Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/21mM-PsQO9rDEPB75p42G3M-tlQ.roa
File: 21mM-PsQO9rDEPB75p42G3M-tlQ.roa (raw, json)
Hash identifier: I1LgUyn0bxHGDiENrUiFtb5b2vqpimdS+1MRaZrMPUg=
Subject key identifier: DB:59:8C:F8:FB:10:3B:DA:C3:10:F0:7B:E6:9E:36:1B:73:3E:B6:54
Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Certificate serial: 018D8F27064FA57DFC237C18069CFD585658
Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/21mM-PsQO9rDEPB75p42G3M-tlQ.roa
Signing time: Fri 09 Feb 2024 18:35:15 +0000
ROA not before: Fri 09 Feb 2024 18:35:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13213
IP address blocks: 5.182.184.0/24 maxlen: 24
45.67.146.0/24 maxlen: 24
78.31.206.0/24 maxlen: 24
78.31.207.0/24 maxlen: 24
79.98.182.0/24 maxlen: 24
162.218.88.0/24 maxlen: 24
162.218.89.0/24 maxlen: 24
162.218.91.0/24 maxlen: 24
162.218.92.0/24 maxlen: 24
162.218.93.0/24 maxlen: 24
162.218.94.0/24 maxlen: 24
185.52.136.0/24 maxlen: 24
185.52.137.0/24 maxlen: 24
185.52.139.0/24 maxlen: 24
185.161.191.0/24 maxlen: 24
185.171.126.0/24 maxlen: 24
185.187.213.0/24 maxlen: 24
185.187.214.0/24 maxlen: 24
185.187.215.0/24 maxlen: 24
185.201.40.0/24 maxlen: 24
185.205.206.0/24 maxlen: 24
185.205.207.0/24 maxlen: 24
185.208.152.0/24 maxlen: 24
185.208.153.0/24 maxlen: 24
185.208.154.0/24 maxlen: 24
185.230.120.0/24 maxlen: 24
185.230.121.0/24 maxlen: 24
185.230.123.0/24 maxlen: 24
212.60.14.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 16 Feb 2024 00:36:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:8f:27:06:4f:a5:7d:fc:23:7c:18:06:9c:fd:58:56:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Validity
Not Before: Feb 9 18:35:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=db598cf8fb103bdac310f07be69e361b733eb654
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5c:e4:10:ed:23:74:a2:73:82:06:25:d7:25:
ed:77:b5:7b:0f:2f:96:b0:6b:77:de:18:22:61:a6:
3d:9a:87:63:bd:53:7a:ff:74:1b:c3:22:50:f6:01:
8c:07:64:9f:a4:3e:22:8f:ba:de:fe:c1:f0:6d:f3:
05:7b:00:a6:21:f8:96:b8:ea:c6:06:12:82:fc:dd:
c5:a4:0d:c2:cd:cf:68:b1:ac:4a:21:98:0b:f3:00:
28:be:8d:d0:f7:b6:44:71:61:71:d5:8f:99:ad:e1:
29:d9:e1:59:15:b9:00:3d:ba:a2:dd:c1:c0:69:bc:
38:54:26:60:85:1f:96:bc:25:af:96:4e:f1:0e:9a:
34:8e:d8:a3:81:77:38:26:c9:23:e4:16:00:fb:23:
aa:ab:df:e5:64:e9:7f:ca:8e:1f:35:fa:ab:a9:4e:
11:d6:bd:3d:d0:3f:ac:f8:3d:dc:1d:98:6b:7d:4a:
dc:ef:fd:a0:90:5f:28:f3:a4:fc:1f:86:df:08:d2:
9c:fa:7e:00:a8:3f:35:02:69:f9:2e:38:d7:f1:ab:
84:49:f7:43:16:8f:aa:c3:3d:17:60:a8:77:26:6a:
18:be:09:c3:66:8d:ba:c8:04:3c:f7:33:1b:8e:3c:
69:cd:76:f5:12:d1:24:9d:9d:e0:d8:f1:6b:4d:ca:
c2:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:59:8C:F8:FB:10:3B:DA:C3:10:F0:7B:E6:9E:36:1B:73:3E:B6:54
X509v3 Authority Key Identifier:
keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/21mM-PsQO9rDEPB75p42G3M-tlQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.184.0/24
