Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/7S_hDc8mfExlMAarWqPXk-3ThTI.roa
File: 7S_hDc8mfExlMAarWqPXk-3ThTI.roa (raw, json)
Hash identifier: LT05Gq9t6473GF4n94VfUzN9GC210o1gNjIB91jrYnE=
Subject key identifier: ED:2F:E1:0D:CF:26:7C:4C:65:30:06:AB:5A:A3:D7:93:ED:D3:85:32
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 0191487CC26A71DCA6E37411801DEBC6F2C0
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/7S_hDc8mfExlMAarWqPXk-3ThTI.roa
Signing time: Mon 12 Aug 2024 21:27:01 +0000
ROA not before: Mon 12 Aug 2024 21:27:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202656
IP address blocks: 31.41.251.0/24 maxlen: 24
31.41.252.0/24 maxlen: 24
31.41.254.0/24 maxlen: 24
45.87.126.0/24 maxlen: 24
45.95.29.0/24 maxlen: 24
45.128.125.0/24 maxlen: 24
45.128.126.0/24 maxlen: 24
45.128.127.0/24 maxlen: 24
45.128.128.0/24 maxlen: 24
88.151.8.0/24 maxlen: 24
94.154.190.0/24 maxlen: 24
176.116.15.0/24 maxlen: 24
176.126.96.0/24 maxlen: 24
193.28.178.0/24 maxlen: 24
193.187.105.0/24 maxlen: 24
194.59.187.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 14 Aug 2024 19:45:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:48:7c:c2:6a:71:dc:a6:e3:74:11:80:1d:eb:c6:f2:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Aug 12 21:27:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ed2fe10dcf267c4c653006ab5aa3d793edd38532
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c1:a7:cc:98:7e:af:b0:94:3a:2d:ce:76:e0:
7d:79:1e:d7:1e:08:cf:42:15:fa:83:37:0c:5a:18:
58:bd:c2:dd:dc:67:f6:be:24:92:01:98:c4:6b:33:
af:ac:1f:f9:a0:28:48:35:8b:63:1f:2f:71:26:5b:
b2:24:d8:36:6b:57:85:83:14:77:42:a5:42:9a:16:
b5:1a:7f:b1:86:f1:37:3a:35:fb:33:e6:c6:6a:2f:
5b:ca:9f:15:e0:4b:19:b5:0f:87:c6:b6:e4:73:c0:
32:a8:1a:fa:04:1b:35:12:d8:00:3c:0c:6d:37:26:
01:f8:ac:15:14:2b:5f:6d:ec:9e:22:ba:36:9e:ba:
5d:27:13:bb:ca:1b:56:f1:ac:2b:74:02:50:d0:e7:
ef:07:1b:e6:32:f8:f7:57:45:86:33:69:0b:97:11:
75:6d:1d:8a:e7:8e:ec:38:d8:31:87:be:1f:58:73:
04:fb:16:18:84:ba:ce:d6:43:9e:39:60:59:fb:73:
e7:8a:5b:d5:a4:45:85:9b:52:34:6a:17:e1:34:59:
d3:9f:5e:27:43:3d:a9:ab:8c:9b:d1:67:2f:0a:b9:
be:35:f3:89:9f:1d:0b:cf:62:ab:e4:54:95:73:2c:
6e:dd:cf:10:8d:fb:ee:6c:0e:c1:32:14:cd:77:ea:
bd:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:2F:E1:0D:CF:26:7C:4C:65:30:06:AB:5A:A3:D7:93:ED:D3:85:32
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/7S_hDc8mfExlMAarWqPXk-3ThTI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.41.251.0-31.41.252.255
31.41.254.0/24
45.87.126.0/24
45.95.29.0/24
45.128.125.0-45.128.128.255
88.151.8.0/24
94.154.190.0/24
176.116.15.0/24
