Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/zK3Mw9glpSuaEOJL7s62v41Q3ag.roa
File: zK3Mw9glpSuaEOJL7s62v41Q3ag.roa (raw, json)
Hash identifier: DUD/cnuQ2WRq2QJCheOTzsY0+MYs+/tvV9ly9MiCgFs=
Subject key identifier: CC:AD:CC:C3:D8:25:A5:2B:9A:10:E2:4B:EE:CE:B6:BF:8D:50:DD:A8
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 0190BA6690C016FC71EBEE7610CDB171940C
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/zK3Mw9glpSuaEOJL7s62v41Q3ag.roa
Signing time: Tue 16 Jul 2024 07:16:42 +0000
ROA not before: Tue 16 Jul 2024 07:16:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1257
IP address blocks: 192.71.180.0/24 maxlen: 24
192.71.220.0/24 maxlen: 24
193.180.207.0/24 maxlen: 24
193.180.240.0/24 maxlen: 24
193.180.247.0/24 maxlen: 24
193.181.2.0/24 maxlen: 24
193.234.87.0/24 maxlen: 24
193.234.177.0/24 maxlen: 24
194.71.248.0/21 maxlen: 24
194.103.24.0/22 maxlen: 24
194.132.60.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 22 Jul 2024 08:45:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:ba:66:90:c0:16:fc:71:eb:ee:76:10:cd:b1:71:94:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jul 16 07:16:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ccadccc3d825a52b9a10e24beeceb6bf8d50dda8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:97:ca:91:16:86:75:62:59:67:3d:53:b3:5a:
14:f4:be:4d:0f:55:eb:2c:cc:d9:f1:18:5c:a1:55:
54:b0:24:21:e6:57:70:46:97:95:62:27:e8:53:93:
0a:fc:fd:31:b5:0c:ce:2f:63:08:bd:77:0f:e7:e5:
d6:43:28:5a:2b:83:62:06:a0:06:c9:4c:53:42:d4:
78:f7:2a:04:5f:40:34:29:10:14:55:02:9a:0b:1c:
3f:89:b9:87:8f:47:89:18:fa:9e:a6:d2:72:84:4a:
47:47:1b:49:aa:46:97:4d:c1:66:b1:49:32:8f:46:
0d:e5:7d:ec:73:0f:52:98:12:90:42:fa:67:a5:c3:
b6:5e:ce:b5:ea:65:da:e9:af:7b:95:b8:63:a5:ce:
93:0e:52:ad:0b:99:ab:50:b8:dd:50:af:a5:b6:26:
c3:6a:6d:f2:f7:cf:5c:7d:5e:ce:52:6b:67:e9:08:
4c:56:31:a1:3e:68:ce:b1:81:46:71:64:aa:10:4c:
37:aa:ff:57:b5:83:3b:b6:ac:55:71:91:3e:f5:63:
b4:f3:05:2f:e6:f8:ce:a0:48:d3:06:12:0c:d2:5a:
72:95:14:18:ae:3e:48:9c:e9:d6:26:59:05:18:0e:
fd:8e:9a:b2:6e:b7:51:6a:bc:e9:02:91:45:86:3c:
ae:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:AD:CC:C3:D8:25:A5:2B:9A:10:E2:4B:EE:CE:B6:BF:8D:50:DD:A8
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/zK3Mw9glpSuaEOJL7s62v41Q3ag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.71.180.0/24
192.71.220.0/24
193.180.207.0/24
193.180.240.0/24
193.180.247.0/24
193.181.2.0/24
