Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/Maj0grRhfxRny-T8JnZzfj26mA0.roa
File: Maj0grRhfxRny-T8JnZzfj26mA0.roa (raw, json)
Hash identifier: YnlBPEkDfqPabiP1fKYZM7Y2XeZDbcNMkI3/75ZX+fc=
Subject key identifier: 31:A8:F4:82:B4:61:7F:14:67:CB:E4:FC:26:76:73:7E:3D:BA:98:0D
Certificate issuer: /CN=8c186a56ea84c13c62768a9d17bae133cedf1045
Certificate serial: 01917AB22BA657567891DB8E479EFC72C987
Authority key identifier: 8C:18:6A:56:EA:84:C1:3C:62:76:8A:9D:17:BA:E1:33:CE:DF:10:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jBhqVuqEwTxidoqdF7rhM87fEEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/Maj0grRhfxRny-T8JnZzfj26mA0.roa
Signing time: Thu 22 Aug 2024 15:26:22 +0000
ROA not before: Thu 22 Aug 2024 15:26:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1299
IP address blocks: 51.179.192.0/18 maxlen: 24
62.64.128.0/21 maxlen: 24
62.64.136.0/22 maxlen: 24
62.64.144.0/20 maxlen: 24
185.102.148.0/22 maxlen: 24
188.74.64.0/19 maxlen: 24
217.142.64.0/18 maxlen: 24
217.168.248.0/21 maxlen: 24
2a05:87c0::/29 maxlen: 48
Validation: Failed, certificate revoked on Thu 29 Aug 2024 13:34:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:7a:b2:2b:a6:57:56:78:91:db:8e:47:9e:fc:72:c9:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c186a56ea84c13c62768a9d17bae133cedf1045
Validity
Not Before: Aug 22 15:26:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=31a8f482b4617f1467cbe4fc2676737e3dba980d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:fa:09:bd:a0:4b:02:67:76:d0:f0:ee:25:b2:
5b:87:c5:fe:b4:22:4e:cb:38:49:f6:91:cc:30:ab:
e3:5a:99:76:73:f0:ec:7a:97:71:0a:37:30:39:d9:
39:80:4d:55:26:62:39:ed:22:1e:5d:ee:aa:34:24:
37:34:13:00:6e:ab:0c:17:18:28:7d:cf:06:55:b7:
c6:48:2c:e6:a3:25:87:09:4d:21:06:85:5a:cc:a7:
d7:fd:d2:c5:c9:02:39:e0:5c:f6:40:58:94:22:19:
23:dd:c3:5e:88:a8:c6:68:f6:f0:31:4e:31:75:c5:
55:83:f6:90:80:cb:49:a7:c5:87:83:b0:2e:44:6b:
f2:19:82:57:0b:9b:ea:cb:d8:41:30:1e:d4:31:cc:
e5:73:dc:52:6b:87:c6:4f:05:82:04:a2:35:f6:16:
23:5c:12:f1:b3:8d:3a:15:54:c9:28:da:28:88:50:
d9:1d:2e:65:67:20:5a:fc:39:74:c9:a7:62:5e:cb:
3f:02:b8:d2:75:40:16:d3:db:a8:11:d0:aa:90:de:
fc:eb:21:89:d2:98:f0:3c:4d:98:8d:5c:3a:f8:af:
20:a4:61:5a:d1:5b:d6:0b:a6:4f:20:e7:8b:6e:9d:
cf:16:35:1b:2b:72:68:db:10:ab:b7:eb:e2:c6:d7:
e1:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:A8:F4:82:B4:61:7F:14:67:CB:E4:FC:26:76:73:7E:3D:BA:98:0D
X509v3 Authority Key Identifier:
keyid:8C:18:6A:56:EA:84:C1:3C:62:76:8A:9D:17:BA:E1:33:CE:DF:10:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jBhqVuqEwTxidoqdF7rhM87fEEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/Maj0grRhfxRny-T8JnZzfj26mA0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/jBhqVuqEwTxidoqdF7rhM87fEEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.179.192.0/18
