Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/1ef119-2bae-42e4-b02f-7e18fd6afdfd/1/at-oJuiShHdYjFgeFkIiG50ahgY.roa
File: at-oJuiShHdYjFgeFkIiG50ahgY.roa (raw, json)
Hash identifier: MWPfQEvaAfa1flSLAcK/tvuAm58Ghuur94eSbMLB6/A=
Subject key identifier: 6A:DF:A8:26:E8:92:84:77:58:8C:58:1E:16:42:22:1B:9D:1A:86:06
Certificate issuer: /CN=10a69541eb068e6d2e596c481d93fd6bf9771267
Certificate serial: 01856CAF14A37BC83F1EA77E809475E9CFD4
Authority key identifier: 10:A6:95:41:EB:06:8E:6D:2E:59:6C:48:1D:93:FD:6B:F9:77:12:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EKaVQesGjm0uWWxIHZP9a_l3Emc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/1ef119-2bae-42e4-b02f-7e18fd6afdfd/1/at-oJuiShHdYjFgeFkIiG50ahgY.roa
Signing time: Sun 01 Jan 2023 09:34:51 +0000
ROA not before: Sun 01 Jan 2023 09:34:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20811
IP address blocks: 217.199.0.0/19 maxlen: 24
89.190.160.0/19 maxlen: 24
46.234.224.0/19 maxlen: 24
93.89.48.0/20 maxlen: 24
84.18.128.0/19 maxlen: 24
37.186.128.0/18 maxlen: 24
185.6.192.0/22 maxlen: 24
95.171.32.0/19 maxlen: 24
2a02:490::/29 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:af:14:a3:7b:c8:3f:1e:a7:7e:80:94:75:e9:cf:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10a69541eb068e6d2e596c481d93fd6bf9771267
Validity
Not Before: Jan 1 09:34:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6adfa826e8928477588c581e1642221b9d1a8606
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:2b:9c:ed:83:6d:f7:da:75:40:09:27:a1:ea:
df:b1:44:c7:5a:1f:62:92:3e:42:6e:6a:cf:12:73:
a0:91:63:29:4b:2c:d0:1b:a9:b6:24:10:94:9f:e1:
c5:cd:72:2f:21:90:51:7b:c0:8d:87:3c:9b:8f:bf:
f0:70:2c:c3:c9:19:89:c6:7e:a0:bb:00:0f:5a:48:
68:70:f3:88:b3:0a:f3:f0:74:e2:a4:5d:d4:cb:68:
d4:dd:01:2a:68:10:ae:06:47:c7:1d:7f:fc:c8:9b:
7d:7a:d1:ef:3d:3f:1b:66:24:77:af:62:ef:a5:9c:
f5:c8:f2:15:18:b2:99:68:60:09:19:92:9c:e9:09:
96:e2:82:98:e6:ad:47:cc:d2:0d:f1:7d:04:88:23:
e1:1b:0d:d6:24:21:a4:ac:b0:9c:c2:51:0a:77:0d:
6e:97:82:3d:3f:06:26:b5:ba:4f:8a:33:a9:89:d0:
8b:f1:96:57:d3:ed:6f:d9:bd:ff:f1:0c:f6:90:45:
ee:2c:59:2c:69:2e:0b:b3:6e:97:74:7b:c0:c3:ee:
d3:e0:b9:dd:2b:42:00:fe:cf:6c:5f:c3:29:29:8d:
0a:ad:5d:cc:71:7d:cf:74:0b:a7:f4:aa:13:96:7c:
57:49:f6:2f:8b:9a:6f:10:31:33:2b:8f:47:3f:fe:
6d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:DF:A8:26:E8:92:84:77:58:8C:58:1E:16:42:22:1B:9D:1A:86:06
X509v3 Authority Key Identifier:
keyid:10:A6:95:41:EB:06:8E:6D:2E:59:6C:48:1D:93:FD:6B:F9:77:12:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EKaVQesGjm0uWWxIHZP9a_l3Emc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/1ef119-2bae-42e4-b02f-7e18fd6afdfd/1/at-oJuiShHdYjFgeFkIiG50ahgY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/1ef119-2bae-42e4-b02f-7e18fd6afdfd/1/EKaVQesGjm0uWWxIHZP9a_l3Emc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.186.128.0/18