193.234.87.0/24
193.234.177.0/24
194.71.248.0/21
194.103.24.0/22
194.132.60.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:2d:75:e1:10:b3:c1:db:bb:b8:c6:cc:8b:44:66:11:09:a2:
7f:7d:64:b4:74:60:17:6d:f2:69:bc:a6:9b:2e:4c:a1:96:2f:
d5:7a:e4:ab:32:ed:62:4f:51:c5:53:ef:56:f8:bb:ae:29:a1:
3f:ad:ba:f6:29:75:c4:69:24:22:e4:33:cf:21:49:61:30:9b:
c5:16:18:6f:12:b1:38:84:16:07:0a:d7:0a:85:5f:72:f7:8f:
76:f1:aa:04:df:7b:a7:33:5a:cc:96:03:53:17:11:2e:45:dd:
9b:cb:33:c1:77:28:bf:87:92:b4:cc:fa:eb:b2:d5:01:10:54:
5b:b8:a6:ed:71:4b:28:9f:b2:2a:7e:3e:f7:e9:43:e0:02:59:
b6:3f:0b:ce:ad:ca:60:fe:a2:3a:d0:a4:ec:8a:f1:8c:93:10:
5e:bb:4c:44:8b:b8:e7:35:f6:3a:0b:2a:62:ed:96:aa:c3:ab:
7d:45:31:b7:a1:00:5f:c5:e5:d8:74:eb:7e:8a:12:44:db:71:
3c:56:04:98:34:4d:43:36:f8:87:54:c7:d8:34:f3:47:c5:8d:
4f:29:8b:e5:7e:16:68:3d:88:c1:c9:78:da:ee:dc:39:be:6a:
25:8f:db:4d:15:c4:25:d7:15:8e:0a:e4:01:54:1a:38:ac:18:
07:17:2c:c1
-----BEGIN CERTIFICATE-----
MIIFOTCCBCGgAwIBAgISAZC6ZpDAFvxx6+52EM2xcZQMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh
ZGFmMWIwHhcNMjQwNzE2MDcxNjQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjY2FkY2NjM2Q4MjVhNTJiOWExMGUyNGJlZWNlYjZiZjhkNTBkZGE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpfKkRaGdWJZZz1Ts1oU9L5ND1Xr
LMzZ8RhcoVVUsCQh5ldwRpeVYifoU5MK/P0xtQzOL2MIvXcP5+XWQyhaK4NiBqAG
yUxTQtR49yoEX0A0KRAUVQKaCxw/ibmHj0eJGPqeptJyhEpHRxtJqkaXTcFmsUky
j0YN5X3scw9SmBKQQvpnpcO2Xs616mXa6a97lbhjpc6TDlKtC5mrULjdUK+ltibD
am3y989cfV7OUmtn6QhMVjGhPmjOsYFGcWSqEEw3qv9XtYM7tqxVcZE+9WO08wUv
5vjOoEjTBhIM0lpylRQYrj5InOnWJlkFGA79jpqybrdRarzpApFFhjyu7QIDAQAB
o4ICRTCCAkEwHQYDVR0OBBYEFMytzMPYJaUrmhDiS+7Otr+NUN2oMB8GA1UdIwQY
MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt
OTQzZDAzMzIxMzI2LzEvekszTXc5Z2xwU3VhRU9KTDdzNjJ2NDFRM2FnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2
LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQAwEe0AwQA
wEfcAwQAwbTPAwQAwbTwAwQAwbT3AwQAwbUCAwQAwepXAwQAweqxAwQDwkf4AwQC
wmcYAwQAwoQ8MA0GCSqGSIb3DQEBCwUAA4IBAQBLLXXhELPB27u4xsyLRGYRCaJ/
fWS0dGAXbfJpvKabLkyhli/VeuSrMu1iT1HFU+9W+LuuKaE/rbr2KXXEaSQi5DPP
IUlhMJvFFhhvErE4hBYHCtcKhV9y94928aoE33unM1rMlgNTFxEuRd2byzPBdyi/
h5K0zPrrstUBEFRbuKbtcUson7Iqfj736UPgAlm2PwvOrcpg/qI60KTsivGMkxBe
u0xEi7jnNfY6Cypi7Zaqw6t9RTG3oQBfxeXYdOt+ihJE23E8VgSYNE1DNviHVMfY
NPNHxY1PKYvlfhZoPYjByXja7tw5vmolj9tNFcQl1xWOCuQBVBo4rBgHFyzB
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:09:06 2025 by rpki-client