Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/chJkV21xszAzd55kSlABp9pwhw0.roa
File: chJkV21xszAzd55kSlABp9pwhw0.roa (raw, json)
Hash identifier: qQ+uUZHSgTAaujXNz1mjuLgFO5bh6WYKj7eB2SY42zY=
Subject key identifier: 72:12:64:57:6D:71:B3:30:33:77:9E:64:4A:50:01:A7:DA:70:87:0D
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 018F3D7FCD92AD60F1B3CE2002BFBB6EFFCB
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/chJkV21xszAzd55kSlABp9pwhw0.roa
Signing time: Fri 03 May 2024 08:08:56 +0000
ROA not before: Fri 03 May 2024 08:08:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211619
IP address blocks: 5.182.115.0/24 maxlen: 24
45.9.168.0/24 maxlen: 24
77.242.152.0/24 maxlen: 24
77.242.153.0/24 maxlen: 24
77.242.154.0/24 maxlen: 24
83.137.157.0/24 maxlen: 24
83.137.158.0/24 maxlen: 24
88.209.205.0/24 maxlen: 24
88.209.206.0/24 maxlen: 24
88.209.219.0/24 maxlen: 24
88.209.228.0/24 maxlen: 24
88.209.236.0/22 maxlen: 22
88.209.236.0/24 maxlen: 24
88.209.237.0/24 maxlen: 24
88.209.238.0/24 maxlen: 24
88.209.239.0/24 maxlen: 24
88.209.246.0/23 maxlen: 23
88.209.254.0/24 maxlen: 24
92.52.217.0/24 maxlen: 24
92.52.218.0/24 maxlen: 24
194.41.47.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 08 May 2024 06:24:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:3d:7f:cd:92:ad:60:f1:b3:ce:20:02:bf:bb:6e:ff:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: May 3 08:08:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=721264576d71b33033779e644a5001a7da70870d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d3:00:61:df:0c:ba:08:4b:b7:02:d1:48:e9:
8c:dd:b6:cb:9b:19:a6:41:13:4d:69:63:b5:8f:32:
3b:80:9f:6b:4c:3b:e4:69:87:be:89:b4:7e:d7:66:
73:6b:0f:f4:8a:d3:48:fb:98:1b:f5:d9:33:f5:85:
0c:4d:00:d3:e7:3b:7e:07:9d:cb:68:83:1b:35:6c:
ce:a8:5e:29:f1:97:87:36:20:be:1e:d4:4d:d5:eb:
29:ae:bd:45:4c:8d:b9:64:f7:10:f3:32:0d:f5:f7:
27:2d:f0:31:8e:81:d1:fb:6b:27:74:2b:3b:80:bb:
b6:e1:a8:c0:f3:e3:14:0f:fd:62:ff:27:25:45:15:
e9:36:a1:b3:6e:08:1d:5e:9d:e6:c6:59:e6:bf:b8:
26:f4:0c:5b:5b:a6:b7:66:54:e7:ca:87:17:ab:21:
a4:25:9e:46:fa:c4:ca:31:d1:7f:fe:e1:9f:08:08:
0b:39:03:ae:d5:05:c2:54:a5:a7:14:74:68:17:68:
c0:39:06:34:6a:a5:1a:84:cf:9e:30:c1:cd:48:23:
b8:2c:1a:f3:44:59:7e:2f:39:09:7c:1a:a1:b9:41:
bc:32:52:a9:60:fd:dc:81:16:87:bc:c7:62:6b:e1:
aa:2b:36:e9:bc:d2:bc:e3:6f:dd:ca:e6:17:12:85:
a4:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:12:64:57:6D:71:B3:30:33:77:9E:64:4A:50:01:A7:DA:70:87:0D
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/chJkV21xszAzd55kSlABp9pwhw0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.115.0/24
45.9.168.0/24
77.242.152.0-77.242.154.255
83.137.157.0-83.137.158.255
88.209.205.0-88.209.206.255
