Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/cuUXtdj09pUpOcmz-XvYebTGqy4.roa
File: cuUXtdj09pUpOcmz-XvYebTGqy4.roa (raw, json)
Hash identifier: aFe5Rs3W/EHvSks3YckEAA4sFDIDhTuMq7aKe+8Kmyk=
Subject key identifier: 72:E5:17:B5:D8:F4:F6:95:29:39:C9:B3:F9:7B:D8:79:B4:C6:AB:2E
Certificate issuer: /CN=f4b769a53dd86352d3440f222bdf907cf09c2dba
Certificate serial: 018CC2DAD362DB96DB2D8A37C14AE2623B60
Authority key identifier: F4:B7:69:A5:3D:D8:63:52:D3:44:0F:22:2B:DF:90:7C:F0:9C:2D:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LdppT3YY1LTRA8iK9-QfPCcLbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/cuUXtdj09pUpOcmz-XvYebTGqy4.roa
Signing time: Mon 01 Jan 2024 02:29:29 +0000
ROA not before: Mon 01 Jan 2024 02:29:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35244
IP address blocks: 95.157.0.0/18 maxlen: 18
195.234.128.0/24 maxlen: 24
46.128.0.0/16 maxlen: 16
94.139.0.0/19 maxlen: 19
94.139.0.0/20 maxlen: 20
83.243.112.0/21 maxlen: 21
194.105.96.0/21 maxlen: 21
94.139.16.0/20 maxlen: 20
193.25.118.0/23 maxlen: 23
109.125.64.0/18 maxlen: 18
77.47.0.0/17 maxlen: 17
195.46.44.0/22 maxlen: 22
85.233.32.0/19 maxlen: 19
185.169.204.0/22 maxlen: 22
88.215.64.0/18 maxlen: 18
2a02:2455::/33 maxlen: 33
2001:4c50::/32 maxlen: 32
2a02:2457:300::/40 maxlen: 40
Validation: Failed, certificate revoked on Thu 15 Feb 2024 09:04:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:d3:62:db:96:db:2d:8a:37:c1:4a:e2:62:3b:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b769a53dd86352d3440f222bdf907cf09c2dba
Validity
Not Before: Jan 1 02:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=72e517b5d8f4f6952939c9b3f97bd879b4c6ab2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:37:44:a2:3c:64:27:bf:a5:e1:53:c0:0f:54:
b1:e7:2c:9d:fc:de:4f:32:b0:67:b2:c5:33:ec:29:
d6:37:1e:99:f7:dc:f9:5a:19:8e:d9:01:85:24:c3:
b2:78:e0:5d:12:83:c3:54:15:09:f9:4d:70:d3:11:
54:98:1d:bd:59:cb:5f:3c:b5:97:82:24:70:84:c6:
51:59:8f:4e:4a:24:23:f1:6c:3e:7e:b1:b5:02:8d:
2e:f1:69:e5:ad:7c:d9:a0:f4:9f:70:d0:f8:35:e6:
3f:74:ca:c7:49:6d:d6:7c:88:19:ba:ec:50:48:b2:
04:67:88:6e:5d:be:81:59:c8:54:6f:5d:d4:cf:43:
52:01:ce:1b:61:45:87:4c:f9:a6:ed:c8:3b:e2:90:
26:30:11:a2:47:fd:86:bd:39:e9:0f:f8:2e:a0:07:
03:c5:18:90:e4:b3:3c:32:50:0b:36:45:81:3f:dd:
70:23:75:a5:6a:a8:10:f3:0c:a7:f4:00:78:48:bb:
6b:21:2b:27:d5:38:50:10:a4:83:06:8b:27:7d:fb:
a3:33:65:5f:6e:bf:fc:fc:1a:81:e2:85:9f:66:95:
66:8a:7d:5d:d2:90:cc:dd:86:5d:e7:3e:79:28:8b:
a2:05:de:21:a5:00:ed:9b:6e:c3:a0:63:a7:46:8e:
d7:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:E5:17:B5:D8:F4:F6:95:29:39:C9:B3:F9:7B:D8:79:B4:C6:AB:2E
X509v3 Authority Key Identifier:
keyid:F4:B7:69:A5:3D:D8:63:52:D3:44:0F:22:2B:DF:90:7C:F0:9C:2D:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LdppT3YY1LTRA8iK9-QfPCcLbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/cuUXtdj09pUpOcmz-XvYebTGqy4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.128.0.0/16
77.47.0.0/17
