Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Sj40Yvx0L36dDx5sy9i2ZKLa6z0.roa
File: Sj40Yvx0L36dDx5sy9i2ZKLa6z0.roa (raw, json)
Hash identifier: An8Ofn9oWZs8iq97/bg68iZaW/vmJKJ9U/rfrCUPE64=
Subject key identifier: 4A:3E:34:62:FC:74:2F:7E:9D:0F:1E:6C:CB:D8:B6:64:A2:DA:EB:3D
Certificate issuer: /CN=668e9b2eefb205342382b6072a903f9d9837071a
Certificate serial: 0194266BD287A3F23DD6D3BBFD8A7FB35BFA
Authority key identifier: 66:8E:9B:2E:EF:B2:05:34:23:82:B6:07:2A:90:3F:9D:98:37:07:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Sj40Yvx0L36dDx5sy9i2ZKLa6z0.roa
Signing time: Thu 02 Jan 2025 09:49:47 +0000
ROA not before: Thu 02 Jan 2025 09:49:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44056
IP address blocks: 31.135.224.0/20 maxlen: 20
31.135.226.0/23 maxlen: 23
31.135.228.0/22 maxlen: 22
31.135.232.0/22 maxlen: 22
31.135.236.0/23 maxlen: 23
46.148.128.0/20 maxlen: 20
46.148.128.0/22 maxlen: 22
46.148.143.0/24 maxlen: 24
83.97.104.0/21 maxlen: 21
91.195.130.0/23 maxlen: 23
91.230.146.0/24 maxlen: 24
91.237.186.0/23 maxlen: 23
91.237.186.0/24 maxlen: 24
91.237.187.0/24 maxlen: 24
109.196.64.0/20 maxlen: 24
109.196.64.0/22 maxlen: 22
109.196.68.0/22 maxlen: 22
176.125.192.0/19 maxlen: 19
195.2.238.0/23 maxlen: 23
2a13:2940::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 14 Jan 2025 12:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:d2:87:a3:f2:3d:d6:d3:bb:fd:8a:7f:b3:5b:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=668e9b2eefb205342382b6072a903f9d9837071a
Validity
Not Before: Jan 2 09:49:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4a3e3462fc742f7e9d0f1e6ccbd8b664a2daeb3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:67:07:d2:6c:5e:24:c9:cd:0d:8f:ac:ec:75:
08:8a:ea:d1:e1:cf:bc:f5:2c:65:ec:14:24:39:f1:
26:f9:01:c4:8f:69:e9:02:e2:0a:dd:d4:1d:4e:7a:
4d:77:da:1d:e0:86:ce:75:d2:41:6a:10:97:e1:a7:
c3:46:89:b8:e3:9c:cc:cd:d3:f0:29:78:df:f6:c4:
d2:4a:19:c8:90:de:c3:db:1f:10:2f:c0:9c:1e:4b:
65:d8:0e:16:d5:4b:0c:a7:a9:09:4e:70:a7:f1:74:
ed:27:93:16:55:20:ce:d7:f8:7d:0e:db:5a:f0:f7:
1f:cd:1c:8a:05:50:4c:56:58:e4:82:1d:2d:09:cd:
e1:56:00:b6:34:09:8e:b2:5e:54:af:1f:d4:85:0e:
66:a7:d3:97:c7:aa:4a:c0:38:38:40:e7:93:5a:73:
4e:b0:fa:45:cf:18:e2:08:70:86:95:76:8b:6c:91:
aa:5a:40:b1:09:50:13:cf:78:64:b2:d6:10:68:5a:
0d:91:7c:c0:ef:ab:ab:d4:c7:93:41:f3:87:e5:fe:
6c:2b:8a:3b:f6:1d:39:61:5d:0c:df:2e:1b:4c:1f:
6d:1c:99:b7:05:5f:22:dd:9f:1d:05:db:26:56:7e:
31:1b:13:1e:03:91:0e:9d:33:55:03:b2:3e:1e:3f:
f2:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:3E:34:62:FC:74:2F:7E:9D:0F:1E:6C:CB:D8:B6:64:A2:DA:EB:3D
X509v3 Authority Key Identifier:
keyid:66:8E:9B:2E:EF:B2:05:34:23:82:B6:07:2A:90:3F:9D:98:37:07:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Sj40Yvx0L36dDx5sy9i2ZKLa6z0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.135.224.0/20
