Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/pBpMV7d0E-ltgEIBZdG9cj8OqkI.roa
File: pBpMV7d0E-ltgEIBZdG9cj8OqkI.roa (raw, json)
Hash identifier: B7TI9RTgEaUwUINhJN0gorFmoXlhRqUVBg+s1oVk67I=
Subject key identifier: A4:1A:4C:57:B7:74:13:E9:6D:80:42:01:65:D1:BD:72:3F:0E:AA:42
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 01857D54BB880BCEDA2415E5E636942B8227
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/pBpMV7d0E-ltgEIBZdG9cj8OqkI.roa
Signing time: Wed 04 Jan 2023 15:09:43 +0000
ROA not before: Wed 04 Jan 2023 15:09:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48146
IP address blocks: 92.118.248.0/22 maxlen: 24
185.148.52.0/22 maxlen: 24
151.237.131.0/24 maxlen: 24
185.240.22.0/24 maxlen: 24
185.240.20.0/23 maxlen: 24
185.240.23.0/24 maxlen: 24
185.255.72.0/22 maxlen: 24
45.86.224.0/22 maxlen: 24
81.22.232.0/22 maxlen: 24
194.36.104.0/22 maxlen: 24
185.209.8.0/22 maxlen: 24
194.147.144.0/22 maxlen: 24
45.89.40.0/22 maxlen: 24
5.182.80.0/22 maxlen: 24
45.147.204.0/22 maxlen: 24
45.14.208.0/22 maxlen: 24
193.228.194.0/23 maxlen: 24
185.210.60.0/22 maxlen: 24
151.237.58.0/24 maxlen: 24
193.228.204.0/23 maxlen: 24
185.210.72.0/22 maxlen: 24
151.237.59.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 23 Jun 2023 11:12:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:7d:54:bb:88:0b:ce:da:24:15:e5:e6:36:94:2b:82:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Jan 4 15:09:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a41a4c57b77413e96d80420165d1bd723f0eaa42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:e1:e3:1f:81:80:d4:9b:0e:85:e6:02:9e:5e:
f9:49:f7:7a:da:68:74:f9:0f:d8:48:25:25:80:5d:
c0:a2:ff:82:c9:b0:65:e0:57:95:26:64:8a:14:49:
69:7c:a9:c9:3f:38:9d:2a:a3:4f:4e:2d:ee:f3:62:
f5:5e:ed:e1:c8:4b:d3:84:74:c6:69:85:9c:23:37:
0e:b6:21:97:0f:43:12:77:b4:55:25:e6:c2:bb:5d:
c5:0b:50:60:55:a2:9d:65:69:ab:b1:c3:91:77:b2:
82:e5:86:7b:f3:10:77:d7:ca:b9:b0:bd:77:7f:c8:
95:1a:ea:9a:34:97:94:f7:38:9f:90:61:2e:6e:f0:
84:67:51:c6:c2:f0:77:00:4b:b7:8c:12:08:a6:98:
0e:0e:5e:cb:b8:39:69:7d:ad:9a:e0:87:75:b6:f7:
41:d9:fa:d2:98:aa:21:d8:b7:c3:cb:16:92:45:4d:
3d:59:9c:6b:c5:d5:f4:94:98:2e:f0:0f:66:68:0d:
1c:d5:c9:be:9d:99:07:82:a6:88:65:e9:3a:d2:2d:
33:02:dc:8c:53:c2:09:b4:f9:2c:14:c4:17:46:5f:
e1:25:d9:4e:97:db:5e:4c:4e:bf:61:d2:87:73:bd:
47:df:79:58:e6:8b:b6:bb:c0:03:cb:f2:1f:c5:ea:
7d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:1A:4C:57:B7:74:13:E9:6D:80:42:01:65:D1:BD:72:3F:0E:AA:42
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/pBpMV7d0E-ltgEIBZdG9cj8OqkI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.80.0/22
45.14.208.0/22
45.86.224.0/22
45.89.40.0/22
45.147.204.0/22
81.22.232.0/22
92.118.248.0/22
151.237.58.0/23
