Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/P1sLSM-XPFzhaZv11K2dlqKOJws.roa
File: P1sLSM-XPFzhaZv11K2dlqKOJws.roa (raw, json)
Hash identifier: c2lOTr4VO/XsNRUL14g/sGtJwHr0N4HGbE4Ws8sQzpc=
Subject key identifier: 3F:5B:0B:48:CF:97:3C:5C:E1:69:9B:F5:D4:AD:9D:96:A2:8E:27:0B
Certificate issuer: /CN=bdd244214d76468d3fb72abad1892ef23dede978
Certificate serial: 01892B9356DBE08044F01439FDD54DBE1467
Authority key identifier: BD:D2:44:21:4D:76:46:8D:3F:B7:2A:BA:D1:89:2E:F2:3D:ED:E9:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vdJEIU12Ro0_tyq60Yku8j3t6Xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/P1sLSM-XPFzhaZv11K2dlqKOJws.roa
Signing time: Thu 06 Jul 2023 14:20:23 +0000
ROA not before: Thu 06 Jul 2023 14:20:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6830
IP address blocks: 84.20.32.0/21 maxlen: 21
84.20.32.0/20 maxlen: 20
84.74.0.0/15 maxlen: 15
84.20.40.0/21 maxlen: 21
84.20.48.0/21 maxlen: 21
84.20.48.0/22 maxlen: 22
217.168.32.0/20 maxlen: 20
217.168.32.0/19 maxlen: 19
217.168.48.0/20 maxlen: 20
46.140.0.0/17 maxlen: 17
46.140.0.0/16 maxlen: 16
62.2.0.0/17 maxlen: 17
62.2.0.0/16 maxlen: 16
194.29.0.0/20 maxlen: 20
194.29.0.0/19 maxlen: 19
46.140.128.0/17 maxlen: 17
46.127.0.0/16 maxlen: 16
80.218.0.0/16 maxlen: 16
80.218.0.0/15 maxlen: 15
62.2.128.0/17 maxlen: 17
194.29.16.0/20 maxlen: 20
77.56.0.0/15 maxlen: 15
178.83.0.0/16 maxlen: 16
77.56.0.0/14 maxlen: 14
81.7.224.0/19 maxlen: 19
81.7.224.0/20 maxlen: 20
178.82.0.0/15 maxlen: 15
81.7.240.0/20 maxlen: 20
213.193.64.0/19 maxlen: 19
213.193.64.0/18 maxlen: 18
84.72.0.0/15 maxlen: 15
84.72.0.0/14 maxlen: 14
213.193.96.0/19 maxlen: 19
46.126.0.0/16 maxlen: 16
46.126.0.0/15 maxlen: 15
217.162.0.0/17 maxlen: 17
217.162.0.0/16 maxlen: 16
31.10.128.0/17 maxlen: 17
31.10.128.0/18 maxlen: 18
84.20.52.0/22 maxlen: 22
80.219.0.0/16 maxlen: 16
195.202.192.0/19 maxlen: 19
31.10.192.0/18 maxlen: 18
195.202.192.0/18 maxlen: 18
195.202.224.0/19 maxlen: 19
77.58.0.0/15 maxlen: 15
217.162.128.0/17 maxlen: 17
212.47.160.0/19 maxlen: 19
212.47.160.0/20 maxlen: 20
212.47.176.0/20 maxlen: 20
2a02:aa00::/27 maxlen: 27
2a02:aa00::/28 maxlen: 28
2a00:e2c0::/32 maxlen: 32
2a00:e2c0::/33 maxlen: 33
2a00:e2c0:8000::/33 maxlen: 33
2a02:aa10::/28 maxlen: 28
