Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/483e33-c767-46b7-8f3a-9c0a0e2767aa/1/L5nDAgGkK7uCaE1bGCox0GZ5joY.roa
File: L5nDAgGkK7uCaE1bGCox0GZ5joY.roa (raw, json)
Hash identifier: ku9VjnQgeJWChaBQJoN34nAy0AhOziPKyus9EAukEBs=
Subject key identifier: 2F:99:C3:02:01:A4:2B:BB:82:68:4D:5B:18:2A:31:D0:66:79:8E:86
Certificate issuer: /CN=3e6c4520759f3a4ef8b9a9a27e2533ce732c5411
Certificate serial: 018CC500FF8F08371326C32CB3524399A6CE
Authority key identifier: 3E:6C:45:20:75:9F:3A:4E:F8:B9:A9:A2:7E:25:33:CE:73:2C:54:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmxFIHWfOk74uamifiUzznMsVBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/483e33-c767-46b7-8f3a-9c0a0e2767aa/1/L5nDAgGkK7uCaE1bGCox0GZ5joY.roa
Signing time: Mon 01 Jan 2024 12:30:26 +0000
ROA not before: Mon 01 Jan 2024 12:30:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49688
IP address blocks: 195.35.98.0/24 maxlen: 24
195.35.102.0/24 maxlen: 24
195.35.108.0/24 maxlen: 24
195.38.21.0/24 maxlen: 24
2a0f:b7c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 01 Jan 2025 09:48:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:ff:8f:08:37:13:26:c3:2c:b3:52:43:99:a6:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6c4520759f3a4ef8b9a9a27e2533ce732c5411
Validity
Not Before: Jan 1 12:30:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2f99c30201a42bbb82684d5b182a31d066798e86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:01:1e:61:5c:9b:dc:ed:f1:55:96:12:f3:3e:
85:0d:29:c5:3f:80:70:1c:4c:3d:1f:3b:bb:1e:75:
59:d4:64:ff:cd:bf:39:64:c1:74:a0:a4:dd:b1:82:
c5:4a:7a:d0:03:62:8c:fc:2d:96:14:b7:1c:8a:7c:
84:c6:8d:81:f7:15:bd:32:db:9c:50:5b:3b:67:88:
9f:69:34:f5:e3:fe:3a:02:02:85:27:09:7a:d8:28:
fe:38:b0:92:08:64:75:d3:7c:95:4f:a4:63:22:c8:
d3:3d:b8:a3:74:86:3f:42:18:dd:90:ad:0b:01:35:
ce:39:85:53:ba:dc:78:d9:e9:5a:83:3b:4b:21:cc:
45:b4:66:14:bf:8d:19:71:82:93:49:35:c5:c4:50:
76:de:26:6c:aa:33:de:e3:09:56:21:27:c9:84:3a:
20:ec:8d:f0:2b:c7:bc:e4:b0:54:b2:c2:3f:d4:8d:
19:cf:47:7d:18:1d:8d:f9:d3:7f:4d:08:42:ae:c6:
87:4f:4b:80:64:66:ce:b1:ac:b7:35:ce:5e:94:f0:
f0:8a:33:f5:26:2f:22:bf:37:12:48:ee:07:aa:7a:
b0:53:54:44:ad:57:ca:99:c6:eb:e3:2b:18:0d:86:
74:15:b4:49:85:72:63:3e:64:33:ad:4c:6c:a6:61:
f2:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:99:C3:02:01:A4:2B:BB:82:68:4D:5B:18:2A:31:D0:66:79:8E:86
X509v3 Authority Key Identifier:
keyid:3E:6C:45:20:75:9F:3A:4E:F8:B9:A9:A2:7E:25:33:CE:73:2C:54:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmxFIHWfOk74uamifiUzznMsVBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/483e33-c767-46b7-8f3a-9c0a0e2767aa/1/L5nDAgGkK7uCaE1bGCox0GZ5joY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/483e33-c767-46b7-8f3a-9c0a0e2767aa/1/PmxFIHWfOk74uamifiUzznMsVBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.35.98.0/24