151.237.131.0/24
185.148.52.0/22
185.209.8.0/22
185.210.60.0/22
185.210.72.0/22
185.240.20.0/22
185.255.72.0/22
193.228.194.0/23
193.228.204.0/23
194.36.104.0/22
194.147.144.0/22
Signature Algorithm: sha256WithRSAEncryption
8c:57:27:40:74:79:3f:3f:a6:c2:32:04:91:b5:36:43:29:d3:
0f:37:d8:15:9c:9b:1a:62:1d:07:a2:4a:28:94:b8:92:72:ae:
4b:78:37:8a:4c:59:29:24:e2:ee:1b:57:a4:1b:5d:43:dc:cc:
c3:1e:ee:e2:4b:4b:5c:36:a6:cd:47:4c:cf:44:5d:f7:0f:6e:
1a:0d:d4:db:b8:66:8c:98:37:f4:ea:7c:d7:df:4e:c4:f9:75:
aa:b9:e5:4f:5c:ad:6f:70:4f:33:82:b7:8b:0e:2a:78:ad:63:
a9:f6:3c:86:fd:24:e0:cc:41:33:f6:bb:71:62:8c:e9:9b:d7:
94:b7:63:ed:e5:d5:49:a0:68:3b:8e:0f:01:78:0c:a5:6a:99:
60:91:b9:99:ac:0f:c9:16:d2:f0:fe:73:97:3d:a3:ea:1b:18:
9d:14:a2:d3:a1:f1:7c:a9:0d:09:70:bd:77:b4:0b:4a:08:b9:
c7:16:bf:89:90:fb:f8:d6:9c:7a:71:5d:e8:aa:1f:e0:2b:2f:
92:20:42:b3:5f:b8:17:30:a1:56:26:c7:17:1c:31:58:09:06:
97:02:31:0a:a2:88:1d:67:a0:ba:c1:30:77:22:70:d9:be:6d:
41:07:ef:46:fd:b7:83:08:00:aa:0d:82:0f:b9:3d:34:fa:8f:
77:2d:59:b9
-----BEGIN CERTIFICATE-----
MIIFajCCBFKgAwIBAgISAYV9VLuIC87aJBXl5jaUK4InMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0NzVmYjA5MzRjZjZhNThkY2NlZjExMDg3NWRiZTVlM2U4
YjZiNzUwHhcNMjMwMTA0MTUwOTQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNDFhNGM1N2I3NzQxM2U5NmQ4MDQyMDE2NWQxYmQ3MjNmMGVhYTQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjOHjH4GA1JsOheYCnl75Sfd62mh0
+Q/YSCUlgF3Aov+CybBl4FeVJmSKFElpfKnJPzidKqNPTi3u82L1Xu3hyEvThHTG
aYWcIzcOtiGXD0MSd7RVJebCu13FC1BgVaKdZWmrscORd7KC5YZ78xB318q5sL13
f8iVGuqaNJeU9zifkGEubvCEZ1HGwvB3AEu3jBIIppgODl7LuDlpfa2a4Id1tvdB
2frSmKoh2LfDyxaSRU09WZxrxdX0lJgu8A9maA0c1cm+nZkHgqaIZek60i0zAtyM
U8IJtPksFMQXRl/hJdlOl9teTE6/YdKHc71H33lY5ou2u8ADy/Ifxep95QIDAQAB
o4ICdjCCAnIwHQYDVR0OBBYEFKQaTFe3dBPpbYBCAWXRvXI/DqpCMB8GA1UdIwQY
MBaAFNR1+wk0z2pY3M7xEIddvl4+i2t1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYt
Yzc5MTRhYjY0MjczLzEvcEJwTVY3ZDBFLWx0Z0VJQlpkRzljajhPcWtJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYtYzc5MTRhYjY0Mjcz
LzEvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGLBggrBgEFBQcBBwEB/wR8MHoweAQCAAEwcgMEAgW2UAME
Ai0O0AMEAi1W4AMEAi1ZKAMEAi2TzAMEAlEW6AMEAlx2+AMEAZftOgMEAJftgwME
ArmUNAMEArnRCAMEArnSPAMEArnSSAMEArnwFAMEArn/SAMEAcHkwgMEAcHkzAME
AsIkaAMEAsKTkDANBgkqhkiG9w0BAQsFAAOCAQEAjFcnQHR5Pz+mwjIEkbU2QynT
DzfYFZybGmIdB6JKKJS4knKuS3g3ikxZKSTi7htXpBtdQ9zMwx7u4ktLXDamzUdM
z0Rd9w9uGg3U27hmjJg39Op8199OxPl1qrnlT1ytb3BPM4K3iw4qeK1jqfY8hv0k
4MxBM/a7cWKM6ZvXlLdj7eXVSaBoO44PAXgMpWqZYJG5mawPyRbS8P5zlz2j6hsY
nRSi06HxfKkNCXC9d7QLSgi5xxa/iZD7+NacenFd6Kof4CsvkiBCs1+4FzChVibH
FxwxWAkGlwIxCqKIHWegusEwdyJw2b5tQQfvRv23gwgAqg2CD7k9NPqPdy1ZuQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:51 2024 by rpki-client on console-ams.rpki-client.org