Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/6fef03-0670-41ab-a6c9-43adb605f68a/1/Uagph_o6jQosC9ReEXvZ5nZNxyw.roa
File: Uagph_o6jQosC9ReEXvZ5nZNxyw.roa (raw, json)
Hash identifier: r1Fi/HoHW3BcAIhMV6sCmaI6JCZuKhLeyGk7zI48uI8=
Subject key identifier: 51:A8:29:87:FA:3A:8D:0A:2C:0B:D4:5E:11:7B:D9:E6:76:4D:C7:2C
Certificate issuer: /CN=7a1ff702726e75b3a68f1182e47ffbcdcae515e5
Certificate serial: 018D7923A968896326FDBE48C2733675058F
Authority key identifier: 7A:1F:F7:02:72:6E:75:B3:A6:8F:11:82:E4:7F:FB:CD:CA:E5:15:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eh_3AnJudbOmjxGC5H_7zcrlFeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/6fef03-0670-41ab-a6c9-43adb605f68a/1/Uagph_o6jQosC9ReEXvZ5nZNxyw.roa
Signing time: Mon 05 Feb 2024 11:59:56 +0000
ROA not before: Mon 05 Feb 2024 11:59:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213260
IP address blocks: 46.232.144.0/21 maxlen: 21
80.67.112.0/20 maxlen: 20
80.249.32.0/20 maxlen: 20
87.238.0.0/20 maxlen: 20
87.238.16.0/21 maxlen: 21
87.238.24.0/22 maxlen: 22
87.238.28.0/22 maxlen: 22
89.249.176.0/21 maxlen: 21
Validation: Failed, certificate revoked on Fri 31 May 2024 12:55:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:79:23:a9:68:89:63:26:fd:be:48:c2:73:36:75:05:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a1ff702726e75b3a68f1182e47ffbcdcae515e5
Validity
Not Before: Feb 5 11:59:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=51a82987fa3a8d0a2c0bd45e117bd9e6764dc72c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c3:9b:db:b0:30:72:25:df:e6:bc:40:9c:93:
0d:96:07:74:1b:0a:12:8e:ac:8a:85:40:30:76:58:
6c:69:09:e8:b3:91:ca:3e:fa:1c:76:18:0e:43:5e:
da:65:c5:a0:04:af:c6:f0:f6:10:d3:d5:57:75:85:
39:99:0f:d8:f1:14:ca:3e:68:d4:fd:9d:5f:10:ed:
a6:4b:1c:f2:4d:f1:3f:f8:0f:9c:4b:30:ae:1d:b1:
a2:0e:93:3b:34:d0:17:08:6f:a0:8b:a0:17:42:d2:
5e:85:f0:9e:e0:8d:2a:4f:7a:c2:15:e1:d7:6a:0e:
d0:37:4f:fd:04:7d:b7:e5:6d:ee:8f:1e:0a:09:06:
b0:80:76:b7:c7:37:54:34:0c:e1:c0:98:a0:69:6f:
a2:98:24:17:58:00:a0:6d:bb:47:2b:c0:c2:ab:f7:
14:cd:58:b2:03:db:08:07:9c:2c:b1:f6:bc:33:bb:
b9:db:93:62:31:7a:49:12:bb:9b:1d:10:bb:97:bf:
61:76:52:8e:d9:78:70:60:c4:58:86:0a:02:84:f6:
b9:8e:ec:98:89:c6:bd:7f:5c:b8:26:36:3a:6b:d7:
8d:52:37:87:e2:03:27:37:83:a8:b3:e9:45:c1:8f:
d3:b4:2f:98:18:14:8f:cc:b5:27:03:48:7f:d9:4b:
c6:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:A8:29:87:FA:3A:8D:0A:2C:0B:D4:5E:11:7B:D9:E6:76:4D:C7:2C
X509v3 Authority Key Identifier:
keyid:7A:1F:F7:02:72:6E:75:B3:A6:8F:11:82:E4:7F:FB:CD:CA:E5:15:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eh_3AnJudbOmjxGC5H_7zcrlFeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6fef03-0670-41ab-a6c9-43adb605f68a/1/Uagph_o6jQosC9ReEXvZ5nZNxyw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6fef03-0670-41ab-a6c9-43adb605f68a/1/eh_3AnJudbOmjxGC5H_7zcrlFeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.232.144.0/21
