Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/a214a5-4449-44af-87ff-c967c9db5752/1/2uA5LalUpKhyQnPZ3gHMcXVl9As.roa
File: 2uA5LalUpKhyQnPZ3gHMcXVl9As.roa (raw, json)
Hash identifier: ZIP07HD6ekXQ2UxlT4Imf9Oav2zSEe68aTV4EN/BsNw=
Subject key identifier: DA:E0:39:2D:A9:54:A4:A8:72:42:73:D9:DE:01:CC:71:75:65:F4:0B
Certificate issuer: /CN=7bf39e6eb3131ecf3cddcd0c9e378c352da41fc2
Certificate serial: 018CC7950FEF52EEFAD0272D637896829282
Authority key identifier: 7B:F3:9E:6E:B3:13:1E:CF:3C:DD:CD:0C:9E:37:8C:35:2D:A4:1F:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e_OebrMTHs883c0MnjeMNS2kH8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/a214a5-4449-44af-87ff-c967c9db5752/1/2uA5LalUpKhyQnPZ3gHMcXVl9As.roa
Signing time: Tue 02 Jan 2024 00:31:24 +0000
ROA not before: Tue 02 Jan 2024 00:31:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43930
IP address blocks: 193.57.128.0/22 maxlen: 22
193.57.128.0/23 maxlen: 23
185.108.34.0/24 maxlen: 24
185.108.32.0/24 maxlen: 24
185.108.33.0/24 maxlen: 24
185.194.165.0/24 maxlen: 24
185.194.164.0/23 maxlen: 23
185.194.164.0/24 maxlen: 24
2a02:c800::/32 maxlen: 32
2a02:c800:42::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 19 Mar 2024 09:25:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:0f:ef:52:ee:fa:d0:27:2d:63:78:96:82:92:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bf39e6eb3131ecf3cddcd0c9e378c352da41fc2
Validity
Not Before: Jan 2 00:31:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dae0392da954a4a8724273d9de01cc717565f40b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:33:b5:c8:4d:7d:88:ff:fe:16:d0:a9:fb:1d:
89:4f:d2:63:af:41:7b:cb:92:ac:7e:51:64:6f:8c:
e6:69:10:e9:a3:f5:99:ca:28:92:3d:e6:96:d0:1f:
05:96:54:d1:0a:c8:84:bd:b2:44:a1:8e:8b:4d:54:
e3:c4:21:34:12:4c:bb:69:80:ac:a6:ba:53:a2:a0:
8a:d9:32:c1:c2:bf:d1:8b:2f:08:be:3b:3c:ef:df:
80:e7:90:69:89:44:47:ba:5b:f0:89:93:a3:15:8d:
58:dc:04:11:aa:c2:47:a1:4a:53:ea:47:71:7f:e3:
cb:ac:4e:cb:af:29:e3:cf:9b:4c:ec:42:a6:47:3e:
d2:87:db:f6:69:c1:61:39:76:4c:81:11:b9:60:09:
16:d9:5e:da:c6:c8:cf:14:32:f5:27:90:e0:bb:7d:
4b:84:76:1f:d7:e1:7c:92:18:30:88:13:c4:72:77:
d7:df:60:d2:a2:98:ee:0d:f8:30:cc:2e:23:e4:63:
3a:ad:78:a3:98:44:a3:46:a7:d2:4f:54:f6:00:11:
c1:7e:d1:bc:12:e6:2c:fb:94:91:e7:d7:a6:dc:35:
2c:be:91:fe:8b:da:1d:12:6e:30:ae:d6:db:fc:3f:
b3:d8:9b:b2:f0:02:cf:5c:32:f4:dd:d5:34:1b:1f:
29:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:E0:39:2D:A9:54:A4:A8:72:42:73:D9:DE:01:CC:71:75:65:F4:0B
X509v3 Authority Key Identifier:
keyid:7B:F3:9E:6E:B3:13:1E:CF:3C:DD:CD:0C:9E:37:8C:35:2D:A4:1F:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e_OebrMTHs883c0MnjeMNS2kH8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a214a5-4449-44af-87ff-c967c9db5752/1/2uA5LalUpKhyQnPZ3gHMcXVl9As.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a214a5-4449-44af-87ff-c967c9db5752/1/e_OebrMTHs883c0MnjeMNS2kH8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.108.32.0-185.108.34.255
