Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/f7Paim8XFFI1dsAUtOLvFQgpS7g.roa
File: f7Paim8XFFI1dsAUtOLvFQgpS7g.roa (raw, json)
Hash identifier: lNJKRAi9L8A1zl9YjQvogmMsZSI8mfnUFbjxl7dgfuI=
Subject key identifier: 7F:B3:DA:8A:6F:17:14:52:35:76:C0:14:B4:E2:EF:15:08:29:4B:B8
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 0191B8CFF8051E4A513395E12CEEAEC36CEF
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/f7Paim8XFFI1dsAUtOLvFQgpS7g.roa
Signing time: Tue 03 Sep 2024 16:55:22 +0000
ROA not before: Tue 03 Sep 2024 16:55:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 45.132.80.0/22 maxlen: 24
91.238.92.0/24 maxlen: 24
91.239.149.0/24 maxlen: 24
91.244.198.0/24 maxlen: 24
176.105.228.0/24 maxlen: 24
185.177.27.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 05 Sep 2024 17:38:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:b8:cf:f8:05:1e:4a:51:33:95:e1:2c:ee:ae:c3:6c:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Sep 3 16:55:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7fb3da8a6f1714523576c014b4e2ef1508294bb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:0a:3b:31:3a:13:b9:72:0c:a4:9e:83:cd:d0:
5a:e7:89:e9:84:c5:5c:c0:a0:73:5a:51:06:33:78:
bb:4a:74:dc:89:bd:bd:14:b8:b1:a1:5e:29:2b:b3:
23:9c:56:e2:47:e7:1a:ac:b4:12:cd:24:f5:74:d7:
34:d6:89:50:bc:0a:bd:53:44:ad:cd:fb:2d:8d:21:
07:86:cd:fb:41:68:70:8e:31:ed:e0:b4:82:59:ba:
a1:56:9a:39:3d:63:3d:e7:11:07:e6:c7:f5:54:15:
40:ce:44:5b:23:25:38:63:cd:34:91:35:f7:a0:45:
38:31:27:9f:77:71:48:db:27:e1:60:0c:21:9a:c6:
cc:36:ce:20:99:f6:c2:98:5c:f1:ff:b9:f4:1b:f6:
95:27:2d:49:98:f6:56:be:76:1f:8b:be:ff:a3:24:
c3:0f:3a:63:61:2a:20:93:70:aa:db:c7:d5:43:c0:
3a:05:07:a8:7f:84:d3:bb:e6:e7:72:92:5f:6a:e3:
80:e1:01:9d:ef:cf:d1:6d:67:0d:48:d9:1c:ba:7c:
d1:e3:67:c2:d4:3d:37:0e:82:54:4e:58:c7:e8:2b:
0b:2e:74:8e:66:82:92:57:0b:c8:f5:3d:d4:d5:82:
06:a3:99:bb:2d:f5:c5:75:aa:34:43:c1:ca:8b:87:
52:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:B3:DA:8A:6F:17:14:52:35:76:C0:14:B4:E2:EF:15:08:29:4B:B8
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/f7Paim8XFFI1dsAUtOLvFQgpS7g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.80.0/22
91.238.92.0/24
91.239.149.0/24
91.244.198.0/24
176.105.228.0/24
185.177.27.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:fc:a1:e4:87:4d:9a:8a:11:3f:82:7b:64:6c:2d:a1:64:29:
86:b9:0a:11:6c:5e:3c:28:2e:4f:77:d9:d5:e6:ae:ff:72:99:
fb:40:59:ee:ea:c6:ee:68:76:44:84:04:b7:56:d5:91:b3:7c:
