Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/oTigPS62RE4spsVmvJMpDC3gzdQ.roa
File: oTigPS62RE4spsVmvJMpDC3gzdQ.roa (raw, json)
Hash identifier: bVnrx/ZQD9iESxdR9hVC5QbuQNIkxQqrOj8v2jTT5D8=
Subject key identifier: A1:38:A0:3D:2E:B6:44:4E:2C:A6:C5:66:BC:93:29:0C:2D:E0:CD:D4
Certificate issuer: /CN=bdd244214d76468d3fb72abad1892ef23dede978
Certificate serial: 018CC64B08F0BA2E546448885C6CBC1B23F1
Authority key identifier: BD:D2:44:21:4D:76:46:8D:3F:B7:2A:BA:D1:89:2E:F2:3D:ED:E9:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vdJEIU12Ro0_tyq60Yku8j3t6Xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/oTigPS62RE4spsVmvJMpDC3gzdQ.roa
Signing time: Mon 01 Jan 2024 18:30:55 +0000
ROA not before: Mon 01 Jan 2024 18:30:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6830
IP address blocks: 84.20.32.0/21 maxlen: 21
84.20.32.0/20 maxlen: 20
84.74.0.0/15 maxlen: 15
84.20.40.0/21 maxlen: 21
84.20.48.0/21 maxlen: 21
84.20.48.0/22 maxlen: 22
217.168.32.0/20 maxlen: 20
217.168.32.0/19 maxlen: 19
217.168.48.0/20 maxlen: 20
46.140.0.0/17 maxlen: 17
46.140.0.0/16 maxlen: 16
62.2.0.0/17 maxlen: 17
62.2.0.0/16 maxlen: 16
194.29.0.0/20 maxlen: 20
194.29.0.0/19 maxlen: 19
46.127.0.0/16 maxlen: 16
46.140.128.0/17 maxlen: 17
80.218.0.0/16 maxlen: 16
80.218.0.0/15 maxlen: 15
62.2.128.0/17 maxlen: 17
194.29.16.0/20 maxlen: 20
77.56.0.0/15 maxlen: 15
178.83.0.0/16 maxlen: 16
77.56.0.0/14 maxlen: 14
81.7.224.0/19 maxlen: 19
81.7.224.0/20 maxlen: 20
81.7.240.0/20 maxlen: 20
178.82.0.0/15 maxlen: 15
213.193.64.0/19 maxlen: 19
213.193.64.0/18 maxlen: 18
84.72.0.0/15 maxlen: 15
84.72.0.0/14 maxlen: 14
213.193.96.0/19 maxlen: 19
46.126.0.0/16 maxlen: 16
46.126.0.0/15 maxlen: 15
217.162.0.0/17 maxlen: 17
217.162.0.0/16 maxlen: 16
31.10.128.0/17 maxlen: 17
31.10.128.0/18 maxlen: 18
84.20.52.0/22 maxlen: 22
80.219.0.0/16 maxlen: 16
195.202.192.0/19 maxlen: 19
31.10.192.0/18 maxlen: 18
195.202.192.0/18 maxlen: 18
195.202.224.0/19 maxlen: 19
77.58.0.0/15 maxlen: 15
217.162.128.0/17 maxlen: 17
212.47.160.0/19 maxlen: 19
212.47.160.0/20 maxlen: 20
212.47.176.0/20 maxlen: 20
2a02:aa00::/27 maxlen: 27
2a02:aa00::/28 maxlen: 28
2a00:e2c0::/32 maxlen: 32
2a00:e2c0::/33 maxlen: 33
2a00:e2c0:8000::/33 maxlen: 33
2a02:aa10::/28 maxlen: 28
