Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/RK1CimVTQ8GhB20H6K6HklUnNvw.roa
File: RK1CimVTQ8GhB20H6K6HklUnNvw.roa (raw, json)
Hash identifier: b41O4zqITAcmyVnRzKdZ8S7oQCYSm1zGVlKNXGjfAXs=
Subject key identifier: 44:AD:42:8A:65:53:43:C1:A1:07:6D:07:E8:AE:87:92:55:27:36:FC
Certificate issuer: /CN=cdb83cfe5489835f294d0af4dd4db6e3dc25f1f3
Certificate serial: 018570708627C90AD8DFE02D24E44FAD09C8
Authority key identifier: CD:B8:3C:FE:54:89:83:5F:29:4D:0A:F4:DD:4D:B6:E3:DC:25:F1:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/RK1CimVTQ8GhB20H6K6HklUnNvw.roa
Signing time: Mon 02 Jan 2023 03:05:00 +0000
ROA not before: Mon 02 Jan 2023 03:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51964
IP address blocks: 57.92.0.0/15 maxlen: 24
57.199.0.0/16 maxlen: 24
57.7.0.0/16 maxlen: 24
57.76.0.0/14 maxlen: 32
57.98.0.0/16 maxlen: 24
57.66.0.0/15 maxlen: 32
57.194.0.0/15 maxlen: 24
57.205.0.0/16 maxlen: 24
57.96.0.0/15 maxlen: 24
57.80.0.0/14 maxlen: 32
57.70.0.0/16 maxlen: 32
57.86.0.0/15 maxlen: 32
57.100.0.0/16 maxlen: 24
57.68.0.0/15 maxlen: 32
57.207.0.0/16 maxlen: 24
57.74.0.0/16 maxlen: 32
57.90.0.0/16 maxlen: 32
57.202.0.0/15 maxlen: 24
57.197.0.0/16 maxlen: 24
57.21.0.0/16 maxlen: 24
57.208.0.0/12 maxlen: 24
57.200.0.0/16 maxlen: 24
57.72.0.0/15 maxlen: 32
57.35.0.0/16 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:70:86:27:c9:0a:d8:df:e0:2d:24:e4:4f:ad:09:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdb83cfe5489835f294d0af4dd4db6e3dc25f1f3
Validity
Not Before: Jan 2 03:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=44ad428a655343c1a1076d07e8ae8792552736fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:38:10:84:48:a6:6b:23:bc:e4:a6:0e:66:96:
e6:c0:24:7e:6a:b0:07:d2:aa:ed:78:84:1a:9e:4c:
15:4a:e8:b4:9b:a3:98:33:5a:ad:81:c4:e5:0b:34:
97:8d:df:38:26:14:cc:a6:9b:43:df:68:20:0b:d4:
7e:7b:ec:35:46:03:e7:9b:97:3c:4f:d9:e2:a8:d9:
61:36:2b:33:35:2c:4f:c2:36:9a:3d:4b:a3:5d:52:
7a:d1:69:1b:93:15:5e:6b:6b:48:7c:51:12:95:2a:
25:6a:c0:1f:34:6c:0b:01:ea:32:c6:28:73:e1:a1:
08:ee:fa:2c:97:b3:c2:85:8e:bc:a9:98:ae:0b:f6:
e2:d2:11:63:95:74:d4:6f:85:53:6a:b3:92:12:4e:
62:16:de:7e:15:02:ee:9c:e6:55:31:f8:4e:d2:ca:
a7:f8:32:ba:aa:f0:4a:6b:cf:7d:26:55:ef:9a:f7:
59:10:dc:46:8a:63:af:5e:86:ea:ec:7f:76:cc:b8:
a1:5c:67:c8:60:23:08:0c:4a:16:6b:b3:20:ae:b9:
4f:7b:f9:13:68:83:42:1b:85:b8:87:69:ea:f1:78:
7a:dd:ff:7a:24:5d:a4:a2:f0:7a:3d:8c:d3:5e:ca:
e1:09:67:55:a8:6c:64:78:11:7d:5f:12:19:9b:e6:
cd:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:AD:42:8A:65:53:43:C1:A1:07:6D:07:E8:AE:87:92:55:27:36:FC
X509v3 Authority Key Identifier:
keyid:CD:B8:3C:FE:54:89:83:5F:29:4D:0A:F4:DD:4D:B6:E3:DC:25:F1:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/RK1CimVTQ8GhB20H6K6HklUnNvw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
57.7.0.0/16
57.21.0.0/16
57.35.0.0/16
57.66.0.0-57.70.255.255
57.72.0.0-57.74.255.255
57.76.0.0-57.83.255.255
57.86.0.0/15
