Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/Z2iY6vsA7uWTXM90WlCmkSemdco.roa
File: Z2iY6vsA7uWTXM90WlCmkSemdco.roa (raw, json)
Hash identifier: FCXSSzWnElPTFfrQbFk9ymB40/BnwCRfVLkz5f4EvbU=
Subject key identifier: 67:68:98:EA:FB:00:EE:E5:93:5C:CF:74:5A:50:A6:91:27:A6:75:CA
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 01879ADD8534CC6506B1A4986509C779912C
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/Z2iY6vsA7uWTXM90WlCmkSemdco.roa
Signing time: Wed 19 Apr 2023 18:53:41 +0000
ROA not before: Wed 19 Apr 2023 18:53:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21341
IP address blocks: 87.107.42.0/23 maxlen: 23
87.107.41.0/24 maxlen: 24
87.107.40.0/24 maxlen: 24
87.107.51.0/24 maxlen: 24
87.107.50.0/23 maxlen: 24
87.107.50.0/24 maxlen: 24
87.107.52.0/23 maxlen: 23
87.107.68.0/22 maxlen: 22
87.107.88.0/22 maxlen: 22
87.107.24.0/22 maxlen: 22
87.107.34.0/23 maxlen: 23
62.220.120.0/22 maxlen: 22
62.220.124.0/23 maxlen: 23
87.107.168.0/22 maxlen: 24
87.107.173.0/24 maxlen: 24
185.60.136.0/24 maxlen: 24
185.60.139.0/24 maxlen: 24
185.60.138.0/24 maxlen: 24
185.60.137.0/24 maxlen: 24
87.107.96.0/22 maxlen: 22
87.107.112.0/22 maxlen: 24
87.107.108.0/22 maxlen: 23
87.107.116.0/23 maxlen: 23
87.107.120.0/21 maxlen: 21
87.107.122.0/24 maxlen: 24
87.107.128.0/22 maxlen: 22
87.107.132.0/22 maxlen: 22
62.220.96.0/21 maxlen: 24
62.220.104.0/21 maxlen: 21
81.12.8.0/22 maxlen: 22
81.12.12.0/22 maxlen: 22
81.12.16.0/21 maxlen: 21
81.12.24.0/22 maxlen: 22
81.12.48.0/22 maxlen: 22
81.12.58.0/24 maxlen: 24
81.12.52.0/23 maxlen: 23
81.12.59.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 30 Apr 2023 09:56:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:9a:dd:85:34:cc:65:06:b1:a4:98:65:09:c7:79:91:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Apr 19 18:53:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=676898eafb00eee5935ccf745a50a69127a675ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:21:65:74:a6:80:69:3d:19:73:7d:7f:09:91:
d0:d6:99:56:36:f8:ad:5b:fa:33:65:b1:9b:68:0c:
a4:77:b4:6c:26:db:be:60:48:15:6a:f0:cb:9c:b7:
09:2f:89:22:0e:90:f1:70:56:02:49:a8:d7:85:c1:
6a:f2:16:4b:e6:02:61:21:4a:d7:67:4c:b7:9e:e1:
d0:46:a6:85:0d:58:de:1a:90:10:7e:0d:67:37:c4:
aa:b3:fe:36:ca:ae:c0:da:40:53:7c:ba:4b:b1:6e:
85:16:8c:5f:b4:35:a8:20:89:c7:91:fd:65:bf:b2:
26:ec:04:17:6b:fb:f3:26:22:f7:20:c2:75:c4:93:
8b:34:6d:03:aa:fb:44:e8:39:6a:32:1f:ae:67:ae:
5f:2c:5d:98:b7:df:b8:63:ef:00:06:41:b3:0d:4a:
18:8d:75:ae:1b:7d:75:5c:25:bc:1b:9f:19:1c:e5:
cd:9e:fe:0d:76:51:35:d8:76:0e:ad:ee:29:a7:ef:
53:c1:c4:45:3e:6f:fe:6c:d0:32:b8:68:dd:ca:d5:
b4:18:8f:86:02:97:07:50:31:2a:5c:62:1b:95:8a:
c4:7c:b0:53:22:33:8e:f8:64:97:ba:81:89:7c:8a:
01:58:93:07:79:1d:7d:13:1e:58:81:ca:e3:38:a8:
cf:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:68:98:EA:FB:00:EE:E5:93:5C:CF:74:5A:50:A6:91:27:A6:75:CA
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/Z2iY6vsA7uWTXM90WlCmkSemdco.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.220.96.0/20
