Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/Sk7dn9-4DntbfWL44j9lLIDPH-M.roa
File: Sk7dn9-4DntbfWL44j9lLIDPH-M.roa (raw, json)
Hash identifier: 9wOEngpIXUSMFR03dCbR6audzPdk5Qw0YUSVtKMC7eg=
Subject key identifier: 4A:4E:DD:9F:DF:B8:0E:7B:5B:7D:62:F8:E2:3F:65:2C:80:CF:1F:E3
Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial: 01906E8AF67BB3FA331F1A00445A11FADDCE
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/Sk7dn9-4DntbfWL44j9lLIDPH-M.roa
Signing time: Mon 01 Jul 2024 13:45:19 +0000
ROA not before: Mon 01 Jul 2024 13:45:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62240
IP address blocks: 31.41.38.0/24 maxlen: 24
45.11.25.0/24 maxlen: 24
45.133.219.0/24 maxlen: 24
45.137.52.0/24 maxlen: 24
45.137.55.0/24 maxlen: 24
45.137.188.0/24 maxlen: 24
45.137.191.0/24 maxlen: 24
45.139.28.0/24 maxlen: 24
45.139.29.0/24 maxlen: 24
45.139.31.0/24 maxlen: 24
45.140.171.0/24 maxlen: 24
45.145.2.0/24 maxlen: 24
45.145.90.0/24 maxlen: 24
45.145.161.0/24 maxlen: 24
45.149.80.0/24 maxlen: 24
45.149.81.0/24 maxlen: 24
45.149.82.0/24 maxlen: 24
45.149.134.0/24 maxlen: 24
45.150.62.0/24 maxlen: 24
45.150.63.0/24 maxlen: 24
45.152.227.0/24 maxlen: 24
77.83.4.0/24 maxlen: 24
77.83.5.0/24 maxlen: 24
77.83.6.0/24 maxlen: 24
77.83.7.0/24 maxlen: 24
185.179.198.0/24 maxlen: 24
194.156.95.0/24 maxlen: 24
195.245.111.0/24 maxlen: 24
213.139.192.0/24 maxlen: 24
213.139.193.0/24 maxlen: 24
213.139.195.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jul 2024 15:50:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:6e:8a:f6:7b:b3:fa:33:1f:1a:00:44:5a:11:fa:dd:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Validity
Not Before: Jul 1 13:45:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4a4edd9fdfb80e7b5b7d62f8e23f652c80cf1fe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:64:62:e2:d6:a4:4c:fa:40:98:90:3c:69:66:
bf:44:7d:a1:24:71:ad:eb:2b:0f:46:0e:1d:3d:93:
bf:ca:7d:d8:a6:02:5a:65:2f:f5:64:4b:1d:7a:d6:
b7:38:30:8a:89:62:a8:18:58:0b:09:c4:f9:8f:c7:
d2:53:43:81:bf:d5:35:e7:16:64:d5:d6:57:1c:49:
92:4d:91:90:d1:b8:e1:04:b5:b6:d3:7e:d4:64:d7:
d6:4f:9e:4f:84:b3:7f:db:3a:a0:25:22:12:92:68:
22:66:3f:0c:df:15:5a:22:1a:6c:c0:50:4a:0d:ca:
f1:e8:b7:cf:c7:62:ae:48:bb:ec:c5:36:c2:33:f5:
0c:22:0d:a6:42:a7:99:65:3d:51:9a:f4:6d:6e:d6:
b4:e3:b9:51:28:58:f4:eb:04:44:c9:57:d3:90:69:
c0:0a:cf:7d:59:a1:eb:69:8b:77:2c:0e:da:de:2c:
90:7e:79:fc:9d:1c:f7:67:c6:85:95:7d:73:80:24:
af:51:8f:c2:6b:4c:4c:f0:8c:bf:1f:6d:30:4c:6d:
c0:25:4b:6d:39:ed:65:38:7d:98:d7:74:95:36:1d:
33:9a:dd:14:20:be:f8:ba:0c:9f:a3:0c:35:27:0f:
b7:40:54:45:3a:e6:aa:76:2f:7c:cf:82:f8:d4:f2:
6c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:4E:DD:9F:DF:B8:0E:7B:5B:7D:62:F8:E2:3F:65:2C:80:CF:1F:E3
X509v3 Authority Key Identifier:
keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/Sk7dn9-4DntbfWL44j9lLIDPH-M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.41.38.0/24
45.11.25.0/24
45.133.219.0/24
45.137.52.0/24
45.137.55.0/24
45.137.188.0/24
45.137.191.0/24
45.139.28.0/23
45.139.31.0/24
