Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/jCtFFYddBOZsCs5sV5-7mLB-Ppw.roa
File: jCtFFYddBOZsCs5sV5-7mLB-Ppw.roa (raw, json)
Hash identifier: xMZYItm+1J8uZ7Ve70otLC2sBuM2cwiA8tFRnGyx/kU=
Subject key identifier: 8C:2B:45:15:87:5D:04:E6:6C:0A:CE:6C:57:9F:BB:98:B0:7E:3E:9C
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 0191EFF97599CF49D14CE2F503530E406332
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/jCtFFYddBOZsCs5sV5-7mLB-Ppw.roa
Signing time: Sat 14 Sep 2024 09:59:48 +0000
ROA not before: Sat 14 Sep 2024 09:59:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42337
IP address blocks: 62.220.112.0/21 maxlen: 21
62.220.113.0/24 maxlen: 24
62.220.116.0/24 maxlen: 24
62.220.118.0/23 maxlen: 24
81.12.0.0/21 maxlen: 24
81.12.32.0/21 maxlen: 24
81.12.40.0/21 maxlen: 24
81.12.54.0/23 maxlen: 24
81.12.56.0/23 maxlen: 23
81.12.60.0/22 maxlen: 24
81.12.64.0/18 maxlen: 24
81.12.95.0/24 maxlen: 24
87.107.16.0/21 maxlen: 24
87.107.28.0/22 maxlen: 24
87.107.32.0/23 maxlen: 23
87.107.36.0/22 maxlen: 24
87.107.44.0/22 maxlen: 24
87.107.48.0/23 maxlen: 23
87.107.56.0/21 maxlen: 24
87.107.64.0/22 maxlen: 24
87.107.72.0/21 maxlen: 24
87.107.80.0/21 maxlen: 24
87.107.92.0/22 maxlen: 24
87.107.100.0/22 maxlen: 22
87.107.136.0/21 maxlen: 24
87.107.148.0/22 maxlen: 24
87.107.156.0/22 maxlen: 24
87.107.176.0/21 maxlen: 24
87.107.184.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 03:48:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:ef:f9:75:99:cf:49:d1:4c:e2:f5:03:53:0e:40:63:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Sep 14 09:59:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8c2b4515875d04e66c0ace6c579fbb98b07e3e9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4d:2e:c0:77:f2:f4:44:22:93:15:d7:29:b3:
19:69:c1:84:f9:f2:c0:55:29:36:c8:15:f3:f8:e7:
e0:38:f7:f3:37:c0:57:f2:4a:b8:d6:61:d9:df:fd:
01:28:a3:84:5e:9d:fe:d3:64:a6:f7:8d:cc:b9:45:
89:d1:76:65:16:af:2d:7d:74:0c:75:2e:b4:f0:58:
8d:93:eb:bf:23:13:0d:50:1e:a1:64:6f:db:25:cc:
17:21:c4:bb:c3:e8:c8:19:d5:ab:79:f0:9c:98:fb:
b4:2c:20:a7:dc:b5:5b:b8:2a:ad:d0:11:dc:2f:1b:
08:62:71:bc:46:64:54:f7:54:b7:c8:19:93:29:44:
77:bd:ff:d6:b4:94:4e:25:4d:53:e9:4c:38:95:37:
0c:d5:ce:95:a1:2b:a5:00:e9:fe:18:06:17:b3:92:
a0:05:eb:93:0f:1f:7c:d3:81:02:85:75:eb:07:fd:
98:5a:99:b0:c4:1c:10:b5:49:22:b0:2a:43:d7:f7:
14:f2:fe:76:46:fb:23:f0:b0:0d:3d:c5:fc:93:84:
3d:04:e7:eb:63:6b:a6:1e:76:ba:7b:c7:ae:10:ea:
d3:b4:d8:41:51:49:ee:62:54:48:d7:cc:ae:8d:8a:
06:8b:63:43:ba:4c:71:c5:45:b2:99:3f:ce:61:93:
d6:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:2B:45:15:87:5D:04:E6:6C:0A:CE:6C:57:9F:BB:98:B0:7E:3E:9C
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/jCtFFYddBOZsCs5sV5-7mLB-Ppw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.220.112.0/21
81.12.0.0/21
81.12.32.0/20
81.12.54.0-81.12.57.255
81.12.60.0-81.12.127.255
