Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/247005-559d-4eb4-b3e8-bd24f003578f/1/Zgp9xJbRHOL8HjyM27QHXeB9TMQ.roa
File: Zgp9xJbRHOL8HjyM27QHXeB9TMQ.roa (raw, json)
Hash identifier: cDwYBotmoUjxZcHMQesGq39F85+EU5MQB26wQ4IIgQg=
Subject key identifier: 66:0A:7D:C4:96:D1:1C:E2:FC:1E:3C:8C:DB:B4:07:5D:E0:7D:4C:C4
Certificate issuer: /CN=31eb9b2db4a3bddf8c92fc50b9713043dd56dc38
Certificate serial: 01877F989FFBC91627588AFFF40E14244B6B
Authority key identifier: 31:EB:9B:2D:B4:A3:BD:DF:8C:92:FC:50:B9:71:30:43:DD:56:DC:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MeubLbSjvd-MkvxQuXEwQ91W3Dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/247005-559d-4eb4-b3e8-bd24f003578f/1/Zgp9xJbRHOL8HjyM27QHXeB9TMQ.roa
Signing time: Fri 14 Apr 2023 11:48:41 +0000
ROA not before: Fri 14 Apr 2023 11:48:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43009
IP address blocks: 193.105.74.0/24 maxlen: 24
81.23.249.0/24 maxlen: 24
81.23.250.0/24 maxlen: 24
81.23.251.0/24 maxlen: 24
81.23.252.0/24 maxlen: 24
81.23.248.0/24 maxlen: 24
81.23.253.0/24 maxlen: 24
185.255.9.0/24 maxlen: 24
185.255.10.0/24 maxlen: 24
185.255.11.0/24 maxlen: 24
185.255.8.0/24 maxlen: 24
202.22.160.0/24 maxlen: 24
202.22.164.0/24 maxlen: 24
202.22.165.0/24 maxlen: 24
202.22.166.0/24 maxlen: 24
202.22.161.0/24 maxlen: 24
202.22.162.0/24 maxlen: 24
202.22.163.0/24 maxlen: 24
202.22.171.0/24 maxlen: 24
202.22.172.0/24 maxlen: 24
202.22.168.0/24 maxlen: 24
202.22.169.0/24 maxlen: 24
202.22.170.0/24 maxlen: 24
202.22.173.0/24 maxlen: 24
202.22.174.0/24 maxlen: 24
202.22.175.0/24 maxlen: 24
81.23.254.0/24 maxlen: 24
81.23.255.0/24 maxlen: 24
2a0c:55c0:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:7f:98:9f:fb:c9:16:27:58:8a:ff:f4:0e:14:24:4b:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31eb9b2db4a3bddf8c92fc50b9713043dd56dc38
Validity
Not Before: Apr 14 11:48:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=660a7dc496d11ce2fc1e3c8cdbb4075de07d4cc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:7b:3a:bf:1d:4f:87:9e:6a:8e:ab:04:ad:80:
4e:9f:7f:a9:24:28:85:5f:d1:ba:85:71:2a:54:75:
de:aa:97:98:de:5e:2b:ab:e3:75:2f:f5:9f:34:b1:
86:6c:8c:84:3e:10:d9:06:d7:c0:ff:82:d3:ac:91:
e6:35:bd:61:3c:c9:dc:2e:3b:5c:03:6c:5c:9d:c8:
08:d7:c0:9a:ac:d6:9d:0e:d1:33:f3:a0:e6:70:e7:
78:19:92:ea:23:54:d5:d4:c3:3e:12:a3:53:23:70:
13:ce:28:e5:e1:ac:c8:6a:8a:ed:cc:73:e5:f0:51:
c1:05:0c:02:0c:e2:d4:3d:d0:a9:3c:dd:7d:b4:b5:
bf:91:96:17:47:f1:78:7d:47:de:c4:97:50:74:bd:
a9:b4:14:8a:d5:0e:5e:58:73:cd:08:d9:31:f9:1e:
c1:af:29:4e:3d:89:3c:96:4d:96:af:cb:bd:5b:53:
49:ee:82:49:38:90:50:8e:aa:a4:4e:4a:91:1d:fc:
2c:10:d8:06:3b:0f:6f:c6:17:ac:81:71:b0:b3:66:
dc:a6:02:bd:e5:90:29:45:46:f7:9b:76:0d:11:eb:
af:1f:f3:b9:b0:04:e1:04:e3:8b:b9:ae:42:54:15:
49:c0:61:52:d4:6f:35:74:62:24:2c:7e:b3:f9:4b:
38:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:0A:7D:C4:96:D1:1C:E2:FC:1E:3C:8C:DB:B4:07:5D:E0:7D:4C:C4
X509v3 Authority Key Identifier:
