Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/lN25ZB6EzeT14w3VrRe2gyoxgcQ.roa
File: lN25ZB6EzeT14w3VrRe2gyoxgcQ.roa (raw, json)
Hash identifier: v94i6CJ07pCoHls5wpB4ps8AooFRb3s0IFaqYmDSiIs=
Subject key identifier: 94:DD:B9:64:1E:84:CD:E4:F5:E3:0D:D5:AD:17:B6:83:2A:31:81:C4
Certificate issuer: /CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2
Certificate serial: 018CB5F14A08263316CC2DD876D6B768CF58
Authority key identifier: 22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/lN25ZB6EzeT14w3VrRe2gyoxgcQ.roa
Signing time: Fri 29 Dec 2023 14:18:58 +0000
ROA not before: Fri 29 Dec 2023 14:18:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50437
IP address blocks: 31.131.164.0/22 maxlen: 22
46.151.224.0/22 maxlen: 22
176.116.132.0/22 maxlen: 22
176.116.131.0/24 maxlen: 24
176.116.128.0/24 maxlen: 24
176.116.130.0/24 maxlen: 24
176.116.129.0/24 maxlen: 24
46.151.228.0/22 maxlen: 22
91.228.145.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:b5:f1:4a:08:26:33:16:cc:2d:d8:76:d6:b7:68:cf:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2
Validity
Not Before: Dec 29 14:18:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=94ddb9641e84cde4f5e30dd5ad17b6832a3181c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b6:2f:51:8f:c4:27:7f:17:ad:c8:67:f8:46:
b3:f8:44:84:64:41:9e:5f:bf:af:fd:f5:4e:6d:9e:
dd:50:c1:15:ce:a4:4c:fd:56:10:7b:67:8c:b0:ab:
46:78:01:a8:0d:11:3d:d0:a8:97:a7:13:7e:cd:fd:
33:28:58:16:2b:f0:76:20:c0:a7:50:8d:c8:eb:e1:
27:ad:a1:84:ca:b8:81:05:70:f5:17:0d:f3:70:c8:
3f:be:6d:3f:d6:5d:75:04:31:5f:6c:80:00:98:52:
7b:25:bf:a9:6c:04:c8:cd:b4:8d:b8:33:e0:75:aa:
ef:95:8c:6e:b1:ac:c2:21:a4:34:71:da:0a:4c:62:
bc:01:3f:17:eb:6c:dd:84:41:b6:fe:7f:98:3e:01:
b8:74:e3:8b:be:b9:e5:0b:6a:1c:19:d6:87:f1:b0:
d5:8a:3d:08:a6:cb:cd:d6:fe:4a:b1:e0:04:bd:77:
ff:e4:d7:23:0c:a1:31:f9:5a:53:26:6d:f1:56:ef:
e1:87:bf:79:ab:10:4b:d9:e8:a5:99:4e:ca:87:d6:
b4:52:67:5f:36:dc:3b:f4:bd:92:e3:59:ec:6a:2f:
24:7d:a2:f8:21:07:df:d9:29:8a:80:cd:1f:6f:b6:
bb:f0:4d:16:82:6b:97:8b:41:2e:81:32:2e:84:ce:
49:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:DD:B9:64:1E:84:CD:E4:F5:E3:0D:D5:AD:17:B6:83:2A:31:81:C4
X509v3 Authority Key Identifier:
keyid:22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/lN25ZB6EzeT14w3VrRe2gyoxgcQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.131.164.0/22
46.151.224.0/21
91.228.145.0/24
176.116.128.0/21
Signature Algorithm: sha256WithRSAEncryption
59:a1:cb:0b:38:50:ce:88:15:4a:93:6b:09:a3:ab:ff:0c:1b:
46:eb:31:6a:45:71:3f:63:e2:42:15:45:35:f5:48:ca:a7:6e:
48:57:20:fd:fb:6b:9b:57:f2:1b:18:04:06:f7:8f:9a:3c:ee:
1b:0e:09:ae:0c:e7:7d:86:82:2c:67:67:a2:95:c1:b3:fe:7a:
d9:09:f7:96:f6:f0:9b:7b:93:7a:27:3b:b2:1a:36:8e:40:b1:
b0:9e:fb:68:f4:9c:8b:ad:a5:a9:78:2c:68:1b:71:54:34:6d:
c4:4e:a3:92:9d:58:2c:fb:04:ab:93:e6:b1:f1:bf:d4:69:89:
09:e1:62:d6:c0:1e:32:2a:83:f9:eb:75:2a:86:19:c0:72:d9:
0d:b7:e2:95:23:6e:ea:ee:41:28:ec:62:33:11:50:6b:5a:18:
7e:89:99:3f:9e:70:f8:0d:85:b3:b0:62:32:61:e9:93:fe:9b:
b8:4e:37:6c:c9:63:6f:f6:09:26:81:98:a6:d5:74:7e:70:43:
8a:61:56:8d:31:00:9b:a1:4c:c4:31:86:6a:7b:9c:82:a1:d7:
b3:46:2c:3c:ea:55:e6:95:90:eb:57:ed:2a:84:a2:c5:c4:f7:
dc:71:03:4e:f2:21:2f:13:41:fe:8b:96:0d:9a:4a:d3:be:17:
ed:a3:b4:99
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYy18UoIJjMWzC3Ydta3aM9YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyZjJjMmU3YmMxZGE1NGQ5MTljYTViNTk0MWQzNzg4OTJi
MmNjYjIwHhcNMjMxMjI5MTQxODU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NGRkYjk2NDFlODRjZGU0ZjVlMzBkZDVhZDE3YjY4MzJhMzE4MWM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1bYvUY/EJ38Xrchn+Eaz+ESEZEGe
X7+v/fVObZ7dUMEVzqRM/VYQe2eMsKtGeAGoDRE90KiXpxN+zf0zKFgWK/B2IMCn
UI3I6+EnraGEyriBBXD1Fw3zcMg/vm0/1l11BDFfbIAAmFJ7Jb+pbATIzbSNuDPg
darvlYxusazCIaQ0cdoKTGK8AT8X62zdhEG2/n+YPgG4dOOLvrnlC2ocGdaH8bDV
ij0IpsvN1v5KseAEvXf/5NcjDKEx+VpTJm3xVu/hh795qxBL2eilmU7Kh9a0Umdf
Ntw79L2S41nsai8kfaL4IQff2SmKgM0fb7a78E0WgmuXi0EugTIuhM5JQwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFJTduWQehM3k9eMN1a0XtoMqMYHEMB8GA1UdIwQY
MBaAFCLywue8HaVNkZyltZQdN4iSssyyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXZMQzU3d2RwVTJSbktXMWxCMDNpSkt5ekxJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi82MDI1MzAtNmQyMi00NmYxLThlMDUt
MDJkZWY2ZTg0YzkxLzEvbE4yNVpCNkV6ZVQxNHczVnJSZTJneW94Z2NRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi82MDI1MzAtNmQyMi00NmYxLThlMDUtMDJkZWY2ZTg0Yzkx
LzEvSXZMQzU3d2RwVTJSbktXMWxCMDNpSkt5ekxJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCH4OkAwQD
LpfgAwQAW+SRAwQDsHSAMA0GCSqGSIb3DQEBCwUAA4IBAQBZocsLOFDOiBVKk2sJ
o6v/DBtG6zFqRXE/Y+JCFUU19UjKp25IVyD9+2ubV/IbGAQG94+aPO4bDgmuDOd9
hoIsZ2eilcGz/nrZCfeW9vCbe5N6JzuyGjaOQLGwnvto9JyLraWpeCxoG3FUNG3E
TqOSnVgs+wSrk+ax8b/UaYkJ4WLWwB4yKoP563UqhhnActkNt+KVI27q7kEo7GIz
EVBrWhh+iZk/nnD4DYWzsGIyYemT/pu4TjdsyWNv9gkmgZim1XR+cEOKYVaNMQCb
oUzEMYZqe5yCodezRiw86lXmlZDrV+0qhKLFxPfccQNO8iEvE0H+i5YNmkrTvhft
o7SZ
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:29 2024 by rpki-client on console-ams.rpki-client.org