Validation: Failed, certificate revoked on Fri 23 Feb 2024 12:30:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:08:f0:ba:2e:54:64:48:88:5c:6c:bc:1b:23:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdd244214d76468d3fb72abad1892ef23dede978
Validity
Not Before: Jan 1 18:30:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a138a03d2eb6444e2ca6c566bc93290c2de0cdd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:d4:73:a8:45:1a:a1:e2:b4:6c:c1:c1:8a:29:
45:e7:18:03:97:3d:19:51:7f:5c:d9:11:51:e5:a5:
67:50:9a:b3:3a:8f:ba:8c:0e:6c:9a:97:ed:f2:c5:
97:41:6d:01:10:66:cc:15:e3:c2:d0:c5:b8:b0:8d:
30:af:86:fe:54:e5:b5:c7:fd:ea:a1:56:1c:0d:57:
76:f8:bc:08:97:88:61:93:ee:3b:06:16:08:7c:be:
b8:7c:70:1a:28:4d:be:2b:99:47:a3:9f:a1:03:b5:
ba:44:9e:a8:9c:64:46:e9:2e:ef:95:48:65:9b:cf:
e5:31:09:dc:f4:f1:88:fd:d7:cf:fb:68:d0:9c:ea:
d3:a4:93:0e:b9:c5:89:6e:d6:28:f0:6e:8a:43:9d:
66:b3:97:82:7a:b6:56:08:8d:95:3b:46:d2:cd:5a:
a2:99:26:cd:31:da:67:1c:83:0a:a7:52:0c:eb:d6:
46:ce:a3:14:9b:87:02:79:8b:cd:00:e5:92:28:f6:
13:05:ee:e2:65:de:3a:b7:77:88:f5:d2:66:4e:24:
88:2e:e9:2f:01:d4:5f:73:7b:c3:7d:f7:0b:c2:1f:
4c:21:42:13:fc:90:ae:c9:98:87:da:0b:44:3d:66:
9e:29:cf:1c:b3:d9:6a:91:c2:27:61:f9:f0:53:85:
10:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:38:A0:3D:2E:B6:44:4E:2C:A6:C5:66:BC:93:29:0C:2D:E0:CD:D4
X509v3 Authority Key Identifier:
keyid:BD:D2:44:21:4D:76:46:8D:3F:B7:2A:BA:D1:89:2E:F2:3D:ED:E9:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vdJEIU12Ro0_tyq60Yku8j3t6Xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/oTigPS62RE4spsVmvJMpDC3gzdQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/vdJEIU12Ro0_tyq60Yku8j3t6Xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.10.128.0/17
46.126.0.0/15
46.140.0.0/16
62.2.0.0/16
77.56.0.0/14
80.218.0.0/15
81.7.224.0/19
84.20.32.0-84.20.55.255
84.72.0.0/14
178.82.0.0/15
194.29.0.0/19
195.202.192.0/18
212.47.160.0/19
213.193.64.0/18
217.162.0.0/16
217.168.32.0/19
IPv6:
2a00:e2c0::/32
2a02:aa00::/27
Signature Algorithm: sha256WithRSAEncryption
3d:3b:6d:1f:51:af:96:8e:5d:fe:7a:27:cb:d1:56:0c:2c:d2:
bb:6e:06:88:7f:dc:18:09:b0:9a:09:3d:de:23:86:a7:92:bd:
91:6c:ee:af:c3:e2:e4:eb:7e:3d:95:27:20:e0:ae:80:a8:6b:
b6:41:94:d1:7e:19:a8:a0:32:85:77:70:2f:c5:3a:5f:b1:84:
e5:ca:4e:e8:e9:07:0d:e0:0a:f5:2a:95:84:ae:72:b7:fe:d1:
9d:d1:78:ac:68:c3:b3:6f:39:bb:7f:c7:3e:e4:06:53:93:02:
7a:0c:93:1b:38:59:23:ce:05:f1:a5:57:38:d1:07:f7:1c:d0:
2e:79:76:6e:0f:2e:0f:c8:cb:cc:fc:10:04:08:0c:2f:3c:9d:
d9:b5:48:93:3d:f3:a7:cf:95:1c:0d:a8:ac:b8:9d:e7:2d:9f:
a3:61:d1:73:4a:42:90:73:44:f4:c0:24:98:0d:ff:a3:3e:eb:
2f:01:3f:6d:3e:b4:52:94:44:95:00:39:52:f1:9d:e3:73:a8:
4f:97:f3:db:49:0b:da:9c:ef:ad:b3:10:d9:50:ea:af:e4:2a:
72:48:f6:2b:4f:1a:6c:85:3b:b3:94:34:a1:42:84:47:39:d3:
12:7d:a3:61:00:c4:f7:42:5f:3a:f9:82:9a:be:6d:72:b2:96:
4d:60:23:b2
-----BEGIN CERTIFICATE-----
MIIFbzCCBFegAwIBAgISAYzGSwjwui5UZEiIXGy8GyPxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkZDI0NDIxNGQ3NjQ2OGQzZmI3MmFiYWQxODkyZWYyM2Rl
ZGU5NzgwHhcNMjQwMTAxMTgzMDU1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMTM4YTAzZDJlYjY0NDRlMmNhNmM1NjZiYzkzMjkwYzJkZTBjZGQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhtRzqEUaoeK0bMHBiilF5xgDlz0Z
UX9c2RFR5aVnUJqzOo+6jA5smpft8sWXQW0BEGbMFePC0MW4sI0wr4b+VOW1x/3q
oVYcDVd2+LwIl4hhk+47BhYIfL64fHAaKE2+K5lHo5+hA7W6RJ6onGRG6S7vlUhl
m8/lMQnc9PGI/dfP+2jQnOrTpJMOucWJbtYo8G6KQ51ms5eCerZWCI2VO0bSzVqi
mSbNMdpnHIMKp1IM69ZGzqMUm4cCeYvNAOWSKPYTBe7iZd46t3eI9dJmTiSILukv
AdRfc3vDffcLwh9MIUIT/JCuyZiH2gtEPWaeKc8cs9lqkcInYfnwU4UQswIDAQAB
o4ICezCCAncwHQYDVR0OBBYEFKE4oD0utkROLKbFZryTKQwt4M3UMB8GA1UdIwQY
MBaAFL3SRCFNdkaNP7cqutGJLvI97el4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmRKRUlVMTJSbzBfdHlxNjBZa3U4ajN0NlhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC83NTZlZWYtNjYyOS00NjNhLTk5ZmYt
NDZhNDNlZjAyMjFiLzEvb1RpZ1BTNjJSRTRzcHNWbXZKTXBEQzNnemRRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC83NTZlZWYtNjYyOS00NjNhLTk5ZmYtNDZhNDNlZjAyMjFi
LzEvdmRKRUlVMTJSbzBfdHlxNjBZa3U4ajN0NlhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGQBggrBgEFBQcBBwEB/wSBgDB+MGYEAgABMGADBAcfCoAD
AwEufgMDAC6MAwMAPgIDAwJNOAMDAVDaAwQFUQfgMAwDBAVUFCADBANUFDADAwJU
SAMDAbJSAwQFwh0AAwQGw8rAAwQF1C+gAwQG1cFAAwMA2aIDBAXZqCAwFAQCAAIw
DgMFACoA4sADBQUqAqoAMA0GCSqGSIb3DQEBCwUAA4IBAQA9O20fUa+Wjl3+eifL
0VYMLNK7bgaIf9wYCbCaCT3eI4ankr2RbO6vw+Lk6349lScg4K6AqGu2QZTRfhmo
oDKFd3AvxTpfsYTlyk7o6QcN4Ar1KpWErnK3/tGd0XisaMOzbzm7f8c+5AZTkwJ6
DJMbOFkjzgXxpVc40Qf3HNAueXZuDy4PyMvM/BAECAwvPJ3ZtUiTPfOnz5UcDais
uJ3nLZ+jYdFzSkKQc0T0wCSYDf+jPusvAT9tPrRSlESVADlS8Z3jc6hPl/PbSQva
nO+tsxDZUOqv5CpySPYrTxpshTuzlDShQoRHOdMSfaNhAMT3Ql86+YKavm1yspZN
YCOy
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:51:42 2025 by rpki-client