Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/dKbxlOmsWGzLro9QYmiDOGiXvLA.roa
File: dKbxlOmsWGzLro9QYmiDOGiXvLA.roa (raw, json)
Hash identifier: CrXpAfGCbwvAWSAQGFKbLElZvxiksDEx09fDLaZ1+zs=
Subject key identifier: 74:A6:F1:94:E9:AC:58:6C:CB:AE:8F:50:62:68:83:38:68:97:BC:B0
Certificate issuer: /CN=9f26ac9eeb3a2cfa2f6ca3f413efb9cdffe9724e
Certificate serial: 018F5294D5228F0098512FDBDA4B06B007C0
Authority key identifier: 9F:26:AC:9E:EB:3A:2C:FA:2F:6C:A3:F4:13:EF:B9:CD:FF:E9:72:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nyasnus6LPovbKP0E--5zf_pck4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/dKbxlOmsWGzLro9QYmiDOGiXvLA.roa
Signing time: Tue 07 May 2024 10:23:56 +0000
ROA not before: Tue 07 May 2024 10:23:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43915
IP address blocks: 45.66.36.0/22 maxlen: 22
62.169.148.0/23 maxlen: 23
79.135.122.0/23 maxlen: 24
87.117.64.0/22 maxlen: 22
87.117.68.0/23 maxlen: 23
91.239.57.0/24 maxlen: 24
94.154.184.0/22 maxlen: 24
109.224.224.0/22 maxlen: 24
109.224.224.0/23 maxlen: 23
109.224.226.0/23 maxlen: 24
109.224.234.0/23 maxlen: 24
109.224.240.0/23 maxlen: 24
144.178.104.0/23 maxlen: 23
144.178.118.0/23 maxlen: 23
144.178.252.0/23 maxlen: 23
147.189.156.0/22 maxlen: 24
147.189.214.0/24 maxlen: 24
176.116.116.0/22 maxlen: 22
178.248.128.0/21 maxlen: 21
185.23.254.0/23 maxlen: 24
185.147.184.0/22 maxlen: 22
185.161.4.0/22 maxlen: 22
185.231.136.0/21 maxlen: 21
193.35.146.0/23 maxlen: 23
194.105.134.0/23 maxlen: 24
194.145.242.0/23 maxlen: 24
194.146.160.0/22 maxlen: 24
195.184.250.0/23 maxlen: 23
195.206.172.0/22 maxlen: 24
212.59.72.0/21 maxlen: 24
212.108.90.0/23 maxlen: 23
213.225.224.0/22 maxlen: 24
217.14.184.0/21 maxlen: 21
217.20.244.0/22 maxlen: 24
2a07:5940::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 29 May 2024 09:52:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:52:94:d5:22:8f:00:98:51:2f:db:da:4b:06:b0:07:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f26ac9eeb3a2cfa2f6ca3f413efb9cdffe9724e
Validity
Not Before: May 7 10:23:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=74a6f194e9ac586ccbae8f50626883386897bcb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2d:1c:9e:c0:b0:0e:a5:a5:aa:b6:69:2e:67:
3a:16:4f:c7:f2:a2:80:bb:5a:23:60:43:d5:a0:0e:
db:68:da:d5:bd:27:b4:5c:d6:59:89:4a:67:5b:0a:
cc:c8:fe:f0:20:aa:cf:df:14:df:6d:24:32:a4:ff:
93:44:e1:74:0d:9f:24:46:37:dd:f5:5c:65:5b:ca:
23:3a:d0:d3:a4:8e:62:e4:bf:d2:d8:ea:43:61:6d:
41:97:65:3e:c4:ac:2b:7f:15:7a:38:f7:2b:bf:9b:
61:0f:e4:c3:3b:07:0e:a8:c5:80:c0:b1:f1:69:b1:
a2:0f:7a:01:71:b8:9b:6c:79:d4:2c:93:2e:d9:d1:
03:a2:7c:4c:5d:5d:60:ae:24:53:22:37:97:19:f8:
7e:d5:65:9b:ef:e1:52:c3:c9:30:5c:6a:e0:a9:cc:
02:4f:c9:82:f4:06:bb:90:c4:73:2e:73:90:e5:94:
ce:0f:13:92:48:2b:5a:2b:48:f6:8c:79:60:33:22:
41:23:28:e6:66:b8:99:e6:3d:ac:0a:7d:b5:c6:ab:
5c:53:7a:67:00:03:e6:76:bd:e5:76:ef:fc:cf:c8:
4c:d7:a8:45:1c:79:53:ac:e5:4c:88:bd:47:bd:ff:
da:bd:13:1b:16:84:f3:74:87:3f:69:f3:d1:81:af:
81:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:A6:F1:94:E9:AC:58:6C:CB:AE:8F:50:62:68:83:38:68:97:BC:B0
X509v3 Authority Key Identifier:
keyid:9F:26:AC:9E:EB:3A:2C:FA:2F:6C:A3:F4:13:EF:B9:CD:FF:E9:72:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyasnus6LPovbKP0E--5zf_pck4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/dKbxlOmsWGzLro9QYmiDOGiXvLA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.36.0/22
