Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/2bb603-f479-40cb-82d4-48d672973b13/1/WXxdhb6wXLAz7z9H_YVmu5_N1Vg.roa
File: WXxdhb6wXLAz7z9H_YVmu5_N1Vg.roa (raw, json)
Hash identifier: Ww5sT9pH2x8A1tLGkjldkeOvpP+vFI+vuD4cnZqHx6s=
Subject key identifier: 59:7C:5D:85:BE:B0:5C:B0:33:EF:3F:47:FD:85:66:BB:9F:CD:D5:58
Certificate issuer: /CN=1c37a9026e45b68fe4735a469b75636130ad125c
Certificate serial: 0192DCAA3D3E38198A09C3908C81C75CD195
Authority key identifier: 1C:37:A9:02:6E:45:B6:8F:E4:73:5A:46:9B:75:63:61:30:AD:12:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HDepAm5Fto_kc1pGm3VjYTCtElw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/2bb603-f479-40cb-82d4-48d672973b13/1/WXxdhb6wXLAz7z9H_YVmu5_N1Vg.roa
Signing time: Wed 30 Oct 2024 09:03:17 +0000
ROA not before: Wed 30 Oct 2024 09:03:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210625
IP address blocks: 83.229.103.0/24 maxlen: 24
83.229.111.0/24 maxlen: 24
147.236.98.0/23 maxlen: 24
147.236.228.0/22 maxlen: 22
147.236.228.0/23 maxlen: 23
147.236.228.0/24 maxlen: 24
147.236.229.0/24 maxlen: 24
147.236.230.0/23 maxlen: 23
147.236.230.0/24 maxlen: 24
147.236.231.0/24 maxlen: 24
2a13:54c0::/29 maxlen: 36
Validation: Failed, certificate revoked on Wed 20 Nov 2024 09:35:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:dc:aa:3d:3e:38:19:8a:09:c3:90:8c:81:c7:5c:d1:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c37a9026e45b68fe4735a469b75636130ad125c
Validity
Not Before: Oct 30 09:03:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=597c5d85beb05cb033ef3f47fd8566bb9fcdd558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:cb:44:35:41:51:bd:11:96:9f:29:32:75:dd:
d8:9d:45:38:98:2e:77:9a:3a:96:59:95:1d:f6:e0:
21:81:62:54:d9:17:09:fa:4e:e2:99:a3:cc:22:21:
dd:ea:1d:01:c4:1e:22:4b:18:52:a2:ac:e8:70:13:
25:a3:4b:f9:b2:43:21:ca:26:e4:d2:4a:68:a1:61:
bd:a6:76:fe:25:f5:b2:c1:39:1c:4b:14:e9:fe:18:
eb:0d:44:0e:48:4b:f9:eb:24:df:ba:55:3e:eb:e6:
10:e8:58:50:f7:d8:27:17:19:30:93:99:bb:34:6d:
4f:ca:81:47:aa:7f:8f:26:9b:44:85:7c:60:97:aa:
1c:7f:28:ee:b5:bc:ec:80:27:da:de:14:bc:1b:8f:
c5:0b:40:e1:0c:a7:86:04:fb:2d:21:82:ee:1a:bb:
b1:1a:ff:4e:be:59:b0:ea:37:92:e5:4e:0d:3a:e5:
ea:8e:7b:c7:7a:9a:8d:71:49:7b:fb:9e:df:0c:6a:
af:8d:8e:2d:97:a0:0f:eb:59:c7:e7:03:4f:37:04:
b7:50:42:1e:f8:f4:99:4c:ce:a3:eb:49:72:ee:8d:
18:4b:2c:1b:ff:6b:85:73:84:bb:3d:cf:3e:87:39:
80:5f:f7:f4:f0:38:93:18:7b:0c:c1:fe:91:b3:10:
11:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:7C:5D:85:BE:B0:5C:B0:33:EF:3F:47:FD:85:66:BB:9F:CD:D5:58
X509v3 Authority Key Identifier:
keyid:1C:37:A9:02:6E:45:B6:8F:E4:73:5A:46:9B:75:63:61:30:AD:12:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HDepAm5Fto_kc1pGm3VjYTCtElw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/2bb603-f479-40cb-82d4-48d672973b13/1/WXxdhb6wXLAz7z9H_YVmu5_N1Vg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/2bb603-f479-40cb-82d4-48d672973b13/1/HDepAm5Fto_kc1pGm3VjYTCtElw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.229.103.0/24
