Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/900444-dd40-4a04-a616-dc1ff6746d2e/1/75k_bw4mszdtrmIBhxBP5-snc5Q.roa
File: 75k_bw4mszdtrmIBhxBP5-snc5Q.roa (raw, json)
Hash identifier: bSqC6MnGdwahXUhD9IRmxl5P2MBnhdH7nWSWbmNsfoU=
Subject key identifier: EF:99:3F:6F:0E:26:B3:37:6D:AE:62:01:87:10:4F:E7:EB:27:73:94
Certificate issuer: /CN=896ed6e4b5c7c19db98c57432af4dcf630bf60ae
Certificate serial: 018BF0EA7E16C202BB6D338007EFA02A5D6F
Authority key identifier: 89:6E:D6:E4:B5:C7:C1:9D:B9:8C:57:43:2A:F4:DC:F6:30:BF:60:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iW7W5LXHwZ25jFdDKvTc9jC_YK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/900444-dd40-4a04-a616-dc1ff6746d2e/1/75k_bw4mszdtrmIBhxBP5-snc5Q.roa
Signing time: Tue 21 Nov 2023 08:06:21 +0000
ROA not before: Tue 21 Nov 2023 08:06:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50710
IP address blocks: 185.141.9.0/24 maxlen: 24
185.141.11.0/24 maxlen: 24
185.141.10.0/24 maxlen: 24
109.224.52.0/22 maxlen: 22
109.224.56.0/22 maxlen: 22
109.224.56.0/21 maxlen: 21
109.224.60.0/22 maxlen: 22
109.224.1.0/24 maxlen: 24
109.224.0.0/21 maxlen: 21
109.224.2.0/23 maxlen: 23
109.224.0.0/18 maxlen: 18
109.224.4.0/22 maxlen: 22
109.224.8.0/21 maxlen: 21
109.224.8.0/22 maxlen: 22
109.224.13.0/24 maxlen: 24
109.224.12.0/23 maxlen: 23
109.224.12.0/24 maxlen: 24
109.224.14.0/24 maxlen: 24
109.224.14.0/23 maxlen: 23
109.224.15.0/24 maxlen: 24
109.224.16.0/22 maxlen: 22
109.224.24.0/22 maxlen: 22
109.224.20.0/22 maxlen: 22
109.224.28.0/24 maxlen: 24
109.224.30.0/23 maxlen: 23
109.224.29.0/24 maxlen: 24
109.224.32.0/24 maxlen: 24
109.224.32.0/22 maxlen: 22
109.224.36.0/22 maxlen: 22
109.224.41.0/24 maxlen: 24
109.224.40.0/24 maxlen: 24
109.224.40.0/21 maxlen: 21
109.224.42.0/23 maxlen: 23
109.224.42.0/24 maxlen: 24
109.224.43.0/24 maxlen: 24
109.224.44.0/22 maxlen: 22
109.224.48.0/21 maxlen: 21
109.224.48.0/22 maxlen: 22
185.118.96.0/22 maxlen: 22
185.118.96.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:31:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f0:ea:7e:16:c2:02:bb:6d:33:80:07:ef:a0:2a:5d:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=896ed6e4b5c7c19db98c57432af4dcf630bf60ae
Validity
Not Before: Nov 21 08:06:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ef993f6f0e26b3376dae620187104fe7eb277394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:4d:f8:a5:ed:a3:7c:28:bf:84:a3:d8:6a:a3:
5b:e0:f2:ef:89:d4:8f:5c:72:6b:da:a6:19:cb:c0:
c9:e6:a0:fa:6f:80:a9:3c:c6:88:4d:c8:9b:9b:8b:
60:c3:dd:c8:78:a7:f2:e0:89:67:55:19:8f:78:8f:
fa:12:7c:b5:39:24:12:60:d4:1d:52:76:a8:e0:24:
1d:ee:bc:f2:e4:b6:22:46:8d:f5:d0:40:31:89:66:
e7:a2:e3:a4:60:3b:07:0d:4e:31:05:fc:4d:92:8c:
3d:d8:d7:b2:60:62:8e:98:15:e8:37:12:e9:08:ff:
00:4d:78:e0:24:4b:41:31:e7:d1:05:43:9a:48:87:
f4:3f:39:b4:e4:d6:b8:bd:d0:87:eb:c6:0b:03:bb:
bd:b3:6e:cd:3c:17:50:2c:6b:8f:1b:90:83:a7:a3:
2e:32:14:18:00:28:c4:32:3a:68:9a:3c:84:2b:f2:
38:bd:0a:67:92:c8:05:40:e5:fa:a3:f6:d9:7a:f7:
a0:90:cd:1c:9e:ab:f2:8a:23:94:a8:72:72:13:5f:
d8:62:37:b5:44:5b:3a:7c:12:82:dc:bc:52:47:4a:
0c:4e:b3:65:16:62:47:52:2f:c6:89:d5:ea:64:fe:
6a:4c:81:05:27:bc:fc:eb:11:6a:16:08:56:e9:2e:
d0:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:99:3F:6F:0E:26:B3:37:6D:AE:62:01:87:10:4F:E7:EB:27:73:94
X509v3 Authority Key Identifier:
keyid:89:6E:D6:E4:B5:C7:C1:9D:B9:8C:57:43:2A:F4:DC:F6:30:BF:60:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iW7W5LXHwZ25jFdDKvTc9jC_YK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/900444-dd40-4a04-a616-dc1ff6746d2e/1/75k_bw4mszdtrmIBhxBP5-snc5Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/900444-dd40-4a04-a616-dc1ff6746d2e/1/iW7W5LXHwZ25jFdDKvTc9jC_YK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.224.0.0/18
185.118.96.0/22
185.141.9.0-185.141.11.255
Signature Algorithm: sha256WithRSAEncryption
d0:22:a2:06:f8:37:b6:7f:20:93:b3:e1:be:aa:bb:64:f0:0e:
8f:08:25:3a:1a:bf:69:e5:ab:09:47:32:a3:a0:db:0b:19:aa:
d4:c4:6f:7f:46:c1:d5:7f:e1:28:a1:80:15:f7:00:01:d5:2d:
77:bc:d1:da:b0:90:da:a9:2b:97:45:c0:e6:ff:62:e0:c6:3d:
21:d5:62:7a:f8:39:39:d4:34:af:32:46:c3:e9:f9:3a:b0:9a:
fe:5e:82:8b:f2:3a:9e:13:bc:8f:02:da:d4:0c:7c:27:38:53:
5b:fa:46:92:a4:3d:f0:b0:ff:78:88:c3:3f:9b:85:7f:08:84:
70:d2:a3:fe:d8:9f:97:2a:cf:cd:60:6a:54:95:fd:3c:b8:0f:
42:d6:87:a4:f0:58:da:3a:4c:89:89:44:68:62:88:bf:4b:05:
f4:00:06:ad:73:37:51:68:3b:6e:16:e9:02:8b:86:6f:0b:fc:
74:2a:12:56:91:5b:24:aa:7e:63:dd:d4:6a:ee:40:c2:9e:ec:
86:e1:5c:7c:40:f8:a5:31:fb:97:c5:6a:3e:0c:5b:3d:7b:27:
b7:31:42:80:6b:71:37:c7:6e:c1:10:67:c7:c3:20:5c:32:11:
69:4a:1c:d0:3e:60:42:b1:9d:5d:b0:98:64:bf:9f:b8:a1:91:
91:bb:91:41
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAYvw6n4WwgK7bTOAB++gKl1vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5NmVkNmU0YjVjN2MxOWRiOThjNTc0MzJhZjRkY2Y2MzBi
ZjYwYWUwHhcNMjMxMTIxMDgwNjIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZjk5M2Y2ZjBlMjZiMzM3NmRhZTYyMDE4NzEwNGZlN2ViMjc3Mzk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhk34pe2jfCi/hKPYaqNb4PLvidSP
XHJr2qYZy8DJ5qD6b4CpPMaITcibm4tgw93IeKfy4IlnVRmPeI/6Eny1OSQSYNQd
Unao4CQd7rzy5LYiRo310EAxiWbnouOkYDsHDU4xBfxNkow92NeyYGKOmBXoNxLp
CP8ATXjgJEtBMefRBUOaSIf0Pzm05Na4vdCH68YLA7u9s27NPBdQLGuPG5CDp6Mu
MhQYACjEMjpomjyEK/I4vQpnksgFQOX6o/bZevegkM0cnqvyiiOUqHJyE1/YYje1
RFs6fBKC3LxSR0oMTrNlFmJHUi/GidXqZP5qTIEFJ7z86xFqFghW6S7Q3wIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFO+ZP28OJrM3ba5iAYcQT+frJ3OUMB8GA1UdIwQY
MBaAFIlu1uS1x8GduYxXQyr03PYwv2CuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVc3VzVMWEh3WjI1akZkREt2VGM5akNfWUs0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC85MDA0NDQtZGQ0MC00YTA0LWE2MTYt
ZGMxZmY2NzQ2ZDJlLzEvNzVrX2J3NG1zemR0cm1JQmh4QlA1LXNuYzVRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC85MDA0NDQtZGQ0MC00YTA0LWE2MTYtZGMxZmY2NzQ2ZDJl
LzEvaVc3VzVMWEh3WjI1akZkREt2VGM5akNfWUs0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQGbeAAAwQC
uXZgMAwDBAC5jQkDBAK5jQgwDQYJKoZIhvcNAQELBQADggEBANAiogb4N7Z/IJOz
4b6qu2TwDo8IJToav2nlqwlHMqOg2wsZqtTEb39GwdV/4SihgBX3AAHVLXe80dqw
kNqpK5dFwOb/YuDGPSHVYnr4OTnUNK8yRsPp+Tqwmv5egovyOp4TvI8C2tQMfCc4
U1v6RpKkPfCw/3iIwz+bhX8IhHDSo/7Yn5cqz81galSV/Ty4D0LWh6TwWNo6TImJ
RGhiiL9LBfQABq1zN1FoO24W6QKLhm8L/HQqElaRWySqfmPd1GruQMKe7IbhXHxA
+KUx+5fFaj4MWz17J7cxQoBrcTfHbsEQZ8fDIFwyEWlKHNA+YEKxnV2wmGS/n7ih
kZG7kUE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:11 2024 by rpki-client on console-fra.rpki-client.org