Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/1J3XyDIKdVUeUqzT2rxn3BD6d9g.roa
File: 1J3XyDIKdVUeUqzT2rxn3BD6d9g.roa (raw, json)
Hash identifier: XAedv9uYRI5RikN8dcCMNNw0jknMbzaKZltp3ySFjpw=
Subject key identifier: D4:9D:D7:C8:32:0A:75:55:1E:52:AC:D3:DA:BC:67:DC:10:FA:77:D8
Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b
Certificate serial: 018672888E4B287775EC439863B7BE39DD93
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/1J3XyDIKdVUeUqzT2rxn3BD6d9g.roa
Signing time: Tue 21 Feb 2023 05:53:17 +0000
ROA not before: Tue 21 Feb 2023 05:53:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209372
IP address blocks: 185.112.56.0/23 maxlen: 24
185.95.102.0/23 maxlen: 24
185.95.100.0/23 maxlen: 24
185.81.174.0/24 maxlen: 24
185.81.174.0/23 maxlen: 24
185.81.173.0/24 maxlen: 24
185.81.186.0/23 maxlen: 24
185.81.184.0/23 maxlen: 24
185.97.1.0/24 maxlen: 24
185.97.3.0/24 maxlen: 24
185.89.108.0/22 maxlen: 24
185.110.130.0/24 maxlen: 24
89.19.57.0/24 maxlen: 24
89.19.58.0/24 maxlen: 24
185.175.225.0/24 maxlen: 24
185.175.224.0/24 maxlen: 24
89.19.59.0/24 maxlen: 24
185.68.245.0/24 maxlen: 24
213.170.223.0/24 maxlen: 24
185.81.172.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 28 Feb 2023 18:53:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:72:88:8e:4b:28:77:75:ec:43:98:63:b7:be:39:dd:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
Validity
Not Before: Feb 21 05:53:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d49dd7c8320a75551e52acd3dabc67dc10fa77d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ea:4b:38:ed:fd:51:e5:b6:0d:f0:04:63:06:
d3:d1:e4:61:fc:7d:ad:0f:bd:a8:08:eb:6c:e9:99:
8e:5e:82:73:2f:d6:6f:e2:f6:4f:ff:56:51:3f:08:
62:c9:9f:f7:66:8c:2e:0b:72:fc:d1:1d:fb:28:65:
b9:f7:62:49:90:9a:42:e6:46:c6:48:0b:8d:bb:8a:
4e:fd:94:fe:fd:37:dd:ef:c3:bb:af:0b:f8:0f:b2:
b0:f6:85:84:78:bd:04:32:22:06:1b:fd:28:fc:48:
fa:cc:f1:e6:06:69:94:2c:37:1e:ce:6d:52:c4:8b:
05:31:e2:e8:29:86:96:85:fe:3d:92:db:16:11:4a:
b1:8b:d8:bc:9a:be:2c:60:2c:56:75:1d:76:25:70:
a7:a8:77:cd:85:0c:18:5a:e2:8b:cd:c0:32:ea:98:
87:03:f2:7e:e0:1b:c4:63:4f:f6:e2:97:37:64:ad:
c4:3e:f3:b8:46:7b:48:8c:e3:a3:c8:a4:3d:13:91:
84:d6:87:a7:fe:3e:28:4f:26:bc:af:0a:64:31:5c:
cf:87:3a:58:e4:90:82:99:5a:3f:54:2f:5f:a0:6f:
e0:a4:46:90:8f:00:13:cd:b5:a2:b9:60:1e:44:24:
59:12:c4:fc:25:4c:6c:18:50:66:b8:c6:dd:1e:43:
85:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:9D:D7:C8:32:0A:75:55:1E:52:AC:D3:DA:BC:67:DC:10:FA:77:D8
X509v3 Authority Key Identifier:
keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/1J3XyDIKdVUeUqzT2rxn3BD6d9g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.19.57.0-89.19.59.255
185.68.245.0/24
185.81.172.0/22
185.81.184.0/22
185.89.108.0/22
185.95.100.0/22
185.97.1.0/24
185.97.3.0/24
