Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/7hPmeW0JTVenbFqt4XQmi44jibo.roa
File: 7hPmeW0JTVenbFqt4XQmi44jibo.roa (raw, json)
Hash identifier: AaRPpfWipRCoqoh0Z04pmHLqHoQtsVZfLmN6pR9iwdo=
Subject key identifier: EE:13:E6:79:6D:09:4D:57:A7:6C:5A:AD:E1:74:26:8B:8E:23:89:BA
Certificate issuer: /CN=add353933674a5608f6d1ee2dab4f64c8bff8f39
Certificate serial: 018DD5664F1640378E4FC465B2BB7C0FD015
Authority key identifier: AD:D3:53:93:36:74:A5:60:8F:6D:1E:E2:DA:B4:F6:4C:8B:FF:8F:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/7hPmeW0JTVenbFqt4XQmi44jibo.roa
Signing time: Fri 23 Feb 2024 09:57:48 +0000
ROA not before: Fri 23 Feb 2024 09:57:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8851
IP address blocks: 91.84.0.0/18 maxlen: 18
91.84.96.0/19 maxlen: 19
91.84.128.0/17 maxlen: 17
91.85.0.0/17 maxlen: 17
91.85.128.0/19 maxlen: 19
91.85.192.0/18 maxlen: 18
194.46.32.0/19 maxlen: 19
194.46.36.0/24 maxlen: 24
194.46.37.0/24 maxlen: 24
194.46.39.0/24 maxlen: 24
194.46.40.0/24 maxlen: 24
194.46.41.0/24 maxlen: 24
194.46.43.0/24 maxlen: 24
194.46.44.0/24 maxlen: 24
194.46.45.0/24 maxlen: 24
194.46.46.0/24 maxlen: 24
194.46.48.0/21 maxlen: 21
194.46.56.0/24 maxlen: 24
194.46.61.0/24 maxlen: 24
194.46.64.0/22 maxlen: 22
194.46.68.0/23 maxlen: 23
194.46.72.0/22 maxlen: 22
194.46.76.0/23 maxlen: 23
194.46.78.0/24 maxlen: 24
194.46.80.0/23 maxlen: 23
194.46.81.0/24 maxlen: 24
194.46.82.0/24 maxlen: 24
212.104.129.0/24 maxlen: 24
212.104.130.0/24 maxlen: 24
212.104.132.0/24 maxlen: 24
212.104.136.0/24 maxlen: 24
212.104.143.0/24 maxlen: 24
212.104.149.0/24 maxlen: 24
212.104.150.0/24 maxlen: 24
212.104.152.0/24 maxlen: 24
212.104.155.0/24 maxlen: 24
212.104.156.0/24 maxlen: 24
212.104.159.0/24 maxlen: 24
212.108.80.0/21 maxlen: 21
212.108.84.0/24 maxlen: 24
212.108.88.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 27 Feb 2024 09:35:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:d5:66:4f:16:40:37:8e:4f:c4:65:b2:bb:7c:0f:d0:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=add353933674a5608f6d1ee2dab4f64c8bff8f39
Validity
Not Before: Feb 23 09:57:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ee13e6796d094d57a76c5aade174268b8e2389ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:22:64:a6:8c:00:fa:bc:72:db:55:49:4a:b9:
08:04:19:a4:bb:03:d9:0a:9e:31:ca:8b:72:97:4c:
68:10:ce:ce:41:3e:85:33:f7:ce:09:78:4e:e3:f4:
58:d2:00:f7:9a:d7:5d:e0:6f:85:cf:9d:b3:17:1c:
85:8f:c5:50:d5:4d:30:fd:7b:29:f8:12:87:40:32:
ed:f6:00:5f:97:b0:00:98:94:7e:e5:9d:1f:0d:dc:
ba:9d:15:82:6a:2b:48:5f:56:93:17:63:1b:d3:ec:
6f:13:7d:26:7c:14:d5:cc:19:b3:3a:2e:f7:80:68:
cf:73:14:f8:65:b0:fa:c6:ec:87:9f:8b:96:70:b9:
65:f2:15:e6:6f:56:50:06:43:1d:e4:4d:4f:e3:d7:
5f:19:27:75:87:86:e0:f7:a2:04:91:b7:2b:7a:45:
e9:9e:e2:98:2a:23:85:5a:be:2e:12:49:5b:85:74:
32:f8:1b:27:85:b3:76:a5:e1:a6:ae:71:8e:d6:28:
ac:ba:71:2b:72:ee:dd:b6:f0:eb:e1:30:79:99:28:
10:4c:7a:5f:d2:6a:b9:ee:68:91:0d:ec:7d:6c:73:
b7:59:9b:24:43:25:e1:80:54:bb:93:db:d5:e4:57:
13:5b:7f:32:ba:85:7b:05:a0:cf:19:38:d9:fb:83:
21:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:13:E6:79:6D:09:4D:57:A7:6C:5A:AD:E1:74:26:8B:8E:23:89:BA
X509v3 Authority Key Identifier:
keyid:AD:D3:53:93:36:74:A5:60:8F:6D:1E:E2:DA:B4:F6:4C:8B:FF:8F:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/7hPmeW0JTVenbFqt4XQmi44jibo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.84.0.0/18
91.84.96.0-91.85.159.255
91.85.192.0/18
194.46.32.0-194.46.69.255
194.46.72.0-194.46.78.255
194.46.80.0-194.46.82.255
212.104.129.0-212.104.130.255
212.104.132.0/24
212.104.136.0/24
212.104.143.0/24
212.104.149.0-212.104.150.255
212.104.152.0/24
212.104.155.0-212.104.156.255
212.104.159.0/24
212.108.80.0-212.108.89.255
Signature Algorithm: sha256WithRSAEncryption
20:a7:f0:77:b3:69:6e:0b:c0:a9:09:e5:a1:5d:36:a0:0b:9e:
95:ed:21:a9:c4:39:de:db:64:0f:ab:71:83:b0:b0:c2:b4:0d:
bd:d3:4f:10:6a:ca:e4:c3:2a:56:96:56:95:d3:60:c7:8e:64:
50:60:d0:bf:fb:f6:a7:c9:e6:0b:b0:8d:de:0a:45:11:1d:97:
5d:bd:09:94:d3:78:36:26:b5:4d:99:19:30:0a:f8:22:f0:25:
06:aa:08:76:14:62:8a:e4:3c:62:64:50:f2:fa:7e:1e:72:a4:
5d:64:0d:e1:40:3d:21:5a:cb:e7:cf:65:e5:a5:f4:0e:d1:59:
e9:61:5c:e3:62:42:0b:51:76:1d:4e:a4:ea:47:95:ee:c4:8d:
e2:f0:cc:d4:14:41:30:96:a8:00:7a:1e:9f:23:0b:75:a2:db:
38:49:d9:10:80:47:0d:61:2d:33:b6:cc:85:8b:dc:77:3a:26:
8e:db:12:54:39:5b:b4:5e:b2:f5:7e:3f:f7:ac:48:ae:c4:7d:
86:87:a4:14:03:b9:07:97:3a:d5:d4:0d:e9:6d:6e:64:ba:db:
58:d9:e1:2f:5f:9f:cf:7c:ca:20:1f:0f:e5:3c:a7:8a:5f:42:
72:bf:c3:f6:4f:12:f3:5d:45:97:47:f2:e3:54:f5:6e:bc:57:
36:c4:28:77
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgISAY3VZk8WQDeOT8Rlsrt8D9AVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkZDM1MzkzMzY3NGE1NjA4ZjZkMWVlMmRhYjRmNjRjOGJm
ZjhmMzkwHhcNMjQwMjIzMDk1NzQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZTEzZTY3OTZkMDk0ZDU3YTc2YzVhYWRlMTc0MjY4YjhlMjM4OWJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgyJkpowA+rxy21VJSrkIBBmkuwPZ
Cp4xyotyl0xoEM7OQT6FM/fOCXhO4/RY0gD3mtdd4G+Fz52zFxyFj8VQ1U0w/Xsp
+BKHQDLt9gBfl7AAmJR+5Z0fDdy6nRWCaitIX1aTF2Mb0+xvE30mfBTVzBmzOi73
gGjPcxT4ZbD6xuyHn4uWcLll8hXmb1ZQBkMd5E1P49dfGSd1h4bg96IEkbcrekXp
nuKYKiOFWr4uEklbhXQy+BsnhbN2peGmrnGO1iisunErcu7dtvDr4TB5mSgQTHpf
0mq57miRDex9bHO3WZskQyXhgFS7k9vV5FcTW38yuoV7BaDPGTjZ+4MhqwIDAQAB
o4ICojCCAp4wHQYDVR0OBBYEFO4T5nltCU1Xp2xareF0JouOI4m6MB8GA1UdIwQY
MBaAFK3TU5M2dKVgj20e4tq09kyL/485MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmROVGt6WjBwV0NQYlI3aTJyVDJUSXZfanprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy80OGI0MDctNmQ5NC00OWFlLWEzZDgt
NzJjODMxMjg3NjFiLzEvN2hQbWVXMEpUVmVuYkZxdDRYUW1pNDRqaWJvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy80OGI0MDctNmQ5NC00OWFlLWEzZDgtNzJjODMxMjg3NjFi
LzEvcmROVGt6WjBwV0NQYlI3aTJyVDJUSXZfanprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIG3BggrBgEFBQcBBwEB/wSBpzCBpDCBoQQCAAEwgZoDBAZb
VAAwDAMEBVtUYAMEBVtVgAMEBltVwDAMAwQFwi4gAwQBwi5EMAwDBAPCLkgDBADC
Lk4wDAMEBMIuUAMEAMIuUjAMAwQA1GiBAwQA1GiCAwQA1GiEAwQA1GiIAwQA1GiP
MAwDBADUaJUDBADUaJYDBADUaJgwDAMEANRomwMEANRonAMEANRonzAMAwQE1GxQ
AwQB1GxYMA0GCSqGSIb3DQEBCwUAA4IBAQAgp/B3s2luC8CpCeWhXTagC56V7SGp
xDne22QPq3GDsLDCtA29008QasrkwypWllaV02DHjmRQYNC/+/anyeYLsI3eCkUR
HZddvQmU03g2JrVNmRkwCvgi8CUGqgh2FGKK5DxiZFDy+n4ecqRdZA3hQD0hWsvn
z2XlpfQO0VnpYVzjYkILUXYdTqTqR5XuxI3i8MzUFEEwlqgAeh6fIwt1ots4SdkQ
gEcNYS0ztsyFi9x3OiaO2xJUOVu0XrL1fj/3rEiuxH2Gh6QUA7kHlzrV1A3pbW5k
uttY2eEvX5/PfMogHw/lPKeKX0Jyv8P2TxLzXUWXR/LjVPVuvFc2xCh3
-----END CERTIFICATE-----
Generated at Tue Feb 27 12:42:35 2024 by rpki-client on console-fra.rpki-client.org