83.229.111.0/24
147.236.98.0/23
147.236.228.0/22
IPv6:
2a13:54c0::/29
Signature Algorithm: sha256WithRSAEncryption
55:02:35:1b:4a:de:a9:78:7b:d8:94:83:98:57:eb:e5:37:10:
a6:e7:46:80:88:f9:6e:50:34:67:97:ac:89:d6:e2:02:09:d9:
83:ea:61:60:af:df:e7:2c:84:9e:ee:9c:ad:d6:c3:76:47:0a:
f4:75:7a:7e:cd:f1:57:fe:99:d2:47:02:b6:0c:92:46:f8:9d:
db:1c:43:c7:a1:0d:07:7b:67:93:a4:55:be:bd:66:2c:12:e3:
86:a6:e0:35:ca:10:b4:dc:c1:66:40:6e:e3:34:17:9d:f9:59:
c1:2e:b5:45:65:3f:38:35:b3:33:18:b9:c7:bd:23:c2:c5:f6:
c9:dc:cb:98:b5:84:15:d5:0f:ae:cb:b0:7f:bf:62:95:f3:22:
7b:d6:fa:16:a8:6f:33:0c:da:4a:6d:47:e6:1d:8c:9f:58:6d:
85:79:37:6f:48:a8:82:c6:91:d0:6d:f6:f3:70:19:f3:e8:1d:
21:08:45:f4:52:e9:8e:bf:15:06:2c:0b:ef:ee:b4:26:4e:e7:
21:e4:ae:5c:16:c5:75:e9:c1:80:c7:fd:65:8f:c1:79:3d:e1:
90:d9:34:00:57:43:2f:2e:e5:a4:cf:ce:e4:4d:d2:aa:db:b0:
bb:c1:2d:e4:5a:8b:cc:9f:e7:ca:40:c7:c9:eb:0e:8c:72:a9:
9f:74:19:a1
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAZLcqj0+OBmKCcOQjIHHXNGVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjMzdhOTAyNmU0NWI2OGZlNDczNWE0NjliNzU2MzYxMzBh
ZDEyNWMwHhcNMjQxMDMwMDkwMzE3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OTdjNWQ4NWJlYjA1Y2IwMzNlZjNmNDdmZDg1NjZiYjlmY2RkNTU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuctENUFRvRGWnykydd3YnUU4mC53
mjqWWZUd9uAhgWJU2RcJ+k7imaPMIiHd6h0BxB4iSxhSoqzocBMlo0v5skMhyibk
0kpooWG9pnb+JfWywTkcSxTp/hjrDUQOSEv56yTfulU+6+YQ6FhQ99gnFxkwk5m7
NG1PyoFHqn+PJptEhXxgl6ocfyjutbzsgCfa3hS8G4/FC0DhDKeGBPstIYLuGrux
Gv9Ovlmw6jeS5U4NOuXqjnvHepqNcUl7+57fDGqvjY4tl6AP61nH5wNPNwS3UEIe
+PSZTM6j60ly7o0YSywb/2uFc4S7Pc8+hzmAX/f08DiTGHsMwf6RsxAR6wIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFFl8XYW+sFywM+8/R/2FZrufzdVYMB8GA1UdIwQY
MBaAFBw3qQJuRbaP5HNaRpt1Y2EwrRJcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSERlcEFtNUZ0b19rYzFwR20zVmpZVEN0RWx3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS8yYmI2MDMtZjQ3OS00MGNiLTgyZDQt
NDhkNjcyOTczYjEzLzEvV1h4ZGhiNndYTEF6N3o5SF9ZVm11NV9OMVZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS8yYmI2MDMtZjQ3OS00MGNiLTgyZDQtNDhkNjcyOTczYjEz
LzEvSERlcEFtNUZ0b19rYzFwR20zVmpZVEN0RWx3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQAU+VnAwQA
U+VvAwQBk+xiAwQCk+zkMA0EAgACMAcDBQMqE1TAMA0GCSqGSIb3DQEBCwUAA4IB
AQBVAjUbSt6peHvYlIOYV+vlNxCm50aAiPluUDRnl6yJ1uICCdmD6mFgr9/nLISe
7pyt1sN2Rwr0dXp+zfFX/pnSRwK2DJJG+J3bHEPHoQ0He2eTpFW+vWYsEuOGpuA1
yhC03MFmQG7jNBed+VnBLrVFZT84NbMzGLnHvSPCxfbJ3MuYtYQV1Q+uy7B/v2KV
8yJ71voWqG8zDNpKbUfmHYyfWG2FeTdvSKiCxpHQbfbzcBnz6B0hCEX0UumOvxUG
LAvv7rQmTuch5K5cFsV16cGAx/1lj8F5PeGQ2TQAV0MvLuWkz87kTdKq27C7wS3k
WovMn+fKQMfJ6w6McqmfdBmh
-----END CERTIFICATE-----
Generated at Wed Nov 20 12:17:26 2024 by rpki-client on console-ams.rpki-client.org