45.67.146.0/24
78.31.206.0/23
79.98.182.0/24
162.218.88.0/23
162.218.91.0-162.218.94.255
185.52.136.0/23
185.52.139.0/24
185.161.191.0/24
185.171.126.0/24
185.187.213.0-185.187.215.255
185.201.40.0/24
185.205.206.0/23
185.208.152.0-185.208.154.255
185.230.120.0/23
185.230.123.0/24
212.60.14.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:87:04:46:f1:c3:88:da:9c:a1:5c:b6:d9:11:fb:d1:99:8e:
4b:41:7a:07:f9:ee:fe:dd:50:64:d0:bb:9c:ff:26:2d:3c:3a:
e0:fb:92:74:df:79:a4:d5:05:44:55:96:88:83:cc:8f:78:50:
cb:ae:01:ec:11:e0:2a:a4:af:af:75:af:84:1f:40:14:fb:a8:
c2:6a:c5:36:db:a4:53:52:fc:6e:5e:66:ed:11:c2:9d:a4:3f:
44:8c:f4:62:97:0d:1f:38:2d:76:f7:a1:fa:7b:07:65:5f:af:
d3:61:bb:87:a1:fe:dc:04:b3:c1:8c:d4:22:31:d2:e1:38:b1:
54:60:78:c9:92:d9:1b:e0:41:f1:4e:93:66:ba:b7:3e:25:13:
2d:dc:2f:52:a0:12:78:14:5e:f9:75:b0:d2:92:4f:9b:83:c7:
0a:4e:ff:f4:e4:38:6c:fe:ec:0c:ca:a6:11:90:3f:ce:ab:1a:
dd:6f:ff:7b:ac:b5:4f:06:78:e5:90:60:43:08:0e:39:17:62:
32:17:0c:51:e9:aa:c6:09:74:b7:b7:c8:61:2b:cc:8c:90:1c:
9a:34:df:72:e1:f0:6f:d9:4a:e0:3b:a4:4a:ea:31:d8:42:e2:
fa:3d:38:81:76:ba:c0:0a:f2:28:10:b1:cf:fa:e1:84:cf:3e:
1b:78:72:86
-----BEGIN CERTIFICATE-----
MIIFeTCCBGGgAwIBAgISAY2PJwZPpX38I3wYBpz9WFZYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyYjc4ZjY2ODJmYzM5YzU1YjQxZDQ4ZjgwYjg4MzhkNWQy
ZGJmMDcwHhcNMjQwMjA5MTgzNTE1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYjU5OGNmOGZiMTAzYmRhYzMxMGYwN2JlNjllMzYxYjczM2ViNjU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlzkEO0jdKJzggYl1yXtd7V7Dy+W
sGt33hgiYaY9modjvVN6/3QbwyJQ9gGMB2SfpD4ij7re/sHwbfMFewCmIfiWuOrG
BhKC/N3FpA3Czc9osaxKIZgL8wAovo3Q97ZEcWFx1Y+ZreEp2eFZFbkAPbqi3cHA
abw4VCZghR+WvCWvlk7xDpo0jtijgXc4Jskj5BYA+yOqq9/lZOl/yo4fNfqrqU4R
1r090D+s+D3cHZhrfUrc7/2gkF8o86T8H4bfCNKc+n4AqD81Amn5LjjX8auESfdD
Fo+qwz0XYKh3JmoYvgnDZo26yAQ89zMbjjxpzXb1EtEknZ3g2PFrTcrCmwIDAQAB
o4IChTCCAoEwHQYDVR0OBBYEFNtZjPj7EDvawxDwe+aeNhtzPrZUMB8GA1UdIwQY
MBaAFHK3j2aC/DnFW0HUj4C4g41dLb8HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEt
ZjNlNTA2YWVhYTAxLzEvMjFtTS1Qc1FPOXJERVBCNzVwNDJHM00tdGxRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEtZjNlNTA2YWVhYTAx
LzEvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGaBggrBgEFBQcBBwEB/wSBijCBhzCBhAQCAAEwfgMEAAW2
uAMEAC1DkgMEAU4fzgMEAE9itgMEAaLaWDAMAwQAotpbAwQAotpeAwQBuTSIAwQA
uTSLAwQAuaG/AwQAuat+MAwDBAC5u9UDBAO5u9ADBAC5ySgDBAG5zc4wDAMEA7nQ
mAMEALnQmgMEAbnmeAMEALnmewMEANQ8DjANBgkqhkiG9w0BAQsFAAOCAQEATIcE
RvHDiNqcoVy22RH70ZmOS0F6B/nu/t1QZNC7nP8mLTw64PuSdN95pNUFRFWWiIPM
j3hQy64B7BHgKqSvr3WvhB9AFPuowmrFNtukU1L8bl5m7RHCnaQ/RIz0YpcNHzgt
dveh+nsHZV+v02G7h6H+3ASzwYzUIjHS4TixVGB4yZLZG+BB8U6TZrq3PiUTLdwv
UqASeBRe+XWw0pJPm4PHCk7/9OQ4bP7sDMqmEZA/zqsa3W//e6y1TwZ45ZBgQwgO
ORdiMhcMUemqxgl0t7fIYSvMjJAcmjTfcuHwb9lK4DukSuox2ELi+j04gXa6wAry
KBCxz/rhhM8+G3hyhg==
-----END CERTIFICATE-----
Generated at Fri Feb 16 06:09:45 2024 by rpki-client on console-ams.rpki-client.org