Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/LiJ1sd8J0rEyO5v9vCTgOlop6fg.roa
File: LiJ1sd8J0rEyO5v9vCTgOlop6fg.roa (raw, json)
Hash identifier: QbSPaw0iOG1NBS3DeF/6r58jfORVBkcSV4zfglCQppk=
Subject key identifier: 2E:22:75:B1:DF:09:D2:B1:32:3B:9B:FD:BC:24:E0:3A:5A:29:E9:F8
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 018F9F43B13D68D11FBAE0BEE8EE6DA35FB6
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/LiJ1sd8J0rEyO5v9vCTgOlop6fg.roa
Signing time: Wed 22 May 2024 07:46:04 +0000
ROA not before: Wed 22 May 2024 07:46:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8434
IP address blocks: 192.36.37.0/24 maxlen: 24
192.71.158.0/24 maxlen: 24
192.121.172.0/24 maxlen: 24
192.121.192.0/24 maxlen: 24
193.180.61.0/24 maxlen: 24
193.181.187.0/24 maxlen: 24
193.183.118.0/24 maxlen: 24
193.234.68.0/23 maxlen: 23
193.234.220.0/23 maxlen: 23
193.234.237.0/24 maxlen: 24
194.14.129.0/24 maxlen: 24
194.14.212.0/24 maxlen: 24
194.68.56.0/23 maxlen: 23
194.68.99.0/24 maxlen: 24
194.68.126.0/24 maxlen: 24
194.68.194.0/23 maxlen: 23
194.71.27.0/24 maxlen: 24
194.71.83.0/24 maxlen: 24
194.71.140.0/23 maxlen: 23
194.71.248.0/21 maxlen: 21
194.103.50.0/24 maxlen: 24
194.132.108.0/23 maxlen: 24
194.132.174.0/24 maxlen: 24
194.132.175.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 31 May 2024 07:39:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:9f:43:b1:3d:68:d1:1f:ba:e0:be:e8:ee:6d:a3:5f:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: May 22 07:46:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2e2275b1df09d2b1323b9bfdbc24e03a5a29e9f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a7:2d:76:3b:8d:5b:c2:87:48:7e:80:8f:50:
0a:4b:e4:9b:c7:d2:24:cb:04:63:5f:57:e7:c7:45:
de:40:98:89:94:aa:f5:c1:96:32:14:9c:f9:7c:47:
63:b6:03:ee:97:aa:1f:b2:e0:f4:f5:c4:7d:9d:91:
72:a8:1f:0d:95:8b:c8:26:56:fe:01:8a:c8:9a:d9:
28:03:87:28:8e:cb:44:b8:21:32:69:67:f4:43:49:
de:f4:fc:e4:f7:84:b5:84:be:1b:6b:8d:a8:bb:bd:
6c:0d:29:58:8d:16:52:1a:00:cb:14:3b:69:be:ad:
93:45:bb:c5:90:5e:79:ef:c3:be:4b:8e:a7:09:89:
23:d9:09:b0:2c:fd:43:4b:8e:2b:e3:17:c9:64:9b:
25:b6:1c:8f:96:bf:73:2b:59:0c:b5:f5:c8:ac:7d:
53:34:e3:64:8b:a7:90:3c:76:ad:ba:53:1e:db:0d:
0d:79:a2:60:31:a4:9f:76:46:15:0f:cc:2e:1d:e9:
4d:4c:14:f4:f0:55:94:86:ea:b6:b6:e4:d7:12:c2:
17:40:ee:4f:1f:46:d5:9b:ce:60:9a:b3:7a:8e:f4:
93:23:7d:b2:3b:2c:30:31:a5:a9:30:81:1f:71:f7:
6f:04:7e:4e:86:d3:86:4c:00:d9:3d:48:91:0c:96:
ea:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:22:75:B1:DF:09:D2:B1:32:3B:9B:FD:BC:24:E0:3A:5A:29:E9:F8
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/LiJ1sd8J0rEyO5v9vCTgOlop6fg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.36.37.0/24
192.71.158.0/24
192.121.172.0/24
192.121.192.0/24
193.180.61.0/24
