Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/OSwvT0_iueqi3SRfuef5Z9vgrg4.roa
File: OSwvT0_iueqi3SRfuef5Z9vgrg4.roa (raw, json)
Hash identifier: FacvF1MSTff4NheZXRvwm9STggNeqtmEUm/oOn1FOpM=
Subject key identifier: 39:2C:2F:4F:4F:E2:B9:EA:A2:DD:24:5F:B9:E7:F9:67:DB:E0:AE:0E
Certificate issuer: /CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86
Certificate serial: 0191318AF183824D60DAD095F1AD3C96BC79
Authority key identifier: E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/OSwvT0_iueqi3SRfuef5Z9vgrg4.roa
Signing time: Thu 08 Aug 2024 10:31:14 +0000
ROA not before: Thu 08 Aug 2024 10:31:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48851
IP address blocks: 92.61.228.0/24 maxlen: 24
92.61.230.0/24 maxlen: 24
92.61.231.0/24 maxlen: 24
92.61.232.0/24 maxlen: 24
92.61.236.0/24 maxlen: 24
92.61.237.0/24 maxlen: 24
92.61.238.0/24 maxlen: 24
94.188.137.0/24 maxlen: 24
94.188.194.0/24 maxlen: 24
94.188.201.0/24 maxlen: 24
94.188.202.0/24 maxlen: 24
94.188.203.0/24 maxlen: 24
94.188.205.0/24 maxlen: 24
94.188.206.0/24 maxlen: 24
94.188.207.0/24 maxlen: 24
94.188.208.0/24 maxlen: 24
94.188.209.0/24 maxlen: 24
94.188.210.0/24 maxlen: 24
94.188.211.0/24 maxlen: 24
94.188.212.0/24 maxlen: 24
94.188.214.0/24 maxlen: 24
94.188.215.0/24 maxlen: 24
94.188.216.0/24 maxlen: 24
94.188.222.0/24 maxlen: 24
94.188.223.0/24 maxlen: 24
94.188.224.0/24 maxlen: 24
94.188.225.0/24 maxlen: 24
94.188.226.0/24 maxlen: 24
94.188.227.0/24 maxlen: 24
94.188.228.0/24 maxlen: 24
94.188.229.0/24 maxlen: 24
94.188.230.0/24 maxlen: 24
94.188.231.0/24 maxlen: 24
94.188.232.0/24 maxlen: 24
94.188.233.0/24 maxlen: 24
94.188.234.0/24 maxlen: 24
94.188.235.0/24 maxlen: 24
94.188.236.0/24 maxlen: 24
94.188.237.0/24 maxlen: 24
94.188.239.0/24 maxlen: 24
94.188.240.0/24 maxlen: 24
94.188.241.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 17:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:31:8a:f1:83:82:4d:60:da:d0:95:f1:ad:3c:96:bc:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86
Validity
Not Before: Aug 8 10:31:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=392c2f4f4fe2b9eaa2dd245fb9e7f967dbe0ae0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a2:41:ba:92:70:d9:91:7d:6b:a7:fb:86:cb:
7f:6f:5c:25:8c:d5:30:78:4c:a6:3d:d0:fc:a9:91:
60:7d:d2:eb:e0:8a:9d:b3:a4:f8:16:34:5a:92:46:
d6:ac:59:d3:ca:ee:5e:87:a4:dc:51:ad:c3:65:85:
8b:ba:8a:02:a6:4a:ee:9e:02:a4:23:c7:b6:f8:2e:
9d:1e:0d:25:43:3d:6c:c6:25:50:7d:7f:02:95:13:
6e:4f:df:1d:6d:da:46:d9:c0:3c:4e:24:e3:d3:d3:
d9:43:26:86:b5:0b:11:d8:4d:2e:5a:0c:1e:17:00:
c8:2a:26:3a:a8:d3:51:4b:7c:21:c2:48:75:a2:e3:
28:e2:46:e2:ec:90:a2:9c:24:50:92:cb:ea:f4:f4:
bc:4d:72:6c:c5:c1:0c:f3:02:22:c6:e8:c2:4d:61:
05:7c:b2:92:df:fe:14:1f:c7:db:a2:79:e2:06:7a:
af:55:85:7f:2c:0c:c9:a5:8a:20:ec:f7:d5:e6:b3:
43:67:95:d1:a9:77:7a:fa:43:34:0e:18:1e:13:26:
cc:af:96:99:fb:bb:ca:46:89:53:1b:90:02:6a:e6:
5f:c6:a7:c9:cb:4d:da:41:04:f3:f9:e8:ef:53:41:
f2:a6:e7:79:0f:79:13:a3:59:35:9a:ca:88:37:11:
89:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:2C:2F:4F:4F:E2:B9:EA:A2:DD:24:5F:B9:E7:F9:67:DB:E0:AE:0E