keyid:31:EB:9B:2D:B4:A3:BD:DF:8C:92:FC:50:B9:71:30:43:DD:56:DC:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MeubLbSjvd-MkvxQuXEwQ91W3Dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/247005-559d-4eb4-b3e8-bd24f003578f/1/Zgp9xJbRHOL8HjyM27QHXeB9TMQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/247005-559d-4eb4-b3e8-bd24f003578f/1/MeubLbSjvd-MkvxQuXEwQ91W3Dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.23.248.0/21
185.255.8.0/22
193.105.74.0/24
202.22.160.0-202.22.166.255
202.22.168.0/21
IPv6:
2a0c:55c0:1::/48
Signature Algorithm: sha256WithRSAEncryption
00:79:50:64:ba:c7:b6:cd:39:ce:7a:d6:ee:47:70:b5:e5:37:
06:e3:59:4f:ed:e2:2e:27:3e:7c:ad:d2:a2:14:22:74:39:c8:
8a:4f:f4:bc:99:aa:96:a6:41:60:2e:81:b1:b0:d4:09:98:b1:
c0:e0:01:b1:ec:17:ef:11:07:5c:d6:d4:24:96:7f:4d:fe:53:
d5:d7:df:6b:83:98:a4:f1:bc:ba:e8:40:1a:81:74:89:86:08:
91:de:ce:8c:46:3f:c1:d3:ee:12:d2:7e:39:4a:53:64:fa:c2:
7a:fa:fc:e6:c2:c3:00:7f:96:a3:ae:8d:71:df:d5:97:7c:43:
b8:02:92:0a:a7:76:35:cf:2c:e2:1d:5f:70:63:7d:a8:5c:5f:
d3:f7:c0:b6:29:39:fd:52:8c:c2:c8:af:72:91:b6:ed:56:e5:
a6:f5:24:00:0b:4c:da:ef:c0:d3:1b:17:11:d2:73:45:3d:14:
02:ad:d2:ea:dc:7e:ff:6b:41:75:07:00:75:f2:01:2e:ce:7b:
86:20:c0:83:82:d1:53:0b:2f:a7:b7:fe:62:22:c2:71:fc:16:
f4:5b:fd:95:fe:9d:41:2a:f1:bc:89:6e:30:ab:5b:51:70:2b:
ef:8e:fb:7b:77:b0:ed:b3:e5:e0:8f:32:46:af:ca:41:81:19:
cf:10:2d:a2
-----BEGIN CERTIFICATE-----
MIIFLjCCBBagAwIBAgISAYd/mJ/7yRYnWIr/9A4UJEtrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxZWI5YjJkYjRhM2JkZGY4YzkyZmM1MGI5NzEzMDQzZGQ1
NmRjMzgwHhcNMjMwNDE0MTE0ODQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NjBhN2RjNDk2ZDExY2UyZmMxZTNjOGNkYmI0MDc1ZGUwN2Q0Y2M0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgHs6vx1Ph55qjqsErYBOn3+pJCiF
X9G6hXEqVHXeqpeY3l4rq+N1L/WfNLGGbIyEPhDZBtfA/4LTrJHmNb1hPMncLjtc
A2xcncgI18CarNadDtEz86DmcOd4GZLqI1TV1MM+EqNTI3ATzijl4azIaortzHPl
8FHBBQwCDOLUPdCpPN19tLW/kZYXR/F4fUfexJdQdL2ptBSK1Q5eWHPNCNkx+R7B
rylOPYk8lk2Wr8u9W1NJ7oJJOJBQjqqkTkqRHfwsENgGOw9vxhesgXGws2bcpgK9
5ZApRUb3m3YNEeuvH/O5sAThBOOLua5CVBVJwGFS1G81dGIkLH6z+Us4uQIDAQAB
o4ICOjCCAjYwHQYDVR0OBBYEFGYKfcSW0Rzi/B48jNu0B13gfUzEMB8GA1UdIwQY
MBaAFDHrmy20o73fjJL8ULlxMEPdVtw4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWV1YkxiU2p2ZC1Na3Z4UXVYRXdROTFXM0RnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8yNDcwMDUtNTU5ZC00ZWI0LWIzZTgt
YmQyNGYwMDM1NzhmLzEvWmdwOXhKYlJIT0w4SGp5TTI3UUhYZUI5VE1RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC8yNDcwMDUtNTU5ZC00ZWI0LWIzZTgtYmQyNGYwMDM1Nzhm
LzEvTWV1YkxiU2p2ZC1Na3Z4UXVYRXdROTFXM0RnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFAGCCsGAQUFBwEHAQH/BEEwPzAsBAIAATAmAwQDURf4AwQC
uf8IAwQAwWlKMAwDBAXKFqADBADKFqYDBAPKFqgwDwQCAAIwCQMHACoMVcAAATAN
BgkqhkiG9w0BAQsFAAOCAQEAAHlQZLrHts05znrW7kdwteU3BuNZT+3iLic+fK3S
ohQidDnIik/0vJmqlqZBYC6BsbDUCZixwOABsewX7xEHXNbUJJZ/Tf5T1dffa4OY
pPG8uuhAGoF0iYYIkd7OjEY/wdPuEtJ+OUpTZPrCevr85sLDAH+Wo66Ncd/Vl3xD
uAKSCqd2Nc8s4h1fcGN9qFxf0/fAtik5/VKMwsivcpG27VblpvUkAAtM2u/A0xsX
EdJzRT0UAq3S6tx+/2tBdQcAdfIBLs57hiDAg4LRUwsvp7f+YiLCcfwW9Fv9lf6d
QSrxvIluMKtbUXAr7477e3ew7bPl4I8yRq/KQYEZzxAtog==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:33 2024 by rpki-client on console-ams.rpki-client.org