Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/9AYELBjWnZ8EZo8v4RkwHVcbrx4.roa
File: 9AYELBjWnZ8EZo8v4RkwHVcbrx4.roa (raw, json)
Hash identifier: D7Ep/5u4TKKzqOKkZ3XLqOyS9LF0uDsfjxqfigGu/tM=
Subject key identifier: F4:06:04:2C:18:D6:9D:9F:04:66:8F:2F:E1:19:30:1D:57:1B:AF:1E
Certificate issuer: /CN=a24b48edc7a325d7f1ae0f257c0e2835171bc9ae
Certificate serial: 018E65CC818BE7897AAAC5AF0C0382018BCC
Authority key identifier: A2:4B:48:ED:C7:A3:25:D7:F1:AE:0F:25:7C:0E:28:35:17:1B:C9:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oktI7cejJdfxrg8lfA4oNRcbya4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/9AYELBjWnZ8EZo8v4RkwHVcbrx4.roa
Signing time: Fri 22 Mar 2024 10:54:45 +0000
ROA not before: Fri 22 Mar 2024 10:54:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39704
IP address blocks: 5.22.248.0/21 maxlen: 24
46.182.216.0/21 maxlen: 24
91.192.36.0/22 maxlen: 24
94.124.88.0/21 maxlen: 24
185.94.168.0/24 maxlen: 24
185.103.16.0/22 maxlen: 24
194.50.163.0/24 maxlen: 24
213.132.192.0/19 maxlen: 24
2a00:1bd0::/29 maxlen: 32
2a00:1bd0:1378::/48 maxlen: 48
2a00:1bd0:1398::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 29 Aug 2024 07:28:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:65:cc:81:8b:e7:89:7a:aa:c5:af:0c:03:82:01:8b:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a24b48edc7a325d7f1ae0f257c0e2835171bc9ae
Validity
Not Before: Mar 22 10:54:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f406042c18d69d9f04668f2fe119301d571baf1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:e5:cf:c3:f7:3f:19:8d:fe:87:98:24:38:2f:
86:db:c2:f6:c5:78:a2:d6:38:15:a2:e8:26:41:c0:
7c:9b:13:7d:ba:da:ba:d3:64:20:9a:7c:0e:bb:a3:
99:64:f8:c7:41:3e:36:70:3a:12:47:5f:2b:06:d5:
c8:df:55:ee:6f:6a:dd:bc:ad:70:fa:b3:6d:fd:6c:
57:03:5e:c2:49:93:07:b1:fa:5e:40:6e:a5:63:5f:
7e:0b:a0:3d:a7:cb:b3:43:5d:d4:d7:3d:c7:98:74:
e5:49:ab:07:84:5d:e2:e8:92:dd:56:6c:f6:c1:6e:
ea:03:72:44:0b:af:0f:5a:21:dd:48:6c:b6:82:6e:
98:30:d3:58:9f:84:a3:e3:f7:4d:c8:ea:86:86:4d:
83:ef:a1:3e:2d:00:08:c7:0d:8f:26:29:8c:00:49:
69:16:6e:0c:37:02:d8:98:f4:e2:f5:dc:50:1e:16:
90:b3:f8:59:35:1b:92:73:ad:33:2b:a0:33:81:62:
92:00:ce:56:23:9f:97:5b:c6:f3:8d:54:9d:f5:42:
88:d6:55:b9:44:f6:05:7e:0a:01:5b:23:74:28:29:
68:1c:28:7d:bb:ef:31:b2:0d:84:9e:bd:02:99:e2:
5a:f2:07:df:d9:b7:e9:10:6d:12:28:2c:7c:ed:16:
cf:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:06:04:2C:18:D6:9D:9F:04:66:8F:2F:E1:19:30:1D:57:1B:AF:1E
X509v3 Authority Key Identifier:
keyid:A2:4B:48:ED:C7:A3:25:D7:F1:AE:0F:25:7C:0E:28:35:17:1B:C9:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oktI7cejJdfxrg8lfA4oNRcbya4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/9AYELBjWnZ8EZo8v4RkwHVcbrx4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.22.248.0/21
46.182.216.0/21