X509v3 Authority Key Identifier:
keyid:E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/OSwvT0_iueqi3SRfuef5Z9vgrg4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.61.228.0/24
92.61.230.0-92.61.232.255
92.61.236.0-92.61.238.255
94.188.137.0/24
94.188.194.0/24
94.188.201.0-94.188.203.255
94.188.205.0-94.188.212.255
94.188.214.0-94.188.216.255
94.188.222.0-94.188.237.255
94.188.239.0-94.188.241.255
Signature Algorithm: sha256WithRSAEncryption
b1:97:35:31:e2:c4:29:40:6d:1e:9a:55:72:c9:24:9b:f0:2f:
0f:32:f7:e3:34:16:06:39:6a:a8:16:e8:4c:3f:66:1d:16:c0:
66:95:3a:4c:3b:1e:4f:0d:d1:93:c8:09:94:f4:6d:c2:6d:87:
ba:80:9b:47:f8:ad:91:2e:56:84:ee:8a:1e:0b:9d:b5:dd:1d:
3e:9e:00:a7:d6:4b:e6:cb:f0:18:d1:5d:20:71:a7:81:69:fa:
ec:98:75:d3:f6:bd:66:42:86:1c:62:9d:56:86:6d:40:a3:9d:
6b:33:11:21:5a:31:48:75:42:89:a8:f5:d6:5b:bf:02:1d:52:
0a:8e:c7:e5:0b:83:8b:34:a0:94:57:76:aa:5e:85:93:ba:33:
f9:00:54:11:5b:b4:43:cf:c9:91:c3:1f:d6:15:5b:e6:0d:c5:
e8:17:6d:bb:89:05:cd:9f:54:69:9d:df:3c:97:4d:f6:9b:ee:
e5:b7:c5:15:b1:d2:93:c8:ee:8e:75:e5:ce:f4:f8:68:4f:bd:
74:ef:2f:03:76:d1:eb:cb:51:57:e5:80:ec:cc:9b:18:0d:ec:
96:39:8f:ba:c3:ff:23:36:93:6d:48:98:a6:51:f5:50:d3:54:
96:ff:d8:e7:ad:0d:46:11:1a:18:b3:0d:34:b2:a9:59:d8:86:
f8:c9:f5:e7
-----BEGIN CERTIFICATE-----
MIIFbDCCBFSgAwIBAgISAZExivGDgk1g2tCV8a08lrx5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyZDViYjQwMTE4MGU1NWY1YzE2NWQ0NzkwOGRmZjRmZTI5
YTBkODYwHhcNMjQwODA4MTAzMTE0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOTJjMmY0ZjRmZTJiOWVhYTJkZDI0NWZiOWU3Zjk2N2RiZTBhZTBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6JBupJw2ZF9a6f7hst/b1wljNUw
eEymPdD8qZFgfdLr4Iqds6T4FjRakkbWrFnTyu5eh6TcUa3DZYWLuooCpkrungKk
I8e2+C6dHg0lQz1sxiVQfX8ClRNuT98dbdpG2cA8TiTj09PZQyaGtQsR2E0uWgwe
FwDIKiY6qNNRS3whwkh1ouMo4kbi7JCinCRQksvq9PS8TXJsxcEM8wIixujCTWEF
fLKS3/4UH8fbonniBnqvVYV/LAzJpYog7PfV5rNDZ5XRqXd6+kM0DhgeEybMr5aZ
+7vKRolTG5ACauZfxqfJy03aQQTz+ejvU0Hypud5D3kTo1k1msqINxGJ6QIDAQAB
o4ICeDCCAnQwHQYDVR0OBBYEFDksL09P4rnqot0kX7nn+Wfb4K4OMB8GA1UdIwQY
MBaAFOLVu0ARgOVfXBZdR5CN/0/img2GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHRXN1FCR0E1VjljRmwxSGtJM19ULUthRFlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS84NjI5N2EtZDIxOS00NTY3LTkxNzEt
NDIxZTZiYzdlMmU4LzEvT1N3dlQwX2l1ZXFpM1NSZnVlZjVaOXZncmc0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS84NjI5N2EtZDIxOS00NTY3LTkxNzEtNDIxZTZiYzdlMmU4
LzEvNHRXN1FCR0E1VjljRmwxSGtJM19ULUthRFlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGNBggrBgEFBQcBBwEB/wR+MHwwegQCAAEwdAMEAFw95DAM
AwQBXD3mAwQAXD3oMAwDBAJcPewDBABcPe4DBABevIkDBABevMIwDAMEAF68yQME
Al68yDAMAwQAXrzNAwQAXrzUMAwDBAFevNYDBABevNgwDAMEAV683gMEAV687DAM
AwQAXrzvAwQBXrzwMA0GCSqGSIb3DQEBCwUAA4IBAQCxlzUx4sQpQG0emlVyySSb
8C8PMvfjNBYGOWqoFuhMP2YdFsBmlTpMOx5PDdGTyAmU9G3CbYe6gJtH+K2RLlaE
7ooeC5213R0+ngCn1kvmy/AY0V0gcaeBafrsmHXT9r1mQoYcYp1Whm1Ao51rMxEh
WjFIdUKJqPXWW78CHVIKjsflC4OLNKCUV3aqXoWTujP5AFQRW7RDz8mRwx/WFVvm
DcXoF227iQXNn1Rpnd88l032m+7lt8UVsdKTyO6OdeXO9PhoT7107y8DdtHry1FX
5YDszJsYDeyWOY+6w/8jNpNtSJimUfVQ01SW/9jnrQ1GERoYsw00sqlZ2Ib4yfXn
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:30:31 2025 by rpki-client