Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/Ni3pNq_eScmB6n2paU4Da2BRsBM.roa
File: Ni3pNq_eScmB6n2paU4Da2BRsBM.roa (raw, json)
Hash identifier: tUKDtcJbFH7rs33+zDQ1LR8eqxJ97YhNnKR1sHQlICc=
Subject key identifier: 36:2D:E9:36:AF:DE:49:C9:81:EA:7D:A9:69:4E:03:6B:60:51:B0:13
Certificate issuer: /CN=ca1c7571596e444aa32371cbab724d46d3c3c52c
Certificate serial: 01918F226899D5D8B99E66FD362E9CBB5141
Authority key identifier: CA:1C:75:71:59:6E:44:4A:A3:23:71:CB:AB:72:4D:46:D3:C3:C5:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yhx1cVluREqjI3HLq3JNRtPDxSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/Ni3pNq_eScmB6n2paU4Da2BRsBM.roa
Signing time: Mon 26 Aug 2024 14:41:22 +0000
ROA not before: Mon 26 Aug 2024 14:41:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210644
IP address blocks: 79.137.194.0/23 maxlen: 23
79.137.196.0/22 maxlen: 22
79.137.202.0/23 maxlen: 23
79.137.204.0/23 maxlen: 23
79.137.206.0/24 maxlen: 24
79.137.207.0/24 maxlen: 24
79.137.248.0/24 maxlen: 24
85.192.40.0/23 maxlen: 23
85.192.42.0/24 maxlen: 24
85.192.56.0/24 maxlen: 24
85.192.60.0/24 maxlen: 24
85.192.61.0/24 maxlen: 24
85.192.63.0/24 maxlen: 24
89.208.96.0/24 maxlen: 24
89.208.97.0/24 maxlen: 24
89.208.103.0/24 maxlen: 24
89.208.104.0/22 maxlen: 22
185.125.100.0/24 maxlen: 24
185.125.101.0/24 maxlen: 24
185.125.103.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 02 Sep 2024 10:23:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:8f:22:68:99:d5:d8:b9:9e:66:fd:36:2e:9c:bb:51:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca1c7571596e444aa32371cbab724d46d3c3c52c
Validity
Not Before: Aug 26 14:41:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=362de936afde49c981ea7da9694e036b6051b013
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f5:19:1a:df:90:b6:61:ea:0f:5f:a6:30:4b:
8c:b7:dd:84:ee:5c:23:35:d4:13:0e:e1:b2:c8:8c:
2a:f2:61:f2:e1:ce:bf:85:27:00:b7:b6:26:73:f6:
fc:92:80:c4:0e:bd:8e:4b:fc:74:75:03:50:46:9a:
94:03:1b:9f:47:3d:64:79:d2:31:68:29:e6:4c:40:
0e:02:65:53:89:f8:d8:83:3e:9d:bb:48:bb:e4:f5:
a6:e1:0a:b0:b2:18:95:0c:a9:d2:1d:92:ff:67:dc:
2e:a7:87:72:e6:b6:32:9a:99:18:d7:a3:0d:be:fb:
67:53:33:e5:e4:d6:1a:7d:f9:5b:15:5e:d5:51:70:
87:d1:f9:f1:64:1e:6c:19:ed:69:4b:3b:6b:3f:83:
06:a1:da:fd:5d:18:6c:6a:cf:a8:0e:71:1f:83:55:
e5:50:c0:57:26:b7:f5:19:43:d6:ac:ea:fc:3d:e7:
88:6c:8e:e1:4c:bb:60:dc:74:54:e4:c8:f9:f5:9b:
4a:6d:32:72:0d:70:e4:a2:df:ee:58:41:32:cd:cb:
fe:1a:55:bb:ed:49:db:a1:25:55:a8:a1:df:2e:92:
b6:84:4f:59:b6:d0:a7:23:11:c9:a6:a2:21:b4:df:
6b:4c:19:66:2c:e1:8e:5d:92:31:eb:0e:5d:07:f3:
7c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:2D:E9:36:AF:DE:49:C9:81:EA:7D:A9:69:4E:03:6B:60:51:B0:13
X509v3 Authority Key Identifier:
keyid:CA:1C:75:71:59:6E:44:4A:A3:23:71:CB:AB:72:4D:46:D3:C3:C5:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yhx1cVluREqjI3HLq3JNRtPDxSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/Ni3pNq_eScmB6n2paU4Da2BRsBM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.137.194.0-79.137.199.255
