Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/iEGIhtKu7du92ZjvgUAmdKSRyq8.roa
File: iEGIhtKu7du92ZjvgUAmdKSRyq8.roa (raw, json)
Hash identifier: +kxNgNX7V8Hm8GRovGbcEsYIRyEj00E24r/zpZ7gpf0=
Subject key identifier: 88:41:88:86:D2:AE:ED:DB:BD:D9:98:EF:81:40:26:74:A4:91:CA:AF
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 0191A86FC54CCF64B262895E5507AF8846D6
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/iEGIhtKu7du92ZjvgUAmdKSRyq8.roa
Signing time: Sat 31 Aug 2024 12:36:22 +0000
ROA not before: Sat 31 Aug 2024 12:36:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208555
IP address blocks: 62.220.126.0/23 maxlen: 24
81.12.24.0/22 maxlen: 24
81.12.30.0/23 maxlen: 24
87.107.8.0/23 maxlen: 24
87.107.110.0/23 maxlen: 24
87.107.110.0/24 maxlen: 24
87.107.111.0/24 maxlen: 24
87.107.144.0/24 maxlen: 24
87.107.152.0/23 maxlen: 24
87.107.166.0/23 maxlen: 24
87.107.174.0/23 maxlen: 24
Validation: Failed, certificate revoked on Sun 29 Sep 2024 09:23:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:a8:6f:c5:4c:cf:64:b2:62:89:5e:55:07:af:88:46:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Aug 31 12:36:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=88418886d2aeeddbbdd998ef81402674a491caaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:fd:f7:38:d0:3e:55:7a:bb:ba:1d:a0:f5:5c:
60:22:95:c0:3e:dc:8d:f5:7d:f3:b0:cb:24:6f:46:
27:d9:0e:44:b1:f8:69:89:9e:b0:9f:d2:a3:4c:52:
86:d5:4b:7e:ea:12:4a:cd:7c:a2:f2:e0:4c:d5:25:
d6:94:b5:9e:eb:90:1e:66:db:35:e4:e4:a8:90:6c:
f1:e5:4d:b6:a5:21:74:04:9a:2e:4d:1d:06:2e:53:
ac:84:83:d4:f0:88:c2:96:12:6c:11:5b:31:73:e9:
91:31:6b:c2:14:a2:90:c9:5b:80:70:5b:c4:0a:ed:
be:3b:57:fc:36:63:02:9c:b9:5a:e4:e8:cf:d0:97:
30:2c:51:78:1a:98:b4:85:11:db:4d:dc:88:91:98:
e8:da:40:cc:1f:53:60:3f:f1:f3:a7:0b:c7:cb:4a:
6c:a1:cf:c4:e3:0a:c6:ec:21:29:22:87:a2:5f:be:
62:e0:12:8c:f2:21:2b:8f:48:55:d6:1b:c0:90:e9:
67:19:ef:62:3b:21:ae:b2:70:dd:79:69:5b:9b:3f:
46:6e:4b:61:8b:fd:af:df:ba:83:de:e7:a8:3d:e4:
66:5a:34:1a:1c:47:41:ca:9a:c5:be:a7:ad:27:19:
de:82:56:22:6a:1b:9d:a1:7e:78:dd:39:d3:69:48:
70:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:41:88:86:D2:AE:ED:DB:BD:D9:98:EF:81:40:26:74:A4:91:CA:AF
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/iEGIhtKu7du92ZjvgUAmdKSRyq8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.220.126.0/23
81.12.24.0/22
81.12.30.0/23
87.107.8.0/23
87.107.110.0/23
87.107.144.0/24
87.107.152.0/23
87.107.166.0/23
87.107.174.0/23
