Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/7f1649-0c9d-405d-a134-66d253432f5f/1/eUeb1Pm437RENp2SZvBVcK3MUKM.roa
File: eUeb1Pm437RENp2SZvBVcK3MUKM.roa (raw, json)
Hash identifier: GGOY8rlQ7sWOhtzuVHiBAmCpLiLndPxh5QqZWscCigc=
Subject key identifier: 79:47:9B:D4:F9:B8:DF:B4:44:36:9D:92:66:F0:55:70:AD:CC:50:A3
Certificate issuer: /CN=942f565ed16d8c337a8c8ab3cdc572ef1150f5a9
Certificate serial: 018CC94E6DDED3E51E27CBF1C3B428995C2C
Authority key identifier: 94:2F:56:5E:D1:6D:8C:33:7A:8C:8A:B3:CD:C5:72:EF:11:50:F5:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lC9WXtFtjDN6jIqzzcVy7xFQ9ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/7f1649-0c9d-405d-a134-66d253432f5f/1/eUeb1Pm437RENp2SZvBVcK3MUKM.roa
Signing time: Tue 02 Jan 2024 08:33:29 +0000
ROA not before: Tue 02 Jan 2024 08:33:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39180
IP address blocks: 185.153.244.0/22 maxlen: 22
79.110.56.0/22 maxlen: 22
37.148.240.0/21 maxlen: 21
93.191.40.0/21 maxlen: 21
185.242.140.0/22 maxlen: 22
178.18.48.0/20 maxlen: 20
188.93.40.0/21 maxlen: 21
81.18.176.0/20 maxlen: 20
185.29.64.0/23 maxlen: 23
2a01:378::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 12 Apr 2024 07:34:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:6d:de:d3:e5:1e:27:cb:f1:c3:b4:28:99:5c:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=942f565ed16d8c337a8c8ab3cdc572ef1150f5a9
Validity
Not Before: Jan 2 08:33:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=79479bd4f9b8dfb444369d9266f05570adcc50a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:60:68:bf:d9:1a:7b:2c:05:c1:15:0a:57:6d:
e5:51:21:e3:73:c2:fd:a5:f2:4b:bc:67:6b:c0:a8:
dd:e2:62:32:41:19:59:5a:53:9c:e5:66:a2:3b:59:
f4:d4:4c:50:26:a8:0c:32:b6:31:bc:cb:9c:84:60:
f6:49:af:04:f1:21:96:24:21:33:28:5a:9c:64:24:
44:07:1e:e2:a1:3a:a3:78:6a:28:01:b2:94:ff:27:
67:b3:74:b0:fd:f5:c5:30:cc:e3:98:c3:cc:33:57:
06:34:e0:e4:45:99:aa:37:75:db:47:0e:07:84:d3:
c9:7b:da:49:53:55:89:c4:20:7d:3b:27:2e:3c:16:
d2:79:48:60:ea:d8:ba:2f:26:ba:1d:0a:14:2e:44:
73:b3:28:f0:fa:8e:bd:4a:1f:0c:d7:83:0d:ad:32:
d6:67:fa:8c:42:f6:fd:72:23:ea:87:bd:fb:80:f9:
75:54:10:09:08:3e:b3:63:08:7f:d2:9e:26:1f:54:
51:7b:7a:d8:c0:b0:f4:96:b5:11:01:26:a4:a8:39:
8a:d2:f5:7d:09:ef:23:fc:46:cf:a0:72:34:74:50:
3c:63:3a:3a:a3:9c:b6:d1:b9:a2:9d:2a:3e:31:d5:
86:82:dc:6f:47:b3:1d:66:40:88:a0:09:59:39:89:
ee:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:47:9B:D4:F9:B8:DF:B4:44:36:9D:92:66:F0:55:70:AD:CC:50:A3
X509v3 Authority Key Identifier:
keyid:94:2F:56:5E:D1:6D:8C:33:7A:8C:8A:B3:CD:C5:72:EF:11:50:F5:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lC9WXtFtjDN6jIqzzcVy7xFQ9ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/7f1649-0c9d-405d-a134-66d253432f5f/1/eUeb1Pm437RENp2SZvBVcK3MUKM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/7f1649-0c9d-405d-a134-66d253432f5f/1/lC9WXtFtjDN6jIqzzcVy7xFQ9ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.148.240.0/21
