Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/6fef03-0670-41ab-a6c9-43adb605f68a/1/2lu34Wzj9dPGMiNaeupZoAUi1-o.roa
File: 2lu34Wzj9dPGMiNaeupZoAUi1-o.roa (raw, json)
Hash identifier: DgRwyrFhZzelHlfSBCPP3QvQD7vxpuvOl79kK+4ZsSs=
Subject key identifier: DA:5B:B7:E1:6C:E3:F5:D3:C6:32:23:5A:7A:EA:59:A0:05:22:D7:EA
Certificate issuer: /CN=7a1ff702726e75b3a68f1182e47ffbcdcae515e5
Certificate serial: 018CC87009FDEF46DFD48C9F52F264930D12
Authority key identifier: 7A:1F:F7:02:72:6E:75:B3:A6:8F:11:82:E4:7F:FB:CD:CA:E5:15:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eh_3AnJudbOmjxGC5H_7zcrlFeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/6fef03-0670-41ab-a6c9-43adb605f68a/1/2lu34Wzj9dPGMiNaeupZoAUi1-o.roa
Signing time: Tue 02 Jan 2024 04:30:34 +0000
ROA not before: Tue 02 Jan 2024 04:30:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213260
IP address blocks: 87.238.28.0/22 maxlen: 22
80.249.32.0/20 maxlen: 20
89.249.176.0/21 maxlen: 21
80.67.112.0/21 maxlen: 21
80.67.120.0/22 maxlen: 22
87.238.0.0/20 maxlen: 20
46.232.144.0/21 maxlen: 21
87.238.16.0/21 maxlen: 21
87.238.24.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 05 Feb 2024 11:59:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:70:09:fd:ef:46:df:d4:8c:9f:52:f2:64:93:0d:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a1ff702726e75b3a68f1182e47ffbcdcae515e5
Validity
Not Before: Jan 2 04:30:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=da5bb7e16ce3f5d3c632235a7aea59a00522d7ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:75:1c:03:67:62:dc:e9:04:30:14:a0:41:cb:
7d:71:3c:0e:9c:93:39:13:9f:4a:63:c4:b3:30:b4:
e1:5a:f8:61:0d:5c:79:43:1f:0b:db:fd:8e:bf:76:
28:ba:01:5e:ba:b6:cf:5a:e2:84:1b:ca:16:ee:24:
88:5a:c1:ef:5f:05:87:38:e5:6d:89:14:5d:a7:e1:
78:ee:82:c3:0a:cd:13:98:4c:5f:db:07:78:05:29:
39:5f:ba:01:34:40:b4:8d:65:e4:43:6a:c0:2c:52:
40:4a:cf:6c:5e:b3:7f:ce:ba:bf:f9:cc:bf:b9:dd:
0e:fe:3a:26:32:e9:31:8c:32:c6:8e:e9:ba:f3:41:
5a:52:5b:f2:6f:0c:8a:79:dd:42:b3:19:a6:4b:e1:
5a:bb:ed:ec:c9:72:c7:9b:92:47:85:07:c7:de:28:
a1:53:36:7c:6c:fe:77:c1:06:bb:70:0a:22:14:2c:
60:99:e2:5c:89:bb:19:37:59:7e:13:0b:05:f4:37:
96:12:8b:34:6a:86:63:cc:cc:00:cf:6f:b4:ce:79:
09:1c:01:05:dc:6c:11:a0:a0:87:bb:d0:b7:9b:bd:
87:96:cb:52:03:9e:91:5e:33:9e:ec:72:9c:5e:9a:
90:cc:9c:8a:4c:d4:9b:81:f9:6a:ed:9a:da:37:04:
d4:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:5B:B7:E1:6C:E3:F5:D3:C6:32:23:5A:7A:EA:59:A0:05:22:D7:EA
X509v3 Authority Key Identifier:
keyid:7A:1F:F7:02:72:6E:75:B3:A6:8F:11:82:E4:7F:FB:CD:CA:E5:15:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eh_3AnJudbOmjxGC5H_7zcrlFeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6fef03-0670-41ab-a6c9-43adb605f68a/1/2lu34Wzj9dPGMiNaeupZoAUi1-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6fef03-0670-41ab-a6c9-43adb605f68a/1/eh_3AnJudbOmjxGC5H_7zcrlFeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.232.144.0/21
