Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/OGhbh3sbNwCtodNR3kBLB_DEmMA.roa
File: OGhbh3sbNwCtodNR3kBLB_DEmMA.roa (raw, json)
Hash identifier: HTOKT/Qf5tvObVa9XvCmn+XhMJo2JJBoSedD4MCMt5A=
Subject key identifier: 38:68:5B:87:7B:1B:37:00:AD:A1:D3:51:DE:40:4B:07:F0:C4:98:C0
Certificate issuer: /CN=6b233d75508b4e85cccf44349a7cb703198d1d26
Certificate serial: 018BD3D166B84A1707B48704E7536B81EFA8
Authority key identifier: 6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/OGhbh3sbNwCtodNR3kBLB_DEmMA.roa
Signing time: Wed 15 Nov 2023 16:29:57 +0000
ROA not before: Wed 15 Nov 2023 16:29:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212192
IP address blocks: 146.66.211.0/24 maxlen: 24
188.74.244.0/24 maxlen: 24
188.119.164.0/24 maxlen: 24
188.119.167.0/24 maxlen: 24
188.74.156.0/22 maxlen: 22
91.235.122.0/24 maxlen: 24
5.157.164.0/22 maxlen: 24
37.35.38.0/24 maxlen: 24
37.35.32.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d3:d1:66:b8:4a:17:07:b4:87:04:e7:53:6b:81:ef:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b233d75508b4e85cccf44349a7cb703198d1d26
Validity
Not Before: Nov 15 16:29:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=38685b877b1b3700ada1d351de404b07f0c498c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4c:28:d2:17:85:77:6e:e9:9d:33:df:fe:e8:
12:ce:cf:bf:df:7a:68:76:f3:58:fd:a5:d4:fc:b3:
ca:1c:66:85:a9:a6:f6:26:15:e8:af:09:29:81:47:
f0:7c:5b:66:5d:b5:c0:2d:37:f1:6a:f7:47:1d:f9:
2c:25:12:e7:4c:6e:d4:a4:6c:1c:47:65:1e:43:a5:
27:11:17:ea:09:61:bb:30:30:fd:10:76:0c:de:ae:
58:1e:ea:2a:9a:20:88:ae:f1:76:45:7f:9a:2d:be:
39:5c:a6:f9:90:e1:f9:de:27:d4:92:45:a9:2d:bc:
3e:ae:7d:cc:8e:e7:a6:1f:9d:5a:d6:9b:2d:bb:cd:
ed:55:09:ef:6b:05:f5:77:36:8a:cf:a0:d8:fe:de:
79:c4:46:e3:8c:8b:8e:a3:b2:31:a6:41:8a:35:c4:
3c:8c:88:60:35:be:30:36:ef:07:ee:4c:c6:85:42:
59:5f:20:05:ca:8a:9f:94:98:9e:82:ba:26:a9:c8:
72:af:5f:7e:ae:b4:5a:34:d5:60:e8:e1:f9:2d:d9:
b1:0c:3e:0e:bc:36:9b:ea:37:00:84:c9:1c:7f:1a:
48:22:34:07:c7:5b:35:cc:2d:b4:c3:9c:3e:26:fb:
22:03:d6:39:65:81:f3:c0:23:01:1c:f5:ca:5a:d7:
20:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:68:5B:87:7B:1B:37:00:AD:A1:D3:51:DE:40:4B:07:F0:C4:98:C0
X509v3 Authority Key Identifier:
keyid:6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/OGhbh3sbNwCtodNR3kBLB_DEmMA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.157.164.0/22
37.35.32.0/22
37.35.38.0/24
91.235.122.0/24
146.66.211.0/24
188.74.156.0/22
188.74.244.0/24
188.119.164.0/24
188.119.167.0/24
Signature Algorithm: sha256WithRSAEncryption