79.110.56.0/22
81.18.176.0/20
93.191.40.0/21
178.18.48.0/20
185.29.64.0/23
185.153.244.0/22
185.242.140.0/22
188.93.40.0/21
IPv6:
2a01:378::/32
Signature Algorithm: sha256WithRSAEncryption
3e:61:33:54:af:3e:3d:c5:13:08:a5:49:86:70:ae:94:8b:b6:
b1:e0:c9:0d:90:8a:ba:00:f5:a4:93:63:c4:f7:d2:f3:54:a5:
b4:93:b5:5d:5e:3e:ce:d8:c1:25:9a:67:c7:66:86:1d:3f:4a:
ed:24:8c:c6:72:66:d6:26:cc:72:8e:cb:c2:b5:9b:9b:de:09:
0d:8e:51:f6:be:a8:36:f7:22:ec:cc:20:ba:08:8d:a6:c8:ac:
ff:7e:23:5e:56:f0:32:45:e0:06:3c:86:e9:d5:f3:d6:02:ab:
d5:c4:ac:b3:4f:d4:42:68:3c:e5:3c:91:1c:0f:ee:37:5b:f5:
7e:21:dd:7d:12:ae:04:7f:7b:06:d3:fa:bf:22:ed:85:79:60:
39:6b:80:b6:53:c8:58:ab:19:f1:da:1f:8c:0d:79:33:4a:47:
1a:b2:64:b1:28:6d:aa:20:8e:82:67:98:d5:79:ba:bf:9b:88:
20:34:35:08:9e:e7:46:b0:fc:a4:ad:49:ef:ff:4c:6c:f1:18:
fc:dc:a8:09:d4:df:d8:b5:58:4a:6e:e5:30:a5:03:39:b9:76:
16:65:bc:d5:21:9f:40:3e:05:bb:56:4e:6f:10:fb:04:83:fa:
53:6a:a0:61:18:78:eb:78:15:dd:af:eb:da:d2:96:48:b1:ee:
4f:6d:ca:bd
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgISAYzJTm3e0+UeJ8vxw7QomVwsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0MmY1NjVlZDE2ZDhjMzM3YThjOGFiM2NkYzU3MmVmMTE1
MGY1YTkwHhcNMjQwMTAyMDgzMzI5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OTQ3OWJkNGY5YjhkZmI0NDQzNjlkOTI2NmYwNTU3MGFkY2M1MGEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzGBov9kaeywFwRUKV23lUSHjc8L9
pfJLvGdrwKjd4mIyQRlZWlOc5WaiO1n01ExQJqgMMrYxvMuchGD2Sa8E8SGWJCEz
KFqcZCREBx7ioTqjeGooAbKU/ydns3Sw/fXFMMzjmMPMM1cGNODkRZmqN3XbRw4H
hNPJe9pJU1WJxCB9OycuPBbSeUhg6ti6Lya6HQoULkRzsyjw+o69Sh8M14MNrTLW
Z/qMQvb9ciPqh737gPl1VBAJCD6zYwh/0p4mH1RRe3rYwLD0lrURASakqDmK0vV9
Ce8j/EbPoHI0dFA8Yzo6o5y20bminSo+MdWGgtxvR7MdZkCIoAlZOYnuFwIDAQAB
o4ICSDCCAkQwHQYDVR0OBBYEFHlHm9T5uN+0RDadkmbwVXCtzFCjMB8GA1UdIwQY
MBaAFJQvVl7RbYwzeoyKs83Fcu8RUPWpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEM5V1h0RnRqRE42aklxenpjVnk3eEZROWFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy83ZjE2NDktMGM5ZC00MDVkLWExMzQt
NjZkMjUzNDMyZjVmLzEvZVVlYjFQbTQzN1JFTnAyU1p2QlZjSzNNVUtNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy83ZjE2NDktMGM5ZC00MDVkLWExMzQtNjZkMjUzNDMyZjVm
LzEvbEM5V1h0RnRqRE42aklxenpjVnk3eEZROWFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMF4GCCsGAQUFBwEHAQH/BE8wTTA8BAIAATA2AwQDJZTwAwQC
T244AwQEURKwAwQDXb8oAwQEshIwAwQBuR1AAwQCuZn0AwQCufKMAwQDvF0oMA0E
AgACMAcDBQAqAQN4MA0GCSqGSIb3DQEBCwUAA4IBAQA+YTNUrz49xRMIpUmGcK6U
i7ax4MkNkIq6APWkk2PE99LzVKW0k7VdXj7O2MElmmfHZoYdP0rtJIzGcmbWJsxy
jsvCtZub3gkNjlH2vqg29yLszCC6CI2myKz/fiNeVvAyReAGPIbp1fPWAqvVxKyz
T9RCaDzlPJEcD+43W/V+Id19Eq4Ef3sG0/q/Iu2FeWA5a4C2U8hYqxnx2h+MDXkz
SkcasmSxKG2qII6CZ5jVebq/m4ggNDUInudGsPykrUnv/0xs8Rj83KgJ1N/YtVhK
buUwpQM5uXYWZbzVIZ9APgW7Vk5vEPsEg/pTaqBhGHjreBXdr+va0pZIse5Pbcq9
-----END CERTIFICATE-----
Generated at Fri Apr 12 12:11:09 2024 by rpki-client on console-ams.rpki-client.org