46.234.224.0/19
84.18.128.0/19
89.190.160.0/19
93.89.48.0/20
95.171.32.0/19
185.6.192.0/22
217.199.0.0/19
IPv6:
2a02:490::/29
Signature Algorithm: sha256WithRSAEncryption
2a:16:6a:a0:72:97:a0:f9:6e:9d:16:03:dc:1c:e2:93:18:4e:
37:f0:b4:66:e3:1b:68:c5:fe:65:ee:41:6d:2e:1d:1a:26:48:
d8:58:e0:c1:74:41:0f:09:7f:2d:9c:13:05:5a:a5:76:64:a2:
7b:51:50:71:3e:75:81:a4:a0:1f:f3:54:e8:24:36:1e:1e:39:
22:11:ba:a3:ac:08:a7:9e:ba:c5:4f:00:6c:51:b8:4a:d1:58:
17:13:b3:c2:66:f7:b0:69:12:44:a6:af:c9:3d:08:f4:99:6e:
62:4a:47:7e:1a:3f:2e:0e:bf:5b:eb:51:6d:5c:d0:61:ba:1a:
15:f2:66:ff:26:57:26:f7:4b:b9:97:2f:74:bf:66:02:37:17:
97:7a:f2:87:bd:a3:45:8a:ac:df:09:b6:1f:8f:62:69:21:24:
65:29:bb:92:10:c3:ee:7a:cb:6e:e5:0b:62:c4:7e:d8:dd:0b:
74:6f:65:ea:73:63:c7:f6:0b:03:6b:87:9b:5a:b4:63:02:65:
5a:d5:7f:a5:30:73:9e:c4:e2:15:66:34:df:45:ad:e3:11:dc:
5f:85:55:85:44:0a:ef:3b:99:d8:6f:50:4d:f0:c5:52:36:99:
eb:5d:5d:47:41:b8:87:b1:f0:f1:a0:ea:55:a0:e5:90:e3:f1:
9a:ce:3f:aa
-----BEGIN CERTIFICATE-----
MIIFNjCCBB6gAwIBAgISAYVsrxSje8g/Hqd+gJR16c/UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwYTY5NTQxZWIwNjhlNmQyZTU5NmM0ODFkOTNmZDZiZjk3
NzEyNjcwHhcNMjMwMTAxMDkzNDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YWRmYTgyNmU4OTI4NDc3NTg4YzU4MWUxNjQyMjIxYjlkMWE4NjA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Cuc7YNt99p1QAknoerfsUTHWh9i
kj5CbmrPEnOgkWMpSyzQG6m2JBCUn+HFzXIvIZBRe8CNhzybj7/wcCzDyRmJxn6g
uwAPWkhocPOIswrz8HTipF3Uy2jU3QEqaBCuBkfHHX/8yJt9etHvPT8bZiR3r2Lv
pZz1yPIVGLKZaGAJGZKc6QmW4oKY5q1HzNIN8X0EiCPhGw3WJCGkrLCcwlEKdw1u
l4I9PwYmtbpPijOpidCL8ZZX0+1v2b3/8Qz2kEXuLFksaS4Ls26XdHvAw+7T4Lnd
K0IA/s9sX8MpKY0KrV3McX3PdAun9KoTlnxXSfYvi5pvEDEzK49HP/5tIwIDAQAB
o4ICQjCCAj4wHQYDVR0OBBYEFGrfqCbokoR3WIxYHhZCIhudGoYGMB8GA1UdIwQY
MBaAFBCmlUHrBo5tLllsSB2T/Wv5dxJnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUthVlFlc0dqbTB1V1d4SUhaUDlhX2wzRW1jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8xZWYxMTktMmJhZS00MmU0LWIwMmYt
N2UxOGZkNmFmZGZkLzEvYXQtb0p1aVNoSGRZakZnZUZrSWlHNTBhaGdZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS8xZWYxMTktMmJhZS00MmU0LWIwMmYtN2UxOGZkNmFmZGZk
LzEvRUthVlFlc0dqbTB1V1d4SUhaUDlhX2wzRW1jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFgGCCsGAQUFBwEHAQH/BEkwRzA2BAIAATAwAwQGJbqAAwQF
LurgAwQFVBKAAwQFWb6gAwQEXVkwAwQFX6sgAwQCuQbAAwQF2ccAMA0EAgACMAcD
BQMqAgSQMA0GCSqGSIb3DQEBCwUAA4IBAQAqFmqgcpeg+W6dFgPcHOKTGE438LRm
4xtoxf5l7kFtLh0aJkjYWODBdEEPCX8tnBMFWqV2ZKJ7UVBxPnWBpKAf81ToJDYe
HjkiEbqjrAinnrrFTwBsUbhK0VgXE7PCZvewaRJEpq/JPQj0mW5iSkd+Gj8uDr9b
61FtXNBhuhoV8mb/Jlcm90u5ly90v2YCNxeXevKHvaNFiqzfCbYfj2JpISRlKbuS
EMPuestu5QtixH7Y3Qt0b2Xqc2PH9gsDa4ebWrRjAmVa1X+lMHOexOIVZjTfRa3j
EdxfhVWFRArvO5nYb1BN8MVSNpnrXV1HQbiHsfDxoOpVoOWQ4/Gazj+q
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:15 2024 by rpki-client on console-ams.rpki-client.org