83.243.112.0/21
85.233.32.0/19
88.215.64.0/18
94.139.0.0/19
95.157.0.0/18
109.125.64.0/18
185.169.204.0/22
193.25.118.0/23
194.105.96.0/21
195.46.44.0/22
195.234.128.0/24
IPv6:
2001:4c50::/32
2a02:2455::/33
2a02:2457:300::/40
Signature Algorithm: sha256WithRSAEncryption
01:c3:4e:08:70:98:c7:1a:96:4f:be:25:22:0c:65:5b:a0:05:
58:be:da:1e:1b:d3:4a:da:2f:98:47:ae:c2:ea:12:02:d1:60:
b8:52:b4:56:6f:a0:0f:6d:43:6a:7b:dd:df:50:d2:54:92:67:
aa:9b:e0:c0:ac:c1:a0:27:66:8f:3f:af:b0:f0:bc:c8:f4:32:
eb:f9:64:f4:34:b9:1a:a5:9d:71:3d:5d:0a:f6:37:d2:c6:70:
1d:07:34:46:4a:5d:6a:50:40:61:21:35:e3:77:22:e0:41:7b:
90:5f:76:19:d4:da:ca:05:db:4e:e5:80:37:c1:33:ab:3d:da:
e0:94:99:d0:b3:29:08:c5:2b:be:53:63:21:da:b6:ed:ad:83:
3f:2d:45:18:75:5f:7e:07:e2:ed:a6:5b:48:6f:1b:ad:6a:22:
6a:0e:75:03:6e:c8:bb:83:ae:9d:4f:ed:e5:3c:61:7f:55:b1:
5a:af:ba:dc:64:90:e7:a3:99:1e:ed:cc:fd:00:df:6e:15:07:
57:2e:11:71:0b:1d:49:23:a1:22:d0:3f:02:a0:f9:d8:e2:1a:
18:1a:41:d5:26:a2:53:72:4b:62:41:c2:c5:53:0e:fa:46:6c:
e8:42:0c:e8:17:20:8d:ef:b8:5e:8b:0e:7b:7c:4a:62:de:43:
6d:e8:bc:c0
-----BEGIN CERTIFICATE-----
MIIFZDCCBEygAwIBAgISAYzC2tNi25bbLYo3wUriYjtgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0Yjc2OWE1M2RkODYzNTJkMzQ0MGYyMjJiZGY5MDdjZjA5
YzJkYmEwHhcNMjQwMTAxMDIyOTI5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MmU1MTdiNWQ4ZjRmNjk1MjkzOWM5YjNmOTdiZDg3OWI0YzZhYjJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDdEojxkJ7+l4VPAD1Sx5yyd/N5P
MrBnssUz7CnWNx6Z99z5WhmO2QGFJMOyeOBdEoPDVBUJ+U1w0xFUmB29WctfPLWX
giRwhMZRWY9OSiQj8Ww+frG1Ao0u8WnlrXzZoPSfcND4NeY/dMrHSW3WfIgZuuxQ
SLIEZ4huXb6BWchUb13Uz0NSAc4bYUWHTPmm7cg74pAmMBGiR/2GvTnpD/guoAcD
xRiQ5LM8MlALNkWBP91wI3WlaqgQ8wyn9AB4SLtrISsn1ThQEKSDBosnffujM2Vf
br/8/BqB4oWfZpVmin1d0pDM3YZd5z55KIuiBd4hpQDtm27DoGOnRo7XYwIDAQAB
o4ICcDCCAmwwHQYDVR0OBBYEFHLlF7XY9PaVKTnJs/l72Hm0xqsuMB8GA1UdIwQY
MBaAFPS3aaU92GNS00QPIivfkHzwnC26MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUxkcHBUM1lZMUxUUkE4aUs5LVFmUENjTGJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy83MGQ1MGYtZmYzYy00ZjYzLThkZWMt
ZDdjMzZjMjdjMDg3LzEvY3VVWHRkajA5cFVwT2Ntei1YdlllYlRHcXk0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy83MGQ1MGYtZmYzYy00ZjYzLThkZWMtZDdjMzZjMjdjMDg3
LzEvOUxkcHBUM1lZMUxUUkE4aUs5LVFmUENjTGJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGFBggrBgEFBQcBBwEB/wR2MHQwUwQCAAEwTQMDAC6AAwQH
TS8AAwQDU/NwAwQFVekgAwQGWNdAAwQFXosAAwQGX50AAwQGbX1AAwQCuanMAwQB
wRl2AwQDwmlgAwQCwy4sAwQAw+qAMB0EAgACMBcDBQAgAUxQAwYHKgIkVQADBgAq
AiRXAzANBgkqhkiG9w0BAQsFAAOCAQEAAcNOCHCYxxqWT74lIgxlW6AFWL7aHhvT
StovmEeuwuoSAtFguFK0Vm+gD21Danvd31DSVJJnqpvgwKzBoCdmjz+vsPC8yPQy
6/lk9DS5GqWdcT1dCvY30sZwHQc0RkpdalBAYSE143ci4EF7kF92GdTaygXbTuWA
N8Ezqz3a4JSZ0LMpCMUrvlNjIdq27a2DPy1FGHVffgfi7aZbSG8brWoiag51A27I
u4OunU/t5Txhf1WxWq+63GSQ56OZHu3M/QDfbhUHVy4RcQsdSSOhItA/AqD52OIa
GBpB1SaiU3JLYkHCxVMO+kZs6EIM6Bcgje+4XosOe3xKYt5Dbei8wA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:06 2024 by rpki-client on console-ams.rpki-client.org