80.67.112.0-80.67.123.255
80.249.32.0/20
87.238.0.0/19
89.249.176.0/21
Signature Algorithm: sha256WithRSAEncryption
d9:f2:f8:6e:d7:ab:f7:29:93:0f:74:fa:62:ea:e0:ee:34:73:
a7:03:06:f5:6e:9d:07:14:ea:29:93:2f:d6:c7:cf:27:e2:1e:
af:d4:51:8c:9e:80:90:0b:b5:9d:04:73:1c:df:c2:5e:b7:96:
45:f0:60:cb:b3:1b:43:1b:d8:84:8e:08:38:72:0d:aa:36:a7:
7d:b9:8b:1d:c9:2f:f5:99:e2:b3:13:a9:3b:06:9b:f9:02:4a:
f4:e3:9b:2a:aa:33:47:32:15:a6:6f:f5:4b:34:f6:81:7c:e6:
2a:4c:c4:3b:2a:f6:99:81:d4:ef:65:68:4c:15:32:5c:9c:92:
6e:34:6b:47:df:cf:40:b6:fb:c1:50:e6:65:35:a3:bd:15:0d:
56:27:96:2b:90:9a:09:7c:4a:99:68:96:e8:9e:43:e8:8d:60:
8a:25:b1:8f:ff:ed:b3:f3:17:95:b4:aa:3c:2e:8a:f1:6d:b2:
04:af:dc:9e:91:1f:48:02:80:b0:7d:4d:86:01:83:36:02:21:
f1:7c:a2:9b:14:f7:b6:af:5c:2a:ab:67:f5:fb:41:d0:f4:24:
ef:7a:fc:d3:f9:a0:09:fa:bf:48:f0:76:f5:cc:58:20:e9:ae:
92:f9:30:c4:24:50:74:a1:d4:68:93:30:06:81:26:9f:07:6c:
86:7f:e2:26
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAYzIcAn970bf1IyfUvJkkw0SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhMWZmNzAyNzI2ZTc1YjNhNjhmMTE4MmU0N2ZmYmNkY2Fl
NTE1ZTUwHhcNMjQwMTAyMDQzMDM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYTViYjdlMTZjZTNmNWQzYzYzMjIzNWE3YWVhNTlhMDA1MjJkN2VhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0HUcA2di3OkEMBSgQct9cTwOnJM5
E59KY8SzMLThWvhhDVx5Qx8L2/2Ov3YougFeurbPWuKEG8oW7iSIWsHvXwWHOOVt
iRRdp+F47oLDCs0TmExf2wd4BSk5X7oBNEC0jWXkQ2rALFJASs9sXrN/zrq/+cy/
ud0O/jomMukxjDLGjum680FaUlvybwyKed1CsxmmS+Fau+3syXLHm5JHhQfH3iih
UzZ8bP53wQa7cAoiFCxgmeJcibsZN1l+EwsF9DeWEos0aoZjzMwAz2+0znkJHAEF
3GwRoKCHu9C3m72HlstSA56RXjOe7HKcXpqQzJyKTNSbgflq7ZraNwTUiwIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFNpbt+Fs4/XTxjIjWnrqWaAFItfqMB8GA1UdIwQY
MBaAFHof9wJybnWzpo8RguR/+83K5RXlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWhfM0FuSnVkYk9tanhHQzVIXzd6Y3JsRmVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC82ZmVmMDMtMDY3MC00MWFiLWE2Yzkt
NDNhZGI2MDVmNjhhLzEvMmx1MzRXemo5ZFBHTWlOYWV1cFpvQVVpMS1vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC82ZmVmMDMtMDY3MC00MWFiLWE2YzktNDNhZGI2MDVmNjhh
LzEvZWhfM0FuSnVkYk9tanhHQzVIXzd6Y3JsRmVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQDLuiQMAwD
BARQQ3ADBAJQQ3gDBARQ+SADBAVX7gADBANZ+bAwDQYJKoZIhvcNAQELBQADggEB
ANny+G7Xq/cpkw90+mLq4O40c6cDBvVunQcU6imTL9bHzyfiHq/UUYyegJALtZ0E
cxzfwl63lkXwYMuzG0Mb2ISOCDhyDao2p325ix3JL/WZ4rMTqTsGm/kCSvTjmyqq
M0cyFaZv9Us09oF85ipMxDsq9pmB1O9laEwVMlyckm40a0ffz0C2+8FQ5mU1o70V
DVYnliuQmgl8SploluieQ+iNYIolsY//7bPzF5W0qjwuivFtsgSv3J6RH0gCgLB9
TYYBgzYCIfF8opsU97avXCqrZ/X7QdD0JO96/NP5oAn6v0jwdvXMWCDprpL5MMQk
UHSh1GiTMAaBJp8HbIZ/4iY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:28 2024 by rpki-client on console-fra.rpki-client.org