Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/rg2iDMgPcQKVUt1hIRiyho2G254.roa
File: rg2iDMgPcQKVUt1hIRiyho2G254.roa (raw, json)
Hash identifier: Q6JkYw0AAdID4y4ZfpqVggefm8jOl5sXFunqUpdDRto=
Subject key identifier: AE:0D:A2:0C:C8:0F:71:02:95:52:DD:61:21:18:B2:86:8D:86:DB:9E
Certificate issuer: /CN=2b8966d0f14fd59993ca4878e774fa4779036694
Certificate serial: 018CC2DAB18FFC1E8B3D1847A6F1255CE935
Authority key identifier: 2B:89:66:D0:F1:4F:D5:99:93:CA:48:78:E7:74:FA:47:79:03:66:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K4lm0PFP1ZmTykh453T6R3kDZpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/rg2iDMgPcQKVUt1hIRiyho2G254.roa
Signing time: Mon 01 Jan 2024 02:29:21 +0000
ROA not before: Mon 01 Jan 2024 02:29:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35625
IP address blocks: 195.74.80.0/24 maxlen: 24
45.138.192.0/22 maxlen: 22
37.16.78.0/24 maxlen: 24
185.161.44.0/22 maxlen: 22
194.126.178.0/24 maxlen: 24
185.252.156.0/22 maxlen: 22
37.235.88.0/21 maxlen: 21
46.29.120.0/21 maxlen: 21
185.117.18.0/24 maxlen: 24
185.75.140.0/22 maxlen: 22
2a01:6600:2e00::/40 maxlen: 40
2a02:21c8::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 15 Jan 2024 15:27:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:b1:8f:fc:1e:8b:3d:18:47:a6:f1:25:5c:e9:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b8966d0f14fd59993ca4878e774fa4779036694
Validity
Not Before: Jan 1 02:29:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ae0da20cc80f71029552dd612118b2868d86db9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:71:31:8e:bf:8b:ab:c9:51:d3:f8:1b:44:9f:
31:9c:6a:0f:c0:17:05:10:5f:55:2a:59:53:5a:62:
7a:c3:61:e3:eb:07:89:c7:d1:e4:99:19:af:60:33:
3d:88:6f:d7:4f:35:c5:89:43:65:54:a1:0b:7c:86:
f8:75:18:ed:fa:27:33:6c:15:d2:8c:b3:42:3b:e5:
08:31:db:d0:93:48:91:ee:91:c5:2d:33:0f:69:fc:
96:1a:95:3c:80:86:9b:d6:79:5d:8f:27:f5:db:52:
b8:21:f8:1f:37:ac:fd:95:17:2e:28:12:13:4c:5b:
f6:88:32:26:fb:57:da:8d:cf:78:b1:be:60:2e:dc:
98:2a:70:8c:50:ef:51:81:df:31:b5:b1:bb:17:5a:
82:98:e4:c6:5d:db:26:05:0b:54:9f:83:7a:83:36:
a3:ef:96:46:43:6b:86:87:29:6c:0f:9a:fa:72:dd:
6f:8d:f7:25:02:54:9d:78:cc:e6:f2:cc:8f:10:62:
1f:34:e9:8e:1b:be:f5:6f:11:40:8a:bd:b6:f3:21:
62:4a:3b:77:30:0a:b4:bc:b9:4f:06:d9:31:0d:6a:
42:af:1b:58:a2:b5:47:ac:b8:7f:7e:7a:14:d1:6d:
16:83:e5:56:c5:d3:81:c1:b8:79:30:ed:87:80:df:
ce:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:0D:A2:0C:C8:0F:71:02:95:52:DD:61:21:18:B2:86:8D:86:DB:9E
X509v3 Authority Key Identifier:
keyid:2B:89:66:D0:F1:4F:D5:99:93:CA:48:78:E7:74:FA:47:79:03:66:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K4lm0PFP1ZmTykh453T6R3kDZpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/rg2iDMgPcQKVUt1hIRiyho2G254.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/K4lm0PFP1ZmTykh453T6R3kDZpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.16.78.0/24
37.235.88.0/21