193.181.187.0/24
193.183.118.0/24
193.234.68.0/23
193.234.220.0/23
193.234.237.0/24
194.14.129.0/24
194.14.212.0/24
194.68.56.0/23
194.68.99.0/24
194.68.126.0/24
194.68.194.0/23
194.71.27.0/24
194.71.83.0/24
194.71.140.0/23
194.71.248.0/21
194.103.50.0/24
194.132.108.0/23
194.132.174.0/23
Signature Algorithm: sha256WithRSAEncryption
7b:58:91:a4:e4:7d:3e:dc:94:14:76:79:ed:fa:b8:3c:b8:56:
ee:02:e6:51:fb:51:b0:7a:a7:39:44:dd:18:8c:99:4d:7e:8f:
7c:07:7c:4d:63:d8:53:af:56:2f:86:62:67:44:06:b1:36:84:
02:09:e9:75:76:01:21:e0:ba:32:0a:36:65:26:aa:74:79:07:
a8:de:73:36:7a:63:14:71:09:d6:50:cb:cc:7b:00:41:ae:87:
8e:8a:a8:27:b9:24:7a:e8:1a:b8:e4:26:e8:54:e2:37:75:ff:
b2:a1:78:8d:52:d5:e8:a9:92:c2:41:9a:c1:c4:7e:ad:28:54:
c3:59:8a:a7:0b:4a:dc:18:2b:30:d8:4f:54:d4:71:59:89:e7:
5e:71:cb:6f:f0:17:b6:d8:47:72:32:f7:f0:a8:4b:7b:d9:a7:
f1:1c:fe:c3:95:a0:88:1e:d1:bf:a8:ba:d0:46:09:cd:80:86:
19:78:c6:5b:70:85:6a:29:3e:7b:d6:62:35:ab:aa:4c:32:a5:
c2:8f:a5:93:0b:7b:e8:42:b1:0e:2e:79:08:f4:dc:73:fd:71:
b4:50:0f:47:61:31:4f:e7:14:e0:10:be:ac:85:a8:64:f2:91:
33:d6:69:ab:a2:26:22:df:20:df:40:70:bb:6a:04:01:bd:9e:
24:49:fb:98
-----BEGIN CERTIFICATE-----
MIIFhjCCBG6gAwIBAgISAY+fQ7E9aNEfuuC+6O5to1+2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh
ZGFmMWIwHhcNMjQwNTIyMDc0NjA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZTIyNzViMWRmMDlkMmIxMzIzYjliZmRiYzI0ZTAzYTVhMjllOWY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKctdjuNW8KHSH6Aj1AKS+Sbx9Ik
ywRjX1fnx0XeQJiJlKr1wZYyFJz5fEdjtgPul6ofsuD09cR9nZFyqB8NlYvIJlb+
AYrImtkoA4cojstEuCEyaWf0Q0ne9Pzk94S1hL4ba42ou71sDSlYjRZSGgDLFDtp
vq2TRbvFkF5578O+S46nCYkj2QmwLP1DS44r4xfJZJslthyPlr9zK1kMtfXIrH1T
NONki6eQPHatulMe2w0NeaJgMaSfdkYVD8wuHelNTBT08FWUhuq2tuTXEsIXQO5P
H0bVm85gmrN6jvSTI32yOywwMaWpMIEfcfdvBH5OhtOGTADZPUiRDJbq1QIDAQAB
o4ICkjCCAo4wHQYDVR0OBBYEFC4idbHfCdKxMjub/bwk4DpaKen4MB8GA1UdIwQY
MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt
OTQzZDAzMzIxMzI2LzEvTGlKMXNkOEowckV5TzV2OXZDVGdPbG9wNmZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2
LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGnBggrBgEFBQcBBwEB/wSBlzCBlDCBkQQCAAEwgYoDBADA
JCUDBADAR54DBADAeawDBADAecADBADBtD0DBADBtbsDBADBt3YDBAHB6kQDBAHB
6twDBADB6u0DBADCDoEDBADCDtQDBAHCRDgDBADCRGMDBADCRH4DBAHCRMIDBADC
RxsDBADCR1MDBAHCR4wDBAPCR/gDBADCZzIDBAHChGwDBAHChK4wDQYJKoZIhvcN
AQELBQADggEBAHtYkaTkfT7clBR2ee36uDy4Vu4C5lH7UbB6pzlE3RiMmU1+j3wH
fE1j2FOvVi+GYmdEBrE2hAIJ6XV2ASHgujIKNmUmqnR5B6jeczZ6YxRxCdZQy8x7
AEGuh46KqCe5JHroGrjkJuhU4jd1/7KheI1S1eipksJBmsHEfq0oVMNZiqcLStwY
KzDYT1TUcVmJ515xy2/wF7bYR3Iy9/CoS3vZp/Ec/sOVoIge0b+outBGCc2Ahhl4
xltwhWopPnvWYjWrqkwypcKPpZMLe+hCsQ4ueQj03HP9cbRQD0dhMU/nFOAQvqyF
qGTykTPWaauiJiLfIN9AcLtqBAG9niRJ+5g=
-----END CERTIFICATE-----
Generated at Tue Apr 22 11:52:22 2025 by rpki-client