Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/x9zCYP770Twmy7ZeEiTR2yMEUiY.roa
File: x9zCYP770Twmy7ZeEiTR2yMEUiY.roa (raw, json)
Hash identifier: 0VpZkncJNFbJZF8od+n3nMtS7zW93L8qyfyg//vhyrg=
Subject key identifier: C7:DC:C2:60:FE:FB:D1:3C:26:CB:B6:5E:12:24:D1:DB:23:04:52:26
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 0186ED134166C50B7D2C268089B355A80CC3
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/x9zCYP770Twmy7ZeEiTR2yMEUiY.roa
Signing time: Fri 17 Mar 2023 00:58:27 +0000
ROA not before: Fri 17 Mar 2023 00:58:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41717
IP address blocks: 80.66.199.0/24 maxlen: 24
5.183.117.0/24 maxlen: 24
5.183.116.0/23 maxlen: 23
5.183.116.0/24 maxlen: 24
5.183.118.0/24 maxlen: 24
5.183.119.0/24 maxlen: 24
5.183.121.0/24 maxlen: 24
5.183.123.0/24 maxlen: 24
5.183.120.0/23 maxlen: 23
5.183.120.0/24 maxlen: 24
5.183.122.0/24 maxlen: 24
45.141.44.0/22 maxlen: 24
45.8.35.0/24 maxlen: 24
45.8.32.0/24 maxlen: 24
45.8.34.0/24 maxlen: 24
2.58.245.0/24 maxlen: 24
2.58.244.0/24 maxlen: 24
2.58.246.0/24 maxlen: 24
2.58.247.0/24 maxlen: 24
2.58.249.0/24 maxlen: 24
2.58.251.0/24 maxlen: 24
2.58.248.0/24 maxlen: 24
2.58.250.0/24 maxlen: 24
95.214.166.0/24 maxlen: 24
95.214.167.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 17 Mar 2023 00:59:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ed:13:41:66:c5:0b:7d:2c:26:80:89:b3:55:a8:0c:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Mar 17 00:58:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c7dcc260fefbd13c26cbb65e1224d1db23045226
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:80:89:a5:40:dc:51:a9:70:33:c6:6e:3a:1a:
37:c3:30:e8:81:54:33:1a:3e:89:c5:bb:5a:e2:5b:
6e:66:d0:d2:94:23:2c:f9:de:f1:b4:6c:10:94:c4:
ea:35:24:06:da:4a:61:7d:68:cb:69:ed:47:a7:9e:
2c:33:a0:2d:c4:0e:8b:f5:5a:a8:c8:cc:ce:6e:e7:
25:3d:6e:88:11:ed:75:eb:d8:61:73:22:56:74:61:
e1:b7:fd:3d:5e:bf:e3:47:ea:c5:6a:b2:07:e2:88:
0d:14:eb:b2:61:a1:a4:af:08:81:98:46:b9:ef:53:
0d:d6:e1:18:fa:27:2a:80:d7:18:f5:53:c2:81:8c:
0d:b4:bf:f3:6e:1a:94:21:96:aa:68:07:b0:68:24:
82:13:d4:55:52:19:9b:2a:d2:00:37:34:27:83:5e:
08:41:88:cf:e1:37:8f:eb:88:b9:de:20:89:e0:31:
aa:8b:79:17:70:59:b8:1c:0e:c0:ae:ff:f3:b6:30:
e0:8c:d9:f5:27:31:35:8b:9e:21:d1:91:d7:19:87:
32:45:e7:37:d4:7d:5d:99:47:4a:86:9b:91:61:d1:
91:e3:4e:c8:75:9b:c0:e3:d9:2a:2f:23:cb:d4:ce:
ac:26:77:dd:fe:77:1b:57:a0:56:14:e8:67:2e:ea:
76:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:DC:C2:60:FE:FB:D1:3C:26:CB:B6:5E:12:24:D1:DB:23:04:52:26
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/x9zCYP770Twmy7ZeEiTR2yMEUiY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.244.0-2.58.251.255
5.183.116.0-5.183.123.255
45.8.32.0/24