79.137.202.0-79.137.207.255
79.137.248.0/24
85.192.40.0-85.192.42.255
85.192.56.0/24
85.192.60.0/23
85.192.63.0/24
89.208.96.0/23
89.208.103.0-89.208.107.255
185.125.100.0/23
185.125.103.0/24
Signature Algorithm: sha256WithRSAEncryption
d5:0b:a0:db:51:7d:6c:27:06:11:c4:d3:63:c4:43:dd:7c:0f:
df:dd:b6:a5:e2:b5:41:97:c1:35:f5:5d:46:da:0b:0a:96:7e:
d7:99:04:87:4c:0e:a0:39:5c:92:3c:e8:dc:47:86:6a:52:2d:
ef:79:a7:f1:e9:0c:02:90:2c:cc:1d:ba:50:ca:03:f7:90:73:
46:8c:3b:ec:8f:12:ea:73:d0:d5:46:63:6e:4b:ba:4c:90:5e:
82:7d:ba:2e:45:72:14:56:f9:ff:9d:dd:61:46:70:15:fe:d7:
91:dd:59:73:b2:06:9b:b8:0d:99:6e:c3:48:d9:9b:83:02:fe:
21:16:ea:df:d3:c2:55:7d:5b:18:b1:59:9e:cb:be:5b:1d:81:
36:76:d8:c3:99:b4:63:03:6a:3f:f0:96:1a:1d:45:f3:31:1c:
53:2a:a1:63:21:5e:21:bd:f8:87:4d:09:12:7b:cb:93:97:17:
e6:24:b2:12:b8:c2:50:77:da:65:a8:07:cb:52:18:48:63:49:
b0:b6:7a:df:53:5e:5f:0c:29:72:f8:bd:88:f5:dc:4f:f8:24:
a1:ce:f9:5c:62:3d:83:4d:dd:0e:10:90:b9:6d:24:02:ee:c6:
dd:74:83:f3:d3:96:5c:92:fd:6c:7d:eb:6d:ca:e7:15:de:56:
0d:e8:61:3b
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgISAZGPImiZ1di5nmb9Ni6cu1FBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhMWM3NTcxNTk2ZTQ0NGFhMzIzNzFjYmFiNzI0ZDQ2ZDNj
M2M1MmMwHhcNMjQwODI2MTQ0MTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNjJkZTkzNmFmZGU0OWM5ODFlYTdkYTk2OTRlMDM2YjYwNTFiMDEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0PUZGt+QtmHqD1+mMEuMt92E7lwj
NdQTDuGyyIwq8mHy4c6/hScAt7Ymc/b8koDEDr2OS/x0dQNQRpqUAxufRz1kedIx
aCnmTEAOAmVTifjYgz6du0i75PWm4QqwshiVDKnSHZL/Z9wup4dy5rYympkY16MN
vvtnUzPl5NYafflbFV7VUXCH0fnxZB5sGe1pSztrP4MGodr9XRhsas+oDnEfg1Xl
UMBXJrf1GUPWrOr8PeeIbI7hTLtg3HRU5Mj59ZtKbTJyDXDkot/uWEEyzcv+GlW7
7UnboSVVqKHfLpK2hE9ZttCnIxHJpqIhtN9rTBlmLOGOXZIx6w5dB/N8xQIDAQAB
o4ICZTCCAmEwHQYDVR0OBBYEFDYt6Tav3knJgep9qWlOA2tgUbATMB8GA1UdIwQY
MBaAFMocdXFZbkRKoyNxy6tyTUbTw8UsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWh4MWNWbHVSRXFqSTNITHEzSk5SdFBEeFN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8zMzYyYzYtYTAzYS00ZjlmLWEwOTEt
Yjc2MmMwMTc1ZjI3LzEvTmkzcE5xX2VTY21CNm4ycGFVNERhMkJSc0JNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS8zMzYyYzYtYTAzYS00ZjlmLWEwOTEtYjc2MmMwMTc1ZjI3
LzEveWh4MWNWbHVSRXFqSTNITHEzSk5SdFBEeFN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHsGCCsGAQUFBwEHAQH/BGwwajBoBAIAATBiMAwDBAFPicID
BANPicAwDAMEAU+JygMEBE+JwAMEAE+J+DAMAwQDVcAoAwQAVcAqAwQAVcA4AwQB
VcA8AwQAVcA/AwQBWdBgMAwDBABZ0GcDBAJZ0GgDBAG5fWQDBAC5fWcwDQYJKoZI
hvcNAQELBQADggEBANULoNtRfWwnBhHE02PEQ918D9/dtqXitUGXwTX1XUbaCwqW
fteZBIdMDqA5XJI86NxHhmpSLe95p/HpDAKQLMwdulDKA/eQc0aMO+yPEupz0NVG
Y25LukyQXoJ9ui5FchRW+f+d3WFGcBX+15HdWXOyBpu4DZluw0jZm4MC/iEW6t/T
wlV9WxixWZ7LvlsdgTZ22MOZtGMDaj/wlhodRfMxHFMqoWMhXiG9+IdNCRJ7y5OX
F+YkshK4wlB32mWoB8tSGEhjSbC2et9TXl8MKXL4vYj13E/4JKHO+VxiPYNN3Q4Q
kLltJALuxt10g/PTllyS/Wx9623K5xXeVg3oYTs=
-----END CERTIFICATE-----
Generated at Mon Sep 2 12:55:53 2024 by rpki-client on console-fra.rpki-client.org