Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/cKjrIgnvfM7ArYfZTqCfLc4jKqg.roa
File: cKjrIgnvfM7ArYfZTqCfLc4jKqg.roa (raw, json)
Hash identifier: 7iBByOUddvqu+UHUDH1EHhhrxnQ8y0/qFQtG3CC69gc=
Subject key identifier: 70:A8:EB:22:09:EF:7C:CE:C0:AD:87:D9:4E:A0:9F:2D:CE:23:2A:A8
Certificate issuer: /CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0
Certificate serial: 01856F42B89242B77E5AAE7792DB7783AEDA
Authority key identifier: 5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/cKjrIgnvfM7ArYfZTqCfLc4jKqg.roa
Signing time: Sun 01 Jan 2023 21:35:21 +0000
ROA not before: Sun 01 Jan 2023 21:35:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41689
IP address blocks: 188.0.240.0/23 maxlen: 32
185.112.36.0/22 maxlen: 32
185.112.32.0/22 maxlen: 32
77.238.120.0/22 maxlen: 32
93.115.144.0/21 maxlen: 32
46.143.0.0/17 maxlen: 32
37.156.144.0/22 maxlen: 32
89.235.96.0/22 maxlen: 32
185.120.220.0/22 maxlen: 32
185.120.248.0/22 maxlen: 32
176.65.240.0/22 maxlen: 32
31.25.128.0/21 maxlen: 32
176.65.252.0/23 maxlen: 32
176.65.254.0/23 maxlen: 32
128.65.176.0/20 maxlen: 32
185.141.171.99/32 maxlen: 32
79.127.0.0/17 maxlen: 32
185.98.112.0/22 maxlen: 32
89.41.40.0/22 maxlen: 32
93.118.180.0/22 maxlen: 32
185.99.212.0/22 maxlen: 32
185.109.244.0/22 maxlen: 32
185.49.84.0/22 maxlen: 32
185.109.248.0/22 maxlen: 32
31.7.64.0/20 maxlen: 32
178.22.120.0/21 maxlen: 32
Validation: Failed, certificate revoked on Sat 20 May 2023 05:57:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:b8:92:42:b7:7e:5a:ae:77:92:db:77:83:ae:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0
Validity
Not Before: Jan 1 21:35:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=70a8eb2209ef7ccec0ad87d94ea09f2dce232aa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:30:fc:26:0c:32:f8:c8:be:94:3f:8c:3a:80:
8d:74:a9:53:db:81:f6:ac:4f:53:84:3f:43:e8:de:
4d:98:a6:b1:e1:1c:c3:29:82:96:7b:56:56:11:6d:
88:0b:46:04:a5:05:fe:a2:8a:62:31:3f:9a:51:cb:
b9:88:64:96:d6:9c:dc:7b:0a:8e:6b:d3:a2:63:cf:
38:79:a2:ec:b6:e9:07:7c:9f:8f:87:6c:20:f7:8b:
2e:39:00:c1:d4:58:d9:45:97:0e:c6:a9:e4:d7:57:
d8:10:c5:60:53:83:ef:2e:63:eb:b8:12:9e:0e:46:
ca:5a:82:43:c9:d1:8d:51:8f:e0:ea:ea:c7:0d:2d:
97:80:cd:a1:03:d0:f9:f8:15:4b:fe:58:c8:62:d4:
90:54:ef:0e:a0:4d:b0:6f:32:1a:2c:81:3c:1d:a6:
9e:0d:ea:1f:62:c6:d3:28:f4:21:19:61:1c:15:cf:
2c:14:38:ce:1e:49:50:e8:4b:59:ae:14:e4:54:a4:
2e:b8:66:85:a9:5c:2c:fe:fb:df:70:e7:77:91:7c:
ea:5e:a5:e4:dd:a0:3b:b3:df:ad:57:34:3d:8d:b1:
d1:c7:19:4f:16:c8:ed:bb:a8:be:b0:04:4b:ee:29:
3d:cb:a0:42:dd:be:54:3e:65:58:7b:a9:ac:5c:3e:
5d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:A8:EB:22:09:EF:7C:CE:C0:AD:87:D9:4E:A0:9F:2D:CE:23:2A:A8
X509v3 Authority Key Identifier:
keyid:5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/cKjrIgnvfM7ArYfZTqCfLc4jKqg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.7.64.0/20
31.25.128.0/21
37.156.144.0/22
46.143.0.0/17
77.238.120.0/22
79.127.0.0/17
89.41.40.0/22
89.235.96.0/22
93.115.144.0/21
93.118.180.0/22
128.65.176.0/20