71:59:6c:eb:03:c3:98:fd:58:29:15:a1:c3:36:58:6b:16:a7:
8d:ab:95:99:60:c2:1a:17:15:3c:79:cd:f9:eb:bc:8f:d4:e8:
a1:1c:cc:64:bb:9a:43:98:b5:43:b0:9a:74:d6:3f:64:b0:6a:
af:eb:fc:9d:a1:6b:82:0d:51:67:78:d1:f8:59:60:b7:d2:c1:
24:21:b6:c2:d0:59:0d:18:53:4c:ec:ff:03:c0:2a:21:d0:0e:
75:95:e5:ae:6d:03:30:a0:a9:43:59:e4:4c:fb:90:8b:ab:e0:
0f:fc:5e:e0:b2:59:f1:5f:b1:ce:5a:6d:99:8d:ef:1b:29:b6:
22:a2:c7:bf:cd:87:14:28:66:99:c8:f6:0b:8c:f4:ad:96:e0:
61:cb:75:a6:dd:4f:ca:2c:4f:15:52:02:9b:3e:8a:ff:1d:13:
54:e5:e8:47:bf:a4:88:98:b5:0c:b9:45:e6:a3:cf:4f:89:21:
93:eb:b5:3d:41:e1:1e:b1:41:ec:3b:c9:67:c3:42:29:3b:32:
a4:2d:95:35:9b:1f:08:6b:cb:e4:13:13:79:bb:d5:15:75:54:
06:87:d6:3d:e6:f2:96:5c:0d:1f:4a:53:ae:00:7f:07:b4:88:
68:87:77:b0:ef:ac:75:91:81:71:b0:a9:1c:10:22:e5:63:c0:
36:e7:f4:a3
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgISAYvT0Wa4ShcHtIcE51Nrge+oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiMjMzZDc1NTA4YjRlODVjY2NmNDQzNDlhN2NiNzAzMTk4
ZDFkMjYwHhcNMjMxMTE1MTYyOTU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzODY4NWI4NzdiMWIzNzAwYWRhMWQzNTFkZTQwNGIwN2YwYzQ5OGMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0wo0heFd27pnTPf/ugSzs+/33po
dvNY/aXU/LPKHGaFqab2JhXorwkpgUfwfFtmXbXALTfxavdHHfksJRLnTG7UpGwc
R2UeQ6UnERfqCWG7MDD9EHYM3q5YHuoqmiCIrvF2RX+aLb45XKb5kOH53ifUkkWp
Lbw+rn3MjuemH51a1pstu83tVQnvawX1dzaKz6DY/t55xEbjjIuOo7IxpkGKNcQ8
jIhgNb4wNu8H7kzGhUJZXyAFyoqflJiegromqchyr19+rrRaNNVg6OH5LdmxDD4O
vDab6jcAhMkcfxpIIjQHx1s1zC20w5w+JvsiA9Y5ZYHzwCMBHPXKWtcgdwIDAQAB
o4ICOTCCAjUwHQYDVR0OBBYEFDhoW4d7GzcAraHTUd5ASwfwxJjAMB8GA1UdIwQY
MBaAFGsjPXVQi06FzM9ENJp8twMZjR0mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXlNOWRWQ0xUb1hNejBRMG1ueTNBeG1OSFNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC85ZDkxOTItMjczYy00Y2E5LWIyYmEt
ZmE5Y2I1MWNkMGYxLzEvT0doYmgzc2JOd0N0b2ROUjNrQkxCX0RFbU1BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC85ZDkxOTItMjczYy00Y2E5LWIyYmEtZmE5Y2I1MWNkMGYx
LzEvYXlNOWRWQ0xUb1hNejBRMG1ueTNBeG1OSFNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQCBZ2kAwQC
JSMgAwQAJSMmAwQAW+t6AwQAkkLTAwQCvEqcAwQAvEr0AwQAvHekAwQAvHenMA0G
CSqGSIb3DQEBCwUAA4IBAQBxWWzrA8OY/VgpFaHDNlhrFqeNq5WZYMIaFxU8ec35
67yP1OihHMxku5pDmLVDsJp01j9ksGqv6/ydoWuCDVFneNH4WWC30sEkIbbC0FkN
GFNM7P8DwCoh0A51leWubQMwoKlDWeRM+5CLq+AP/F7gslnxX7HOWm2Zje8bKbYi
ose/zYcUKGaZyPYLjPStluBhy3Wm3U/KLE8VUgKbPor/HRNU5ehHv6SImLUMuUXm
o89PiSGT67U9QeEesUHsO8lnw0IpOzKkLZU1mx8Ia8vkExN5u9UVdVQGh9Y95vKW
XA0fSlOuAH8HtIhoh3ew76x1kYFxsKkcECLlY8A25/Sj
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:50 2024 by rpki-client on console-ams.rpki-client.org