Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/1ytClAnMQB3CHDKpXCoA1wNm4U4.roa
File: 1ytClAnMQB3CHDKpXCoA1wNm4U4.roa (raw, json)
Hash identifier: zgh/N4e9c0isseC6E/9F4pccCxwI5CS5PWMbXstATXA=
Subject key identifier: D7:2B:42:94:09:CC:40:1D:C2:1C:32:A9:5C:2A:00:D7:03:66:E1:4E
Certificate issuer: /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Certificate serial: 018E619430D85919F0590E2C8A82AECF9A43
Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/1ytClAnMQB3CHDKpXCoA1wNm4U4.roa
Signing time: Thu 21 Mar 2024 15:14:45 +0000
ROA not before: Thu 21 Mar 2024 15:14:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16625
IP address blocks: 84.53.156.0/22 maxlen: 22
84.53.164.0/22 maxlen: 22
84.53.188.0/22 maxlen: 22
88.221.4.0/22 maxlen: 22
88.221.8.0/22 maxlen: 22
88.221.16.0/22 maxlen: 22
88.221.32.0/22 maxlen: 22
88.221.36.0/22 maxlen: 22
88.221.40.0/22 maxlen: 22
88.221.44.0/22 maxlen: 22
88.221.58.0/23 maxlen: 23
88.221.60.0/22 maxlen: 22
88.221.68.0/22 maxlen: 22
88.221.76.0/22 maxlen: 22
88.221.96.0/22 maxlen: 22
88.221.124.0/22 maxlen: 22
88.221.130.0/23 maxlen: 23
88.221.136.0/21 maxlen: 21
88.221.148.0/22 maxlen: 22
88.221.152.0/21 maxlen: 21
88.221.164.0/22 maxlen: 22
88.221.168.0/22 maxlen: 22
88.221.176.0/21 maxlen: 21
88.221.224.0/21 maxlen: 21
88.221.236.0/22 maxlen: 22
88.221.240.0/21 maxlen: 21
88.221.248.0/22 maxlen: 22
92.123.240.0/22 maxlen: 22
95.100.16.0/20 maxlen: 20
95.100.46.0/23 maxlen: 23
95.100.48.0/20 maxlen: 20
95.100.64.0/20 maxlen: 20
95.100.80.0/22 maxlen: 22
95.100.112.0/20 maxlen: 20
95.100.136.0/24 maxlen: 24
95.100.137.0/24 maxlen: 24
95.100.138.0/24 maxlen: 24
95.100.139.0/24 maxlen: 24
95.100.140.0/22 maxlen: 22
95.100.160.0/22 maxlen: 22
95.100.176.0/22 maxlen: 22
95.100.182.0/23 maxlen: 23
95.100.184.0/22 maxlen: 22
95.100.188.0/22 maxlen: 22
95.100.208.0/22 maxlen: 22
95.100.216.0/22 maxlen: 22
95.100.224.0/20 maxlen: 20
95.100.244.0/22 maxlen: 22
95.100.250.0/23 maxlen: 23
195.95.192.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 21 Mar 2024 15:42:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:61:94:30:d8:59:19:f0:59:0e:2c:8a:82:ae:cf:9a:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Validity
Not Before: Mar 21 15:14:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d72b429409cc401dc21c32a95c2a00d70366e14e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:2b:ed:13:c4:57:24:11:35:6a:09:9a:29:93:
27:54:e1:1f:07:01:17:78:fb:e1:b5:2c:d5:39:8a:
87:09:b2:fb:fb:b5:49:f8:b8:8d:45:d6:27:b7:4d:
76:fd:f1:a8:4f:21:9a:40:68:d6:bc:8d:de:a6:eb:
5b:dd:88:f3:1e:8d:0a:eb:d2:01:07:d6:df:91:dc:
d3:c9:cf:d3:c2:da:4f:6a:49:77:6c:b0:d2:32:a4:
c7:28:cb:cb:6d:69:b0:87:26:48:5d:bb:d2:33:b4:
73:e5:60:f1:02:a5:6b:7a:fa:6d:1f:a8:58:ed:c8:
dc:0f:c0:9a:66:3f:75:61:36:76:de:72:b7:3d:c1:
f4:94:97:91:20:df:2e:10:61:b0:dd:ef:09:d4:d0:
35:c9:74:ce:71:8a:db:48:b2:c5:47:d3:45:88:2c:
b9:56:8a:5d:6a:24:60:22:20:3c:cd:68:1c:f8:c4:
96:5e:68:a3:59:95:22:ea:98:3a:af:43:a7:66:08:
58:b4:a5:dc:62:f0:03:be:f9:d4:49:40:d1:e4:5b:
dd:1a:20:ff:84:79:74:dd:1c:59:52:8b:2b:a9:d3:
a1:2f:50:fc:67:30:8a:28:01:9e:b8:36:25:10:87:
51:55:51:d5:57:9d:31:79:be:a3:f7:8e:9c:37:04:
4e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:2B:42:94:09:CC:40:1D:C2:1C:32:A9:5C:2A:00:D7:03:66:E1:4E
X509v3 Authority Key Identifier:
keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/1ytClAnMQB3CHDKpXCoA1wNm4U4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.53.156.0/22
84.53.164.0/22
84.53.188.0/22
88.221.4.0-88.221.11.255
88.221.16.0/22
88.221.32.0/20
88.221.58.0-88.221.63.255
88.221.68.0/22
88.221.76.0/22
88.221.96.0/22
88.221.124.0/22
88.221.130.0/23
88.221.136.0/21
88.221.148.0-88.221.159.255
88.221.164.0-88.221.171.255
88.221.176.0/21
88.221.224.0/21
88.221.236.0-88.221.251.255
92.123.240.0/22
95.100.16.0/20
95.100.46.0-95.100.83.255
95.100.112.0/20
95.100.136.0/21
95.100.160.0/22
95.100.176.0/22
95.100.182.0-95.100.191.255
95.100.208.0/22
95.100.216.0/22
95.100.224.0/20
95.100.244.0/22
95.100.250.0/23
195.95.192.0/22
Signature Algorithm: sha256WithRSAEncryption
3d:08:65:c5:20:93:96:db:6f:8b:a0:07:b9:41:92:a5:32:fe:
95:22:a2:80:2a:a3:32:39:0a:c3:c2:1e:33:9f:74:55:ff:fc:
35:77:58:bc:c1:c8:fc:1e:f3:2e:a5:7f:2c:71:b9:09:ef:d5:
3d:47:10:a3:e6:cf:72:3a:92:a3:30:ea:24:d8:76:ca:45:7b:
09:53:08:de:55:1a:d0:d5:f1:65:6a:bf:47:aa:14:8d:81:36:
ad:36:ad:17:3b:c4:44:a6:e8:b6:70:5a:03:88:1c:94:5a:e6:
38:5e:69:78:6a:ca:f7:8e:cf:c2:b1:f3:e9:81:69:79:79:0d:
35:11:6b:ac:1e:2a:9d:eb:ae:af:19:9c:49:63:3e:42:46:16:
c9:01:05:3d:88:71:f3:bc:7e:fe:ae:74:68:7a:21:5f:05:c0:
d7:7e:6d:2d:20:ca:6f:66:ac:02:13:00:7e:0b:01:5b:eb:cd:
