Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/hK8oWb-cU-YntFjIv87GpguRs18.roa
File: hK8oWb-cU-YntFjIv87GpguRs18.roa (raw, json)
Hash identifier: e33v7cLhRowV3FIMSm7YrYbLH5QxdhFQwg3114aXaGI=
Subject key identifier: 84:AF:28:59:BF:9C:53:E6:27:B4:58:C8:BF:CE:C6:A6:0B:91:B3:5F
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 018E9F31AF59BF04DCC505E73EC6BE9589BA
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/hK8oWb-cU-YntFjIv87GpguRs18.roa
Signing time: Tue 02 Apr 2024 14:23:37 +0000
ROA not before: Tue 02 Apr 2024 14:23:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58061
IP address blocks: 31.222.230.0/24 maxlen: 24
37.72.128.0/24 maxlen: 24
62.204.52.0/24 maxlen: 24
77.83.193.0/24 maxlen: 24
78.142.238.0/24 maxlen: 24
130.255.172.0/24 maxlen: 24
130.255.175.0/24 maxlen: 24
146.19.129.0/24 maxlen: 24
193.201.10.0/24 maxlen: 24
194.69.164.0/24 maxlen: 24
195.64.127.0/24 maxlen: 24
212.107.26.0/24 maxlen: 24
213.109.153.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 08 Apr 2024 12:28:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:9f:31:af:59:bf:04:dc:c5:05:e7:3e:c6:be:95:89:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Apr 2 14:23:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=84af2859bf9c53e627b458c8bfcec6a60b91b35f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:98:d7:3b:2b:79:0b:95:a6:80:95:ea:65:5c:
28:e9:01:ed:82:29:ce:cd:cc:ba:7b:04:06:d2:00:
ea:45:a8:88:aa:ef:b0:e5:5a:da:3f:99:99:e4:dc:
c8:83:19:7d:34:c8:5f:b3:8b:ca:75:02:c2:76:97:
ea:b8:fc:dc:3b:07:ab:54:ec:04:25:83:84:bf:d2:
8c:f3:90:ad:8f:6d:5d:aa:3d:6e:50:0d:25:4e:4a:
a3:de:91:d4:db:4c:6b:17:63:27:4d:e5:b1:23:0e:
53:c6:80:80:9a:c5:2c:17:65:5e:13:80:2e:16:4e:
f4:ad:81:bf:5f:80:9c:b2:34:81:d3:e0:18:fa:b1:
ef:51:2e:9a:89:4b:95:49:fd:56:6b:24:f5:6f:ef:
76:1e:aa:8d:c7:4d:70:de:4e:b8:c1:2f:94:cf:85:
87:60:6e:46:92:6c:d0:78:ed:06:5b:ac:4a:33:aa:
10:66:5c:d4:14:cb:ad:34:80:ef:8d:32:86:2f:47:
92:8d:5b:be:0a:bd:68:78:32:1d:b6:7b:53:21:cb:
d9:ba:a5:cc:81:ad:eb:2e:07:8f:25:25:0b:6a:65:
8b:d3:fe:a3:ef:55:88:50:aa:b0:fc:d2:dc:10:59:
51:27:a1:d7:8a:26:c4:d9:e0:63:a0:ca:8a:f1:26:
2f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:AF:28:59:BF:9C:53:E6:27:B4:58:C8:BF:CE:C6:A6:0B:91:B3:5F
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/hK8oWb-cU-YntFjIv87GpguRs18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.222.230.0/24
37.72.128.0/24
62.204.52.0/24
77.83.193.0/24
78.142.238.0/24
130.255.172.0/24
130.255.175.0/24
146.19.129.0/24
193.201.10.0/24
194.69.164.0/24
195.64.127.0/24