45.8.34.0/23
45.141.44.0/22
80.66.199.0/24
95.214.166.0/23
Signature Algorithm: sha256WithRSAEncryption
72:28:9c:bb:48:5b:2d:60:80:74:6e:c3:a9:af:4e:43:32:75:
17:fa:c0:3a:d4:55:8d:ba:a3:6e:07:32:8b:9c:6b:49:67:54:
79:37:87:95:9b:24:30:a8:8e:80:fb:a2:27:84:56:c1:f4:32:
d3:91:f3:7c:29:d9:d2:b1:30:14:9e:ce:4a:45:e8:8d:3c:c3:
3e:35:33:5f:1e:4c:c4:66:e4:64:e6:e8:40:23:1f:9e:05:6f:
61:12:a7:2c:35:67:17:79:40:2e:cc:3f:40:21:f4:83:2e:85:
2f:44:80:27:67:3b:73:1f:31:d6:b1:5f:eb:8c:13:e0:e3:eb:
d1:12:a4:e4:e1:b4:a4:e4:96:18:7c:69:eb:29:06:a4:90:af:
8d:03:2d:c2:d8:4c:42:b6:47:1d:79:54:43:29:8d:fd:18:62:
e1:35:ee:c3:cd:f5:b0:5f:da:f1:e9:59:e9:d6:f5:60:db:8d:
1c:5c:70:c2:3f:2b:93:10:26:49:43:52:b8:eb:89:c4:ba:2e:
74:3f:be:40:a6:0b:c5:69:21:1b:11:3a:21:94:5e:4b:81:18:
58:23:23:51:2a:67:3a:42:e7:74:fd:5b:66:e6:65:6b:2f:52:
c4:8e:50:46:44:26:0d:4e:af:30:67:c0:91:23:23:dc:5d:bd:
a2:07:5d:45
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgISAYbtE0FmxQt9LCaAibNVqAzDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1NzZlYjJjYzQ2MmU2ZTRiZjBkZTY5YjlmNjM0ODc1ZGVi
YmFhZTIwHhcNMjMwMzE3MDA1ODI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjN2RjYzI2MGZlZmJkMTNjMjZjYmI2NWUxMjI0ZDFkYjIzMDQ1MjI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlICJpUDcUalwM8ZuOho3wzDogVQz
Gj6Jxbta4ltuZtDSlCMs+d7xtGwQlMTqNSQG2kphfWjLae1Hp54sM6AtxA6L9Vqo
yMzObuclPW6IEe1169hhcyJWdGHht/09Xr/jR+rFarIH4ogNFOuyYaGkrwiBmEa5
71MN1uEY+icqgNcY9VPCgYwNtL/zbhqUIZaqaAewaCSCE9RVUhmbKtIANzQng14I
QYjP4TeP64i53iCJ4DGqi3kXcFm4HA7Arv/ztjDgjNn1JzE1i54h0ZHXGYcyRec3
1H1dmUdKhpuRYdGR407IdZvA49kqLyPL1M6sJnfd/ncbV6BWFOhnLup2qQIDAQAB
o4ICPTCCAjkwHQYDVR0OBBYEFMfcwmD++9E8Jsu2XhIk0dsjBFImMB8GA1UdIwQY
MBaAFKV26yzEYubkvw3mm59jSHXeu6riMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFhickxNUmk1dVNfRGVhYm4yTklkZDY3cXVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85MzE5MjctOWYzOC00MWI2LTg3ZmEt
MjU0YWNkOTJiNGUxLzEveDl6Q1lQNzcwVHdteTdaZUVpVFIyeU1FVWlZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny85MzE5MjctOWYzOC00MWI2LTg3ZmEtMjU0YWNkOTJiNGUx
LzEvcFhickxNUmk1dVNfRGVhYm4yTklkZDY3cXVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFMGCCsGAQUFBwEHAQH/BEQwQjBABAIAATA6MAwDBAICOvQD
BAICOvgwDAMEAgW3dAMEAgW3eAMEAC0IIAMEAS0IIgMEAi2NLAMEAFBCxwMEAV/W
pjANBgkqhkiG9w0BAQsFAAOCAQEAciicu0hbLWCAdG7Dqa9OQzJ1F/rAOtRVjbqj
bgcyi5xrSWdUeTeHlZskMKiOgPuiJ4RWwfQy05HzfCnZ0rEwFJ7OSkXojTzDPjUz
Xx5MxGbkZOboQCMfngVvYRKnLDVnF3lALsw/QCH0gy6FL0SAJ2c7cx8x1rFf64wT
4OPr0RKk5OG0pOSWGHxp6ykGpJCvjQMtwthMQrZHHXlUQymN/Rhi4TXuw831sF/a
8elZ6db1YNuNHFxwwj8rkxAmSUNSuOuJxLoudD++QKYLxWkhGxE6IZReS4EYWCMj
USpnOkLndP1bZuZlay9SxI5QRkQmDU6vMGfAkSMj3F29ogddRQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:47 2024 by rpki-client on console-ams.rpki-client.org