80.67.112.0/20
80.249.32.0/20
87.238.0.0/19
89.249.176.0/21
Signature Algorithm: sha256WithRSAEncryption
39:bf:ee:08:6b:b7:99:26:b4:f6:b8:91:cd:b7:1a:22:8a:39:
2b:40:1c:ba:a7:45:94:0f:e9:35:c5:35:de:0d:76:68:7c:37:
80:93:d1:66:f9:ce:92:f7:eb:95:80:5c:2a:ef:c7:96:5a:35:
e0:0e:38:12:29:0c:a3:40:ba:72:41:7b:7c:6f:17:10:81:78:
fc:30:0c:4e:1b:8c:90:d2:24:95:52:b3:ac:e3:5c:37:bc:86:
ed:3e:76:2c:ae:0d:27:14:e8:cc:35:9e:f8:84:23:c7:98:c2:
d8:c2:6a:dc:de:bb:72:91:4f:44:88:fa:1b:ac:0e:a8:72:d9:
6f:27:54:12:44:1c:ef:e3:a2:5e:94:50:f1:d4:c3:65:2d:89:
00:ab:1e:4b:d5:9b:ce:5e:76:52:94:88:c9:31:49:0d:4f:9e:
67:a3:4f:e2:19:bc:e4:6d:3d:59:79:b5:69:ea:64:06:28:c0:
2f:1e:7a:16:1b:11:79:ec:0c:b3:a8:8e:1a:76:a3:8a:d3:31:
99:38:38:e8:9c:1f:7e:9e:03:62:09:fe:77:f5:63:b5:6b:2e:
2a:89:b2:88:5a:bf:47:44:63:ed:22:a3:74:40:21:6f:43:6f:
22:5b:41:30:e3:4d:22:ac:57:99:cd:cd:40:41:d0:59:ac:14:
59:20:a4:d0
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAY15I6loiWMm/b5IwnM2dQWPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhMWZmNzAyNzI2ZTc1YjNhNjhmMTE4MmU0N2ZmYmNkY2Fl
NTE1ZTUwHhcNMjQwMjA1MTE1OTU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MWE4Mjk4N2ZhM2E4ZDBhMmMwYmQ0NWUxMTdiZDllNjc2NGRjNzJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8Ob27AwciXf5rxAnJMNlgd0GwoS
jqyKhUAwdlhsaQnos5HKPvocdhgOQ17aZcWgBK/G8PYQ09VXdYU5mQ/Y8RTKPmjU
/Z1fEO2mSxzyTfE/+A+cSzCuHbGiDpM7NNAXCG+gi6AXQtJehfCe4I0qT3rCFeHX
ag7QN0/9BH235W3ujx4KCQawgHa3xzdUNAzhwJigaW+imCQXWACgbbtHK8DCq/cU
zViyA9sIB5wssfa8M7u525NiMXpJErubHRC7l79hdlKO2XhwYMRYhgoChPa5juyY
ica9f1y4JjY6a9eNUjeH4gMnN4Oos+lFwY/TtC+YGBSPzLUnA0h/2UvGgwIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFFGoKYf6Oo0KLAvUXhF72eZ2TccsMB8GA1UdIwQY
MBaAFHof9wJybnWzpo8RguR/+83K5RXlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWhfM0FuSnVkYk9tanhHQzVIXzd6Y3JsRmVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC82ZmVmMDMtMDY3MC00MWFiLWE2Yzkt
NDNhZGI2MDVmNjhhLzEvVWFncGhfbzZqUW9zQzlSZUVYdlo1blpOeHl3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC82ZmVmMDMtMDY3MC00MWFiLWE2YzktNDNhZGI2MDVmNjhh
LzEvZWhfM0FuSnVkYk9tanhHQzVIXzd6Y3JsRmVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQDLuiQAwQE
UENwAwQEUPkgAwQFV+4AAwQDWfmwMA0GCSqGSIb3DQEBCwUAA4IBAQA5v+4Ia7eZ
JrT2uJHNtxoiijkrQBy6p0WUD+k1xTXeDXZofDeAk9Fm+c6S9+uVgFwq78eWWjXg
DjgSKQyjQLpyQXt8bxcQgXj8MAxOG4yQ0iSVUrOs41w3vIbtPnYsrg0nFOjMNZ74
hCPHmMLYwmrc3rtykU9EiPobrA6octlvJ1QSRBzv46JelFDx1MNlLYkAqx5L1ZvO
XnZSlIjJMUkNT55no0/iGbzkbT1ZebVp6mQGKMAvHnoWGxF57AyzqI4adqOK0zGZ
ODjonB9+ngNiCf539WO1ay4qibKIWr9HRGPtIqN0QCFvQ28iW0Ew400irFeZzc1A
QdBZrBRZIKTQ
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:28 2024 by rpki-client on console-fra.rpki-client.org