Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/IiHLDn0QaEvcm65vWKwcmsCmaYU.roa
File: IiHLDn0QaEvcm65vWKwcmsCmaYU.roa (raw, json)
Hash identifier: OOkOgeBMYZHxJCOqB2kBQKwoAxblT6i4ZYeqFjrsuoI=
Subject key identifier: 22:21:CB:0E:7D:10:68:4B:DC:9B:AE:6F:58:AC:1C:9A:C0:A6:69:85
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0191176474C1324F8A15932F80A36E6A1622
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/IiHLDn0QaEvcm65vWKwcmsCmaYU.roa
Signing time: Sat 03 Aug 2024 08:39:05 +0000
ROA not before: Sat 03 Aug 2024 08:39:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 62.197.144.0/24 maxlen: 24
62.197.147.0/24 maxlen: 24
62.197.148.0/24 maxlen: 24
62.197.150.0/24 maxlen: 24
62.197.152.0/24 maxlen: 24
92.62.121.0/24 maxlen: 24
185.239.241.0/24 maxlen: 24
185.244.137.0/24 maxlen: 24
185.245.5.0/24 maxlen: 24
188.240.68.0/24 maxlen: 24
193.19.108.0/24 maxlen: 24
193.218.32.0/24 maxlen: 24
220.158.199.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 15 Aug 2024 11:55:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:17:64:74:c1:32:4f:8a:15:93:2f:80:a3:6e:6a:16:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Aug 3 08:39:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2221cb0e7d10684bdc9bae6f58ac1c9ac0a66985
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e4:8e:12:2e:ed:90:a3:9a:f0:d3:08:da:ee:
6f:a9:64:8d:93:71:2d:40:39:96:d0:4b:d3:96:c0:
8a:9f:b1:f9:63:e2:ab:ee:9a:b1:18:3d:68:c7:bc:
2b:ab:07:94:d1:0c:e9:30:17:1f:a8:34:93:ae:f9:
62:5c:6f:b0:2a:08:ad:ab:0e:09:0d:30:a5:ad:1e:
9a:78:37:19:93:a6:39:da:fd:cd:f9:2e:4d:d4:be:
7a:a2:23:ac:68:41:b5:cc:e2:86:cb:25:c4:df:e5:
d3:21:61:88:89:cd:87:c0:29:73:d0:da:c5:f5:fc:
27:74:6b:4e:cd:85:09:4c:95:23:18:d2:78:37:4c:
09:a8:2f:85:71:8d:fc:32:ba:2c:51:bb:9b:8d:de:
ca:8b:37:3d:e6:28:0e:22:85:eb:a7:af:42:19:cc:
95:11:13:f6:38:b6:7c:9b:2b:6e:83:26:36:07:8d:
7f:1a:c3:f8:61:e0:08:61:64:40:35:ba:92:55:54:
99:7b:a7:42:5a:54:4b:b5:e6:a0:10:3a:8f:04:0c:
fd:e0:a4:4e:db:74:95:6e:f5:08:77:6b:67:31:b7:
b2:f3:3d:2e:9c:c5:f1:eb:39:d4:fb:db:74:32:7c:
63:d6:3e:5a:65:d8:ee:f8:fd:62:14:e4:e0:86:68:
95:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:21:CB:0E:7D:10:68:4B:DC:9B:AE:6F:58:AC:1C:9A:C0:A6:69:85
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/IiHLDn0QaEvcm65vWKwcmsCmaYU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.197.144.0/24
62.197.147.0-62.197.148.255
62.197.150.0/24
62.197.152.0/24
92.62.121.0/24
185.239.241.0/24
185.244.137.0/24
185.245.5.0/24