45.138.192.0/22
46.29.120.0/21
185.75.140.0/22
185.117.18.0/24
185.161.44.0/22
185.252.156.0/22
194.126.178.0/24
195.74.80.0/24
IPv6:
2a01:6600:2e00::/40
2a02:21c8::/32
Signature Algorithm: sha256WithRSAEncryption
a2:e0:c7:a7:1b:7d:5f:64:b3:bc:f3:f6:9e:9d:94:b9:4e:52:
44:ba:f1:f0:75:a2:cb:c5:da:c2:6b:3c:2b:96:dd:13:f6:b5:
f0:01:aa:5a:28:bb:b0:43:a6:ca:fd:85:ab:a8:12:9b:29:58:
36:d6:76:ef:2e:cc:94:dc:39:28:24:39:d5:b5:ec:44:1a:47:
2a:7c:96:8d:3a:2c:90:25:5d:0d:f6:f7:4c:43:64:a0:8f:5c:
e5:2d:fd:f4:ff:26:2f:c0:8a:0e:7a:ff:a4:95:84:53:32:2c:
7e:33:e0:3f:51:76:2d:21:c1:82:12:05:0f:43:6b:e1:b5:d3:
ab:9d:e0:c7:1c:bf:86:74:1d:8c:1f:c8:cd:ed:4f:27:bf:6d:
33:0c:0d:97:ef:6a:e1:5a:75:78:44:80:8c:b3:77:e8:7d:8a:
5a:07:78:db:c9:6b:8a:b0:73:cb:49:5c:9b:7a:fe:12:31:f8:
11:7f:c6:a8:1d:1b:b1:5b:11:51:40:b2:95:cd:15:3d:48:ed:
02:a7:32:4a:93:55:d2:6f:79:b1:84:2a:70:ad:00:f6:76:0c:
3a:24:6a:7a:e2:09:63:98:af:d9:68:fd:8c:c2:a6:8a:f2:d5:
b0:67:28:ee:b5:28:38:c0:c5:eb:db:7f:1a:44:aa:a7:a8:78:
c0:f1:55:d0
-----BEGIN CERTIFICATE-----
MIIFSjCCBDKgAwIBAgISAYzC2rGP/B6LPRhHpvElXOk1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiODk2NmQwZjE0ZmQ1OTk5M2NhNDg3OGU3NzRmYTQ3Nzkw
MzY2OTQwHhcNMjQwMTAxMDIyOTIxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZTBkYTIwY2M4MGY3MTAyOTU1MmRkNjEyMTE4YjI4NjhkODZkYjllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3Exjr+Lq8lR0/gbRJ8xnGoPwBcF
EF9VKllTWmJ6w2Hj6weJx9HkmRmvYDM9iG/XTzXFiUNlVKELfIb4dRjt+iczbBXS
jLNCO+UIMdvQk0iR7pHFLTMPafyWGpU8gIab1nldjyf121K4IfgfN6z9lRcuKBIT
TFv2iDIm+1fajc94sb5gLtyYKnCMUO9Rgd8xtbG7F1qCmOTGXdsmBQtUn4N6gzaj
75ZGQ2uGhylsD5r6ct1vjfclAlSdeMzm8syPEGIfNOmOG771bxFAir228yFiSjt3
MAq0vLlPBtkxDWpCrxtYorVHrLh/fnoU0W0Wg+VWxdOBwbh5MO2HgN/OwwIDAQAB
o4ICVjCCAlIwHQYDVR0OBBYEFK4NogzID3EClVLdYSEYsoaNhtueMB8GA1UdIwQY
MBaAFCuJZtDxT9WZk8pIeOd0+kd5A2aUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzRsbTBQRlAxWm1UeWtoNDUzVDZSM2tEWnBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9jZjdmNmQtYjIyNS00YmRmLTk1MDQt
ODM4ZWJmNDEyYTYxLzEvcmcyaURNZ1BjUUtWVXQxaElSaXlobzJHMjU0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9jZjdmNmQtYjIyNS00YmRmLTk1MDQtODM4ZWJmNDEyYTYx
LzEvSzRsbTBQRlAxWm1UeWtoNDUzVDZSM2tEWnBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGwGCCsGAQUFBwEHAQH/BF0wWzBCBAIAATA8AwQAJRBOAwQD
JetYAwQCLYrAAwQDLh14AwQCuUuMAwQAuXUSAwQCuaEsAwQCufycAwQAwn6yAwQA
w0pQMBUEAgACMA8DBgAqAWYALgMFACoCIcgwDQYJKoZIhvcNAQELBQADggEBAKLg
x6cbfV9ks7zz9p6dlLlOUkS68fB1osvF2sJrPCuW3RP2tfABqloou7BDpsr9hauo
EpspWDbWdu8uzJTcOSgkOdW17EQaRyp8lo06LJAlXQ3290xDZKCPXOUt/fT/Ji/A
ig56/6SVhFMyLH4z4D9Rdi0hwYISBQ9Da+G106ud4Mccv4Z0HYwfyM3tTye/bTMM
DZfvauFadXhEgIyzd+h9iloHeNvJa4qwc8tJXJt6/hIx+BF/xqgdG7FbEVFAspXN
FT1I7QKnMkqTVdJvebGEKnCtAPZ2DDokanriCWOYr9lo/YzCpory1bBnKO61KDjA
xevbfxpEqqeoeMDxVdA=
-----END CERTIFICATE-----
Generated at Mon Jan 15 20:13:17 2024 by rpki-client on console-ams.rpki-client.org