Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/jTcEMO1sHBOzIhhvtLzess20Uos.roa
File: jTcEMO1sHBOzIhhvtLzess20Uos.roa (raw, json)
Hash identifier: ZoogkEDYNkFlJnFijZBRnsDFFzl6zPLi1Z6PN+W3IkA=
Subject key identifier: 8D:37:04:30:ED:6C:1C:13:B3:22:18:6F:B4:BC:DE:B2:CD:B4:52:8B
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 0191F9A7CB4BDAD626658C9BADB91BCCED21
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/jTcEMO1sHBOzIhhvtLzess20Uos.roa
Signing time: Mon 16 Sep 2024 07:06:48 +0000
ROA not before: Mon 16 Sep 2024 07:06:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34918
IP address blocks: 46.38.137.0/24 maxlen: 24
46.38.138.0/24 maxlen: 24
46.38.139.0/24 maxlen: 24
109.94.164.0/24 maxlen: 24
185.29.222.0/24 maxlen: 24
212.80.9.0/24 maxlen: 24
212.80.11.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 02 Oct 2024 16:54:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:f9:a7:cb:4b:da:d6:26:65:8c:9b:ad:b9:1b:cc:ed:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Sep 16 07:06:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8d370430ed6c1c13b322186fb4bcdeb2cdb4528b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:81:00:bd:6a:cc:cd:9c:1c:36:be:c8:39:31:
d1:30:27:bc:55:1f:d1:df:10:17:c7:c5:11:6e:d1:
75:3f:52:9c:db:ff:9e:a4:0a:24:6a:ea:b0:ce:d3:
8d:77:7a:8e:e4:3d:ff:36:69:c6:29:20:b2:d9:76:
30:99:ab:3e:2f:e2:af:9e:44:01:83:e7:46:e8:8f:
0e:8e:bf:bf:ef:4c:06:3d:65:29:77:1e:9e:10:d4:
7a:e8:16:bf:5d:13:67:1b:2a:25:1b:c2:56:89:28:
d3:37:da:07:27:8b:ca:fe:95:b1:b2:2d:32:bf:98:
78:2e:b2:43:59:cf:5b:9f:70:2f:11:95:75:fc:fd:
64:cd:3f:bb:ee:99:ee:cb:be:a9:c7:b6:12:96:25:
a2:fb:99:0b:87:f8:b9:19:a0:1d:d1:1e:df:2f:6c:
87:ec:de:5a:99:63:df:fc:ff:c9:58:b5:6d:68:03:
34:db:40:f0:c9:21:ce:e6:40:07:8c:94:80:f0:0a:
16:9c:43:f9:e6:4b:cc:92:6c:02:ca:60:00:86:16:
00:d5:e5:1a:8b:88:49:ff:5f:02:2f:cc:1b:2d:82:
86:42:36:a1:8e:7e:b0:17:5b:06:ae:55:7a:70:bb:
21:18:8e:89:6d:a3:81:44:c7:97:58:14:5e:b8:6b:
fe:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:37:04:30:ED:6C:1C:13:B3:22:18:6F:B4:BC:DE:B2:CD:B4:52:8B
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/jTcEMO1sHBOzIhhvtLzess20Uos.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.38.137.0-46.38.139.255
109.94.164.0/24
185.29.222.0/24
212.80.9.0/24
212.80.11.0/24
Signature Algorithm: sha256WithRSAEncryption
78:d6:19:de:07:36:ec:28:7d:ca:78:59:3b:c9:0b:5f:4a:2d:
c9:ec:30:97:96:cf:f5:8f:89:1f:52:c0:c3:5e:39:fb:1b:51:
a6:3f:c1:c8:81:0b:24:91:3a:0c:71:07:9c:76:6b:46:30:db:
1a:98:f4:23:63:34:cd:c4:af:28:a5:42:b6:63:1a:bb:e1:c9:
d7:c0:fd:d6:68:e2:64:43:90:db:73:f6:be:9e:3a:ee:3c:6a:
40:d1:b9:f5:4f:34:62:93:1c:3b:f7:b0:a3:a1:01:10:b7:d3:
5c:a8:eb:58:41:87:8b:30:2e:80:f5:b6:61:e7:5e:77:a1:ac:
1e:be:36:26:6a:c8:2b:58:3d:73:79:ea:d1:c7:3a:e6:22:d8:
a4:f6:e4:62:cc:1d:4a:16:7b:0a:32:5d:1d:4a:22:ce:f0:20:
5a:78:d5:86:c4:1d:a9:d8:d9:6d:57:d5:d5:4b:72:b4:c9:b3:
02:f0:ff:57:4a:d1:53:2f:4d:60:f9:cb:af:5a:65:22:bb:06:
1d:8e:d7:73:27:cf:ed:e1:3b:c9:a1:c3:be:cd:09:fe:13:4c:
7b:25:40:c9:0d:2c:f1:bc:13:4b:9f:5b:61:c3:5e:90:e6:c9:
7f:8e:a4:c9:ef:e0:1c:77:f6:d2:0a:1a:c9:e4:cd:49:25:fd:
06:65:e3:27
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAZH5p8tL2tYmZYybrbkbzO0hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3Mjk0NWY1NzEwMzE1M2EwNzg1NGU3NGUyMjdmMmFlYzFj
NWY0MzAwHhcNMjQwOTE2MDcwNjQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZDM3MDQzMGVkNmMxYzEzYjMyMjE4NmZiNGJjZGViMmNkYjQ1MjhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvoEAvWrMzZwcNr7IOTHRMCe8VR/R
3xAXx8URbtF1P1Kc2/+epAokauqwztONd3qO5D3/NmnGKSCy2XYwmas+L+KvnkQB
g+dG6I8Ojr+/70wGPWUpdx6eENR66Ba/XRNnGyolG8JWiSjTN9oHJ4vK/pWxsi0y
v5h4LrJDWc9bn3AvEZV1/P1kzT+77pnuy76px7YSliWi+5kLh/i5GaAd0R7fL2yH
7N5amWPf/P/JWLVtaAM020DwySHO5kAHjJSA8AoWnEP55kvMkmwCymAAhhYA1eUa
i4hJ/18CL8wbLYKGQjahjn6wF1sGrlV6cLshGI6JbaOBRMeXWBReuGv+AwIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFI03BDDtbBwTsyIYb7S83rLNtFKLMB8GA1UdIwQY
MBaAFLcpRfVxAxU6B4VOdOIn8q7BxfQwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEt
MmEwOWNjNTNhODA1LzEvalRjRU1PMXNIQk96SWhodnRMemVzczIwVW9zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEtMmEwOWNjNTNhODA1
LzEvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmMAwDBAAuJokD
BAIuJogDBABtXqQDBAC5Hd4DBADUUAkDBADUUAswDQYJKoZIhvcNAQELBQADggEB
AHjWGd4HNuwofcp4WTvJC19KLcnsMJeWz/WPiR9SwMNeOfsbUaY/wciBCySROgxx
B5x2a0Yw2xqY9CNjNM3EryilQrZjGrvhydfA/dZo4mRDkNtz9r6eOu48akDRufVP
NGKTHDv3sKOhARC301yo61hBh4swLoD1tmHnXnehrB6+NiZqyCtYPXN56tHHOuYi
2KT25GLMHUoWewoyXR1KIs7wIFp41YbEHanY2W1X1dVLcrTJswLw/1dK0VMvTWD5
y69aZSK7Bh2O13Mnz+3hO8mhw77NCf4TTHslQMkNLPG8E0ufW2HDXpDmyX+OpMnv
4Bx39tIKGsnkzUkl/QZl4yc=
-----END CERTIFICATE-----
Generated at Wed Oct 2 19:23:17 2024 by rpki-client on console-fra.rpki-client.org