Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/2d5bc8-5d93-4b0a-a8b6-f8d65c983744/1/6AFWu067A3gdRkm0LJjCYpsNrO8.roa
File: 6AFWu067A3gdRkm0LJjCYpsNrO8.roa (raw, json)
Hash identifier: 1QXeBI2k3C4dNJmh1V6ZbVZ6puRXiyI5hYThWjDnjC0=
Subject key identifier: E8:01:56:BB:4E:BB:03:78:1D:46:49:B4:2C:98:C2:62:9B:0D:AC:EF
Certificate issuer: /CN=de2e917315f0a878b21fc139d49a821aaddc3c97
Certificate serial: 01856D0ADDF31C6327336BAB63B9343494C8
Authority key identifier: DE:2E:91:73:15:F0:A8:78:B2:1F:C1:39:D4:9A:82:1A:AD:DC:3C:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3i6RcxXwqHiyH8E51JqCGq3cPJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/2d5bc8-5d93-4b0a-a8b6-f8d65c983744/1/6AFWu067A3gdRkm0LJjCYpsNrO8.roa
Signing time: Sun 01 Jan 2023 11:15:06 +0000
ROA not before: Sun 01 Jan 2023 11:15:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39351
IP address blocks: 45.129.57.0/24 maxlen: 24
45.129.56.0/24 maxlen: 24
185.209.196.0/24 maxlen: 24
185.209.197.0/24 maxlen: 24
193.32.249.0/24 maxlen: 24
185.65.132.0/24 maxlen: 24
185.65.134.0/24 maxlen: 24
185.65.133.0/24 maxlen: 24
185.65.135.0/24 maxlen: 24
141.98.252.0/24 maxlen: 24
141.98.255.0/24 maxlen: 24
141.98.254.0/24 maxlen: 24
45.83.220.0/24 maxlen: 24
45.83.221.0/24 maxlen: 24
45.83.223.0/24 maxlen: 24
45.83.222.0/23 maxlen: 24
45.83.222.0/24 maxlen: 24
185.213.152.0/24 maxlen: 24
185.213.153.0/24 maxlen: 24
185.213.155.0/24 maxlen: 24
185.213.154.0/24 maxlen: 24
193.138.216.0/22 maxlen: 22
193.32.127.0/24 maxlen: 24
193.32.126.0/24 maxlen: 24
185.195.232.0/24 maxlen: 24
185.195.233.0/24 maxlen: 24
2a03:1b20:8::/48 maxlen: 48
2a03:1b20:3::/48 maxlen: 48
2a03:1b20:6::/48 maxlen: 48
2a03:1b20:1::/48 maxlen: 48
2a03:1b20:a::/48 maxlen: 48
2a03:1b20:5::/48 maxlen: 48
2a03:1b20:beef::/48 maxlen: 48
2a03:1b20:2::/48 maxlen: 48
2a03:1b20:7::/48 maxlen: 48
2a03:1b20:9::/48 maxlen: 48
2a03:1b20:4::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 03 Mar 2023 11:40:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:0a:dd:f3:1c:63:27:33:6b:ab:63:b9:34:34:94:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de2e917315f0a878b21fc139d49a821aaddc3c97
Validity
Not Before: Jan 1 11:15:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e80156bb4ebb03781d4649b42c98c2629b0dacef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:07:fc:24:c8:8b:71:a5:8d:52:34:2d:9a:8d:
b0:d2:22:95:72:ad:9c:ad:b9:4b:58:df:71:f8:6d:
fe:56:f3:9e:bb:e6:7f:77:1c:25:99:22:66:32:8f:
f5:39:dd:51:93:e4:17:27:9c:bf:65:c3:ac:51:f7:
af:94:b9:5a:af:34:82:54:f0:8d:b2:99:ae:e3:da:
fc:44:0b:6e:2f:b4:f6:23:54:b7:79:82:aa:06:34:
6d:45:4d:fd:52:f1:0c:07:d6:3b:13:d2:7c:01:1d:
b8:4d:fa:89:b7:5f:33:c8:ae:11:b4:3e:5e:37:9d:
b8:7d:36:39:8c:d9:71:d3:98:67:02:b2:92:92:a1:
64:4a:02:a5:14:0f:25:83:d9:84:54:df:68:c2:ab:
04:c2:f2:31:90:7b:c5:2e:6b:3f:54:8a:c2:ef:8c:
1b:86:47:05:dd:2e:f5:8b:cf:15:90:31:74:3c:cf:
0b:99:01:59:b6:90:dc:6c:6a:40:88:47:9a:66:65:
5b:9f:e0:5e:43:ff:20:5e:eb:a0:b4:8a:eb:e6:78:
b9:d1:ae:c6:78:5d:ef:b2:be:62:f3:71:2f:09:86:
0c:7a:11:07:63:9d:81:f6:a2:06:66:c7:7b:58:7a:
4f:2f:c6:30:50:1b:d2:51:c2:4d:ac:b0:4a:21:1e:
4c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:01:56:BB:4E:BB:03:78:1D:46:49:B4:2C:98:C2:62:9B:0D:AC:EF
X509v3 Authority Key Identifier:
keyid:DE:2E:91:73:15:F0:A8:78:B2:1F:C1:39:D4:9A:82:1A:AD:DC:3C:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3i6RcxXwqHiyH8E51JqCGq3cPJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2d5bc8-5d93-4b0a-a8b6-f8d65c983744/1/6AFWu067A3gdRkm0LJjCYpsNrO8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2d5bc8-5d93-4b0a-a8b6-f8d65c983744/1/3i6RcxXwqHiyH8E51JqCGq3cPJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.220.0/22
45.129.56.0/23
141.98.252.0/24
141.98.254.0/23
185.65.132.0/22
185.195.232.0/23
185.209.196.0/23
185.213.152.0/22
193.32.126.0/23
193.32.249.0/24
193.138.216.0/22
IPv6:
2a03:1b20:1::-2a03:1b20:a:ffff:ffff:ffff:ffff:ffff
2a03:1b20:beef::/48
Signature Algorithm: sha256WithRSAEncryption
01:85:36:df:d8:c8:3d:dd:3d:6e:be:1b:dd:eb:58:51:3f:28:
d1:00:30:8f:c6:15:da:a6:cf:d4:d9:3d:5c:b3:ac:8d:66:c1:
58:98:4c:43:d3:db:c0:b4:53:00:eb:f8:2f:0c:e9:b8:20:1a:
fc:7c:ce:92:e2:34:15:a3:c3:b5:25:7f:61:74:94:ad:32:dc:
5a:35:64:7a:d1:a2:94:90:a4:4b:b3:10:0c:c7:cf:8a:03:dc:
11:ea:3b:a2:b9:40:e2:c1:d6:9d:34:a1:e2:6f:f0:d1:4f:02:
fc:5c:31:24:11:16:d4:f5:f0:ba:f3:ef:e1:0a:75:6e:48:10:
79:ce:fe:69:22:fe:4d:28:8c:ca:38:d3:4d:f9:a7:8f:49:a3:
9f:12:65:c8:c2:64:67:c1:02:1b:ee:46:57:d5:24:06:00:26:
b6:18:e7:59:8a:85:54:56:90:6b:9f:c5:fb:6d:0c:96:8e:c0:
d1:37:e6:0c:2b:fe:22:d7:e6:5f:a5:6a:ff:7b:56:07:48:cd:
47:5b:5b:c6:c3:43:63:5e:4c:13:69:27:35:25:29:ce:a5:8c:
59:33:0c:b5:52:5b:1c:fe:45:bf:cf:57:09:7b:54:18:7a:0b:
70:fd:ab:af:a8:1c:1c:64:77:1a:14:c0:00:94:be:a0:f6:09:
b8:94:33:b7
-----BEGIN CERTIFICATE-----
MIIFXzCCBEegAwIBAgISAYVtCt3zHGMnM2urY7k0NJTIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlMmU5MTczMTVmMGE4NzhiMjFmYzEzOWQ0OWE4MjFhYWRk
YzNjOTcwHhcNMjMwMTAxMTExNTA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlODAxNTZiYjRlYmIwMzc4MWQ0NjQ5YjQyYzk4YzI2MjliMGRhY2VmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgf8JMiLcaWNUjQtmo2w0iKVcq2c
rblLWN9x+G3+VvOeu+Z/dxwlmSJmMo/1Od1Rk+QXJ5y/ZcOsUfevlLlarzSCVPCN
spmu49r8RAtuL7T2I1S3eYKqBjRtRU39UvEMB9Y7E9J8AR24TfqJt18zyK4RtD5e
N524fTY5jNlx05hnArKSkqFkSgKlFA8lg9mEVN9owqsEwvIxkHvFLms/VIrC74wb
hkcF3S71i88VkDF0PM8LmQFZtpDcbGpAiEeaZmVbn+BeQ/8gXuugtIrr5ni50a7G
eF3vsr5i83EvCYYMehEHY52B9qIGZsd7WHpPL8YwUBvSUcJNrLBKIR5MbwIDAQAB
o4ICazCCAmcwHQYDVR0OBBYEFOgBVrtOuwN4HUZJtCyYwmKbDazvMB8GA1UdIwQY
MBaAFN4ukXMV8Kh4sh/BOdSaghqt3DyXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2k2UmN4WHdxSGl5SDhFNTFKcUNHcTNjUEpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8yZDViYzgtNWQ5My00YjBhLWE4YjYt
ZjhkNjVjOTgzNzQ0LzEvNkFGV3UwNjdBM2dkUmttMExKakNZcHNOck84LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy8yZDViYzgtNWQ5My00YjBhLWE4YjYtZjhkNjVjOTgzNzQ0
LzEvM2k2UmN4WHdxSGl5SDhFNTFKcUNHcTNjUEpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGABggrBgEFBQcBBwEB/wRxMG8wSAQCAAEwQgMEAi1T3AME
AS2BOAMEAI1i/AMEAY1i/gMEArlBhAMEAbnD6AMEAbnRxAMEArnVmAMEAcEgfgME
AMEg+QMEAsGK2DAjBAIAAjAdMBIDBwAqAxsgAAEDBwAqAxsgAAoDBwAqAxsgvu8w
DQYJKoZIhvcNAQELBQADggEBAAGFNt/YyD3dPW6+G93rWFE/KNEAMI/GFdqmz9TZ
PVyzrI1mwViYTEPT28C0UwDr+C8M6bggGvx8zpLiNBWjw7Ulf2F0lK0y3Fo1ZHrR
opSQpEuzEAzHz4oD3BHqO6K5QOLB1p00oeJv8NFPAvxcMSQRFtT18Lrz7+EKdW5I
EHnO/mki/k0ojMo40035p49Jo58SZcjCZGfBAhvuRlfVJAYAJrYY51mKhVRWkGuf
xfttDJaOwNE35gwr/iLX5l+lav97VgdIzUdbW8bDQ2NeTBNpJzUlKc6ljFkzDLVS
Wxz+Rb/PVwl7VBh6C3D9q6+oHBxkdxoUwACUvqD2CbiUM7c=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:20 2024 by rpki-client on console-fra.rpki-client.org