Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/KhTpbm0qdWWXlHWQfvnUfe9pR0E.roa
File: KhTpbm0qdWWXlHWQfvnUfe9pR0E.roa (raw, json)
Hash identifier: 5AvTYky9Mw0WIL3r+iP9M/fnY/vjEWR2e6YPgs7e6Vg=
Subject key identifier: 2A:14:E9:6E:6D:2A:75:65:97:94:75:90:7E:F9:D4:7D:EF:69:47:41
Certificate issuer: /CN=a79bba2805a988954e4fec42570530f16f9e7093
Certificate serial: 01856BAECEDA70B46A444DED1315D9292BCF
Authority key identifier: A7:9B:BA:28:05:A9:88:95:4E:4F:EC:42:57:05:30:F1:6F:9E:70:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p5u6KAWpiJVOT-xCVwUw8W-ecJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/KhTpbm0qdWWXlHWQfvnUfe9pR0E.roa
Signing time: Sun 01 Jan 2023 04:54:56 +0000
ROA not before: Sun 01 Jan 2023 04:54:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 33438
IP address blocks: 81.171.61.0/24 maxlen: 24
81.171.62.0/23 maxlen: 24
81.171.68.0/24 maxlen: 24
81.171.66.0/24 maxlen: 24
81.171.70.0/23 maxlen: 23
81.171.70.64/26 maxlen: 26
81.171.105.0/24 maxlen: 24
81.171.106.0/24 maxlen: 24
81.171.106.64/26 maxlen: 26
81.171.116.0/24 maxlen: 24
2001:4de0:2105::/48 maxlen: 48
2001:4de0:4300::/40 maxlen: 40
2001:4de0:2300::/40 maxlen: 40
2001:4de0:600::/40 maxlen: 40
2001:4de0:700::/40 maxlen: 40
2001:4de0:4000::/40 maxlen: 40
2001:4de0:500::/40 maxlen: 40
2001:4de0:4100::/40 maxlen: 40
2001:4de0:6300::/40 maxlen: 40
2001:4de0:6000::/40 maxlen: 40
2001:4de0:2100::/40 maxlen: 40
2001:4de0:200::/40 maxlen: 40
2001:4de0:3000::/40 maxlen: 40
2001:4de0:2200::/40 maxlen: 40
2001:4de0:3100::/40 maxlen: 40
2001:4de0:2000::/40 maxlen: 40
2001:4de0:6200::/40 maxlen: 40
2001:4de0:400::/40 maxlen: 40
2001:4de0:1000::/48 maxlen: 48
2001:4de0:7003::/48 maxlen: 48
2001:4de0:402::/48 maxlen: 48
2001:4de0:2202::/48 maxlen: 48
2001:4de0:6102::/48 maxlen: 48
2001:4de0:7002::/48 maxlen: 48
2001:4de0:5010::/48 maxlen: 48
2001:4de0:ac13::/48 maxlen: 48
2001:4de0:3004::/48 maxlen: 48
2001:4de0:7001::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 20 Oct 2023 11:16:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:ae:ce:da:70:b4:6a:44:4d:ed:13:15:d9:29:2b:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a79bba2805a988954e4fec42570530f16f9e7093
Validity
Not Before: Jan 1 04:54:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2a14e96e6d2a7565979475907ef9d47def694741
