Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/IPwyHaP8xSXG-RZjOCKfFdISDAo.roa
File: IPwyHaP8xSXG-RZjOCKfFdISDAo.roa (raw, json)
Hash identifier: i85p6N9YWx3aeLxi/GpKmSX1nyG1nAmBMvqW2ALgHGQ=
Subject key identifier: 20:FC:32:1D:A3:FC:C5:25:C6:F9:16:63:38:22:9F:15:D2:12:0C:0A
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018CC50126E6FEC1A79DDA3B2D8535EF4D49
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/IPwyHaP8xSXG-RZjOCKfFdISDAo.roa
Signing time: Mon 01 Jan 2024 12:30:35 +0000
ROA not before: Mon 01 Jan 2024 12:30:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206092
IP address blocks: 203.26.81.0/24 maxlen: 24
185.192.71.0/24 maxlen: 24
188.212.135.0/24 maxlen: 24
89.38.70.0/24 maxlen: 24
45.67.96.0/24 maxlen: 24
193.19.109.0/24 maxlen: 24
45.135.186.0/24 maxlen: 24
203.159.81.0/24 maxlen: 24
45.135.187.0/24 maxlen: 24
45.130.83.0/24 maxlen: 24
45.130.81.0/24 maxlen: 24
45.130.80.0/24 maxlen: 24
45.140.135.0/24 maxlen: 24
89.47.15.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 08 Mar 2024 05:44:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:26:e6:fe:c1:a7:9d:da:3b:2d:85:35:ef:4d:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 1 12:30:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=20fc321da3fcc525c6f9166338229f15d2120c0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:25:16:ab:65:a6:a7:55:09:7e:e9:59:48:bd:
6b:1b:9f:f6:d7:92:0b:06:df:25:b4:d8:2a:d2:34:
9e:b1:e4:d3:da:6b:44:40:b9:76:23:68:ec:98:63:
1c:85:ec:00:3e:95:b8:11:cf:54:45:93:05:d4:10:
6d:f0:0b:77:ac:d0:1f:b6:c9:bb:46:6b:ff:3b:ed:
02:be:9f:08:c5:bd:42:fd:58:5d:f1:cc:bb:1b:64:
97:f1:15:42:f9:fd:db:c0:24:60:b1:8c:2b:4e:48:
bb:67:50:c5:df:dc:ba:73:5e:ef:d9:04:d3:76:b1:
58:59:b0:75:8b:25:32:9e:6b:c7:52:db:85:5f:29:
48:36:88:2e:de:a2:58:50:07:d1:1d:dd:3f:94:40:
80:75:47:6e:22:de:c3:32:85:c9:a1:86:6d:92:88:
11:8f:d0:20:92:60:b1:f9:92:69:72:47:7d:47:b0:
46:54:15:14:b6:76:bb:af:f8:c2:aa:a8:36:a8:34:
c6:c9:22:4b:8f:86:2a:43:47:c7:1d:c2:ca:48:e7:
a3:41:a1:ea:da:96:58:58:9d:dc:ac:1f:ec:2a:99:
44:d3:05:d1:2c:ec:83:a2:0f:1d:0e:ca:b1:5d:2e:
8a:1a:35:8c:a1:0d:81:d0:f7:7d:46:2a:4b:39:9a:
9a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:FC:32:1D:A3:FC:C5:25:C6:F9:16:63:38:22:9F:15:D2:12:0C:0A
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/IPwyHaP8xSXG-RZjOCKfFdISDAo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.96.0/24
45.130.80.0/23
45.130.83.0/24
45.135.186.0/23
45.140.135.0/24
89.38.70.0/24
89.47.15.0/24
