Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/44c0ef-5da6-4ff2-b5ef-79f048bd2a7a/1/7XTLbfeSGUtk2gTT2pQs_vooBPA.roa
File: 7XTLbfeSGUtk2gTT2pQs_vooBPA.roa (raw, json)
Hash identifier: yHPixOWXYhxqudEBv30R6zVewF67s2iZI1jXtXNIFRk=
Subject key identifier: ED:74:CB:6D:F7:92:19:4B:64:DA:04:D3:DA:94:2C:FE:FA:28:04:F0
Certificate issuer: /CN=1daf46a40c246d6540d992c321b1cc3623d65995
Certificate serial: 018CC5008B65768BF359F53EC215B4420F6C
Authority key identifier: 1D:AF:46:A4:0C:24:6D:65:40:D9:92:C3:21:B1:CC:36:23:D6:59:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/44c0ef-5da6-4ff2-b5ef-79f048bd2a7a/1/7XTLbfeSGUtk2gTT2pQs_vooBPA.roa
Signing time: Mon 01 Jan 2024 12:29:56 +0000
ROA not before: Mon 01 Jan 2024 12:29:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62370
IP address blocks: 77.95.224.0/21 maxlen: 21
185.62.56.0/22 maxlen: 22
89.207.128.0/21 maxlen: 21
193.33.60.0/23 maxlen: 23
37.148.160.0/21 maxlen: 21
5.104.224.0/21 maxlen: 21
128.204.192.0/20 maxlen: 20
78.41.200.0/21 maxlen: 21
193.34.166.0/23 maxlen: 23
195.20.204.0/23 maxlen: 23
2a00:7b80::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 06 Mar 2024 12:22:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:8b:65:76:8b:f3:59:f5:3e:c2:15:b4:42:0f:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1daf46a40c246d6540d992c321b1cc3623d65995
Validity
Not Before: Jan 1 12:29:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ed74cb6df792194b64da04d3da942cfefa2804f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:80:81:15:17:24:38:ed:95:2a:af:72:56:62:
b1:8e:74:01:5a:6b:4f:67:8f:42:18:03:c8:57:21:
5e:ca:d3:bc:49:2c:5e:74:ae:b2:e0:0d:3c:27:78:
6e:d4:71:64:65:a9:91:d7:a7:d6:3a:a6:7f:51:52:
fd:7b:a2:cf:a5:79:00:78:bd:54:ed:1d:73:ae:e1:
ac:76:2f:45:81:ce:d7:bf:37:44:2e:90:70:5e:f1:
e8:7c:41:47:07:b6:53:8f:49:89:6c:56:1b:0b:20:
7f:16:99:0e:34:a9:38:a1:0a:ad:0c:6d:f8:2a:68:
8a:e8:c5:ad:de:19:56:df:6c:eb:7b:a6:33:90:bc:
84:cd:2b:28:e6:0f:d8:71:c4:bf:71:a0:25:ec:4f:
ce:11:3a:0b:f2:ca:e6:d0:29:24:85:38:ae:b6:31:
47:05:8e:f7:62:09:49:9b:39:9b:40:78:c5:bb:a3:
39:c1:83:fc:80:1f:af:ea:03:75:25:6f:fd:7a:84:
30:36:0b:13:50:6b:78:2e:4d:8e:20:04:f8:2c:20:
c2:35:65:9d:2c:34:28:22:f8:da:a1:1c:3b:1f:dd:
31:35:76:07:1b:80:f5:d7:41:ab:27:45:85:30:d1:
37:19:c6:da:67:0c:9d:f1:2f:b3:39:56:f0:e9:f6:
a9:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:74:CB:6D:F7:92:19:4B:64:DA:04:D3:DA:94:2C:FE:FA:28:04:F0
X509v3 Authority Key Identifier:
keyid:1D:AF:46:A4:0C:24:6D:65:40:D9:92:C3:21:B1:CC:36:23:D6:59:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/44c0ef-5da6-4ff2-b5ef-79f048bd2a7a/1/7XTLbfeSGUtk2gTT2pQs_vooBPA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/44c0ef-5da6-4ff2-b5ef-79f048bd2a7a/1/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.104.224.0/21
37.148.160.0/21
77.95.224.0/21
