Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/KdCzjt1I0Ke4DPT2V9J5721oau0.roa
File: KdCzjt1I0Ke4DPT2V9J5721oau0.roa (raw, json)
Hash identifier: jyT7wcqQHwfAlLTE1obW0naTPdc9FHwJM579h6Q0dQ8=
Subject key identifier: 29:D0:B3:8E:DD:48:D0:A7:B8:0C:F4:F6:57:D2:79:EF:6D:68:6A:ED
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018857584D867B221E8DC1FAB52E5827D4AF
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/KdCzjt1I0Ke4DPT2V9J5721oau0.roa
Signing time: Fri 26 May 2023 09:16:24 +0000
ROA not before: Fri 26 May 2023 09:16:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 137409
IP address blocks: 194.5.83.0/24 maxlen: 24
45.8.70.0/24 maxlen: 24
194.5.82.0/24 maxlen: 24
45.130.202.0/23 maxlen: 24
45.133.4.0/24 maxlen: 24
45.133.6.0/24 maxlen: 24
89.34.126.0/23 maxlen: 24
45.133.5.0/24 maxlen: 24
45.133.7.0/24 maxlen: 24
194.61.40.0/23 maxlen: 24
204.75.229.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:57:58:4d:86:7b:22:1e:8d:c1:fa:b5:2e:58:27:d4:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: May 26 09:16:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=29d0b38edd48d0a7b80cf4f657d279ef6d686aed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:9e:8e:19:cc:21:86:0b:92:cd:f4:eb:8e:d9:
20:34:b2:9a:4f:80:51:68:d3:f7:7d:aa:5f:59:f9:
bb:61:b0:42:1e:7e:7e:30:42:13:cf:e4:88:9c:4c:
b9:fa:64:5b:56:79:a1:9e:d9:3d:24:85:eb:f7:43:
32:c2:3b:35:a9:f7:fa:7d:0a:e0:e6:43:93:9c:a0:
55:1d:b1:14:83:0c:d1:7c:20:89:c4:71:73:c7:89:
23:7b:26:7b:47:65:95:d6:0b:9b:f6:4d:48:5d:7f:
5f:a5:8f:0f:b1:30:66:17:16:76:12:45:f3:70:19:
f9:af:33:17:27:09:63:59:0b:7b:12:54:1a:74:bf:
b7:6b:4f:b9:ac:fd:fd:99:53:a7:4e:67:bd:2a:eb:
a3:5a:a9:f4:31:1c:a4:09:45:5d:30:e3:80:3b:61:
41:1d:55:2d:24:8f:0b:02:73:e6:de:bb:0e:20:d8:
29:d4:08:e2:79:cc:55:e7:6f:fc:73:2d:70:ec:87:
17:e7:9a:95:27:9f:a5:c2:a8:8b:18:5e:41:df:42:
94:41:9a:f5:9c:2e:90:63:f4:e4:40:f9:14:17:5a:
da:75:4d:97:16:84:92:62:10:e9:59:cd:ad:75:35:
2c:b9:59:19:4d:9e:a8:d0:76:ef:a6:cb:5f:11:ab:
48:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:D0:B3:8E:DD:48:D0:A7:B8:0C:F4:F6:57:D2:79:EF:6D:68:6A:ED
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/KdCzjt1I0Ke4DPT2V9J5721oau0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.70.0/24
45.130.202.0/23
45.133.4.0/22
89.34.126.0/23
194.5.82.0/23
194.61.40.0/23
204.75.229.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:07:07:6a:bd:cc:d1:92:6e:0d:01:28:39:74:2c:3a:79:21:
51:9d:33:2a:cf:2e:c3:62:a5:8d:aa:4e:b1:a3:31:fa:6f:fb:
35:df:60:f8:b8:f5:b0:b4:0a:cb:97:85:f5:52:72:c7:e0:92:
74:54:f4:b2:e2:32:7a:ec:10:86:5d:66:13:5b:ed:28:24:77:
43:35:00:07:4c:ce:49:b2:8a:fa:aa:0e:15:55:0e:33:d7:96:
5a:84:e2:b0:d4:d3:56:8e:d2:bd:5e:8a:0e:bd:53:e1:7a:7a:
c2:8d:cb:a6:0f:1a:de:01:6c:31:e5:2e:1b:12:24:2d:cd:b4:
a2:17:99:f4:6a:02:1e:a9:01:65:85:8a:5d:29:0e:0e:4d:42:
04:55:5d:94:df:02:9a:a0:3b:e6:1e:0b:f0:8e:d6:a0:34:75:
25:bf:eb:62:1c:b9:b1:14:21:83:c4:66:99:92:5a:4a:38:95:
d4:5b:d9:31:a9:d9:0b:f8:2b:07:e2:a1:c2:a7:c4:13:11:2a:
56:8f:87:e1:99:53:73:2c:29:61:91:3e:53:69:6a:80:26:63:
2a:6c:d4:54:8c:d4:95:25:36:6d:a2:30:e4:7c:75:12:d4:e9:
e9:2e:76:6d:e2:ce:26:41:93:67:e6:aa:c0:1f:7b:d1:b1:e4:
de:fb:4e:48
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAYhXWE2GeyIejcH6tS5YJ9SvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw
NWIwZTIwHhcNMjMwNTI2MDkxNjI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyOWQwYjM4ZWRkNDhkMGE3YjgwY2Y0ZjY1N2QyNzllZjZkNjg2YWVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgp6OGcwhhguSzfTrjtkgNLKaT4BR
aNP3fapfWfm7YbBCHn5+MEITz+SInEy5+mRbVnmhntk9JIXr90Mywjs1qff6fQrg
5kOTnKBVHbEUgwzRfCCJxHFzx4kjeyZ7R2WV1gub9k1IXX9fpY8PsTBmFxZ2EkXz
cBn5rzMXJwljWQt7ElQadL+3a0+5rP39mVOnTme9KuujWqn0MRykCUVdMOOAO2FB
HVUtJI8LAnPm3rsOINgp1AjiecxV52/8cy1w7IcX55qVJ5+lwqiLGF5B30KUQZr1
nC6QY/TkQPkUF1radU2XFoSSYhDpWc2tdTUsuVkZTZ6o0HbvpstfEatI4wIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFCnQs47dSNCnuAz09lfSee9taGrtMB8GA1UdIwQY
MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt
MmNjZWRiOTY2YTU4LzEvS2RDemp0MUkwS2U0RFBUMlY5SjU3MjFvYXUwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4
LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQALQhGAwQB
LYLKAwQCLYUEAwQBWSJ+AwQBwgVSAwQBwj0oAwQAzEvlMA0GCSqGSIb3DQEBCwUA
A4IBAQBvBwdqvczRkm4NASg5dCw6eSFRnTMqzy7DYqWNqk6xozH6b/s132D4uPWw
tArLl4X1UnLH4JJ0VPSy4jJ67BCGXWYTW+0oJHdDNQAHTM5Jsor6qg4VVQ4z15Za
hOKw1NNWjtK9XooOvVPhenrCjcumDxreAWwx5S4bEiQtzbSiF5n0agIeqQFlhYpd
KQ4OTUIEVV2U3wKaoDvmHgvwjtagNHUlv+tiHLmxFCGDxGaZklpKOJXUW9kxqdkL
+CsH4qHCp8QTESpWj4fhmVNzLClhkT5TaWqAJmMqbNRUjNSVJTZtojDkfHUS1Onp
LnZt4s4mQZNn5qrAH3vRseTe+05I
-----END CERTIFICATE-----
Generated at Tue Sep 19 09:16:45 2023 by rpki-client on console-fra.rpki-client.org