185.110.130.0/24
185.112.56.0/23
185.175.224.0/23
213.170.223.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:fc:b8:51:a5:49:bc:6d:10:3f:cd:e5:c2:6c:2f:09:20:3e:
67:67:7e:36:c3:8f:56:6b:a7:70:a6:6d:e6:54:c5:5b:4e:dc:
14:1f:66:e8:56:aa:60:d8:d4:9b:ed:1a:07:d5:8e:6b:0b:cd:
59:cd:5d:c0:80:ae:d6:be:5c:fb:d8:93:f6:eb:d0:e1:ad:e5:
1e:1a:0e:23:2b:49:8c:17:c9:cc:f7:49:f0:28:ad:96:a5:90:
af:55:cd:68:5b:f3:b6:20:ea:e3:62:fd:74:21:a5:54:b8:42:
44:de:1f:cc:14:37:47:70:54:49:ae:b2:3a:4c:80:a6:ea:fe:
eb:1e:66:78:96:15:88:9c:48:1a:d9:da:5e:9c:2a:80:f6:51:
18:4a:5d:0b:8f:6a:f4:6f:e0:4d:49:41:17:68:6f:ef:74:f7:
61:48:10:cd:d9:f5:f5:77:9b:1a:eb:56:0a:91:d7:0f:3e:39:
2c:0d:e2:2a:6b:53:6d:e1:1d:7b:bc:f7:55:4c:e3:85:a1:0f:
d4:f8:66:e1:87:89:08:98:8e:54:b0:da:7d:ac:ff:e0:15:03:
94:b1:0c:69:6a:c6:ad:bd:d8:f3:b2:d4:31:03:21:5e:ae:d2:
54:c5:b2:ba:e9:4d:58:a0:a9:a0:b3:8b:86:c3:d5:17:6e:69:
f6:75:aa:56
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgISAYZyiI5LKHd17EOYY7e+Od2TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhZWUxNWMzM2RlMzU4OTM4ZDY5MDBhMWIzYzE0NDgwYTM4
OWU4NWIwHhcNMjMwMjIxMDU1MzE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNDlkZDdjODMyMGE3NTU1MWU1MmFjZDNkYWJjNjdkYzEwZmE3N2Q4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+pLOO39UeW2DfAEYwbT0eRh/H2t
D72oCOts6ZmOXoJzL9Zv4vZP/1ZRPwhiyZ/3ZowuC3L80R37KGW592JJkJpC5kbG
SAuNu4pO/ZT+/Tfd78O7rwv4D7Kw9oWEeL0EMiIGG/0o/Ej6zPHmBmmULDcezm1S
xIsFMeLoKYaWhf49ktsWEUqxi9i8mr4sYCxWdR12JXCnqHfNhQwYWuKLzcAy6piH
A/J+4BvEY0/24pc3ZK3EPvO4RntIjOOjyKQ9E5GE1oen/j4oTya8rwpkMVzPhzpY
5JCCmVo/VC9foG/gpEaQjwATzbWiuWAeRCRZEsT8JUxsGFBmuMbdHkOFxQIDAQAB
o4ICUzCCAk8wHQYDVR0OBBYEFNSd18gyCnVVHlKs09q8Z9wQ+nfYMB8GA1UdIwQY
MBaAFJruFcM941iTjWkAobPBRICjiehbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXU0Vnd6M2pXSk9OYVFDaHM4RkVnS09KNkZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS83MmY3N2YtNzZhYi00ZTc5LWEwNjIt
NmVlNTM0ZDkyZTUyLzEvMUozWHlESUtkVlVlVXF6VDJyeG4zQkQ2ZDlnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS83MmY3N2YtNzZhYi00ZTc5LWEwNjItNmVlNTM0ZDkyZTUy
LzEvbXU0Vnd6M2pXSk9OYVFDaHM4RkVnS09KNkZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGkGCCsGAQUFBwEHAQH/BFowWDBWBAIAATBQMAwDBABZEzkD
BAJZEzgDBAC5RPUDBAK5UawDBAK5UbgDBAK5WWwDBAK5X2QDBAC5YQEDBAC5YQMD
BAC5boIDBAG5cDgDBAG5r+ADBADVqt8wDQYJKoZIhvcNAQELBQADggEBAGr8uFGl
SbxtED/N5cJsLwkgPmdnfjbDj1Zrp3CmbeZUxVtO3BQfZuhWqmDY1JvtGgfVjmsL
zVnNXcCArta+XPvYk/br0OGt5R4aDiMrSYwXycz3SfAorZalkK9VzWhb87Yg6uNi
/XQhpVS4QkTeH8wUN0dwVEmusjpMgKbq/useZniWFYicSBrZ2l6cKoD2URhKXQuP
avRv4E1JQRdob+9092FIEM3Z9fV3mxrrVgqR1w8+OSwN4iprU23hHXu891VM44Wh
D9T4ZuGHiQiYjlSw2n2s/+AVA5SxDGlqxq292POy1DEDIV6u0lTFsrrpTVigqaCz
i4bD1RduafZ1qlY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:59 2024 by rpki-client on console-fra.rpki-client.org