Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/1a27ec-eb0a-4406-a1d1-07ed46b149c3/1/JCh6SGj4p7DMbEGzGxHyyKDTESE.roa
File: JCh6SGj4p7DMbEGzGxHyyKDTESE.roa (raw, json)
Hash identifier: ioXAmfeEnebY9GSqIvUFzC3uCPSqhfb0PY65YwKKJxQ=
Subject key identifier: 24:28:7A:48:68:F8:A7:B0:CC:6C:41:B3:1B:11:F2:C8:A0:D3:11:21
Certificate issuer: /CN=31242850cad41cdf75a3c9d60b21fca543f74384
Certificate serial: 0185704BB665356F722174351F44AD9D6A06
Authority key identifier: 31:24:28:50:CA:D4:1C:DF:75:A3:C9:D6:0B:21:FC:A5:43:F7:43:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/1a27ec-eb0a-4406-a1d1-07ed46b149c3/1/JCh6SGj4p7DMbEGzGxHyyKDTESE.roa
Signing time: Mon 02 Jan 2023 02:24:48 +0000
ROA not before: Mon 02 Jan 2023 02:24:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9136
IP address blocks: 62.176.224.0/19 maxlen: 19
91.186.32.0/19 maxlen: 19
5.159.24.0/21 maxlen: 21
213.162.128.0/19 maxlen: 19
185.72.232.0/22 maxlen: 22
2a01:581:9::/48 maxlen: 48
2a01:581:a::/48 maxlen: 48
2a01:581:6::/48 maxlen: 48
2a01:581:b::/48 maxlen: 48
2a01:581:c::/48 maxlen: 48
2a01:581:7::/48 maxlen: 48
2a01:581:8::/48 maxlen: 48
2a01:580::/29 maxlen: 29
Validation: Failed, certificate revoked on Fri 25 Aug 2023 10:52:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:4b:b6:65:35:6f:72:21:74:35:1f:44:ad:9d:6a:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31242850cad41cdf75a3c9d60b21fca543f74384
Validity
Not Before: Jan 2 02:24:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=24287a4868f8a7b0cc6c41b31b11f2c8a0d31121
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:3c:c5:a4:e8:87:2f:f6:ea:e1:5f:71:34:9a:
48:09:3c:3c:22:6d:aa:d1:6d:74:e4:af:c6:a8:0c:
86:e7:45:ec:75:5b:02:40:4a:08:0b:93:10:c2:af:
b7:b3:16:92:a5:25:2e:99:7c:9d:87:2e:ca:03:f5:
71:2e:c7:98:06:ef:92:2e:06:4e:38:14:46:29:9a:
ed:ce:07:aa:5a:7e:1f:57:d7:f4:10:f4:e4:6f:bc:
4a:3d:72:18:3f:f4:98:04:10:60:a2:a6:47:68:15:
2b:61:30:23:6c:a4:d3:d3:84:9e:7a:40:6e:9f:2a:
c6:f3:ad:e6:c0:68:c8:92:1e:ce:0e:aa:3b:96:41:
1d:49:e7:58:46:f4:04:7f:2d:03:62:b7:4f:9a:d7:
fa:ff:ea:d8:4a:15:03:21:e6:eb:2d:18:4d:e2:76:
2b:e0:97:e1:56:19:fc:97:c3:12:67:6d:b9:1e:d5:
cb:ef:38:4e:bb:c8:13:cb:14:eb:81:c8:03:82:78:
19:58:cd:1a:16:02:03:26:16:8d:b2:03:b0:8f:56:
14:c5:d9:d7:0b:7a:ba:eb:bf:74:d1:55:a8:f0:49:
26:15:e9:27:5c:42:1e:5e:c6:14:44:78:7b:b1:55:
4f:b7:66:5d:23:3e:13:65:4a:14:f4:5d:21:43:25:
6f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:28:7A:48:68:F8:A7:B0:CC:6C:41:B3:1B:11:F2:C8:A0:D3:11:21
X509v3 Authority Key Identifier:
keyid:31:24:28:50:CA:D4:1C:DF:75:A3:C9:D6:0B:21:FC:A5:43:F7:43:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1a27ec-eb0a-4406-a1d1-07ed46b149c3/1/JCh6SGj4p7DMbEGzGxHyyKDTESE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1a27ec-eb0a-4406-a1d1-07ed46b149c3/1/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.159.24.0/21