212.107.26.0/24
213.109.153.0/24
Signature Algorithm: sha256WithRSAEncryption
24:42:06:4d:ee:b4:5e:ea:60:b6:d4:0a:e0:2e:49:db:1f:f9:
ec:53:4b:f9:09:88:d2:44:15:30:7c:2c:d6:6d:79:56:88:26:
f8:44:67:3f:85:01:b3:cb:7c:96:b5:aa:56:fa:bd:a5:24:d6:
dd:f8:b2:4f:47:f2:07:9a:3c:f8:eb:15:11:bf:0f:39:b0:f6:
9d:81:ac:05:7d:cb:b0:86:09:6b:f3:8a:40:da:76:03:ae:72:
1f:43:8b:a6:60:7a:95:e5:63:79:e4:0f:af:82:18:cb:ea:cb:
a3:82:6b:0b:31:63:d7:a1:f9:b5:a5:a2:14:c4:87:23:ab:0b:
99:bc:cf:d0:02:0f:60:44:9c:26:f8:93:e3:77:79:7a:ab:41:
54:11:d8:16:b9:15:d6:14:d9:f2:ac:af:c8:75:6a:58:64:42:
32:06:97:50:61:90:7c:90:1f:c2:ec:9c:65:83:f8:1c:55:13:
3e:fd:45:81:00:21:2a:98:52:ca:20:3f:d9:ad:8d:9c:39:df:
66:91:ec:d6:58:c2:51:c0:c0:d9:d5:e3:7e:bf:8e:88:6c:c5:
90:47:e0:3b:c2:a6:66:41:0a:31:15:47:0f:ff:48:63:7b:db:
b4:af:66:d1:73:0a:da:10:ca:a3:61:91:a3:a5:2d:29:bb:b5:
bc:fd:a8:07
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgISAY6fMa9ZvwTcxQXnPsa+lYm6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MzM1M2MxZmFiZTg5NmFmOGI4NWZlNzYwMGU0NjM0OTY4
ZmNjNGMwHhcNMjQwNDAyMTQyMzM3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NGFmMjg1OWJmOWM1M2U2MjdiNDU4YzhiZmNlYzZhNjBiOTFiMzVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpjXOyt5C5WmgJXqZVwo6QHtginO
zcy6ewQG0gDqRaiIqu+w5VraP5mZ5NzIgxl9NMhfs4vKdQLCdpfquPzcOwerVOwE
JYOEv9KM85Ctj21dqj1uUA0lTkqj3pHU20xrF2MnTeWxIw5TxoCAmsUsF2VeE4Au
Fk70rYG/X4CcsjSB0+AY+rHvUS6aiUuVSf1WayT1b+92HqqNx01w3k64wS+Uz4WH
YG5GkmzQeO0GW6xKM6oQZlzUFMutNIDvjTKGL0eSjVu+Cr1oeDIdtntTIcvZuqXM
ga3rLgePJSULamWL0/6j71WIUKqw/NLcEFlRJ6HXiibE2eBjoMqK8SYv3QIDAQAB
o4ICUTCCAk0wHQYDVR0OBBYEFISvKFm/nFPmJ7RYyL/OxqYLkbNfMB8GA1UdIwQY
MBaAFAkzU8H6volq+Lhf52AORjSWj8xMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGIt
MjM5ZDJmZTM5OGIxLzEvaEs4b1diLWNVLVludEZqSXY4N0dwZ3VSczE4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGItMjM5ZDJmZTM5OGIx
LzEvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGcGCCsGAQUFBwEHAQH/BFgwVjBUBAIAATBOAwQAH97mAwQA
JUiAAwQAPsw0AwQATVPBAwQATo7uAwQAgv+sAwQAgv+vAwQAkhOBAwQAwckKAwQA
wkWkAwQAw0B/AwQA1GsaAwQA1W2ZMA0GCSqGSIb3DQEBCwUAA4IBAQAkQgZN7rRe
6mC21ArgLknbH/nsU0v5CYjSRBUwfCzWbXlWiCb4RGc/hQGzy3yWtapW+r2lJNbd
+LJPR/IHmjz46xURvw85sPadgawFfcuwhglr84pA2nYDrnIfQ4umYHqV5WN55A+v
ghjL6sujgmsLMWPXofm1paIUxIcjqwuZvM/QAg9gRJwm+JPjd3l6q0FUEdgWuRXW
FNnyrK/IdWpYZEIyBpdQYZB8kB/C7Jxlg/gcVRM+/UWBACEqmFLKID/ZrY2cOd9m
kezWWMJRwMDZ1eN+v46IbMWQR+A7wqZmQQoxFUcP/0hje9u0r2bRcwraEMqjYZGj
pS0pu7W8/agH
-----END CERTIFICATE-----
Generated at Mon Apr 8 16:48:51 2024 by rpki-client on console-ams.rpki-client.org