176.126.96.0/24
193.28.178.0/24
193.187.105.0/24
194.59.187.0/24
Signature Algorithm: sha256WithRSAEncryption
26:26:76:89:2c:c1:9e:17:0f:29:46:a4:ec:14:d5:e3:68:ef:
e7:89:e5:82:22:c9:a1:f8:3f:45:41:67:45:f9:e8:71:30:d5:
1e:b1:f6:1d:34:48:8a:7d:fb:e0:b2:27:44:7f:2e:5e:1c:50:
7c:89:e0:2e:ff:fa:da:f4:3e:db:cd:82:dd:1f:ba:d2:be:d1:
b2:bb:1f:10:4f:ec:6f:3e:27:31:5b:58:70:4f:6d:d8:2a:6c:
0b:0e:5a:96:79:5c:1a:8a:43:f9:9a:2c:fe:43:08:24:4a:18:
be:78:a6:de:01:69:1c:d0:8c:5d:ba:1c:e6:1d:99:21:fb:c5:
1f:25:1c:6d:bd:47:f8:19:9a:26:7e:62:03:35:c2:13:b0:9d:
93:5f:8a:3a:c2:22:cf:0d:f2:a5:bb:66:80:ee:da:14:da:a0:
63:a4:ca:1f:e3:32:9e:c3:6d:17:c8:b1:38:8f:01:80:70:10:
ff:46:f2:9c:8b:4e:63:d9:fa:6f:ed:b1:f9:ff:bc:bc:3f:d3:
d9:13:79:e2:4e:d4:e2:70:fa:83:90:e2:73:ff:1c:17:2b:b5:
12:5a:6c:bb:83:ae:bc:35:b6:5c:70:18:9f:cc:17:a0:50:f0:
f6:53:f8:b7:d4:df:bf:2e:50:ea:09:f1:0b:c0:32:6e:f7:0d:
6f:22:70:21
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgISAZFIfMJqcdym43QRgB3rxvLAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MzM1M2MxZmFiZTg5NmFmOGI4NWZlNzYwMGU0NjM0OTY4
ZmNjNGMwHhcNMjQwODEyMjEyNzAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZDJmZTEwZGNmMjY3YzRjNjUzMDA2YWI1YWEzZDc5M2VkZDM4NTMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8GnzJh+r7CUOi3OduB9eR7XHgjP
QhX6gzcMWhhYvcLd3Gf2viSSAZjEazOvrB/5oChINYtjHy9xJluyJNg2a1eFgxR3
QqVCmha1Gn+xhvE3OjX7M+bGai9byp8V4EsZtQ+Hxrbkc8AyqBr6BBs1EtgAPAxt
NyYB+KwVFCtfbeyeIro2nrpdJxO7yhtW8awrdAJQ0OfvBxvmMvj3V0WGM2kLlxF1
bR2K547sONgxh74fWHME+xYYhLrO1kOeOWBZ+3PnilvVpEWFm1I0ahfhNFnTn14n
Qz2pq4yb0WcvCrm+NfOJnx0Lz2Kr5FSVcyxu3c8QjfvubA7BMhTNd+q9rwIDAQAB
o4ICWzCCAlcwHQYDVR0OBBYEFO0v4Q3PJnxMZTAGq1qj15Pt04UyMB8GA1UdIwQY
MBaAFAkzU8H6volq+Lhf52AORjSWj8xMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGIt
MjM5ZDJmZTM5OGIxLzEvN1NfaERjOG1mRXhsTUFhcldxUFhrLTNUaFRJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGItMjM5ZDJmZTM5OGIx
LzEvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHEGCCsGAQUFBwEHAQH/BGIwYDBeBAIAATBYMAwDBAAfKfsD
BAAfKfwDBAAfKf4DBAAtV34DBAAtXx0wDAMEAC2AfQMEAC2AgAMEAFiXCAMEAF6a
vgMEALB0DwMEALB+YAMEAMEcsgMEAMG7aQMEAMI7uzANBgkqhkiG9w0BAQsFAAOC
AQEAJiZ2iSzBnhcPKUak7BTV42jv54nlgiLJofg/RUFnRfnocTDVHrH2HTRIin37
4LInRH8uXhxQfIngLv/62vQ+282C3R+60r7RsrsfEE/sbz4nMVtYcE9t2CpsCw5a
lnlcGopD+Zos/kMIJEoYvnim3gFpHNCMXboc5h2ZIfvFHyUcbb1H+BmaJn5iAzXC
E7Cdk1+KOsIizw3ypbtmgO7aFNqgY6TKH+MynsNtF8ixOI8BgHAQ/0bynItOY9n6
b+2x+f+8vD/T2RN54k7U4nD6g5Dic/8cFyu1Elpsu4OuvDW2XHAYn8wXoFDw9lP4
t9Tfvy5Q6gnxC8AybvcNbyJwIQ==
-----END CERTIFICATE-----
Generated at Wed Aug 14 22:30:40 2024 by rpki-client on console-fra.rpki-client.org