87.107.16.0/21
87.107.28.0-87.107.33.255
87.107.36.0/22
87.107.44.0-87.107.49.255
87.107.56.0-87.107.67.255
87.107.72.0-87.107.87.255
87.107.92.0/22
87.107.100.0/22
87.107.136.0/21
87.107.148.0/22
87.107.156.0/22
87.107.176.0-87.107.187.255
Signature Algorithm: sha256WithRSAEncryption
23:1c:68:18:0b:7a:c6:75:6f:43:04:be:46:41:0b:61:8c:d4:
e0:dd:1d:52:82:69:7e:8c:c8:1a:1f:46:1e:c1:20:b2:9b:bd:
f6:4f:0f:a4:89:ed:6d:ba:97:a9:ef:a3:54:06:01:a7:85:6e:
13:c9:b1:4c:62:4c:53:8e:56:b5:ee:1c:cf:6d:a3:6b:a4:cf:
4e:35:b7:ea:df:78:83:e6:63:c6:d1:bc:67:b3:95:be:34:2c:
e0:0f:fc:57:4d:f4:95:7c:47:6c:11:f1:ce:a3:2d:4d:27:a9:
cb:68:46:30:c3:7e:e8:71:28:24:c7:ed:ce:3d:dc:56:b8:35:
57:00:80:b3:39:b5:61:f2:5c:6b:20:59:16:5d:a0:b0:4a:02:
35:86:fb:a5:3c:4d:30:d8:16:2e:9f:50:b1:02:24:82:d5:d4:
19:9f:ff:5b:14:94:3b:2f:78:e9:91:96:55:02:3c:b4:04:93:
70:3a:ef:54:fb:ff:e4:fe:5a:f8:35:08:f2:a5:e9:b8:ad:f2:
a7:9d:90:ff:0b:01:72:76:4a:6b:7d:a1:3d:ed:a4:d5:40:09:
5e:28:25:83:4f:03:ae:f4:c2:be:4b:46:17:10:8a:08:1a:3e:
55:9e:89:85:f8:f3:c5:7c:6f:f2:1a:e5:db:a9:ab:fe:3e:42:
61:92:19:f2
-----BEGIN CERTIFICATE-----
MIIFmjCCBIKgAwIBAgISAZHv+XWZz0nRTOL1A1MOQGMyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwNzc1ZDk0NzFiODVkOTYzZmVmNmQyODM1OTBlMmQ5NDJk
ZDVjMjEwHhcNMjQwOTE0MDk1OTQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YzJiNDUxNTg3NWQwNGU2NmMwYWNlNmM1NzlmYmI5OGIwN2UzZTljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnk0uwHfy9EQikxXXKbMZacGE+fLA
VSk2yBXz+OfgOPfzN8BX8kq41mHZ3/0BKKOEXp3+02Sm943MuUWJ0XZlFq8tfXQM
dS608FiNk+u/IxMNUB6hZG/bJcwXIcS7w+jIGdWrefCcmPu0LCCn3LVbuCqt0BHc
LxsIYnG8RmRU91S3yBmTKUR3vf/WtJROJU1T6Uw4lTcM1c6VoSulAOn+GAYXs5Kg
BeuTDx9804EChXXrB/2YWpmwxBwQtUkisCpD1/cU8v52Rvsj8LANPcX8k4Q9BOfr
Y2umHna6e8euEOrTtNhBUUnuYlRI18yujYoGi2NDukxxxUWymT/OYZPWbQIDAQAB
o4ICpjCCAqIwHQYDVR0OBBYEFIwrRRWHXQTmbArObFefu5iwfj6cMB8GA1UdIwQY
MBaAFAB3XZRxuF2WP+9tKDWQ4tlC3VwhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQt
NzZiMzNlNGNlODIxLzEvakN0RkZZZGRCT1pzQ3M1c1Y1LTdtTEItUHB3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQtNzZiMzNlNGNlODIx
LzEvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIG7BggrBgEFBQcBBwEB/wSBqzCBqDCBpQQCAAEwgZ4DBAM+
3HADBANRDAADBARRDCAwDAMEAVEMNgMEAVEMODAMAwQCUQw8AwQHUQwAAwQDV2sQ
MAwDBAJXaxwDBAFXayADBAJXayQwDAMEAldrLAMEAVdrMDAMAwQDV2s4AwQCV2tA
MAwDBANXa0gDBANXa1ADBAJXa1wDBAJXa2QDBANXa4gDBAJXa5QDBAJXa5wwDAME
BFdrsAMEAldruDANBgkqhkiG9w0BAQsFAAOCAQEAIxxoGAt6xnVvQwS+RkELYYzU
4N0dUoJpfozIGh9GHsEgspu99k8PpIntbbqXqe+jVAYBp4VuE8mxTGJMU45Wte4c
z22ja6TPTjW36t94g+ZjxtG8Z7OVvjQs4A/8V030lXxHbBHxzqMtTSepy2hGMMN+
6HEoJMftzj3cVrg1VwCAszm1YfJcayBZFl2gsEoCNYb7pTxNMNgWLp9QsQIkgtXU
GZ//WxSUOy946ZGWVQI8tASTcDrvVPv/5P5a+DUI8qXpuK3yp52Q/wsBcnZKa32h
Pe2k1UAJXiglg08DrvTCvktGFxCKCBo+VZ6JhfjzxXxv8hrl26mr/j5CYZIZ8g==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:02:25 2025 by rpki-client