62.64.128.0-62.64.139.255
62.64.144.0/20
185.102.148.0/22
188.74.64.0/19
217.142.64.0/18
217.168.248.0/21
IPv6:
2a05:87c0::/29
Signature Algorithm: sha256WithRSAEncryption
7e:0a:41:1f:08:2b:52:a4:c7:f5:02:fe:55:aa:71:3f:98:9d:
ad:23:49:82:47:c3:aa:b0:c9:77:b1:74:1e:49:2b:7a:7c:2a:
90:29:38:23:ad:59:09:30:20:34:d7:ae:05:a2:16:b4:10:fd:
80:5f:c0:0a:f4:84:64:39:83:ab:9f:ab:b9:3f:72:c4:04:69:
f0:9a:99:c0:d8:9b:26:ff:bc:c3:e8:b4:9c:80:33:72:1c:32:
4c:ef:58:8e:fb:d4:76:a1:9a:66:49:13:18:17:5b:5d:ae:00:
e9:87:93:b5:1b:05:81:9e:8b:23:f3:42:f3:dc:3c:16:cd:af:
66:16:83:4e:b5:8d:32:98:aa:3d:2a:af:65:bc:1c:5c:2a:5d:
34:6a:09:8a:32:3d:5f:da:26:fc:b3:a1:c7:8b:f3:12:df:82:
99:5d:f6:a0:d4:ea:82:9c:53:8e:5d:6f:e1:2b:41:c6:65:fb:
d4:c5:6f:b5:33:08:b0:cb:39:c6:de:77:7f:5c:51:a5:10:1b:
e2:3a:2f:15:b0:95:81:23:2f:fb:05:9a:38:6b:e9:dd:4b:6b:
27:6c:ab:c6:33:7d:6c:50:41:d3:70:e6:89:f4:1a:f1:f6:2d:
18:aa:ec:46:6e:63:56:87:f9:eb:ad:a0:7d:18:3a:a8:3b:3b:
cb:95:f8:76
-----BEGIN CERTIFICATE-----
MIIFODCCBCCgAwIBAgISAZF6siumV1Z4kduOR578csmHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjMTg2YTU2ZWE4NGMxM2M2Mjc2OGE5ZDE3YmFlMTMzY2Vk
ZjEwNDUwHhcNMjQwODIyMTUyNjIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMWE4ZjQ4MmI0NjE3ZjE0NjdjYmU0ZmMyNjc2NzM3ZTNkYmE5ODBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/oJvaBLAmd20PDuJbJbh8X+tCJO
yzhJ9pHMMKvjWpl2c/DsepdxCjcwOdk5gE1VJmI57SIeXe6qNCQ3NBMAbqsMFxgo
fc8GVbfGSCzmoyWHCU0hBoVazKfX/dLFyQI54Fz2QFiUIhkj3cNeiKjGaPbwMU4x
dcVVg/aQgMtJp8WHg7AuRGvyGYJXC5vqy9hBMB7UMczlc9xSa4fGTwWCBKI19hYj
XBLxs406FVTJKNooiFDZHS5lZyBa/Dl0yadiXss/ArjSdUAW09uoEdCqkN786yGJ
0pjwPE2YjVw6+K8gpGFa0VvWC6ZPIOeLbp3PFjUbK3Jo2xCrt+vixtfhDQIDAQAB
o4ICRDCCAkAwHQYDVR0OBBYEFDGo9IK0YX8UZ8vk/CZ2c349upgNMB8GA1UdIwQY
MBaAFIwYalbqhME8YnaKnRe64TPO3xBFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakJocVZ1cUV3VHhpZG9xZEY3cmhNODdmRUVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi9jOGVjOTUtYjVmNS00NGZiLWI5M2Qt
MjA5MmFmNjQ3MDcwLzEvTWFqMGdyUmhmeFJueS1UOEpuWnpmajI2bUEwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi9jOGVjOTUtYjVmNS00NGZiLWI5M2QtMjA5MmFmNjQ3MDcw
LzEvakJocVZ1cUV3VHhpZG9xZEY3cmhNODdmRUVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFoGCCsGAQUFBwEHAQH/BEswSTA4BAIAATAyAwQGM7PAMAwD
BAc+QIADBAI+QIgDBAQ+QJADBAK5ZpQDBAW8SkADBAbZjkADBAPZqPgwDQQCAAIw
BwMFAyoFh8AwDQYJKoZIhvcNAQELBQADggEBAH4KQR8IK1Kkx/UC/lWqcT+Yna0j
SYJHw6qwyXexdB5JK3p8KpApOCOtWQkwIDTXrgWiFrQQ/YBfwAr0hGQ5g6ufq7k/
csQEafCamcDYmyb/vMPotJyAM3IcMkzvWI771HahmmZJExgXW12uAOmHk7UbBYGe
iyPzQvPcPBbNr2YWg061jTKYqj0qr2W8HFwqXTRqCYoyPV/aJvyzoceL8xLfgpld
9qDU6oKcU45db+ErQcZl+9TFb7UzCLDLOcbed39cUaUQG+I6LxWwlYEjL/sFmjhr
6d1Laydsq8YzfWxQQdNw5on0GvH2LRiq7EZuY1aH+eutoH0YOqg7O8uV+HY=
-----END CERTIFICATE-----
Generated at Thu Aug 29 17:04:57 2024 by rpki-client on console-ams.rpki-client.org