185.194.164.0/23
193.57.128.0/22
IPv6:
2a02:c800::/32
Signature Algorithm: sha256WithRSAEncryption
89:da:dd:25:e9:ce:19:ac:45:2b:20:3f:f9:e7:4e:3d:c6:73:
20:c6:4b:e9:32:5a:7c:b5:70:67:0e:b1:09:d7:23:70:6b:0a:
68:41:ba:5a:81:59:ce:97:f1:8f:72:34:34:90:2a:db:a9:37:
6e:d0:67:1c:57:bb:f7:04:0f:05:ce:74:2a:94:c0:f5:7a:53:
f1:9c:9a:be:72:75:66:0f:83:52:d9:33:38:59:d2:6a:ab:3c:
2b:74:dd:fc:ce:89:52:b1:ef:11:ce:e5:28:1b:08:4c:51:11:
eb:de:7f:db:de:c0:ab:8d:a9:8b:3e:2e:d0:51:b3:eb:0c:c0:
b8:d6:1b:8e:77:29:06:9c:71:4f:b8:98:4f:a6:1e:ce:d1:ed:
a9:f6:ea:1d:33:0e:5c:f9:d1:53:ea:e7:d7:ef:16:f4:44:4c:
d5:42:09:71:2a:64:b8:9b:07:3d:49:c0:b6:12:32:14:00:89:
01:8f:d9:d6:9d:a6:ce:7e:93:7e:d7:97:3e:a3:e0:69:dd:ab:
91:db:be:33:a6:a9:10:35:94:80:7f:7a:1b:40:36:26:2e:37:
c4:52:3d:88:22:23:8d:df:09:d9:c9:02:d3:56:6f:51:c8:d5:
1c:f8:44:1b:db:c1:eb:15:6c:39:13:d3:14:06:12:ae:f2:99:
1b:69:9f:8c
-----BEGIN CERTIFICATE-----
MIIFIDCCBAigAwIBAgISAYzHlQ/vUu760CctY3iWgpKCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiZjM5ZTZlYjMxMzFlY2YzY2RkY2QwYzllMzc4YzM1MmRh
NDFmYzIwHhcNMjQwMTAyMDAzMTI0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYWUwMzkyZGE5NTRhNGE4NzI0MjczZDlkZTAxY2M3MTc1NjVmNDBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzO1yE19iP/+FtCp+x2JT9Jjr0F7
y5KsflFkb4zmaRDpo/WZyiiSPeaW0B8FllTRCsiEvbJEoY6LTVTjxCE0Eky7aYCs
prpToqCK2TLBwr/Riy8Ivjs879+A55BpiURHulvwiZOjFY1Y3AQRqsJHoUpT6kdx
f+PLrE7Lrynjz5tM7EKmRz7Sh9v2acFhOXZMgRG5YAkW2V7axsjPFDL1J5Dgu31L
hHYf1+F8khgwiBPEcnfX32DSopjuDfgwzC4j5GM6rXijmESjRqfST1T2ABHBftG8
EuYs+5SR59em3DUsvpH+i9odEm4wrtbb/D+z2Juy8ALPXDL03dU0Gx8pawIDAQAB
o4ICLDCCAigwHQYDVR0OBBYEFNrgOS2pVKSockJz2d4BzHF1ZfQLMB8GA1UdIwQY
MBaAFHvznm6zEx7PPN3NDJ43jDUtpB/CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZV9PZWJyTVRIczg4M2MwTW5qZU1OUzJrSDhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9hMjE0YTUtNDQ0OS00NGFmLTg3ZmYt
Yzk2N2M5ZGI1NzUyLzEvMnVBNUxhbFVwS2h5UW5QWjNnSE1jWFZsOUFzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy9hMjE0YTUtNDQ0OS00NGFmLTg3ZmYtYzk2N2M5ZGI1NzUy
LzEvZV9PZWJyTVRIczg4M2MwTW5qZU1OUzJrSDhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAgBAIAATAaMAwDBAW5bCAD
BAC5bCIDBAG5wqQDBALBOYAwDQQCAAIwBwMFACoCyAAwDQYJKoZIhvcNAQELBQAD
ggEBAIna3SXpzhmsRSsgP/nnTj3GcyDGS+kyWny1cGcOsQnXI3BrCmhBulqBWc6X
8Y9yNDSQKtupN27QZxxXu/cEDwXOdCqUwPV6U/Gcmr5ydWYPg1LZMzhZ0mqrPCt0
3fzOiVKx7xHO5SgbCExREevef9vewKuNqYs+LtBRs+sMwLjWG453KQaccU+4mE+m
Hs7R7an26h0zDlz50VPq59fvFvRETNVCCXEqZLibBz1JwLYSMhQAiQGP2dadps5+
k37Xlz6j4Gndq5HbvjOmqRA1lIB/ehtANiYuN8RSPYgiI43fCdnJAtNWb1HI1Rz4
RBvbwesVbDkT0xQGEq7ymRtpn4w=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:06 2024 by rpki-client on console-ams.rpki-client.org