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:30:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:2b:93:56:db:e0:80:44:f0:14:39:fd:d5:4d:be:14:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdd244214d76468d3fb72abad1892ef23dede978
Validity
Not Before: Jul 6 14:20:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3f5b0b48cf973c5ce1699bf5d4ad9d96a28e270b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2a:74:36:7c:67:95:ed:2d:8b:18:30:c6:ac:
a3:f8:27:bf:ab:bd:1f:8e:47:01:16:28:54:af:20:
71:1a:4d:11:c8:3b:7e:f9:e0:e1:cc:20:4d:fe:c8:
0c:4e:5d:a8:e4:e9:5c:69:b9:1a:98:89:16:20:6a:
8f:71:a2:af:36:da:41:c8:de:6b:19:04:a0:ca:ff:
21:47:33:16:20:2b:ea:46:26:d2:2b:5a:85:b6:c5:
24:9e:6e:ae:e9:f2:51:a8:e0:4e:13:af:aa:ee:df:
0f:1f:e1:9f:57:6c:6c:f5:b2:49:a1:b8:97:27:01:
a6:c7:54:46:f6:37:82:e4:24:2b:77:f1:13:06:38:
ae:9a:92:57:65:ba:d7:3d:bd:5d:d1:4a:40:6d:6d:
82:02:ba:a8:f6:43:e5:00:87:12:81:5b:48:d5:23:
08:77:97:74:55:75:dc:47:6e:98:b0:a9:a5:00:29:
57:8b:06:d8:85:63:1f:ef:7b:d6:9f:53:d7:45:01:
0a:83:83:2f:69:07:45:c8:72:94:67:c3:6c:d4:9c:
c8:24:06:cd:8c:0f:1a:fe:e7:26:b2:77:a1:65:5d:
f4:31:4d:af:8c:b5:03:f7:f2:a4:c3:81:64:94:24:
f2:bf:fa:a7:45:a9:9a:6a:0f:8e:d5:97:f1:01:aa:
a9:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:5B:0B:48:CF:97:3C:5C:E1:69:9B:F5:D4:AD:9D:96:A2:8E:27:0B
X509v3 Authority Key Identifier:
keyid:BD:D2:44:21:4D:76:46:8D:3F:B7:2A:BA:D1:89:2E:F2:3D:ED:E9:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vdJEIU12Ro0_tyq60Yku8j3t6Xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/P1sLSM-XPFzhaZv11K2dlqKOJws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/vdJEIU12Ro0_tyq60Yku8j3t6Xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.10.128.0/17
46.126.0.0/15
46.140.0.0/16
62.2.0.0/16
77.56.0.0/14
80.218.0.0/15
81.7.224.0/19
84.20.32.0-84.20.55.255
84.72.0.0/14
178.82.0.0/15
194.29.0.0/19
195.202.192.0/18
212.47.160.0/19
213.193.64.0/18
217.162.0.0/16
217.168.32.0/19
IPv6:
2a00:e2c0::/32
2a02:aa00::/27
Signature Algorithm: sha256WithRSAEncryption
0d:65:e4:0b:e9:3a:71:b0:4e:84:bc:79:8c:0c:4a:7d:79:25:
93:6a:cc:15:fa:8d:d4:91:67:05:b3:85:a9:1e:cd:7a:25:16:
69:5a:e8:ca:ec:3f:c1:7c:ec:62:df:c5:e8:07:25:08:06:c9:
6d:35:fa:49:50:fd:30:15:47:95:cd:47:3e:8d:30:e0:b1:47:
a1:7e:b5:f3:4c:5f:5d:0d:48:f8:2f:39:d7:0b:92:53:37:4e:
5d:38:8a:69:e5:91:e6:e6:1e:8a:cf:45:ed:45:ed:02:4a:08:
87:35:eb:2e:80:87:cd:c0:6f:13:9f:1f:b8:c7:93:92:5e:02:
5f:77:8d:84:49:ba:f0:6a:82:de:72:1e:63:4a:11:d1:8d:2e:
f8:73:e5:cf:16:9d:76:7f:a6:dc:20:bd:65:82:ed:90:18:40:
cc:e6:0c:8b:d4:fb:2e:27:63:24:0c:15:36:b4:e6:f8:4a:7e:
fd:da:cb:9d:73:9e:fd:db:f4:c6:2b:e0:65:84:25:9c:2f:11:
4e:b2:d5:60:2b:81:ec:b6:ec:3f:91:b0:92:ee:b2:cd:7d:cd:
1c:1c:98:eb:b0:15:6d:e5:62:a7:3f:a6:af:c0:d2:ec:d9:3f:
5b:5e:85:66:60:1c:9a:68:57:78:07:4a:0c:77:19:35:35:80:
ae:09:f3:24
-----BEGIN CERTIFICATE-----
MIIFbzCCBFegAwIBAgISAYkrk1bb4IBE8BQ5/dVNvhRnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkZDI0NDIxNGQ3NjQ2OGQzZmI3MmFiYWQxODkyZWYyM2Rl
ZGU5NzgwHhcNMjMwNzA2MTQyMDIzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZjViMGI0OGNmOTczYzVjZTE2OTliZjVkNGFkOWQ5NmEyOGUyNzBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwip0Nnxnle0tixgwxqyj+Ce/q70f
jkcBFihUryBxGk0RyDt++eDhzCBN/sgMTl2o5OlcabkamIkWIGqPcaKvNtpByN5r
GQSgyv8hRzMWICvqRibSK1qFtsUknm6u6fJRqOBOE6+q7t8PH+GfV2xs9bJJobiX
JwGmx1RG9jeC5CQrd/ETBjiumpJXZbrXPb1d0UpAbW2CArqo9kPlAIcSgVtI1SMI
d5d0VXXcR26YsKmlAClXiwbYhWMf73vWn1PXRQEKg4MvaQdFyHKUZ8Ns1JzIJAbN
jA8a/ucmsnehZV30MU2vjLUD9/Kkw4FklCTyv/qnRamaag+O1ZfxAaqpnwIDAQAB
o4ICezCCAncwHQYDVR0OBBYEFD9bC0jPlzxc4Wmb9dStnZaijicLMB8GA1UdIwQY
MBaAFL3SRCFNdkaNP7cqutGJLvI97el4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmRKRUlVMTJSbzBfdHlxNjBZa3U4ajN0NlhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC83NTZlZWYtNjYyOS00NjNhLTk5ZmYt
NDZhNDNlZjAyMjFiLzEvUDFzTFNNLVhQRnpoYVp2MTFLMmRscUtPSndzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC83NTZlZWYtNjYyOS00NjNhLTk5ZmYtNDZhNDNlZjAyMjFi
LzEvdmRKRUlVMTJSbzBfdHlxNjBZa3U4ajN0NlhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGQBggrBgEFBQcBBwEB/wSBgDB+MGYEAgABMGADBAcfCoAD
AwEufgMDAC6MAwMAPgIDAwJNOAMDAVDaAwQFUQfgMAwDBAVUFCADBANUFDADAwJU
SAMDAbJSAwQFwh0AAwQGw8rAAwQF1C+gAwQG1cFAAwMA2aIDBAXZqCAwFAQCAAIw
DgMFACoA4sADBQUqAqoAMA0GCSqGSIb3DQEBCwUAA4IBAQANZeQL6TpxsE6EvHmM
DEp9eSWTaswV+o3UkWcFs4WpHs16JRZpWujK7D/BfOxi38XoByUIBsltNfpJUP0w
FUeVzUc+jTDgsUehfrXzTF9dDUj4LznXC5JTN05dOIpp5ZHm5h6Kz0XtRe0CSgiH
NesugIfNwG8Tnx+4x5OSXgJfd42ESbrwaoLech5jShHRjS74c+XPFp12f6bcIL1l
gu2QGEDM5gyL1PsuJ2MkDBU2tOb4Sn792sudc5792/TGK+BlhCWcLxFOstVgK4Hs
tuw/kbCS7rLNfc0cHJjrsBVt5WKnP6avwNLs2T9bXoVmYByaaFd4B0oMdxk1NYCu
CfMk
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:19 2024 by rpki-client on console-ams.rpki-client.org