62.169.148.0/23
79.135.122.0/23
87.117.64.0-87.117.69.255
91.239.57.0/24
94.154.184.0/22
109.224.224.0/22
109.224.234.0/23
109.224.240.0/23
144.178.104.0/23
144.178.118.0/23
144.178.252.0/23
147.189.156.0/22
147.189.214.0/24
176.116.116.0/22
178.248.128.0/21
185.23.254.0/23
185.147.184.0/22
185.161.4.0/22
185.231.136.0/21
193.35.146.0/23
194.105.134.0/23
194.145.242.0/23
194.146.160.0/22
195.184.250.0/23
195.206.172.0/22
212.59.72.0/21
212.108.90.0/23
213.225.224.0/22
217.14.184.0/21
217.20.244.0/22
IPv6:
2a07:5940::/32
Signature Algorithm: sha256WithRSAEncryption
4e:2c:1e:79:a2:7e:6c:07:af:08:25:69:b1:37:dd:26:c3:5a:
82:f0:2b:e1:42:f2:e3:52:35:76:a2:af:89:bd:c1:48:83:c6:
f3:c0:1f:13:69:01:a0:bf:1b:9f:9c:60:53:ec:ed:fc:c9:25:
8f:dc:9e:0c:ff:d8:d5:94:47:bf:db:97:05:f4:f5:88:74:ff:
08:98:d8:d8:ea:9f:12:af:3e:d3:76:65:ae:3c:5d:c8:8e:8f:
54:cd:64:db:84:dc:7d:30:3a:78:a9:68:b6:bb:21:04:70:62:
6b:66:22:0d:7a:78:45:81:6a:bb:97:33:99:9a:33:18:09:36:
48:1e:58:fd:1b:53:19:81:f5:a1:84:61:08:58:63:0e:5b:15:
90:79:62:33:1e:2b:ad:9c:36:33:43:44:2d:ee:08:a0:94:03:
18:19:a7:c5:26:75:e0:8f:24:8b:1b:74:70:14:9a:d6:84:6e:
5a:ee:ff:2b:15:10:14:69:ea:43:0e:a2:d2:77:b2:43:09:93:
ac:67:20:b2:81:16:88:ba:83:91:ee:c2:3d:a4:bb:5e:8f:36:
40:73:59:05:cc:ac:62:22:d3:a0:2d:91:cf:dc:cf:c8:24:60:
d0:d3:61:b8:0e:97:b9:b6:1a:e6:b1:97:5b:f1:ce:e4:ad:06:
c7:87:03:7f
-----BEGIN CERTIFICATE-----
MIIFzTCCBLWgAwIBAgISAY9SlNUijwCYUS/b2ksGsAfAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmMjZhYzllZWIzYTJjZmEyZjZjYTNmNDEzZWZiOWNkZmZl
OTcyNGUwHhcNMjQwNTA3MTAyMzU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NGE2ZjE5NGU5YWM1ODZjY2JhZThmNTA2MjY4ODMzODY4OTdiY2IwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwC0cnsCwDqWlqrZpLmc6Fk/H8qKA
u1ojYEPVoA7baNrVvSe0XNZZiUpnWwrMyP7wIKrP3xTfbSQypP+TROF0DZ8kRjfd
9VxlW8ojOtDTpI5i5L/S2OpDYW1Bl2U+xKwrfxV6OPcrv5thD+TDOwcOqMWAwLHx
abGiD3oBcbibbHnULJMu2dEDonxMXV1griRTIjeXGfh+1WWb7+FSw8kwXGrgqcwC
T8mC9Aa7kMRzLnOQ5ZTODxOSSCtaK0j2jHlgMyJBIyjmZriZ5j2sCn21xqtcU3pn
AAPmdr3ldu/8z8hM16hFHHlTrOVMiL1Hvf/avRMbFoTzdIc/afPRga+BLwIDAQAB
o4IC2TCCAtUwHQYDVR0OBBYEFHSm8ZTprFhsy66PUGJogzhol7ywMB8GA1UdIwQY
MBaAFJ8mrJ7rOiz6L2yj9BPvuc3/6XJOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnlhc251czZMUG92YktQMEUtLTV6Zl9wY2s0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9kYzMxOGItOTI0MC00Nzc1LWE0YWIt
N2Q0MjY2Y2Y4MjJhLzEvZEtieGxPbXNXR3pMcm85UVltaURPR2lYdkxBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy9kYzMxOGItOTI0MC00Nzc1LWE0YWItN2Q0MjY2Y2Y4MjJh
LzEvbnlhc251czZMUG92YktQMEUtLTV6Zl9wY2s0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHuBggrBgEFBQcBBwEB/wSB3jCB2zCByQQCAAEwgcIDBAIt
QiQDBAE+qZQDBAFPh3owDAMEBld1QAMEAVd1RAMEAFvvOQMEAl6auAMEAm3g4AME
AW3g6gMEAW3g8AMEAZCyaAMEAZCydgMEAZCy/AMEApO9nAMEAJO91gMEArB0dAME
A7L4gAMEAbkX/gMEArmTuAMEArmhBAMEA7nniAMEAcEjkgMEAcJphgMEAcKR8gME
AsKSoAMEAcO4+gMEAsPOrAMEA9Q7SAMEAdRsWgMEAtXh4AMEA9kOuAMEAtkU9DAN
BAIAAjAHAwUAKgdZQDANBgkqhkiG9w0BAQsFAAOCAQEATiweeaJ+bAevCCVpsTfd
JsNagvAr4ULy41I1dqKvib3BSIPG88AfE2kBoL8bn5xgU+zt/Mklj9yeDP/Y1ZRH
v9uXBfT1iHT/CJjY2OqfEq8+03ZlrjxdyI6PVM1k24TcfTA6eKlotrshBHBia2Yi
DXp4RYFqu5czmZozGAk2SB5Y/RtTGYH1oYRhCFhjDlsVkHliMx4rrZw2M0NELe4I
oJQDGBmnxSZ14I8kixt0cBSa1oRuWu7/KxUQFGnqQw6i0neyQwmTrGcgsoEWiLqD
ke7CPaS7Xo82QHNZBcysYiLToC2Rz9zPyCRg0NNhuA6XubYa5rGXW/HO5K0Gx4cD
fw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:39 2024 by rpki-client on console-ams.rpki-client.org