62.176.224.0/19
91.186.32.0/19
185.72.232.0/22
213.162.128.0/19
IPv6:
2a01:580::/29
Signature Algorithm: sha256WithRSAEncryption
0d:95:57:1c:5e:95:ce:e0:50:5a:86:be:66:55:e0:c5:98:4d:
7a:f4:51:18:10:a4:01:f8:a7:b2:82:e5:af:ec:a4:6e:11:e8:
62:d9:16:2a:9b:2f:db:a0:09:d1:04:ee:c4:7f:b9:26:c5:ee:
ac:cc:33:f6:76:c7:a8:8c:df:30:f2:2d:68:c4:b5:ce:04:64:
73:d5:27:db:2f:dc:e0:54:04:40:b0:4a:cd:40:bc:e0:ef:87:
26:df:26:95:df:f3:b0:7e:29:dc:c7:ea:c6:a4:0a:30:26:23:
9d:5f:5d:5a:64:5f:14:50:77:a5:fe:36:1d:4a:00:7c:71:02:
bb:8e:42:59:82:c6:d4:17:e3:57:f2:2e:03:b7:64:1d:f7:89:
e1:5b:fc:7e:8d:43:1d:6f:92:6a:88:82:dc:8b:38:0a:76:af:
69:7b:ad:1f:21:77:fd:bf:fc:4f:96:46:4d:36:ff:0f:dd:a0:
a3:24:45:d4:44:4d:33:c3:f6:2f:2c:3a:60:ee:58:84:70:cf:
01:96:f7:90:ba:fc:ee:0e:c6:32:f3:2c:b3:0a:a1:21:9e:4a:
f8:c0:8f:78:6e:7b:ab:7e:8b:0d:c3:12:58:fb:b9:8d:bf:0b:
c5:f7:ef:d5:46:a0:c2:53:13:a5:a3:66:c0:17:b4:21:f6:e4:
fd:11:6a:b4
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgISAYVwS7ZlNW9yIXQ1H0StnWoGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxMjQyODUwY2FkNDFjZGY3NWEzYzlkNjBiMjFmY2E1NDNm
NzQzODQwHhcNMjMwMTAyMDIyNDQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNDI4N2E0ODY4ZjhhN2IwY2M2YzQxYjMxYjExZjJjOGEwZDMxMTIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjzFpOiHL/bq4V9xNJpICTw8Im2q
0W105K/GqAyG50XsdVsCQEoIC5MQwq+3sxaSpSUumXydhy7KA/VxLseYBu+SLgZO
OBRGKZrtzgeqWn4fV9f0EPTkb7xKPXIYP/SYBBBgoqZHaBUrYTAjbKTT04SeekBu
nyrG863mwGjIkh7ODqo7lkEdSedYRvQEfy0DYrdPmtf6/+rYShUDIebrLRhN4nYr
4JfhVhn8l8MSZ225HtXL7zhOu8gTyxTrgcgDgngZWM0aFgIDJhaNsgOwj1YUxdnX
C3q667900VWo8EkmFeknXEIeXsYURHh7sVVPt2ZdIz4TZUoU9F0hQyVvCwIDAQAB
o4ICMDCCAiwwHQYDVR0OBBYEFCQoekho+KewzGxBsxsR8sig0xEhMB8GA1UdIwQY
MBaAFDEkKFDK1BzfdaPJ1gsh/KVD90OEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVNRb1VNclVITjkxbzhuV0N5SDhwVVAzUTRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8xYTI3ZWMtZWIwYS00NDA2LWExZDEt
MDdlZDQ2YjE0OWMzLzEvSkNoNlNHajRwN0RNYkVHekd4SHl5S0RURVNFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC8xYTI3ZWMtZWIwYS00NDA2LWExZDEtMDdlZDQ2YjE0OWMz
LzEvTVNRb1VNclVITjkxbzhuV0N5SDhwVVAzUTRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQDBZ8YAwQF
PrDgAwQFW7ogAwQCuUjoAwQF1aKAMA0EAgACMAcDBQMqAQWAMA0GCSqGSIb3DQEB
CwUAA4IBAQANlVccXpXO4FBahr5mVeDFmE169FEYEKQB+KeyguWv7KRuEehi2RYq
my/boAnRBO7Ef7kmxe6szDP2dseojN8w8i1oxLXOBGRz1SfbL9zgVARAsErNQLzg
74cm3yaV3/Owfincx+rGpAowJiOdX11aZF8UUHel/jYdSgB8cQK7jkJZgsbUF+NX
8i4Dt2Qd94nhW/x+jUMdb5JqiILcizgKdq9pe60fIXf9v/xPlkZNNv8P3aCjJEXU
RE0zw/YvLDpg7liEcM8BlveQuvzuDsYy8yyzCqEhnkr4wI94bnurfosNwxJY+7mN
vwvF9+/VRqDCUxOlo2bAF7Qh9uT9EWq0
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:25 2024 by rpki-client on console-ams.rpki-client.org