88.209.219.0/24
88.209.228.0/24
88.209.236.0/22
88.209.246.0/23
88.209.254.0/24
92.52.217.0-92.52.218.255
194.41.47.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:e6:a3:3b:b1:6a:89:35:43:32:01:61:6e:a3:ea:8f:a3:e8:
48:dc:a6:5a:56:68:1a:f9:5d:a2:5d:d3:99:4c:e5:fe:12:f7:
e4:65:de:2a:fb:97:56:19:fb:8f:64:10:4b:9e:52:05:46:3d:
f4:72:93:c0:ea:04:da:42:07:a4:9f:f0:c8:70:d3:92:f4:e8:
0e:0c:16:8b:8d:a8:5c:5d:32:58:68:33:a5:f8:17:5a:68:d0:
eb:bc:7b:a4:4d:07:92:68:b8:0c:45:66:76:81:0f:77:ed:10:
a4:9a:62:6f:4b:c5:91:09:ae:fb:95:70:87:8f:b3:50:76:99:
4f:f6:39:3b:e5:44:6a:23:cb:99:b3:6f:70:ef:d0:4e:75:aa:
81:de:c0:59:d2:e9:d3:96:be:bf:21:83:cf:7a:f7:0a:4f:d3:
e7:e0:e8:4a:f8:b9:4e:94:60:c8:d2:6f:31:0b:f3:54:4f:63:
c9:a0:26:f0:dc:2f:41:1e:af:3f:6c:fc:9b:84:78:ac:c4:de:
a7:34:12:a2:4b:72:30:f2:f4:20:7e:68:5a:9f:b9:4e:90:d0:
dd:64:73:9b:bc:89:3a:41:12:a5:13:dd:72:ff:55:d3:91:d7:
47:7d:d6:7b:08:ba:7d:77:7f:08:7b:48:5c:4d:33:41:83:62:
3b:0e:e7:44
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgISAY89f82SrWDxs84gAr+7bv/LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkYWFhMGUwODIzNjAzNjBhY2RhMzQ3NjY0ZWI4MzE0ZWIx
MWRhMTAwHhcNMjQwNTAzMDgwODU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MjEyNjQ1NzZkNzFiMzMwMzM3NzllNjQ0YTUwMDFhN2RhNzA4NzBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9MAYd8MughLtwLRSOmM3bbLmxmm
QRNNaWO1jzI7gJ9rTDvkaYe+ibR+12Zzaw/0itNI+5gb9dkz9YUMTQDT5zt+B53L
aIMbNWzOqF4p8ZeHNiC+HtRN1esprr1FTI25ZPcQ8zIN9fcnLfAxjoHR+2sndCs7
gLu24ajA8+MUD/1i/yclRRXpNqGzbggdXp3mxlnmv7gm9AxbW6a3ZlTnyocXqyGk
JZ5G+sTKMdF//uGfCAgLOQOu1QXCVKWnFHRoF2jAOQY0aqUahM+eMMHNSCO4LBrz
RFl+LzkJfBqhuUG8MlKpYP3cgRaHvMdia+GqKzbpvNK842/dyuYXEoWk3wIDAQAB
o4ICbDCCAmgwHQYDVR0OBBYEFHISZFdtcbMwM3eeZEpQAafacIcNMB8GA1UdIwQY
MBaAFM2qoOCCNgNgrNo0dmTrgxTrEdoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2Mt
N2U0ZDZmNmY2ZTY2LzEvY2hKa1YyMXhzekF6ZDU1a1NsQUJwOXB3aHcwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2MtN2U0ZDZmNmY2ZTY2
LzEvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGBBggrBgEFBQcBBwEB/wRyMHAwbgQCAAEwaAMEAAW2cwME
AC0JqDAMAwQDTfKYAwQATfKaMAwDBABTiZ0DBABTiZ4wDAMEAFjRzQMEAFjRzgME
AFjR2wMEAFjR5AMEAljR7AMEAVjR9gMEAFjR/jAMAwQAXDTZAwQAXDTaAwQAwikv
MA0GCSqGSIb3DQEBCwUAA4IBAQCc5qM7sWqJNUMyAWFuo+qPo+hI3KZaVmga+V2i
XdOZTOX+EvfkZd4q+5dWGfuPZBBLnlIFRj30cpPA6gTaQgekn/DIcNOS9OgODBaL
jahcXTJYaDOl+BdaaNDrvHukTQeSaLgMRWZ2gQ937RCkmmJvS8WRCa77lXCHj7NQ
dplP9jk75URqI8uZs29w79BOdaqB3sBZ0unTlr6/IYPPevcKT9Pn4OhK+LlOlGDI
0m8xC/NUT2PJoCbw3C9BHq8/bPybhHisxN6nNBKiS3Iw8vQgfmhan7lOkNDdZHOb
vIk6QRKlE91y/1XTkddHfdZ7CLp9d38Ie0hcTTNBg2I7DudE
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:28 2024 by rpki-client on console-fra.rpki-client.org