Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/0YXCwKcORZVUBC6Hgt5-VXVoKKY.roa
File: 0YXCwKcORZVUBC6Hgt5-VXVoKKY.roa (raw, json)
Hash identifier: EVbH+nVMRx1+CXcKi1hLHtbHbUTC2NXDf0RjBaiPRJk=
Subject key identifier: D1:85:C2:C0:A7:0E:45:95:54:04:2E:87:82:DE:7E:55:75:68:28:A6
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 018CCA992FF469DE059DD10594883D563576
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/0YXCwKcORZVUBC6Hgt5-VXVoKKY.roa
Signing time: Tue 02 Jan 2024 14:34:46 +0000
ROA not before: Tue 02 Jan 2024 14:34:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21341
IP address blocks: 87.107.42.0/23 maxlen: 23
87.107.41.0/24 maxlen: 24
87.107.40.0/24 maxlen: 24
87.107.51.0/24 maxlen: 24
87.107.50.0/24 maxlen: 24
87.107.50.0/23 maxlen: 24
87.107.52.0/23 maxlen: 23
87.107.68.0/22 maxlen: 24
87.107.88.0/22 maxlen: 22
87.107.24.0/22 maxlen: 22
87.107.34.0/23 maxlen: 23
62.220.120.0/22 maxlen: 22
62.220.124.0/23 maxlen: 23
87.107.168.0/22 maxlen: 24
87.107.173.0/24 maxlen: 24
185.60.136.0/24 maxlen: 24
185.60.139.0/24 maxlen: 24
185.60.138.0/24 maxlen: 24
185.60.137.0/24 maxlen: 24
87.107.96.0/22 maxlen: 24
87.107.112.0/22 maxlen: 24
87.107.106.0/23 maxlen: 24
87.107.108.0/22 maxlen: 24
87.107.116.0/23 maxlen: 23
87.107.120.0/21 maxlen: 24
87.107.128.0/22 maxlen: 22
87.107.132.0/22 maxlen: 22
62.220.96.0/21 maxlen: 24
62.220.104.0/21 maxlen: 24
81.12.8.0/22 maxlen: 22
81.12.12.0/22 maxlen: 22
81.12.16.0/21 maxlen: 21
81.12.48.0/22 maxlen: 24
81.12.58.0/24 maxlen: 24
81.12.59.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 07 Feb 2024 08:52:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:99:2f:f4:69:de:05:9d:d1:05:94:88:3d:56:35:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Jan 2 14:34:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d185c2c0a70e459554042e8782de7e55756828a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a4:ef:e3:58:38:06:2c:0e:38:fb:d5:d6:70:
2f:0e:43:b6:f1:9d:19:13:7d:c5:a8:da:3f:22:cd:
90:31:32:48:eb:d6:cb:96:27:44:d2:4e:e7:85:c4:
d1:94:43:4a:2b:22:cf:ea:af:3b:2e:43:26:d9:79:
ac:33:00:3d:b1:ac:7f:fe:93:56:06:2e:a4:b8:3f:
95:04:fa:ac:33:06:51:e8:ea:7b:66:24:0f:c5:d8:
32:f3:15:29:6b:73:ed:51:ec:87:a6:70:cc:dd:d1:
95:cb:17:5f:e4:5a:b2:2d:59:50:b7:5d:4a:93:11:
92:bb:88:e3:53:0b:8d:a3:78:07:30:87:2a:12:4f:
64:0a:2b:e0:75:f4:a9:ac:ea:2a:80:0f:f4:1e:46:
a8:19:48:d8:a0:13:ce:a6:9f:f2:79:70:ca:1f:86:
f8:0a:84:4c:0d:a2:7a:06:74:85:0d:5b:95:d3:78:
99:92:63:3a:d9:fa:db:75:fa:4b:31:06:d6:dc:89:
e4:74:8e:b3:75:28:32:45:37:ca:eb:75:73:e3:97:
37:a2:23:0e:2e:7b:21:ba:c8:1c:8f:10:97:f4:a9:
ba:2f:8a:00:5a:78:6c:06:d3:a7:d4:54:66:ed:7c:
9c:87:67:63:00:e9:17:28:8d:11:5c:2d:84:5a:d3:
c9:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:85:C2:C0:A7:0E:45:95:54:04:2E:87:82:DE:7E:55:75:68:28:A6
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/0YXCwKcORZVUBC6Hgt5-VXVoKKY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.220.96.0/20
