Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/rNblzEIyBnoq9dRefp4gFYHkMuw.roa
File: rNblzEIyBnoq9dRefp4gFYHkMuw.roa (raw, json)
Hash identifier: /Xq6seQIsbmGzk3npcMWSp5rCusKaTJc/Bgwnf+wiv8=
Subject key identifier: AC:D6:E5:CC:42:32:06:7A:2A:F5:D4:5E:7E:9E:20:15:81:E4:32:EC
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 018D9C7A45D53C38891AB175483ECA45EB12
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/rNblzEIyBnoq9dRefp4gFYHkMuw.roa
Signing time: Mon 12 Feb 2024 08:41:15 +0000
ROA not before: Mon 12 Feb 2024 08:41:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29278
IP address blocks: 79.172.192.0/18 maxlen: 18
84.21.0.0/19 maxlen: 19
84.21.7.0/24 maxlen: 24
84.21.8.0/24 maxlen: 24
84.21.11.0/24 maxlen: 24
84.21.15.0/24 maxlen: 24
84.21.16.0/24 maxlen: 24
84.21.18.0/24 maxlen: 24
84.21.19.0/24 maxlen: 24
87.229.0.0/17 maxlen: 17
87.229.12.0/24 maxlen: 24
87.229.14.0/24 maxlen: 24
87.229.26.0/24 maxlen: 24
87.229.32.0/24 maxlen: 24
87.229.33.0/24 maxlen: 24
87.229.40.0/23 maxlen: 23
87.229.45.0/24 maxlen: 24
87.229.53.0/24 maxlen: 24
87.229.54.0/24 maxlen: 24
87.229.55.0/24 maxlen: 24
87.229.58.0/24 maxlen: 24
87.229.64.0/19 maxlen: 24
87.229.96.0/23 maxlen: 24
87.229.105.0/24 maxlen: 24
87.229.112.0/20 maxlen: 24
87.229.115.0/24 maxlen: 24
95.138.192.0/21 maxlen: 21
178.238.208.0/20 maxlen: 20
178.238.208.0/21 maxlen: 21
178.238.216.0/21 maxlen: 21
213.181.200.0/24 maxlen: 24
213.181.204.0/24 maxlen: 24
213.181.205.0/24 maxlen: 24
213.181.207.0/24 maxlen: 24
213.181.210.0/24 maxlen: 24
213.181.211.0/24 maxlen: 24
213.181.219.0/24 maxlen: 24
217.113.49.0/24 maxlen: 24
217.113.50.0/24 maxlen: 24
217.113.51.0/24 maxlen: 24
217.113.53.0/24 maxlen: 24
217.113.61.0/24 maxlen: 24
217.113.63.0/24 maxlen: 24
217.144.48.0/23 maxlen: 23
217.144.50.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 13 Feb 2024 10:20:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:9c:7a:45:d5:3c:38:89:1a:b1:75:48:3e:ca:45:eb:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Feb 12 08:41:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=acd6e5cc4232067a2af5d45e7e9e201581e432ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:78:67:ec:f7:de:9a:37:b2:28:63:bd:d7:c1:
b5:2b:4e:54:fd:d5:6b:04:ce:96:83:58:4f:32:15:
f5:fb:c4:01:23:41:94:91:89:d9:6f:80:f9:84:f8:
e3:ad:b6:fd:48:66:2c:99:66:7f:82:33:88:67:29:
5e:5b:66:52:bb:5f:84:b7:c9:14:77:95:23:6f:20:
ce:af:ed:05:c3:eb:24:f0:5e:31:01:f2:52:76:01:
48:5c:2a:32:b2:fc:6a:79:bf:9e:32:a5:32:05:68:
99:89:b6:85:a6:bc:d0:e6:71:73:62:90:87:03:ff:
f4:58:86:d7:03:bc:47:99:98:a2:7f:7e:08:d8:2a:
14:74:1b:6b:ba:ad:7b:c3:7b:87:f6:9f:81:d6:40:
b3:d9:11:24:70:36:f2:8a:5b:8d:6e:0d:69:de:f1:
2e:a4:16:ad:47:44:76:eb:92:10:da:5c:da:9b:2f:
20:3d:53:8c:5b:1d:69:d0:ce:e4:3c:62:2a:69:1c:
b3:96:22:73:15:8f:55:a2:54:f3:eb:f4:0a:ae:42:
de:8e:98:e4:bf:28:11:16:b4:c3:e2:60:7d:93:f1:
20:0a:b0:2d:7f:12:a8:d6:f7:72:64:52:51:f6:09:
c3:10:51:cb:94:64:f1:77:99:65:e8:69:a0:0b:3e:
57:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:D6:E5:CC:42:32:06:7A:2A:F5:D4:5E:7E:9E:20:15:81:E4:32:EC
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/rNblzEIyBnoq9dRefp4gFYHkMuw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.192.0/18
84.21.0.0/19
87.229.0.0/17
95.138.192.0/21
178.238.208.0/20
213.181.200.0/24
213.181.204.0/23
213.181.207.0/24
213.181.210.0/23
213.181.219.0/24
217.113.49.0-217.113.51.255
217.113.53.0/24
217.113.61.0/24
217.113.63.0/24
217.144.48.0-217.144.50.255
Signature Algorithm: sha256WithRSAEncryption
39:42:6d:0f:02:4e:95:1a:fc:ee:f6:a9:a3:75:20:29:6b:ef:
d1:4c:e8:5a:38:8c:17:07:53:e5:59:e8:04:6f:f1:35:c9:0e:
71:33:7b:2d:12:f5:e3:5f:0d:0e:17:09:9a:87:c1:0b:06:8e:
ff:22:26:f7:2f:cc:d5:13:cc:00:a2:b1:ec:b4:24:06:62:8c:
d9:75:3b:1e:fa:20:26:29:54:4b:f3:52:be:fd:7c:ce:02:46:
3b:15:57:14:24:76:f1:e4:22:e4:a2:14:0f:ff:92:81:1e:88:
f7:5e:1f:de:85:b0:d3:d6:74:4d:d4:1d:0e:06:89:f6:4c:f0:
a8:01:a0:7c:b0:83:e6:74:8c:34:b6:e9:3a:cb:e5:5d:9b:c8:
2c:ea:bb:dd:b2:a2:1e:e4:83:61:6d:5e:e8:db:e6:9a:36:42:
e2:8b:f5:e1:4f:d1:78:13:18:4c:bc:3a:0e:a5:2b:9c:06:c7:
0f:4c:5d:ab:f0:9e:5f:bf:01:68:21:05:ad:1a:1f:c0:f3:66:
43:51:11:c1:b5:cc:8d:1c:a9:33:65:d5:ed:0e:56:25:da:4a:
e2:16:95:35:bb:a4:99:fd:f7:03:a1:8d:3a:e5:ac:81:19:eb:
d0:ba:7c:67:34:b9:98:e3:0b:46:84:73:dc:4d:ae:a2:17:94:
66:2e:ef:ed
-----BEGIN CERTIFICATE-----
MIIFYjCCBEqgAwIBAgISAY2cekXVPDiJGrF1SD7KResSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2
NDI0OTcwHhcNMjQwMjEyMDg0MTE1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhY2Q2ZTVjYzQyMzIwNjdhMmFmNWQ0NWU3ZTllMjAxNTgxZTQzMmVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA63hn7PfemjeyKGO918G1K05U/dVr
BM6Wg1hPMhX1+8QBI0GUkYnZb4D5hPjjrbb9SGYsmWZ/gjOIZyleW2ZSu1+Et8kU
d5UjbyDOr+0Fw+sk8F4xAfJSdgFIXCoysvxqeb+eMqUyBWiZibaFprzQ5nFzYpCH
A//0WIbXA7xHmZiif34I2CoUdBtruq17w3uH9p+B1kCz2REkcDbyiluNbg1p3vEu
pBatR0R265IQ2lzamy8gPVOMWx1p0M7kPGIqaRyzliJzFY9VolTz6/QKrkLejpjk
vygRFrTD4mB9k/EgCrAtfxKo1vdyZFJR9gnDEFHLlGTxd5ll6GmgCz5XBwIDAQAB
o4ICbjCCAmowHQYDVR0OBBYEFKzW5cxCMgZ6KvXUXn6eIBWB5DLsMB8GA1UdIwQY
MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt
OTU5M2E0ODhhZmNjLzEvck5ibHpFSXlCbm9xOWRSZWZwNGdGWUhrTXV3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj
LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGDBggrBgEFBQcBBwEB/wR0MHIwcAQCAAEwagMEBk+swAME
BVQVAAMEB1flAAMEA1+KwAMEBLLu0AMEANW1yAMEAdW1zAMEANW1zwMEAdW10gME
ANW12zAMAwQA2XExAwQC2XEwAwQA2XE1AwQA2XE9AwQA2XE/MAwDBATZkDADBADZ
kDIwDQYJKoZIhvcNAQELBQADggEBADlCbQ8CTpUa/O72qaN1IClr79FM6Fo4jBcH
U+VZ6ARv8TXJDnEzey0S9eNfDQ4XCZqHwQsGjv8iJvcvzNUTzACisey0JAZijNl1
Ox76ICYpVEvzUr79fM4CRjsVVxQkdvHkIuSiFA//koEeiPdeH96FsNPWdE3UHQ4G
ifZM8KgBoHywg+Z0jDS26TrL5V2byCzqu92yoh7kg2FtXujb5po2QuKL9eFP0XgT
GEy8Og6lK5wGxw9MXavwnl+/AWghBa0aH8DzZkNREcG1zI0cqTNl1e0OViXaSuIW
lTW7pJn99wOhjTrlrIEZ69C6fGc0uZjjC0aEc9xNrqIXlGYu7+0=
-----END CERTIFICATE-----
Generated at Tue Feb 13 14:35:33 2024 by rpki-client on console-ams.rpki-client.org