188.240.68.0/24
193.19.108.0/24
193.218.32.0/24
220.158.199.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:2b:61:a2:33:fd:e4:ea:b5:a3:c6:f2:e0:5f:cd:98:85:bc:
ee:d4:8e:9c:28:75:d5:c0:c2:fa:a5:66:09:cd:ca:31:8b:f9:
db:c4:1d:95:ea:6f:18:4d:7d:6a:3e:8d:dc:20:d0:bd:c4:05:
d2:e5:df:2a:f3:f7:7b:11:52:ad:86:42:7f:c7:6c:cb:95:97:
c8:99:98:80:c9:67:19:8a:fa:ce:d7:ab:20:a3:64:f1:af:b8:
29:b7:d5:3c:8d:85:a0:7f:8b:1a:39:94:79:79:5e:dd:d5:b5:
a9:30:3c:53:f3:1c:94:2d:9b:ee:ec:25:4e:1a:ca:fd:0e:2b:
b0:63:66:23:19:7a:fc:44:5c:6d:3c:a8:76:86:39:57:d2:3e:
dc:94:56:5d:90:a4:7c:5a:93:1a:bc:de:da:b9:e8:a9:c7:16:
67:d7:d6:a2:a7:f9:6a:be:5d:f2:4f:d2:f1:c6:eb:5d:c0:68:
a5:2c:c2:4c:ab:4d:15:69:60:cd:86:7b:f9:56:47:e3:14:07:
3b:fc:0a:d3:c9:74:7f:99:b7:6c:6f:6e:25:d3:c1:0d:e3:58:
98:4c:38:ac:dd:f5:c0:c0:22:0f:e7:0d:05:62:ad:2c:e8:b7:
78:49:95:5e:c5:09:ca:57:97:61:14:79:16:94:48:7c:29:35:
f9:3e:d4:8b
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgISAZEXZHTBMk+KFZMvgKNuahYiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw
NWIwZTIwHhcNMjQwODAzMDgzOTA1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMjIxY2IwZTdkMTA2ODRiZGM5YmFlNmY1OGFjMWM5YWMwYTY2OTg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApuSOEi7tkKOa8NMI2u5vqWSNk3Et
QDmW0EvTlsCKn7H5Y+Kr7pqxGD1ox7wrqweU0QzpMBcfqDSTrvliXG+wKgitqw4J
DTClrR6aeDcZk6Y52v3N+S5N1L56oiOsaEG1zOKGyyXE3+XTIWGIic2HwClz0NrF
9fwndGtOzYUJTJUjGNJ4N0wJqC+FcY38MrosUbubjd7Kizc95igOIoXrp69CGcyV
ERP2OLZ8mytugyY2B41/GsP4YeAIYWRANbqSVVSZe6dCWlRLteagEDqPBAz94KRO
23SVbvUId2tnMbey8z0unMXx6znU+9t0Mnxj1j5aZdju+P1iFOTghmiV0wIDAQAB
o4ICUzCCAk8wHQYDVR0OBBYEFCIhyw59EGhL3Juub1isHJrApmmFMB8GA1UdIwQY
MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt
MmNjZWRiOTY2YTU4LzEvSWlITERuMFFhRXZjbTY1dldLd2Ntc0NtYVlVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4
LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGkGCCsGAQUFBwEHAQH/BFowWDBWBAIAATBQAwQAPsWQMAwD
BAA+xZMDBAA+xZQDBAA+xZYDBAA+xZgDBABcPnkDBAC57/EDBAC59IkDBAC59QUD
BAC88EQDBADBE2wDBADB2iADBADcnscwDQYJKoZIhvcNAQELBQADggEBAE0rYaIz
/eTqtaPG8uBfzZiFvO7UjpwoddXAwvqlZgnNyjGL+dvEHZXqbxhNfWo+jdwg0L3E
BdLl3yrz93sRUq2GQn/HbMuVl8iZmIDJZxmK+s7XqyCjZPGvuCm31TyNhaB/ixo5
lHl5Xt3VtakwPFPzHJQtm+7sJU4ayv0OK7BjZiMZevxEXG08qHaGOVfSPtyUVl2Q
pHxakxq83tq56KnHFmfX1qKn+Wq+XfJP0vHG613AaKUswkyrTRVpYM2Ge/lWR+MU
Bzv8CtPJdH+Zt2xvbiXTwQ3jWJhMOKzd9cDAIg/nDQVirSzot3hJlV7FCcpXl2EU
eRaUSHwpNfk+1Is=
-----END CERTIFICATE-----
Generated at Thu Aug 15 16:42:32 2024 by rpki-client on console-fra.rpki-client.org