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:9d:82:57:2c:de:46:08:d7:62:9a:c6:e8:f4:
3a:75:29:ea:7f:20:c3:6c:10:27:3a:60:83:ef:64:
d9:a3:7f:1a:cd:7e:c7:57:a0:c7:d2:7e:1e:3b:1b:
d7:87:20:5f:04:3c:f9:f9:8a:15:16:89:fd:63:fb:
48:65:99:87:db:fb:e4:e8:f9:52:c4:5a:74:86:a6:
18:3a:86:ec:73:68:90:2c:58:f2:a6:3c:ea:1c:dc:
16:c8:e4:76:fe:34:10:92:da:ba:68:11:2b:6a:a0:
64:98:bd:26:41:34:91:e3:56:f0:f5:82:cb:c8:66:
3e:70:4d:fc:46:1b:65:d6:47:bf:16:ee:a6:4d:9d:
90:16:4b:7e:29:bf:e4:27:05:13:77:3f:91:ad:bb:
f8:c5:9c:5e:ea:7e:5e:20:06:80:50:6f:2b:2f:42:
dd:50:15:6d:bc:a4:99:1e:43:64:b0:56:c1:5a:75:
12:15:f5:ea:58:62:b5:b7:db:b1:0a:46:51:e8:2f:
bc:2d:a6:46:b7:1e:aa:97:c6:0c:28:d3:b9:3d:9a:
60:23:ab:aa:17:4f:52:d8:b2:1b:df:75:ef:a0:22:
77:9f:30:f7:aa:b5:c9:a8:7d:2c:7e:0d:98:55:af:
06:94:7f:f1:f7:19:3d:ad:f6:6f:e3:83:b7:50:b3:
f2:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:14:E9:6E:6D:2A:75:65:97:94:75:90:7E:F9:D4:7D:EF:69:47:41
X509v3 Authority Key Identifier:
keyid:A7:9B:BA:28:05:A9:88:95:4E:4F:EC:42:57:05:30:F1:6F:9E:70:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p5u6KAWpiJVOT-xCVwUw8W-ecJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/KhTpbm0qdWWXlHWQfvnUfe9pR0E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.171.61.0-81.171.63.255
81.171.66.0/24
81.171.68.0/24
81.171.70.0/23
81.171.105.0-81.171.106.255
81.171.116.0/24
IPv6:
2001:4de0:200::/40
2001:4de0:400::/38
2001:4de0:1000::/48
2001:4de0:2000::/38
2001:4de0:3000::/39
2001:4de0:4000::/39
2001:4de0:4300::/40
2001:4de0:5010::/48
2001:4de0:6000::/40
2001:4de0:6102::/48
2001:4de0:6200::/39
2001:4de0:7001::-2001:4de0:7003:ffff:ffff:ffff:ffff:ffff
2001:4de0:ac13::/48
Signature Algorithm: sha256WithRSAEncryption
8e:f3:09:68:18:5f:93:25:7a:52:1a:67:e2:08:46:dc:a7:a7:
e2:d8:ff:d0:e6:4d:0e:ae:8b:03:15:56:b9:91:b3:e3:80:9e:
2c:a5:c3:0b:07:35:96:83:1f:fb:09:44:49:a2:b6:41:dd:ff:
5a:ca:b5:d8:38:4e:2f:b2:95:d8:51:0b:52:35:32:c6:55:18:
23:b3:d9:0c:de:c7:de:a8:c3:92:d9:b6:3d:2c:e2:a0:d7:56:
38:4d:75:c0:52:84:8b:ad:5a:d6:51:36:0f:9c:7d:d5:1c:84:
a6:1e:e3:b9:e3:9b:c1:83:c8:bf:d9:1e:7a:f7:85:11:10:d4:
af:2e:36:b8:0d:11:b2:df:b1:8f:43:b0:f7:cb:45:88:f5:ee:
c7:40:1d:1a:76:3a:85:81:16:e7:65:3f:b5:5c:c1:01:bf:9d:
99:f0:52:b8:c5:f1:7a:6a:d6:d4:59:f9:f3:7d:2e:1b:f4:bb:
b2:a1:71:a8:a1:31:6c:a5:d9:8c:ae:ca:6c:fe:c3:9f:85:fd:
1e:37:25:89:85:7f:e7:1b:43:21:c5:b8:24:b5:d1:0b:c8:d0:
60:cc:73:10:12:5a:cf:b0:f3:95:13:7a:8a:20:83:bf:b7:7e:
45:e1:73:f7:44:36:05:3f:d9:60:aa:e4:2c:c3:b5:7b:6c:14:
bf:da:15:78
-----BEGIN CERTIFICATE-----
MIIFrjCCBJagAwIBAgISAYVrrs7acLRqRE3tExXZKSvPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3OWJiYTI4MDVhOTg4OTU0ZTRmZWM0MjU3MDUzMGYxNmY5
ZTcwOTMwHhcNMjMwMTAxMDQ1NDU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYTE0ZTk2ZTZkMmE3NTY1OTc5NDc1OTA3ZWY5ZDQ3ZGVmNjk0NzQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJ2CVyzeRgjXYprG6PQ6dSnqfyDD
bBAnOmCD72TZo38azX7HV6DH0n4eOxvXhyBfBDz5+YoVFon9Y/tIZZmH2/vk6PlS
xFp0hqYYOobsc2iQLFjypjzqHNwWyOR2/jQQktq6aBEraqBkmL0mQTSR41bw9YLL
yGY+cE38Rhtl1ke/Fu6mTZ2QFkt+Kb/kJwUTdz+Rrbv4xZxe6n5eIAaAUG8rL0Ld
UBVtvKSZHkNksFbBWnUSFfXqWGK1t9uxCkZR6C+8LaZGtx6ql8YMKNO5PZpgI6uq
F09S2LIb33XvoCJ3nzD3qrXJqH0sfg2YVa8GlH/x9xk9rfZv44O3ULPyAQIDAQAB
o4ICujCCArYwHQYDVR0OBBYEFCoU6W5tKnVll5R1kH751H3vaUdBMB8GA1UdIwQY
MBaAFKebuigFqYiVTk/sQlcFMPFvnnCTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDV1NktBV3BpSlZPVC14Q1Z3VXc4Vy1lY0pNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9kMTQwZmItMDNhZS00NWQ5LThkZGMt
ZTFlZDlkZDJhMDJhLzEvS2hUcGJtMHFkV1dYbEhXUWZ2blVmZTlwUjBFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy9kMTQwZmItMDNhZS00NWQ5LThkZGMtZTFlZDlkZDJhMDJh
LzEvcDV1NktBV3BpSlZPVC14Q1Z3VXc4Vy1lY0pNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHPBggrBgEFBQcBBwEB/wSBvzCBvDA6BAIAATA0MAwDBABR
qz0DBAZRqwADBABRq0IDBABRq0QDBAFRq0YwDAMEAFGraQMEAFGragMEAFGrdDB+
BAIAAjB4AwYAIAFN4AIDBgIgAU3gBAMHACABTeAQAAMGAiABTeAgAwYBIAFN4DAD
BgEgAU3gQAMGACABTeBDAwcAIAFN4FAQAwYAIAFN4GADBwAgAU3gYQIDBgEgAU3g
YjASAwcAIAFN4HABAwcCIAFN4HAAAwcAIAFN4KwTMA0GCSqGSIb3DQEBCwUAA4IB
AQCO8wloGF+TJXpSGmfiCEbcp6fi2P/Q5k0OrosDFVa5kbPjgJ4spcMLBzWWgx/7
CURJorZB3f9ayrXYOE4vspXYUQtSNTLGVRgjs9kM3sfeqMOS2bY9LOKg11Y4TXXA
UoSLrVrWUTYPnH3VHISmHuO545vBg8i/2R5694URENSvLja4DRGy37GPQ7D3y0WI
9e7HQB0adjqFgRbnZT+1XMEBv52Z8FK4xfF6atbUWfnzfS4b9LuyoXGooTFspdmM
rsps/sOfhf0eNyWJhX/nG0MhxbgktdELyNBgzHMQElrPsPOVE3qKIIO/t35F4XP3
RDYFP9lgquQsw7V7bBS/2hV4
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:17 2024 by rpki-client on console-ams.rpki-client.org