46.148.128.0/20
83.97.104.0/21
91.195.130.0/23
91.230.146.0/24
91.237.186.0/23
109.196.64.0/20
176.125.192.0/19
195.2.238.0/23
IPv6:
2a13:2940::/32
Signature Algorithm: sha256WithRSAEncryption
00:51:07:e7:4c:73:45:f5:f1:c0:4f:77:e3:ce:03:b0:52:ee:
49:37:37:4c:51:a7:b6:5b:a4:f7:02:ce:20:84:0d:a7:2e:9d:
a1:9f:16:ad:8b:6e:90:3d:3a:03:64:80:81:31:2e:a5:65:92:
be:36:5d:06:c3:f7:2d:2e:13:63:b7:5b:b1:24:c6:72:04:b4:
10:c6:b4:ee:9b:f5:cf:73:05:70:63:76:cc:8c:fa:69:d2:9f:
41:75:16:04:ae:a8:47:67:08:6f:13:7a:e4:77:c4:ba:b3:dc:
bd:e5:db:ad:bd:9e:18:b0:89:f6:59:6f:11:28:ce:5f:39:68:
ac:43:75:95:e4:01:e7:73:50:1c:bb:82:81:f9:dc:28:b2:c1:
f5:9f:3f:e6:85:74:a9:1d:fe:66:21:a5:14:ac:23:36:c0:20:
e2:9e:8b:9c:59:44:74:48:49:fa:96:ab:4a:2f:0d:90:f5:3d:
91:d8:f2:99:ac:0b:b3:7b:8f:e7:98:72:09:9f:d8:1e:de:a1:
19:25:26:e2:68:46:83:92:ce:e5:00:59:68:dc:5d:6d:c2:ce:
0b:0e:9c:10:a6:67:a2:45:c5:63:5a:ca:e7:13:9d:05:e3:09:
fb:a2:70:f0:96:f3:81:5a:c2:8c:30:f3:07:1b:88:11:7d:da:
24:ae:31:30
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgISAZQma9KHo/I91tO7/Yp/s1v6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2OGU5YjJlZWZiMjA1MzQyMzgyYjYwNzJhOTAzZjlkOTgz
NzA3MWEwHhcNMjUwMTAyMDk0OTQ3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YTNlMzQ2MmZjNzQyZjdlOWQwZjFlNmNjYmQ4YjY2NGEyZGFlYjNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2cH0mxeJMnNDY+s7HUIiurR4c+8
9Sxl7BQkOfEm+QHEj2npAuIK3dQdTnpNd9od4IbOddJBahCX4afDRom445zMzdPw
KXjf9sTSShnIkN7D2x8QL8CcHktl2A4W1UsMp6kJTnCn8XTtJ5MWVSDO1/h9Dtta
8PcfzRyKBVBMVljkgh0tCc3hVgC2NAmOsl5Urx/UhQ5mp9OXx6pKwDg4QOeTWnNO
sPpFzxjiCHCGlXaLbJGqWkCxCVATz3hkstYQaFoNkXzA76ur1MeTQfOH5f5sK4o7
9h05YV0M3y4bTB9tHJm3BV8i3Z8dBdsmVn4xGxMeA5EOnTNVA7I+Hj/yEwIDAQAB
o4ICSDCCAkQwHQYDVR0OBBYEFEo+NGL8dC9+nQ8ebMvYtmSi2us9MB8GA1UdIwQY
MBaAFGaOmy7vsgU0I4K2ByqQP52YNwcaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWm82Ykx1LXlCVFFqZ3JZSEtwQV9uWmczQnhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC80YTEzMDUtMzkxYy00NDZjLTlhMzMt
NGMwOGZmZTEwMDc2LzEvU2o0MFl2eDBMMzZkRHg1c3k5aTJaS0xhNnowLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC80YTEzMDUtMzkxYy00NDZjLTlhMzMtNGMwOGZmZTEwMDc2
LzEvWm82Ykx1LXlCVFFqZ3JZSEtwQV9uWmczQnhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMF4GCCsGAQUFBwEHAQH/BE8wTTA8BAIAATA2AwQEH4fgAwQE
LpSAAwQDU2FoAwQBW8OCAwQAW+aSAwQBW+26AwQEbcRAAwQFsH3AAwQBwwLuMA0E
AgACMAcDBQAqEylAMA0GCSqGSIb3DQEBCwUAA4IBAQAAUQfnTHNF9fHAT3fjzgOw
Uu5JNzdMUae2W6T3As4ghA2nLp2hnxati26QPToDZICBMS6lZZK+Nl0Gw/ctLhNj
t1uxJMZyBLQQxrTum/XPcwVwY3bMjPpp0p9BdRYErqhHZwhvE3rkd8S6s9y95dut
vZ4YsIn2WW8RKM5fOWisQ3WV5AHnc1Acu4KB+dwossH1nz/mhXSpHf5mIaUUrCM2
wCDinoucWUR0SEn6lqtKLw2Q9T2R2PKZrAuze4/nmHIJn9ge3qEZJSbiaEaDks7l
AFlo3F1tws4LDpwQpmeiRcVjWsrnE50F4wn7onDwlvOBWsKMMPMHG4gRfdokrjEw
-----END CERTIFICATE-----
Generated at Sat Apr 19 01:22:22 2025 by rpki-client