195.35.102.0/24
195.35.108.0/24
195.38.21.0/24
IPv6:
2a0f:b7c0::/29
Signature Algorithm: sha256WithRSAEncryption
81:5e:73:69:6a:9c:d2:51:da:af:27:ab:fd:fe:fb:dc:6a:21:
0a:d6:d9:e1:b2:ac:83:14:cf:e3:f3:38:a2:ec:2a:ad:d0:b6:
ae:ed:c3:7d:bf:10:9b:66:e6:db:86:44:39:a8:01:2b:b8:b9:
b6:48:14:9d:6e:a4:51:d6:5c:34:32:96:06:8e:5b:76:fa:d1:
30:95:cb:17:bb:33:5b:ef:e9:96:ee:5a:a1:61:94:3a:95:5c:
2d:63:d4:d4:b6:2e:23:09:df:d3:ea:84:ca:8d:3b:90:9c:ad:
09:ec:95:f4:ae:f5:38:be:e2:d0:fa:d0:28:87:18:76:37:dd:
65:b8:2d:d2:80:f8:8c:ba:fb:0c:d6:a0:85:49:1e:e6:17:0c:
c4:db:31:96:cf:f9:25:45:6f:93:a0:e6:2c:d8:fb:a4:02:47:
d7:3c:fa:a5:f7:1c:08:58:3a:4f:0e:01:04:2d:96:eb:dd:d8:
fa:e1:33:30:21:8b:46:d8:81:8a:47:ac:c6:d1:cf:0a:7e:c7:
a0:89:9c:78:a2:08:28:d1:09:be:7f:91:9d:92:3b:9d:c8:a7:
84:3f:77:0e:6c:fe:3b:ba:4e:3b:8b:13:7d:3d:f8:c1:53:9a:
15:31:f9:09:43:8f:01:52:77:96:93:ba:30:c7:6d:60:a1:03:
90:ba:0f:3b
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAYzFAP+PCDcTJsMss1JDmabOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNmM0NTIwNzU5ZjNhNGVmOGI5YTlhMjdlMjUzM2NlNzMy
YzU0MTEwHhcNMjQwMTAxMTIzMDI2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZjk5YzMwMjAxYTQyYmJiODI2ODRkNWIxODJhMzFkMDY2Nzk4ZTg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1QEeYVyb3O3xVZYS8z6FDSnFP4Bw
HEw9Hzu7HnVZ1GT/zb85ZMF0oKTdsYLFSnrQA2KM/C2WFLccinyExo2B9xW9Mtuc
UFs7Z4ifaTT14/46AgKFJwl62Cj+OLCSCGR103yVT6RjIsjTPbijdIY/QhjdkK0L
ATXOOYVTutx42elagztLIcxFtGYUv40ZcYKTSTXFxFB23iZsqjPe4wlWISfJhDog
7I3wK8e85LBUssI/1I0Zz0d9GB2N+dN/TQhCrsaHT0uAZGbOsay3Nc5elPDwijP1
Ji8ivzcSSO4HqnqwU1RErVfKmcbr4ysYDYZ0FbRJhXJjPmQzrUxspmHybwIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFC+ZwwIBpCu7gmhNWxgqMdBmeY6GMB8GA1UdIwQY
MBaAFD5sRSB1nzpO+Lmpon4lM85zLFQRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG14RklIV2ZPazc0dWFtaWZpVXp6bk1zVkJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni80ODNlMzMtYzc2Ny00NmI3LThmM2Et
OWMwYTBlMjc2N2FhLzEvTDVuREFnR2tLN3VDYUUxYkdDb3gwR1o1am9ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni80ODNlMzMtYzc2Ny00NmI3LThmM2EtOWMwYTBlMjc2N2Fh
LzEvUG14RklIV2ZPazc0dWFtaWZpVXp6bk1zVkJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQAwyNiAwQA
wyNmAwQAwyNsAwQAwyYVMA0EAgACMAcDBQMqD7fAMA0GCSqGSIb3DQEBCwUAA4IB
AQCBXnNpapzSUdqvJ6v9/vvcaiEK1tnhsqyDFM/j8zii7Cqt0Lau7cN9vxCbZubb
hkQ5qAEruLm2SBSdbqRR1lw0MpYGjlt2+tEwlcsXuzNb7+mW7lqhYZQ6lVwtY9TU
ti4jCd/T6oTKjTuQnK0J7JX0rvU4vuLQ+tAohxh2N91luC3SgPiMuvsM1qCFSR7m
FwzE2zGWz/klRW+ToOYs2PukAkfXPPql9xwIWDpPDgEELZbr3dj64TMwIYtG2IGK
R6zG0c8KfsegiZx4oggo0Qm+f5GdkjudyKeEP3cObP47uk47ixN9PfjBU5oVMfkJ
Q48BUneWk7owx21goQOQug87
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:50:31 2025 by rpki-client