1d:a0:e8:e1:59:a9:a1:bc:50:fc:e6:7b:53:93:dd:d7:f8:91:
18:97:a7:da:3b:ae:e6:d5:8e:79:05:cf:21:d9:0d:15:51:fc:
a9:6f:fe:ea:b9:7f:c0:d6:56:68:d1:be:c8:86:dc:ac:5c:e9:
20:44:66:dc:d3:a0:41:33:ec:8d:87:5a:9d:de:76:51:69:41:
98:fe:2e:de:94:78:26:94:47:32:58:8e:84:12:4d:20:40:10:
76:49:94:13:0d:b7:2e:7c:8d:31:2b:61:33:d9:a1:9d:5f:04:
23:51:63:b4:40:83:b7:8c:56:b4:d2:68:f7:28:77:d8:08:d8:
e2:7f:01:7a:cc:0c:e2:49:4e:6c:9d:2d:e2:de:5a:ac:d1:56:
9c:5f:7a:11:48:a5:32:4f:23:42:db:ad:d1:46:89:a6:17:17:
7b:b4:b1:32:02:11:10:68:dc:30:ca:15:e6:52:5f:f3:ef:29:
a1:6d:5b:e5:81:23:9b:e7:1f:04:f8:85:cd:34:f3:b9:30:9b:
bd:a5:7a:c9
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAZG4z/gFHkpRM5XhLO6uw2zvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliMGMwZDA0MjI1NTY2ZGI5NWU5YWQzYjJlZjYwNTAxNDk3
NWFhYTIwHhcNMjQwOTAzMTY1NTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZmIzZGE4YTZmMTcxNDUyMzU3NmMwMTRiNGUyZWYxNTA4Mjk0YmI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwo7MToTuXIMpJ6DzdBa54nphMVc
wKBzWlEGM3i7SnTcib29FLixoV4pK7MjnFbiR+carLQSzST1dNc01olQvAq9U0St
zfstjSEHhs37QWhwjjHt4LSCWbqhVpo5PWM95xEH5sf1VBVAzkRbIyU4Y800kTX3
oEU4MSefd3FI2yfhYAwhmsbMNs4gmfbCmFzx/7n0G/aVJy1JmPZWvnYfi77/oyTD
DzpjYSogk3Cq28fVQ8A6BQeof4TTu+bncpJfauOA4QGd78/RbWcNSNkcunzR42fC
1D03DoJUTljH6CsLLnSOZoKSVwvI9T3U1YIGo5m7LfXFdao0Q8HKi4dS0QIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFH+z2opvFxRSNXbAFLTi7xUIKUu4MB8GA1UdIwQY
MBaAFJsMDQQiVWbblemtOy72BQFJdaqiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXd3TkJDSlZadHVWNmEwN0x2WUZBVWwxcXFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8wZWM2ZDItZjFkNy00YjBhLWFkMzMt
ZThlZjJmMDk1OThlLzEvZjdQYWltOFhGRkkxZHNBVXRPTHZGUWdwUzdnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC8wZWM2ZDItZjFkNy00YjBhLWFkMzMtZThlZjJmMDk1OThl
LzEvbXd3TkJDSlZadHVWNmEwN0x2WUZBVWwxcXFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQCLYRQAwQA
W+5cAwQAW++VAwQAW/TGAwQAsGnkAwQAubEbMA0GCSqGSIb3DQEBCwUAA4IBAQCs
/KHkh02aihE/gntkbC2hZCmGuQoRbF48KC5Pd9nV5q7/cpn7QFnu6sbuaHZEhAS3
VtWRs3wdoOjhWamhvFD85ntTk93X+JEYl6faO67m1Y55Bc8h2Q0VUfypb/7quX/A
1lZo0b7IhtysXOkgRGbc06BBM+yNh1qd3nZRaUGY/i7elHgmlEcyWI6EEk0gQBB2
SZQTDbcufI0xK2Ez2aGdXwQjUWO0QIO3jFa00mj3KHfYCNjifwF6zAziSU5snS3i
3lqs0VacX3oRSKUyTyNC263RRommFxd7tLEyAhEQaNwwyhXmUl/z7ymhbVvlgSOb
5x8E+IXNNPO5MJu9pXrJ
-----END CERTIFICATE-----
Generated at Thu Sep 5 20:25:40 2024 by rpki-client on console-ams.rpki-client.org