62.220.120.0-62.220.125.255
81.12.8.0-81.12.23.255
81.12.48.0/22
81.12.58.0/23
87.107.24.0/22
87.107.34.0/23
87.107.40.0/22
87.107.50.0-87.107.53.255
87.107.68.0/22
87.107.88.0/22
87.107.96.0/22
87.107.106.0-87.107.117.255
87.107.120.0-87.107.135.255
87.107.168.0/22
87.107.173.0/24
185.60.136.0/22
Signature Algorithm: sha256WithRSAEncryption
9d:b2:c3:15:1b:be:dc:98:79:23:22:ba:37:8c:23:36:98:b8:
7c:a2:75:00:86:15:87:18:f1:10:70:d1:42:30:0c:8d:d5:34:
74:cf:af:b9:3e:0f:56:03:eb:c7:cc:43:08:e4:71:0d:e1:e5:
e1:fb:9e:99:7d:64:5a:02:61:6d:a7:b6:fd:97:0c:0e:a9:a3:
fc:47:99:54:f7:8f:4e:08:7f:a4:20:3e:7a:1d:33:32:45:ce:
e1:d3:67:c7:6e:44:3b:b3:a5:31:67:c2:f1:bf:68:c9:7f:a9:
56:5d:f0:93:ab:2b:c7:22:30:67:8a:f9:c5:bb:a2:82:80:be:
1c:92:64:8f:be:ed:8d:27:6d:89:b6:49:ec:17:66:d5:42:6a:
be:27:7b:59:78:4d:fa:ee:f7:38:f8:af:c4:11:bc:80:80:03:
ec:40:5a:c4:52:02:b4:9d:e0:29:76:fc:33:7c:a3:f8:76:ec:
3e:1e:27:be:f6:dc:51:8c:e4:c2:dc:dc:f9:13:59:20:1f:3d:
4e:7f:9a:46:30:21:4f:c7:0c:ea:c0:8c:9c:08:91:58:b4:9d:
3d:5b:98:8c:07:f3:71:f5:b7:d3:ce:ed:e6:4b:4b:52:b0:28:
26:79:7a:54:e5:c9:e8:6f:7d:0f:2a:35:49:06:42:bd:ac:9d:
aa:cc:12:b6
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgISAYzKmS/0ad4FndEFlIg9VjV2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwNzc1ZDk0NzFiODVkOTYzZmVmNmQyODM1OTBlMmQ5NDJk
ZDVjMjEwHhcNMjQwMTAyMTQzNDQ2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMTg1YzJjMGE3MGU0NTk1NTQwNDJlODc4MmRlN2U1NTc1NjgyOGE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqTv41g4BiwOOPvV1nAvDkO28Z0Z
E33FqNo/Is2QMTJI69bLlidE0k7nhcTRlENKKyLP6q87LkMm2XmsMwA9sax//pNW
Bi6kuD+VBPqsMwZR6Op7ZiQPxdgy8xUpa3PtUeyHpnDM3dGVyxdf5FqyLVlQt11K
kxGSu4jjUwuNo3gHMIcqEk9kCivgdfSprOoqgA/0HkaoGUjYoBPOpp/yeXDKH4b4
CoRMDaJ6BnSFDVuV03iZkmM62frbdfpLMQbW3InkdI6zdSgyRTfK63Vz45c3oiMO
LnshusgcjxCX9Km6L4oAWnhsBtOn1FRm7Xych2djAOkXKI0RXC2EWtPJOwIDAQAB
o4ICljCCApIwHQYDVR0OBBYEFNGFwsCnDkWVVAQuh4LeflV1aCimMB8GA1UdIwQY
MBaAFAB3XZRxuF2WP+9tKDWQ4tlC3VwhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQt
NzZiMzNlNGNlODIxLzEvMFlYQ3dLY09SWlZVQkM2SGd0NS1WWFZvS0tZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQtNzZiMzNlNGNlODIx
LzEvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGrBggrBgEFBQcBBwEB/wSBmzCBmDCBlQQCAAEwgY4DBAQ+
3GAwDAMEAz7ceAMEAT7cfDAMAwQDUQwIAwQDUQwQAwQCUQwwAwQBUQw6AwQCV2sY
AwQBV2siAwQCV2soMAwDBAFXazIDBAFXazQDBAJXa0QDBAJXa1gDBAJXa2AwDAME
AVdragMEAVdrdDAMAwQDV2t4AwQDV2uAAwQCV2uoAwQAV2utAwQCuTyIMA0GCSqG
SIb3DQEBCwUAA4IBAQCdssMVG77cmHkjIro3jCM2mLh8onUAhhWHGPEQcNFCMAyN
1TR0z6+5Pg9WA+vHzEMI5HEN4eXh+56ZfWRaAmFtp7b9lwwOqaP8R5lU949OCH+k
ID56HTMyRc7h02fHbkQ7s6UxZ8Lxv2jJf6lWXfCTqyvHIjBnivnFu6KCgL4ckmSP
vu2NJ22JtknsF2bVQmq+J3tZeE367vc4+K/EEbyAgAPsQFrEUgK0neApdvwzfKP4
duw+Hie+9txRjOTC3Nz5E1kgHz1Of5pGMCFPxwzqwIycCJFYtJ09W5iMB/Nx9bfT
zu3mS0tSsCgmeXpU5cnob30PKjVJBkK9rJ2qzBK2
-----END CERTIFICATE-----
Generated at Wed Feb 7 11:50:14 2024 by rpki-client on console-ams.rpki-client.org