Signature Algorithm: sha256WithRSAEncryption
77:1c:b5:d3:65:08:cc:51:37:1e:f4:dc:9d:d5:96:15:66:0b:
c1:29:d8:a2:ed:0b:ae:c1:b3:e0:02:c0:0f:8d:f2:73:a1:51:
5a:27:c9:63:36:e0:5c:f7:2b:10:10:90:6a:4c:02:08:0e:1a:
f9:10:9d:af:5e:dd:ad:a0:a0:65:fb:d0:0d:68:11:6f:c8:ff:
a8:52:76:75:4c:66:f4:6e:9b:ab:d2:9f:82:53:07:a4:96:f9:
96:03:34:41:e6:c4:de:0a:ca:ff:14:c2:b9:85:88:53:91:56:
c3:91:36:b8:97:34:c7:4c:92:4c:33:6b:ad:96:60:5c:42:0a:
b7:48:6a:b6:91:54:33:bf:b0:5b:71:d6:0e:c9:70:0e:fc:d1:
02:fc:01:c2:d2:51:dc:2f:1d:e6:69:3b:dc:01:f7:e6:87:98:
b1:c3:3a:6e:1b:01:5e:f8:00:d9:63:6a:17:ec:b5:38:2b:9f:
75:79:87:6d:9a:53:41:28:df:68:e2:11:30:3c:01:c3:08:f8:
4d:5e:c6:c2:54:ca:4d:3b:5f:6e:28:82:85:75:fe:58:6c:36:
ba:ae:39:c3:c5:1d:a7:48:dc:f5:3d:f3:74:10:81:b9:e0:41:
ea:4c:8a:1b:0c:4a:2b:7c:31:91:90:5b:7a:81:95:d5:11:61:
56:d3:cf:ab
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgISAZGob8VMz2SyYoleVQeviEbWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwNzc1ZDk0NzFiODVkOTYzZmVmNmQyODM1OTBlMmQ5NDJk
ZDVjMjEwHhcNMjQwODMxMTIzNjIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ODQxODg4NmQyYWVlZGRiYmRkOTk4ZWY4MTQwMjY3NGE0OTFjYWFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApv33ONA+VXq7uh2g9VxgIpXAPtyN
9X3zsMskb0Yn2Q5EsfhpiZ6wn9KjTFKG1Ut+6hJKzXyi8uBM1SXWlLWe65AeZts1
5OSokGzx5U22pSF0BJouTR0GLlOshIPU8IjClhJsEVsxc+mRMWvCFKKQyVuAcFvE
Cu2+O1f8NmMCnLla5OjP0JcwLFF4Gpi0hRHbTdyIkZjo2kDMH1NgP/HzpwvHy0ps
oc/E4wrG7CEpIoeiX75i4BKM8iErj0hV1hvAkOlnGe9iOyGusnDdeWlbmz9Gbkth
i/2v37qD3ueoPeRmWjQaHEdByprFvqetJxneglYiahudoX543TnTaUhw8wIDAQAB
o4ICOTCCAjUwHQYDVR0OBBYEFIhBiIbSru3bvdmY74FAJnSkkcqvMB8GA1UdIwQY
MBaAFAB3XZRxuF2WP+9tKDWQ4tlC3VwhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQt
NzZiMzNlNGNlODIxLzEvaUVHSWh0S3U3ZHU5MlpqdmdVQW1kS1NSeXE4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQtNzZiMzNlNGNlODIx
LzEvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQBPtx+AwQC
UQwYAwQBUQweAwQBV2sIAwQBV2tuAwQAV2uQAwQBV2uYAwQBV2umAwQBV2uuMA0G
CSqGSIb3DQEBCwUAA4IBAQB3HLXTZQjMUTce9Nyd1ZYVZgvBKdii7QuuwbPgAsAP
jfJzoVFaJ8ljNuBc9ysQEJBqTAIIDhr5EJ2vXt2toKBl+9ANaBFvyP+oUnZ1TGb0
bpur0p+CUweklvmWAzRB5sTeCsr/FMK5hYhTkVbDkTa4lzTHTJJMM2utlmBcQgq3
SGq2kVQzv7BbcdYOyXAO/NEC/AHC0lHcLx3maTvcAffmh5ixwzpuGwFe+ADZY2oX
7LU4K591eYdtmlNBKN9o4hEwPAHDCPhNXsbCVMpNO19uKIKFdf5YbDa6rjnDxR2n
SNz1PfN0EIG54EHqTIobDEorfDGRkFt6gZXVEWFW08+r
-----END CERTIFICATE-----
Generated at Sun Sep 29 11:05:00 2024 by rpki-client on console-fra.rpki-client.org