nz34YX3WVCfzfKjs1lqv8uFptDblQtZveZSh1lQ63YN/RwD
HOobvQVNAqjhfaLDDBFOdyKMnCGKu20damFTJddhtz98phnwAD/ZLx67wv2gBtyX
16oFIxDiNPHUv5hMoZBsVzk5kkWlDrCpc0hGyqBSWmZQBetsCniWyRGWPxdI7Hya
piq6jGPotvO18XNk2HGqepoqJ0ZqGbg0XQQODlwSbMx8ebMuN4iAMkUEGDS2WvHD
8qcAZowmfp5FHMls3P1wO42QpwaLF4lhyBuR6IOSFmz601WSn8dcbkgSa4pMorfP
v/I7uo8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:23 2024 by rpki-client on console-ams.rpki-client.org