176.65.240.0/22
176.65.252.0/22
178.22.120.0/21
185.49.84.0/22
185.98.112.0/22
185.99.212.0/22
185.109.244.0-185.109.251.255
185.112.32.0/21
185.120.220.0/22
185.120.248.0/22
185.141.171.99/32
188.0.240.0/23
Signature Algorithm: sha256WithRSAEncryption
39:45:8b:95:0f:9c:80:e8:aa:bc:98:65:2f:08:e5:ae:7a:76:
e3:d9:55:12:d6:87:89:1d:dc:54:b6:a9:7e:d9:2a:2a:58:46:
d1:f4:b9:da:3e:85:30:24:1c:3e:cb:74:44:6e:65:c8:21:ad:
cb:41:1d:4e:81:32:5d:3e:ce:03:6b:97:8e:b7:e3:ac:0d:81:
e5:95:9e:7c:87:ee:99:2e:b4:5c:8e:09:1a:fd:02:02:f0:ee:
67:30:37:db:da:b8:75:eb:92:ea:1b:e3:a6:32:90:d1:88:6c:
48:5f:32:d3:d4:56:6d:42:08:ab:da:f1:e9:00:5b:4c:8f:89:
bf:a0:f7:5d:91:3f:47:90:3b:e4:89:74:12:35:a9:85:25:0b:
c4:84:43:ab:a5:05:ff:a2:12:72:19:31:e7:ac:dd:85:d1:d7:
b5:f6:8b:53:20:92:5f:93:3d:11:a6:68:63:fb:84:ce:d8:e0:
05:e0:6a:45:b5:d9:dd:6f:68:3f:32:32:3a:49:5b:82:29:f0:
f3:6e:ea:f9:c9:62:bd:a5:10:c6:b2:15:83:92:ff:60:c0:31:
5c:bc:8b:13:1f:34:67:a1:1d:3c:60:ed:ae:d0:b4:21:1f:d1:
06:12:d5:53:fb:ac:b3:bc:dc:6a:25:92:0d:d1:28:b3:d6:00:
7c:90:77:08
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgISAYVvQriSQrd+Wq53ktt3g67aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViNTI2MzRhMmViMDNmODU2NWI1ZTMzZGMyYjlmNDkwNDFm
N2NmYjAwHhcNMjMwMTAxMjEzNTIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MGE4ZWIyMjA5ZWY3Y2NlYzBhZDg3ZDk0ZWEwOWYyZGNlMjMyYWE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhDD8Jgwy+Mi+lD+MOoCNdKlT24H2
rE9ThD9D6N5NmKax4RzDKYKWe1ZWEW2IC0YEpQX+oopiMT+aUcu5iGSW1pzcewqO
a9OiY884eaLstukHfJ+Ph2wg94suOQDB1FjZRZcOxqnk11fYEMVgU4PvLmPruBKe
DkbKWoJDydGNUY/g6urHDS2XgM2hA9D5+BVL/ljIYtSQVO8OoE2wbzIaLIE8Haae
DeofYsbTKPQhGWEcFc8sFDjOHklQ6EtZrhTkVKQuuGaFqVws/vvfcOd3kXzqXqXk
3aA7s9+tVzQ9jbHRxxlPFsjtu6i+sARL7ik9y6BC3b5UPmVYe6msXD5d1QIDAQAB
o4ICmzCCApcwHQYDVR0OBBYEFHCo6yIJ73zOwK2H2U6gny3OIyqoMB8GA1UdIwQY
MBaAFFtSY0ousD+FZbXjPcK59JBB98+wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzFKalNpNndQNFZsdGVNOXdybjBrRUgzejdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC83YTViNDQtNmIxOC00MmQzLWE4ZDUt
ZGM2NTU0ZmQxMjM1LzEvY0tqcklnbnZmTTdBcllmWlRxQ2ZMYzRqS3FnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC83YTViNDQtNmIxOC00MmQzLWE4ZDUtZGM2NTU0ZmQxMjM1
LzEvVzFKalNpNndQNFZsdGVNOXdybjBrRUgzejdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGwBggrBgEFBQcBBwEB/wSBoDCBnTCBmgQCAAEwgZMDBAQf
B0ADBAMfGYADBAIlnJADBAcujwADBAJN7ngDBAdPfwADBAJZKSgDBAJZ62ADBANd
c5ADBAJddrQDBASAQbADBAKwQfADBAKwQfwDBAOyFngDBAK5MVQDBAK5YnADBAK5
Y9QwDAMEArlt9AMEArlt+AMEA7lwIAMEArl43AMEArl4+AMFALmNq2MDBAG8APAw
DQYJKoZIhvcNAQELBQADggEBADlFi5UPnIDoqryYZS8I5a56duPZVRLWh4kd3FS2
qX7ZKipYRtH0udo+hTAkHD7LdERuZcghrctBHU6BMl0+zgNrl46346wNgeWVnnyH
7pkutFyOCRr9AgLw7mcwN9vauHXrkuob46YykNGIbEhfMtPUVm1CCKva8ekAW0yP
ib+g912RP0eQO+SJdBI1qYUlC8SEQ6ulBf+iEnIZMees3YXR17X2i1Mgkl+TPRGm
aGP7hM7Y4AXgakW12d1vaD8yMjpJW4Ip8PNu6vnJYr2lEMayFYOS/2DAMVy8ixMf
NGehHTxg7a7QtCEf0QYS1VP7rLO83Golkg3RKLPWAHyQdwg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:08 2024 by rpki-client on console-fra.rpki-client.org