Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/Dt41kAUY_vnjFU2Oz8s771IGRsI.roa
File: Dt41kAUY_vnjFU2Oz8s771IGRsI.roa (raw, json)
Hash identifier: qaNrkistyjmyLJ18Qtk83smvtKAJMrlt3NM5NS+wDUs=
Subject key identifier: 0E:DE:35:90:05:18:FE:F9:E3:15:4D:8E:CF:CB:3B:EF:52:06:46:C2
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 018CC7942649B2CA57B62C94A729F81CEE91
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/Dt41kAUY_vnjFU2Oz8s771IGRsI.roa
Signing time: Tue 02 Jan 2024 00:30:24 +0000
ROA not before: Tue 02 Jan 2024 00:30:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213220
IP address blocks: 188.130.209.0/24 maxlen: 24
109.248.6.0/23 maxlen: 24
95.182.110.0/24 maxlen: 24
95.182.108.0/24 maxlen: 24
109.248.33.0/24 maxlen: 24
109.248.45.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 07 Feb 2024 14:06:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:26:49:b2:ca:57:b6:2c:94:a7:29:f8:1c:ee:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Jan 2 00:30:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0ede35900518fef9e3154d8ecfcb3bef520646c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f7:e3:9a:d2:63:96:6d:ba:37:5e:cf:e3:bc:
ef:ae:ed:47:f5:18:00:af:ea:46:22:40:2e:99:a0:
04:de:4c:ac:ff:1c:a8:e2:66:25:ae:04:99:ab:47:
a1:76:e8:21:90:5c:48:4e:57:a5:b7:43:f6:b6:6e:
37:ea:75:8f:60:37:51:71:3f:f5:68:cf:55:73:50:
11:b5:b3:00:7f:79:68:cc:6d:a7:77:dd:2c:9a:a9:
b6:b0:ea:ce:7b:34:a6:18:b2:01:b3:91:62:39:c3:
d7:58:b4:46:0c:c4:7f:72:99:b9:f0:fd:6e:37:35:
00:0a:cf:b2:0f:50:a2:dc:4f:80:73:16:02:d6:b5:
e0:26:83:bb:21:d8:a8:7f:5a:3d:89:ec:a7:2b:e8:
78:56:b1:0e:99:5b:d2:81:c4:a0:35:bd:0f:8a:19:
92:fa:b7:70:0c:5d:96:48:90:7a:33:23:6f:9c:99:
5d:62:95:04:9b:45:c3:e0:82:49:27:06:eb:b9:fa:
fc:5f:d5:fc:46:b3:cd:0b:9f:f1:74:b4:68:6c:56:
b6:cc:4a:dd:8f:b7:67:cd:a8:ee:54:c7:c9:31:b1:
70:91:4c:2d:ee:55:a7:b1:e3:9d:b3:62:ca:25:d0:
89:b4:7e:79:90:27:fa:a8:6d:1c:33:89:43:13:90:
35:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:DE:35:90:05:18:FE:F9:E3:15:4D:8E:CF:CB:3B:EF:52:06:46:C2
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/Dt41kAUY_vnjFU2Oz8s771IGRsI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.182.108.0/24
95.182.110.0/24
109.248.6.0/23
109.248.33.0/24
109.248.45.0/24
188.130.209.0/24
Signature Algorithm: sha256WithRSAEncryption
61:13:c7:7d:5b:4c:f2:51:1f:d5:47:9c:6b:f6:d9:56:f8:b9:
27:f1:d6:2b:9a:16:c1:4d:7f:3a:7c:3a:ac:20:87:9e:98:6a:
15:24:a6:84:93:31:23:17:9d:7a:3a:1e:2a:33:8a:25:b6:25:
83:06:b2:0b:cb:f9:c8:08:c3:26:07:d1:e3:a5:6d:54:ad:c0:
84:23:1c:29:f3:7b:3a:8b:4b:48:3b:9d:b0:aa:f7:b6:17:f1:
b8:93:e8:58:cb:22:01:4f:ab:03:6d:f4:5f:fc:97:8a:15:43:
59:61:4b:b7:f0:de:f4:51:74:d7:0b:60:1b:10:aa:24:b8:7b:
6c:ba:85:74:88:ff:80:2e:fc:3e:c8:b1:8b:b9:0a:9e:5e:72:
5d:c2:89:d5:bd:07:64:5b:ae:d4:eb:ce:07:d3:e3:38:88:e2:
f6:de:25:9e:7d:30:cb:9f:99:ae:dd:6e:a9:bf:99:2d:98:bc:
4f:6e:d1:05:07:2a:2c:71:de:0d:2c:94:9e:eb:88:1a:ed:73:
97:5e:a8:26:88:e5:d2:ff:8d:6a:65:94:e7:08:ad:e9:cf:4b:
57:de:bb:16:29:80:1a:1f:2e:8f:42:cb:2a:67:46:80:60:d5:
3a:6c:2a:ec:a5:46:22:94:25:0e:61:69:7d:ab:6b:b5:fa:49:
6f:fe:c7:27
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAYzHlCZJsspXtiyUpyn4HO6RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4NWI4NTc3MDZkYWM1NGUyMGNhMGQxMWJkNjQxNmNiNjM0
MjAzYjQwHhcNMjQwMTAyMDAzMDI0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZWRlMzU5MDA1MThmZWY5ZTMxNTRkOGVjZmNiM2JlZjUyMDY0NmMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwvfjmtJjlm26N17P47zvru1H9RgA
r+pGIkAumaAE3kys/xyo4mYlrgSZq0ehdughkFxITlelt0P2tm436nWPYDdRcT/1
aM9Vc1ARtbMAf3lozG2nd90smqm2sOrOezSmGLIBs5FiOcPXWLRGDMR/cpm58P1u
NzUACs+yD1Ci3E+AcxYC1rXgJoO7Idiof1o9ieynK+h4VrEOmVvSgcSgNb0PihmS
+rdwDF2WSJB6MyNvnJldYpUEm0XD4IJJJwbrufr8X9X8RrPNC5/xdLRobFa2zErd
j7dnzajuVMfJMbFwkUwt7lWnseOds2LKJdCJtH55kCf6qG0cM4lDE5A1BwIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFA7eNZAFGP754xVNjs/LO+9SBkbCMB8GA1UdIwQY
MBaAFIhbhXcG2sVOIMoNEb1kFstjQgO0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMt
MTY2OTljOTZkZDVlLzEvRHQ0MWtBVVlfdm5qRlUyT3o4czc3MUlHUnNJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMtMTY2OTljOTZkZDVl
LzEvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAX7ZsAwQA
X7ZuAwQBbfgGAwQAbfghAwQAbfgtAwQAvILRMA0GCSqGSIb3DQEBCwUAA4IBAQBh
E8d9W0zyUR/VR5xr9tlW+Lkn8dYrmhbBTX86fDqsIIeemGoVJKaEkzEjF516Oh4q
M4oltiWDBrILy/nICMMmB9HjpW1UrcCEIxwp83s6i0tIO52wqve2F/G4k+hYyyIB
T6sDbfRf/JeKFUNZYUu38N70UXTXC2AbEKokuHtsuoV0iP+ALvw+yLGLuQqeXnJd
wonVvQdkW67U684H0+M4iOL23iWefTDLn5mu3W6pv5ktmLxPbtEFByoscd4NLJSe
64ga7XOXXqgmiOXS/41qZZTnCK3pz0tX3rsWKYAaHy6PQssqZ0aAYNU6bCrspUYi
lCUOYWl9q2u1+klv/scn
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:57 2024 by rpki-client on console-fra.rpki-client.org