62.220.120.0-62.220.125.255
81.12.8.0-81.12.27.255
81.12.48.0-81.12.53.255
81.12.58.0/23
87.107.24.0/22
87.107.34.0/23
87.107.40.0/22
87.107.50.0-87.107.53.255
87.107.68.0/22
87.107.88.0/22
87.107.96.0/22
87.107.108.0-87.107.117.255
87.107.120.0-87.107.135.255
87.107.168.0/22
87.107.173.0/24
185.60.136.0/22
Signature Algorithm: sha256WithRSAEncryption
42:95:cb:3a:8b:11:51:c8:a6:c4:6c:d5:33:cc:1f:8e:35:e1:
df:75:d6:94:e9:d2:5d:93:86:c6:af:4b:cf:7d:db:f0:54:8e:
65:e2:61:fd:fe:79:b1:c1:fb:d2:46:ec:9e:9b:1e:df:cf:20:
d7:fd:4d:c4:3a:97:2b:3d:2b:7e:22:a1:a8:71:7a:5a:60:62:
d2:f3:3f:bd:d4:dd:18:da:40:34:a3:c7:d6:10:4b:74:90:d0:
7a:b1:de:ec:6f:9e:2d:ad:7f:61:95:5f:d6:08:42:36:58:4f:
c3:ad:77:e5:cd:95:36:5c:4b:0b:39:32:8f:42:66:66:24:b7:
92:5b:13:5b:ed:db:82:58:a3:fb:52:a3:5b:9c:fe:27:e6:84:
63:21:65:77:7b:0d:73:c2:81:29:8b:72:a8:03:0d:9c:db:55:
22:d6:04:e3:e0:9b:1b:df:18:da:56:2a:3d:69:33:9b:c2:45:
7b:7e:a3:43:94:0e:72:fa:89:a2:32:ca:e1:dd:dc:c5:ca:66:
34:76:ac:8e:05:d0:fb:62:c2:98:37:43:4b:de:58:8e:84:50:
9c:f5:84:89:81:2f:35:37:94:f2:4f:5d:3c:49:16:f8:c2:00:
d4:c6:48:2d:b6:4e:1f:27:58:55:a7:79:84:02:76:b7:cf:d9:
8c:cd:43:80
-----BEGIN CERTIFICATE-----
MIIFkjCCBHqgAwIBAgISAYea3YU0zGUGsaSYZQnHeZEsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwNzc1ZDk0NzFiODVkOTYzZmVmNmQyODM1OTBlMmQ5NDJk
ZDVjMjEwHhcNMjMwNDE5MTg1MzQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NzY4OThlYWZiMDBlZWU1OTM1Y2NmNzQ1YTUwYTY5MTI3YTY3NWNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqiFldKaAaT0Zc31/CZHQ1plWNvit
W/ozZbGbaAykd7RsJtu+YEgVavDLnLcJL4kiDpDxcFYCSajXhcFq8hZL5gJhIUrX
Z0y3nuHQRqaFDVjeGpAQfg1nN8Sqs/42yq7A2kBTfLpLsW6FFoxftDWoIInHkf1l
v7Im7AQXa/vzJiL3IMJ1xJOLNG0DqvtE6DlqMh+uZ65fLF2Yt9+4Y+8ABkGzDUoY
jXWuG311XCW8G58ZHOXNnv4NdlE12HYOre4pp+9TwcRFPm/+bNAyuGjdytW0GI+G
ApcHUDEqXGIblYrEfLBTIjOO+GSXuoGJfIoBWJMHeR19Ex5YgcrjOKjPVwIDAQAB
o4ICnjCCApowHQYDVR0OBBYEFGdomOr7AO7lk1zPdFpQppEnpnXKMB8GA1UdIwQY
MBaAFAB3XZRxuF2WP+9tKDWQ4tlC3VwhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQt
NzZiMzNlNGNlODIxLzEvWjJpWTZ2c0E3dVdUWE05MFdsQ21rU2VtZGNvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQtNzZiMzNlNGNlODIx
LzEvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGzBggrBgEFBQcBBwEB/wSBozCBoDCBnQQCAAEwgZYDBAQ+
3GAwDAMEAz7ceAMEAT7cfDAMAwQDUQwIAwQCUQwYMAwDBARRDDADBAFRDDQDBAFR
DDoDBAJXaxgDBAFXayIDBAJXaygwDAMEAVdrMgMEAVdrNAMEAldrRAMEAldrWAME
AldrYDAMAwQCV2tsAwQBV2t0MAwDBANXa3gDBANXa4ADBAJXa6gDBABXa60DBAK5
PIgwDQYJKoZIhvcNAQELBQADggEBAEKVyzqLEVHIpsRs1TPMH4414d911pTp0l2T
hsavS8992/BUjmXiYf3+ebHB+9JG7J6bHt/PINf9TcQ6lys9K34ioahxelpgYtLz
P73U3RjaQDSjx9YQS3SQ0Hqx3uxvni2tf2GVX9YIQjZYT8Otd+XNlTZcSws5Mo9C
ZmYkt5JbE1vt24JYo/tSo1uc/ifmhGMhZXd7DXPCgSmLcqgDDZzbVSLWBOPgmxvf
GNpWKj1pM5vCRXt+o0OUDnL6iaIyyuHd3MXKZjR2rI4F0Ptiwpg3Q0veWI6EUJz1
hImBLzU3lPJPXTxJFvjCANTGSC22Th8nWFWneYQCdrfP2YzNQ4A=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:59 2024 by rpki-client on console-ams.rpki-client.org