91.192.36.0/22
94.124.88.0/21
185.94.168.0/24
185.103.16.0/22
194.50.163.0/24
213.132.192.0/19
IPv6:
2a00:1bd0::/29
Signature Algorithm: sha256WithRSAEncryption
0c:4d:56:1d:b1:ec:ca:a7:c3:4e:90:0a:de:2a:43:13:3d:ca:
3a:ca:b9:1d:c1:c0:b0:54:2d:d4:a5:fa:e3:b1:0f:d1:86:bc:
a3:0a:25:21:1c:8f:33:c6:ac:3d:7b:22:db:61:8f:0b:1a:0a:
db:b3:d0:3b:20:45:db:b9:fb:e3:da:e5:1c:ee:f0:e1:09:3f:
80:a3:50:89:d6:b1:68:1b:f7:d7:a0:f2:c8:30:4d:e6:b3:01:
ed:fe:71:c3:db:10:2b:e2:83:df:e3:cc:4d:52:6d:d8:92:a5:
92:f4:a0:73:5c:be:a6:82:04:95:56:4d:7a:d6:86:b6:4a:77:
47:7c:b2:ab:4a:d0:c3:01:e4:07:c1:85:37:84:70:04:24:de:
26:7d:52:c7:ce:90:79:ad:fc:03:60:c0:45:56:65:5b:65:2f:
b7:d6:dd:08:f1:a6:87:47:77:44:b5:6f:98:bc:37:d6:1c:7d:
d6:0c:0b:7c:cc:92:c5:2a:fe:6f:dd:67:76:ec:15:6d:b0:02:
c1:37:c9:1b:70:f2:21:47:45:2c:f7:48:3b:a7:46:c0:d9:cb:
16:51:28:91:ff:e7:81:6f:8e:91:e6:2e:e6:36:85:29:b7:75:
74:97:f9:1e:7d:31:56:d2:55:25:90:36:8e:f9:61:d6:e0:45:
3e:ec:9d:d6
-----BEGIN CERTIFICATE-----
MIIFNjCCBB6gAwIBAgISAY5lzIGL54l6qsWvDAOCAYvMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyNGI0OGVkYzdhMzI1ZDdmMWFlMGYyNTdjMGUyODM1MTcx
YmM5YWUwHhcNMjQwMzIyMTA1NDQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNDA2MDQyYzE4ZDY5ZDlmMDQ2NjhmMmZlMTE5MzAxZDU3MWJhZjFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiuXPw/c/GY3+h5gkOC+G28L2xXii
1jgVougmQcB8mxN9utq602QgmnwOu6OZZPjHQT42cDoSR18rBtXI31Xub2rdvK1w
+rNt/WxXA17CSZMHsfpeQG6lY19+C6A9p8uzQ13U1z3HmHTlSasHhF3i6JLdVmz2
wW7qA3JEC68PWiHdSGy2gm6YMNNYn4Sj4/dNyOqGhk2D76E+LQAIxw2PJimMAElp
Fm4MNwLYmPTi9dxQHhaQs/hZNRuSc60zK6AzgWKSAM5WI5+XW8bzjVSd9UKI1lW5
RPYFfgoBWyN0KCloHCh9u+8xsg2Enr0CmeJa8gff2bfpEG0SKCx87RbPXwIDAQAB
o4ICQjCCAj4wHQYDVR0OBBYEFPQGBCwY1p2fBGaPL+EZMB1XG68eMB8GA1UdIwQY
MBaAFKJLSO3HoyXX8a4PJXwOKDUXG8muMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2t0STdjZWpKZGZ4cmc4bGZBNG9OUmNieWE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni82MmFmZWYtNzBkMS00ZmUyLTllZGYt
N2YxZTU3NDg3YzFhLzEvOUFZRUxCalduWjhFWm84djRSa3dIVmNicng0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni82MmFmZWYtNzBkMS00ZmUyLTllZGYtN2YxZTU3NDg3YzFh
LzEvb2t0STdjZWpKZGZ4cmc4bGZBNG9OUmNieWE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFgGCCsGAQUFBwEHAQH/BEkwRzA2BAIAATAwAwQDBRb4AwQD
LrbYAwQCW8AkAwQDXnxYAwQAuV6oAwQCuWcQAwQAwjKjAwQF1YTAMA0EAgACMAcD
BQMqABvQMA0GCSqGSIb3DQEBCwUAA4IBAQAMTVYdsezKp8NOkAreKkMTPco6yrkd
wcCwVC3UpfrjsQ/RhryjCiUhHI8zxqw9eyLbYY8LGgrbs9A7IEXbufvj2uUc7vDh
CT+Ao1CJ1rFoG/fXoPLIME3mswHt/nHD2xAr4oPf48xNUm3YkqWS9KBzXL6mggSV
Vk161oa2SndHfLKrStDDAeQHwYU3hHAEJN4mfVLHzpB5rfwDYMBFVmVbZS+31t0I
8aaHR3dEtW+YvDfWHH3WDAt8zJLFKv5v3Wd27BVtsALBN8kbcPIhR0Us90g7p0bA
2csWUSiR/+eBb46R5i7mNoUpt3V0l/kefTFW0lUlkDaO+WHW4EU+7J3W
-----END CERTIFICATE-----
Generated at Thu Aug 29 10:00:51 2024 by rpki-client on console-fra.rpki-client.org