185.192.71.0/24
188.212.135.0/24
193.19.109.0/24
203.26.81.0/24
203.159.81.0/24
Signature Algorithm: sha256WithRSAEncryption
97:3c:2a:00:eb:c5:7b:6c:b6:ea:18:5b:10:d2:99:30:e6:36:
06:8a:c1:61:4b:fd:87:1d:6b:b1:d0:14:4b:ae:9c:a6:e0:61:
d0:dd:f1:d6:53:4b:fb:f1:f0:1b:d1:41:2c:2f:30:3e:09:b6:
20:8e:8a:8a:2b:13:66:2e:18:3a:75:36:41:dc:9f:5c:c1:b3:
62:34:0a:c8:76:fc:e9:c5:97:80:0e:51:a3:bc:a5:4c:3f:ce:
3f:ec:c6:2d:1a:2e:a6:09:4c:c9:b4:fb:97:03:2d:95:55:ac:
3d:e3:d5:2c:62:dc:43:0c:9f:ee:b2:6a:ad:82:ae:e8:ff:79:
f4:60:47:5e:87:ee:57:55:34:03:04:3a:b7:82:a0:c1:01:88:
66:9e:8f:2c:ee:e4:d3:d9:79:55:26:c6:e5:85:94:e0:5f:75:
af:9d:a6:b4:f2:59:6b:43:84:cc:60:f5:d6:d5:24:6a:d6:35:
9a:d7:03:90:52:65:f5:a9:6a:87:d2:dd:15:ca:3d:63:9e:0a:
c4:ad:f2:a4:8a:b0:44:e3:99:d0:bc:a1:fc:fe:c2:82:8f:c6:
61:e8:8d:5b:7b:15:42:00:6f:9a:e4:bf:c3:c1:67:b1:cf:a0:
eb:cc:a7:06:14:f2:1d:94:c9:aa:56:e1:06:83:a8:58:97:b0:
1a:7c:09:dd
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgISAYzFASbm/sGnndo7LYU1701JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw
NWIwZTIwHhcNMjQwMTAxMTIzMDM1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMGZjMzIxZGEzZmNjNTI1YzZmOTE2NjMzODIyOWYxNWQyMTIwYzBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgSUWq2Wmp1UJfulZSL1rG5/215IL
Bt8ltNgq0jSeseTT2mtEQLl2I2jsmGMchewAPpW4Ec9URZMF1BBt8At3rNAftsm7
Rmv/O+0Cvp8Ixb1C/Vhd8cy7G2SX8RVC+f3bwCRgsYwrTki7Z1DF39y6c17v2QTT
drFYWbB1iyUynmvHUtuFXylINogu3qJYUAfRHd0/lECAdUduIt7DMoXJoYZtkogR
j9AgkmCx+ZJpckd9R7BGVBUUtna7r/jCqqg2qDTGySJLj4YqQ0fHHcLKSOejQaHq
2pZYWJ3crB/sKplE0wXRLOyDog8dDsqxXS6KGjWMoQ2B0Pd9RipLOZqaewIDAQAB
o4ICSzCCAkcwHQYDVR0OBBYEFCD8Mh2j/MUlxvkWYzginxXSEgwKMB8GA1UdIwQY
MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt
MmNjZWRiOTY2YTU4LzEvSVB3eUhhUDh4U1hHLVJaak9DS2ZGZElTREFvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4
LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGEGCCsGAQUFBwEHAQH/BFIwUDBOBAIAATBIAwQALUNgAwQB
LYJQAwQALYJTAwQBLYe6AwQALYyHAwQAWSZGAwQAWS8PAwQAucBHAwQAvNSHAwQA
wRNtAwQAyxpRAwQAy59RMA0GCSqGSIb3DQEBCwUAA4IBAQCXPCoA68V7bLbqGFsQ
0pkw5jYGisFhS/2HHWux0BRLrpym4GHQ3fHWU0v78fAb0UEsLzA+CbYgjoqKKxNm
Lhg6dTZB3J9cwbNiNArIdvzpxZeADlGjvKVMP84/7MYtGi6mCUzJtPuXAy2VVaw9
49UsYtxDDJ/usmqtgq7o/3n0YEdeh+5XVTQDBDq3gqDBAYhmno8s7uTT2XlVJsbl
hZTgX3Wvnaa08llrQ4TMYPXW1SRq1jWa1wOQUmX1qWqH0t0Vyj1jngrErfKkirBE
45nQvKH8/sKCj8Zh6I1bexVCAG+a5L/DwWexz6DrzKcGFPIdlMmqVuEGg6hYl7Aa
fAnd
-----END CERTIFICATE-----
Generated at Fri Mar 8 06:23:31 2024 by rpki-client on console-fra.rpki-client.org