57.90.0.0/16
57.92.0.0/15
57.96.0.0-57.98.255.255
57.100.0.0/16
57.194.0.0/15
57.197.0.0/16
57.199.0.0-57.200.255.255
57.202.0.0/15
57.205.0.0/16
57.207.0.0-57.223.255.255
Signature Algorithm: sha256WithRSAEncryption
19:bd:6a:e1:c9:5f:c7:c7:9a:a9:10:8b:a1:9d:44:8d:37:88:
28:cf:37:d6:02:24:57:8c:60:46:b9:e2:ec:a1:3b:e2:c5:9f:
b1:28:7f:07:ba:fc:51:71:5c:10:87:6b:db:3f:64:2f:ca:c3:
f2:23:a4:db:3c:d1:cd:1a:9e:25:0c:09:96:ad:43:83:8b:d5:
a3:a7:86:de:33:db:13:76:1c:49:ab:7b:12:42:1e:fe:c5:3c:
80:52:69:c0:1d:9e:1e:e1:c2:4a:04:28:65:98:eb:69:0c:73:
dd:16:d6:eb:b8:86:a3:6b:1f:d7:5f:e6:1e:30:a0:05:67:a7:
f2:3e:41:11:55:f8:e2:cc:ae:53:9e:a8:d0:50:34:44:4b:79:
0a:4b:8c:5f:08:19:d6:e5:cf:33:30:cc:c2:16:ef:fa:eb:4d:
ee:01:c2:05:fb:e3:cd:14:2d:f1:42:51:7a:85:8f:40:14:1b:
e5:8c:3a:11:70:05:83:cc:04:a5:9d:55:a5:26:b1:53:68:4c:
43:df:d6:12:2f:e6:ce:36:7d:03:8e:ef:ed:5c:f4:11:c5:9c:
e3:50:dc:35:25:35:58:ec:c5:82:97:91:91:96:b2:c0:a6:fc:
ef:da:8b:bf:91:09:0d:ed:b2:0d:82:e1:d9:85:0c:d8:6c:e2:
ed:9c:1c:42
-----BEGIN CERTIFICATE-----
MIIFejCCBGKgAwIBAgISAYVwcIYnyQrY3+AtJORPrQnIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkYjgzY2ZlNTQ4OTgzNWYyOTRkMGFmNGRkNGRiNmUzZGMy
NWYxZjMwHhcNMjMwMTAyMDMwNTAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NGFkNDI4YTY1NTM0M2MxYTEwNzZkMDdlOGFlODc5MjU1MjczNmZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjgQhEimayO85KYOZpbmwCR+arAH
0qrteIQankwVSui0m6OYM1qtgcTlCzSXjd84JhTMpptD32ggC9R+e+w1RgPnm5c8
T9niqNlhNiszNSxPwjaaPUujXVJ60WkbkxVea2tIfFESlSolasAfNGwLAeoyxihz
4aEI7vosl7PChY68qZiuC/bi0hFjlXTUb4VTarOSEk5iFt5+FQLunOZVMfhO0sqn
+DK6qvBKa899JlXvmvdZENxGimOvXobq7H92zLihXGfIYCMIDEoWa7MgrrlPe/kT
aINCG4W4h2nq8Xh63f96JF2kovB6PYzTXsrhCWdVqGxkeBF9XxIZm+bNVQIDAQAB
o4IChjCCAoIwHQYDVR0OBBYEFEStQoplU0PBoQdtB+iuh5JVJzb8MB8GA1UdIwQY
MBaAFM24PP5UiYNfKU0K9N1NtuPcJfHzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemJnOF9sU0pnMThwVFFyMDNVMjI0OXdsOGZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS83Mzk3MTYtOWFmMi00N2Y1LWE2ZjEt
YTNiNzRmOTY0MWFjLzEvUksxQ2ltVlRROEdoQjIwSDZLNkhrbFVuTnZ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS83Mzk3MTYtOWFmMi00N2Y1LWE2ZjEtYTNiNzRmOTY0MWFj
LzEvemJnOF9sU0pnMThwVFFyMDNVMjI0OXdsOGZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGbBggrBgEFBQcBBwEB/wSBizCBiDCBhQQCAAEwfwMDADkH
AwMAORUDAwA5IzAKAwMBOUIDAwA5RjAKAwMDOUgDAwA5SjAKAwMCOUwDAwI5UAMD
ATlWAwMAOVoDAwE5XDAKAwMFOWADAwA5YgMDADlkAwMBOcIDAwA5xTAKAwMAOccD
AwA5yAMDATnKAwMAOc0wCgMDADnPAwMFOcAwDQYJKoZIhvcNAQELBQADggEBABm9
auHJX8fHmqkQi6GdRI03iCjPN9YCJFeMYEa54uyhO+LFn7Eofwe6/FFxXBCHa9s/
ZC/Kw/IjpNs80c0aniUMCZatQ4OL1aOnht4z2xN2HEmrexJCHv7FPIBSacAdnh7h
wkoEKGWY62kMc90W1uu4hqNrH9df5h4woAVnp/I+QRFV+OLMrlOeqNBQNERLeQpL
jF8IGdblzzMwzMIW7/rrTe4BwgX7480ULfFCUXqFj0AUG+WMOhFwBYPMBKWdVaUm
sVNoTEPf1hIv5s42fQOO7+1c9BHFnONQ3DUlNVjsxYKXkZGWssCm/O/ai7+RCQ3t
sg2C4dmFDNhs4u2cHEI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:44 2024 by rpki-client on console-fra.rpki-client.org