45.140.171.0/24
45.145.2.0/24
45.145.90.0/24
45.145.161.0/24
45.149.80.0-45.149.82.255
45.149.134.0/24
45.150.62.0/23
45.152.227.0/24
77.83.4.0/22
185.179.198.0/24
194.156.95.0/24
195.245.111.0/24
213.139.192.0/23
213.139.195.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:86:bc:b8:aa:2b:8c:08:ec:8a:88:18:ae:95:3a:97:14:00:
89:92:7e:e0:e4:3e:02:e1:1b:11:b6:35:ce:5b:b2:2c:77:01:
1f:ed:fc:0d:96:cb:b9:45:25:3b:d1:05:36:d8:8f:11:34:da:
8a:09:d6:f0:99:93:c0:09:30:78:75:ae:bc:6e:3a:66:4c:60:
64:a5:40:5c:e2:ba:17:cb:c7:3d:41:67:80:7f:01:28:f6:8e:
77:7b:ab:a4:64:1b:9c:1d:2d:37:4c:b2:2d:b4:20:cc:51:81:
7a:f6:bd:c3:69:95:0e:5d:35:b3:06:bc:04:98:fd:30:25:da:
3c:e0:6e:17:5b:de:97:6e:95:5a:c4:b3:71:11:d3:20:79:fb:
dc:5a:44:9d:2b:ec:ae:a4:34:8d:fd:8c:ca:99:99:ea:aa:7d:
7c:d1:b0:37:4b:6b:1e:d8:52:7e:d4:6e:72:2a:cf:68:03:99:
01:0c:14:94:a4:23:d3:3c:1b:53:21:68:09:c4:da:38:03:68:
70:c2:4b:2e:b1:f9:69:fd:66:ae:cc:dd:e5:21:c9:73:af:79:
4a:50:82:13:8f:ac:17:e0:6c:fa:e4:83:30:a6:9e:9d:83:ff:
48:9d:e0:1a:92:ca:cc:57:44:4a:dc:c4:fb:89:77:75:65:f2:
00:4b:43:d3
-----BEGIN CERTIFICATE-----
MIIFjjCCBHagAwIBAgISAZBuivZ7s/ozHxoARFoR+t3OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyMjJlMWMyYTUzMTUzMzRiNjZkODBmNzhkNWI1MGI0MmU0
ODBiOWMwHhcNMjQwNzAxMTM0NTE5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YTRlZGQ5ZmRmYjgwZTdiNWI3ZDYyZjhlMjNmNjUyYzgwY2YxZmUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4WRi4takTPpAmJA8aWa/RH2hJHGt
6ysPRg4dPZO/yn3YpgJaZS/1ZEsdeta3ODCKiWKoGFgLCcT5j8fSU0OBv9U15xZk
1dZXHEmSTZGQ0bjhBLW2037UZNfWT55PhLN/2zqgJSISkmgiZj8M3xVaIhpswFBK
Dcrx6LfPx2KuSLvsxTbCM/UMIg2mQqeZZT1RmvRtbta047lRKFj06wREyVfTkGnA
Cs99WaHraYt3LA7a3iyQfnn8nRz3Z8aFlX1zgCSvUY/Ca0xM8Iy/H20wTG3AJUtt
Oe1lOH2Y13SVNh0zmt0UIL74ugyfoww1Jw+3QFRFOuaqdi98z4L41PJszwIDAQAB
o4ICmjCCApYwHQYDVR0OBBYEFEpO3Z/fuA57W31i+OI/ZSyAzx/jMB8GA1UdIwQY
MBaAFGIi4cKlMVM0tm2A941bULQuSAucMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWlMaHdxVXhVelMyYllEM2pWdFF0QzVJQzV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS85OTliOTctYzczMS00MTkyLTg1ZjEt
NTczNzAxYzg0ODMzLzEvU2s3ZG45LTREbnRiZldMNDRqOWxMSURQSC1NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS85OTliOTctYzczMS00MTkyLTg1ZjEtNTczNzAxYzg0ODMz
LzEvWWlMaHdxVXhVelMyYllEM2pWdFF0QzVJQzV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGvBggrBgEFBQcBBwEB/wSBnzCBnDCBmQQCAAEwgZIDBAAf
KSYDBAAtCxkDBAAthdsDBAAtiTQDBAAtiTcDBAAtibwDBAAtib8DBAEtixwDBAAt
ix8DBAAtjKsDBAAtkQIDBAAtkVoDBAAtkaEwDAMEBC2VUAMEAC2VUgMEAC2VhgME
AS2WPgMEAC2Y4wMEAk1TBAMEALmzxgMEAMKcXwMEAMP1bwMEAdWLwAMEANWLwzAN
BgkqhkiG9w0BAQsFAAOCAQEAboa8uKorjAjsiogYrpU6lxQAiZJ+4OQ+AuEbEbY1
zluyLHcBH+38DZbLuUUlO9EFNtiPETTaignW8JmTwAkweHWuvG46ZkxgZKVAXOK6
F8vHPUFngH8BKPaOd3urpGQbnB0tN0yyLbQgzFGBeva9w2mVDl01swa8BJj9MCXa
POBuF1vel26VWsSzcRHTIHn73FpEnSvsrqQ0jf2MypmZ6qp9fNGwN0trHthSftRu
cirPaAOZAQwUlKQj0zwbUyFoCcTaOANocMJLLrH5af1mrszd5SHJc695SlCCE4+s
F+Bs+uSDMKaenYP/SJ3gGpLKzFdEStzE+4l3dWXyAEtD0w==
-----END CERTIFICATE-----
Generated at Tue Jul 2 17:56:19 2024 by rpki-client on console-fra.rpki-client.org