78.41.200.0/21
89.207.128.0/21
128.204.192.0/20
185.62.56.0/22
193.33.60.0/23
193.34.166.0/23
195.20.204.0/23
IPv6:
2a00:7b80::/32
Signature Algorithm: sha256WithRSAEncryption
15:37:80:4d:86:e2:a9:9b:ac:a6:c5:61:6d:7c:71:aa:91:a9:
7e:25:82:0b:a6:d8:74:82:60:42:0f:13:f8:7e:91:49:24:c9:
cd:7d:2f:56:b4:bf:83:00:97:fa:2b:cc:8f:49:95:e2:e1:05:
ab:8e:07:ad:40:f1:2b:e4:62:c2:9d:bb:0e:9e:eb:21:73:8a:
f7:da:f7:b0:b9:88:d5:ed:d1:6c:16:a9:62:06:0d:6f:65:d8:
b4:8b:5c:6e:83:11:20:bf:80:8f:c5:05:bd:7f:c4:4a:e8:f2:
ed:7e:0c:c1:1b:9d:3b:2f:00:d2:05:e4:af:38:82:63:f0:03:
f8:19:5f:b9:0f:e1:0e:27:26:1c:56:7f:12:8e:9a:b2:89:4a:
3b:cc:6c:97:d8:c5:f8:43:89:67:c2:f3:76:c5:70:39:25:ec:
ea:0d:f7:9b:0e:be:2c:e7:04:85:70:3a:d2:c9:a5:90:2d:55:
92:f8:d0:cb:a5:7e:60:44:a6:82:bc:9e:b3:27:80:f1:c0:32:
8f:14:4b:38:fb:2a:f1:7a:59:00:da:88:10:65:2f:8b:79:c9:
6c:7c:fe:83:9c:a1:0f:38:47:df:e1:88:28:a1:66:1a:14:42:
51:b4:61:13:8e:fc:27:c2:72:02:eb:94:3a:82:fe:79:6e:f6:
7f:b2:b4:3a
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgISAYzFAItldovzWfU+whW0Qg9sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkYWY0NmE0MGMyNDZkNjU0MGQ5OTJjMzIxYjFjYzM2MjNk
NjU5OTUwHhcNMjQwMTAxMTIyOTU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZDc0Y2I2ZGY3OTIxOTRiNjRkYTA0ZDNkYTk0MmNmZWZhMjgwNGYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkoCBFRckOO2VKq9yVmKxjnQBWmtP
Z49CGAPIVyFeytO8SSxedK6y4A08J3hu1HFkZamR16fWOqZ/UVL9e6LPpXkAeL1U
7R1zruGsdi9Fgc7XvzdELpBwXvHofEFHB7ZTj0mJbFYbCyB/FpkONKk4oQqtDG34
KmiK6MWt3hlW32zre6YzkLyEzSso5g/YccS/caAl7E/OEToL8srm0CkkhTiutjFH
BY73YglJmzmbQHjFu6M5wYP8gB+v6gN1JW/9eoQwNgsTUGt4Lk2OIAT4LCDCNWWd
LDQoIvjaoRw7H90xNXYHG4D110GrJ0WFMNE3GcbaZwyd8S+zOVbw6faprwIDAQAB
o4ICTjCCAkowHQYDVR0OBBYEFO10y233khlLZNoE09qULP76KATwMB8GA1UdIwQY
MBaAFB2vRqQMJG1lQNmSwyGxzDYj1lmVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGE5R3BBd2tiV1ZBMlpMREliSE1OaVBXV1pVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS80NGMwZWYtNWRhNi00ZmYyLWI1ZWYt
NzlmMDQ4YmQyYTdhLzEvN1hUTGJmZVNHVXRrMmdUVDJwUXNfdm9vQlBBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS80NGMwZWYtNWRhNi00ZmYyLWI1ZWYtNzlmMDQ4YmQyYTdh
LzEvSGE5R3BBd2tiV1ZBMlpMREliSE1OaVBXV1pVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGQGCCsGAQUFBwEHAQH/BFUwUzBCBAIAATA8AwQDBWjgAwQD
JZSgAwQDTV/gAwQDTinIAwQDWc+AAwQEgMzAAwQCuT44AwQBwSE8AwQBwSKmAwQB
wxTMMA0EAgACMAcDBQAqAHuAMA0GCSqGSIb3DQEBCwUAA4IBAQAVN4BNhuKpm6ym
xWFtfHGqkal+JYILpth0gmBCDxP4fpFJJMnNfS9WtL+DAJf6K8yPSZXi4QWrjget
QPEr5GLCnbsOnushc4r32vewuYjV7dFsFqliBg1vZdi0i1xugxEgv4CPxQW9f8RK
6PLtfgzBG507LwDSBeSvOIJj8AP4GV+5D+EOJyYcVn8SjpqyiUo7zGyX2MX4Q4ln
wvN2xXA5JezqDfebDr4s5wSFcDrSyaWQLVWS+NDLpX5gRKaCvJ6zJ4DxwDKPFEs4
+yrxelkA2ogQZS+LeclsfP6DnKEPOEff4YgooWYaFEJRtGETjvwnwnIC65Q6gv55
bvZ/srQ6
-----END CERTIFICATE-----
Generated at Wed Mar 6 16:58:51 2024 by rpki-client on console-fra.rpki-client.org