Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/02LR5AZkGe8b5MFC6tDFEAEUTc8.roa
File: 02LR5AZkGe8b5MFC6tDFEAEUTc8.roa (raw, json)
Hash identifier: aTmVceW/TbDizXr7+iueg1bC+MnVO4R2AR0P2mzIIhc=
Subject key identifier: D3:62:D1:E4:06:64:19:EF:1B:E4:C1:42:EA:D0:C5:10:01:14:4D:CF
Certificate issuer: /CN=f4b769a53dd86352d3440f222bdf907cf09c2dba
Certificate serial: 019072E9BA76BFBB119CC7F700A3802F05AA
Authority key identifier: F4:B7:69:A5:3D:D8:63:52:D3:44:0F:22:2B:DF:90:7C:F0:9C:2D:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LdppT3YY1LTRA8iK9-QfPCcLbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/02LR5AZkGe8b5MFC6tDFEAEUTc8.roa
Signing time: Tue 02 Jul 2024 10:07:18 +0000
ROA not before: Tue 02 Jul 2024 10:07:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16202
IP address blocks: 77.64.128.0/17 maxlen: 17
77.64.128.0/18 maxlen: 18
77.64.128.0/19 maxlen: 19
77.64.146.0/23 maxlen: 23
77.64.160.0/19 maxlen: 19
77.64.192.0/19 maxlen: 19
77.64.192.0/20 maxlen: 20
77.64.208.0/20 maxlen: 20
77.64.224.0/20 maxlen: 20
77.64.240.0/20 maxlen: 20
77.64.252.0/23 maxlen: 23
77.64.254.0/23 maxlen: 23
83.221.64.0/19 maxlen: 19
83.221.64.0/20 maxlen: 23
83.221.64.0/21 maxlen: 21
83.221.72.0/21 maxlen: 21
83.221.80.0/20 maxlen: 20
83.221.80.0/21 maxlen: 21
83.221.88.0/21 maxlen: 21
89.186.128.0/19 maxlen: 19
89.186.128.0/20 maxlen: 20
89.186.128.0/21 maxlen: 21
89.186.136.0/21 maxlen: 21
89.186.144.0/20 maxlen: 20
89.186.144.0/21 maxlen: 21
89.186.152.0/21 maxlen: 21
92.206.0.0/16 maxlen: 16
92.206.0.0/17 maxlen: 17
92.206.0.0/18 maxlen: 18
92.206.64.0/18 maxlen: 23
92.206.128.0/18 maxlen: 18
92.206.160.0/19 maxlen: 19
92.206.190.0/23 maxlen: 23
92.206.192.0/18 maxlen: 23
92.206.224.0/19 maxlen: 19
95.168.128.0/19 maxlen: 19
95.168.128.0/20 maxlen: 20
95.168.144.0/20 maxlen: 20
185.44.148.0/22 maxlen: 22
185.44.150.0/23 maxlen: 23
217.68.160.0/19 maxlen: 19
217.68.160.0/20 maxlen: 20
217.68.176.0/20 maxlen: 20
2a00:c1a0::/32 maxlen: 32
2a00:c1a0::/34 maxlen: 34
2a00:c1a0:4000::/34 maxlen: 34
2a00:c1a0:8000::/34 maxlen: 34
2a00:c1a0:c000::/34 maxlen: 34
2a02:2454:8000::/33 maxlen: 36
2a02:2457:100::/40 maxlen: 40
Validation: Failed, certificate revoked on Tue 20 Aug 2024 09:45:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:72:e9:ba:76:bf:bb:11:9c:c7:f7:00:a3:80:2f:05:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b769a53dd86352d3440f222bdf907cf09c2dba
Validity
Not Before: Jul 2 10:07:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d362d1e4066419ef1be4c142ead0c51001144dcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d7:bd:8c:29:12:e7:c9:96:9d:a5:52:9f:38:
3b:ed:51:c3:a9:d1:92:04:27:b0:f9:cb:fc:c5:6c:
b1:5d:1c:b9:82:5c:3a:0d:eb:72:c8:85:48:64:9a:
31:bc:42:14:72:ec:c7:5f:82:5e:17:a1:c8:86:4d:
98:22:f8:46:66:4d:75:7a:f7:d3:b1:5f:9c:23:bb:
71:31:c1:99:cb:f5:4c:e9:9c:35:65:d7:78:81:80:
01:7a:cb:46:ea:8d:7b:21:91:64:ba:0a:b5:44:c7:
df:96:4a:33:79:77:55:df:e2:4d:66:9e:6d:47:2b:
8b:37:3a:56:49:6e:d1:d1:b2:01:39:70:71:f6:cc:
81:0e:ba:41:1c:67:fb:de:a3:b8:ab:a5:a1:ba:65:
aa:0d:5b:38:5c:51:d6:9a:5a:34:66:12:20:d1:cd:
70:fa:06:bc:26:ca:5b:ee:4a:bf:d7:b9:a7:5e:83:
1d:de:27:c0:7e:c1:40:69:29:94:56:7a:4e:9c:d4:
e7:23:d6:72:27:97:57:f8:59:2b:da:e2:f0:2f:01:
e6:35:28:80:2d:86:77:31:54:0d:21:52:f5:0c:36:
55:c2:04:c7:3a:51:92:84:6a:bb:49:59:af:f0:6c:
e2:bb:f4:f1:1d:f0:43:7a:a7:15:98:6e:73:cb:ea:
e5:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:62:D1:E4:06:64:19:EF:1B:E4:C1:42:EA:D0:C5:10:01:14:4D:CF
X509v3 Authority Key Identifier:
keyid:F4:B7:69:A5:3D:D8:63:52:D3:44:0F:22:2B:DF:90:7C:F0:9C:2D:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LdppT3YY1LTRA8iK9-QfPCcLbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/02LR5AZkGe8b5MFC6tDFEAEUTc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.64.128.0/17
83.221.64.0/19
89.186.128.0/19
92.206.0.0/16
95.168.128.0/19
185.44.148.0/22
217.68.160.0/19
IPv6:
2a00:c1a0::/32
2a02:2454:8000::/33
2a02:2457:100::/40
Signature Algorithm: sha256WithRSAEncryption
3a:41:ef:d7:c2:99:71:ad:e1:09:41:8f:e2:54:ea:d4:c5:b2:
46:a9:de:a6:cd:c3:60:5f:53:a6:16:80:33:cb:a8:2d:a7:9e:
32:5b:5c:b8:46:07:ce:b3:9e:40:77:1b:ce:f4:03:cd:68:a5:
53:5d:72:d0:ec:90:fa:11:37:58:60:c9:d7:bc:bb:89:71:d8:
a5:ac:4c:30:b9:db:87:1a:bf:8e:e9:9c:57:23:cf:87:3a:d4:
2d:c4:65:ea:2a:39:08:8c:8e:b7:6a:cf:25:f6:d7:02:5a:e2:
50:8c:14:34:27:f9:28:18:ad:2d:c5:f0:aa:7a:28:cb:c5:93:
0e:f2:4a:ca:01:81:41:98:61:f8:c0:ee:bf:e1:91:11:05:4c:
d5:40:f8:16:35:6f:69:fe:cd:ce:f1:ac:42:6c:ab:3d:72:97:
47:a6:b6:8c:c1:7d:bd:31:21:1c:42:46:52:b4:57:7a:b4:4a:
0b:85:63:7b:49:ab:b6:6e:22:b8:c0:19:fe:56:06:1d:61:8b:
1c:19:7d:0e:dc:88:27:bc:9f:a9:f2:7f:5d:13:4a:91:76:da:
82:82:d5:c0:c8:2e:73:95:ab:41:84:76:dd:31:ee:26:79:a9:
d8:d1:30:b4:61:05:b6:0f:5d:d0:8f:f3:b4:a5:0b:82:9a:4f:
ab:f4:2c:cc
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgISAZBy6bp2v7sRnMf3AKOALwWqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0Yjc2OWE1M2RkODYzNTJkMzQ0MGYyMjJiZGY5MDdjZjA5
YzJkYmEwHhcNMjQwNzAyMTAwNzE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMzYyZDFlNDA2NjQxOWVmMWJlNGMxNDJlYWQwYzUxMDAxMTQ0ZGNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9e9jCkS58mWnaVSnzg77VHDqdGS
BCew+cv8xWyxXRy5glw6DetyyIVIZJoxvEIUcuzHX4JeF6HIhk2YIvhGZk11evfT
sV+cI7txMcGZy/VM6Zw1Zdd4gYABestG6o17IZFkugq1RMfflkozeXdV3+JNZp5t
RyuLNzpWSW7R0bIBOXBx9syBDrpBHGf73qO4q6WhumWqDVs4XFHWmlo0ZhIg0c1w
+ga8Jspb7kq/17mnXoMd3ifAfsFAaSmUVnpOnNTnI9ZyJ5dX+Fkr2uLwLwHmNSiA
LYZ3MVQNIVL1DDZVwgTHOlGShGq7SVmv8Gziu/TxHfBDeqcVmG5zy+rlfwIDAQAB
o4ICSzCCAkcwHQYDVR0OBBYEFNNi0eQGZBnvG+TBQurQxRABFE3PMB8GA1UdIwQY
MBaAFPS3aaU92GNS00QPIivfkHzwnC26MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUxkcHBUM1lZMUxUUkE4aUs5LVFmUENjTGJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy83MGQ1MGYtZmYzYy00ZjYzLThkZWMt
ZDdjMzZjMjdjMDg3LzEvMDJMUjVBWmtHZThiNU1GQzZ0REZFQUVVVGM4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy83MGQ1MGYtZmYzYy00ZjYzLThkZWMtZDdjMzZjMjdjMDg3
LzEvOUxkcHBUM1lZMUxUUkE4aUs5LVFmUENjTGJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGEGCCsGAQUFBwEHAQH/BFIwUDAvBAIAATApAwQHTUCAAwQF
U91AAwQFWbqAAwMAXM4DBAVfqIADBAK5LJQDBAXZRKAwHQQCAAIwFwMFACoAwaAD
BgcqAiRUgAMGACoCJFcBMA0GCSqGSIb3DQEBCwUAA4IBAQA6Qe/XwplxreEJQY/i
VOrUxbJGqd6mzcNgX1OmFoAzy6gtp54yW1y4RgfOs55AdxvO9APNaKVTXXLQ7JD6
ETdYYMnXvLuJcdilrEwwuduHGr+O6ZxXI8+HOtQtxGXqKjkIjI63as8l9tcCWuJQ
jBQ0J/koGK0txfCqeijLxZMO8krKAYFBmGH4wO6/4ZERBUzVQPgWNW9p/s3O8axC
bKs9cpdHpraMwX29MSEcQkZStFd6tEoLhWN7Sau2biK4wBn+VgYdYYscGX0O3Ign
vJ+p8n9dE0qRdtqCgtXAyC5zlatBhHbdMe4meanY0TC0YQW2D13Qj/O0pQuCmk+r
9CzM
-----END CERTIFICATE-----
Generated at Tue Aug 20 13:32:11 2024 by rpki-client on console-ams.rpki-client.org