6b:ee:6f:b0:e2:91:5c:95:db:61:f5:e1:ee:0d:d7:7d:34:f8:
ab:e1:21:1c:89:d3:c8:a3:8c:be:5f:15:cd:22:dc:30:ab:30:
57:e3:ac:37:3b:e3:a0:fc:2e:6a:83:bf:90:4c:19:7e:7c:20:
da:6d:bf:d8:1a:84:a6:f1:56:29:47:3a:3a:00:4c:e4:72:c5:
57:4f:a8:2f
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgISAY5hlDDYWRnwWQ4sioKuz5pDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiNWZjYmJlYTQ4OTM3YTQ0MmJhYmRiMzMwMjEzMmM0YmM5
YmQ2YWEwHhcNMjQwMzIxMTUxNDQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNzJiNDI5NDA5Y2M0MDFkYzIxYzMyYTk1YzJhMDBkNzAzNjZlMTRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCvtE8RXJBE1agmaKZMnVOEfBwEX
ePvhtSzVOYqHCbL7+7VJ+LiNRdYnt012/fGoTyGaQGjWvI3eputb3YjzHo0K69IB
B9bfkdzTyc/TwtpPakl3bLDSMqTHKMvLbWmwhyZIXbvSM7Rz5WDxAqVrevptH6hY
7cjcD8CaZj91YTZ23nK3PcH0lJeRIN8uEGGw3e8J1NA1yXTOcYrbSLLFR9NFiCy5
VopdaiRgIiA8zWgc+MSWXmijWZUi6pg6r0OnZghYtKXcYvADvvnUSUDR5FvdGiD/
hHl03RxZUosrqdOhL1D8ZzCKKAGeuDYlEIdRVVHVV50xeb6j946cNwROhwIDAQAB
o4IDAzCCAv8wHQYDVR0OBBYEFNcrQpQJzEAdwhwyqVwqANcDZuFOMB8GA1UdIwQY
MBaAFGtfy76kiTekQrq9szAhMsS8m9aqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTFfTHZxU0pONlJDdXIyek1DRXl4THliMXFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8wNDIxODgtZGZiNi00YWQ0LTkxYTQt
ODhkMWNhYzllNGYxLzEvMXl0Q2xBbk1RQjNDSERLcFhDb0Exd05tNFU0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC8wNDIxODgtZGZiNi00YWQ0LTkxYTQtODhkMWNhYzllNGYx
LzEvYTFfTHZxU0pONlJDdXIyek1DRXl4THliMXFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBFwYIKwYBBQUHAQcBAf8EggEGMIIBAjCB/wQCAAEwgfgD
BAJUNZwDBAJUNaQDBAJUNbwwDAMEAljdBAMEAljdCAMEAljdEAMEBFjdIDAMAwQB
WN06AwQGWN0AAwQCWN1EAwQCWN1MAwQCWN1gAwQCWN18AwQBWN2CAwQDWN2IMAwD
BAJY3ZQDBAVY3YAwDAMEAljdpAMEAljdqAMEA1jdsAMEA1jd4DAMAwQCWN3sAwQC
WN34AwQCXHvwAwQEX2QQMAwDBAFfZC4DBAJfZFADBARfZHADBANfZIgDBAJfZKAD
BAJfZLAwDAMEAV9ktgMEBl9kgAMEAl9k0AMEAl9k2AMEBF9k4AMEAl9k9AMEAV9k
+gMEAsNfwDANBgkqhkiG9w0BAQsFAAOCAQEAPQhlxSCTlttvi6AHuUGSpTL+lSKi
gCqjMjkKw8IeM590Vf/8NXdYvMHI/B7zLqV/LHG5Ce/VPUcQo+bPcjqSozDqJNh2
ykV7CVMI3lUa0NXxZWq/R6oUjYE2rTatFzvERKbotnBaA4gclFrmOF5peGrK947P
wrHz6YFpeXkNNRFrrB4qneuurxmcSWM+QkYWyQEFPYhx87x+/q50aHohXwXA135t
LSDKb2asAhMAfgsBW+vNa+5vsOKRXJXbYfXh7g3XfTT4q+EhHInTyKOMvl8VzSLc
MKswV+OsNzvjoPwuaoO/kEwZfnwg2m2/2BqEpvFWKUc6OgBM5HLFV0+oLw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:29 2024 by rpki-client on console-fra.rpki-client.org