Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/efVvLusTyCuQmmWML8jv3nRIYEk.roa
File: efVvLusTyCuQmmWML8jv3nRIYEk.roa (raw, json)
Hash identifier: ckKy559g4G3u6COGPD5B0dVoeozf9N9UCoYdJBwBRfc=
Subject key identifier: 79:F5:6F:2E:EB:13:C8:2B:90:9A:65:8C:2F:C8:EF:DE:74:48:60:49
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 0191C7EDE88CBC895EA615B48633544C2965
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/efVvLusTyCuQmmWML8jv3nRIYEk.roa
Signing time: Fri 06 Sep 2024 15:22:23 +0000
ROA not before: Fri 06 Sep 2024 15:22:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211619
IP address blocks: 5.182.115.0/24 maxlen: 24
45.9.168.0/24 maxlen: 24
77.242.152.0/24 maxlen: 24
77.242.153.0/24 maxlen: 24
77.242.155.0/24 maxlen: 24
83.137.157.0/24 maxlen: 24
88.209.205.0/24 maxlen: 24
88.209.206.0/24 maxlen: 24
88.209.228.0/24 maxlen: 24
88.209.236.0/22 maxlen: 22
88.209.236.0/24 maxlen: 24
88.209.237.0/24 maxlen: 24
88.209.238.0/24 maxlen: 24
88.209.239.0/24 maxlen: 24
92.52.217.0/24 maxlen: 24
194.41.47.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 12 Sep 2024 11:39:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:c7:ed:e8:8c:bc:89:5e:a6:15:b4:86:33:54:4c:29:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Sep 6 15:22:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=79f56f2eeb13c82b909a658c2fc8efde74486049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ab:95:8e:e7:5e:0a:9e:6d:64:1f:2b:53:a6:
cc:0d:09:30:87:ec:a1:4f:50:82:c5:d5:f5:fb:ff:
a8:07:bb:61:fb:ec:c4:fe:89:b5:eb:62:55:c7:ed:
18:d1:42:84:8d:2d:50:60:b4:4f:1a:8d:14:c2:70:
73:28:04:71:1e:12:b8:24:77:38:45:6c:09:70:80:
0b:7a:b2:3f:cc:de:51:66:1e:0e:f4:b8:d1:f1:6d:
83:21:58:13:3a:df:0f:79:77:5e:9e:a8:74:21:fb:
13:8f:e4:00:12:4a:af:41:2d:d2:e3:33:a2:a5:70:
fa:84:f4:22:e5:01:d2:f8:51:ad:66:41:e9:4a:27:
6f:92:44:e3:dc:09:18:02:66:33:18:e6:48:16:03:
4a:2b:aa:35:90:84:7f:d2:4a:db:9c:da:27:83:cb:
f2:ca:79:33:fc:dc:31:47:71:3c:cc:71:34:84:6c:
75:31:9c:0a:b6:88:1b:a0:8f:85:2a:bc:07:73:55:
a3:f4:a5:c9:01:67:d0:c9:91:de:03:e9:95:92:7e:
63:2a:d9:3b:cb:d6:11:c4:1d:b7:98:53:f2:1a:a9:
2b:9a:04:8a:db:0a:24:c9:07:40:99:87:37:76:a3:
e9:cd:aa:87:7c:a8:bd:ec:e3:27:b5:dc:b0:3a:27:
1e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:F5:6F:2E:EB:13:C8:2B:90:9A:65:8C:2F:C8:EF:DE:74:48:60:49
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/efVvLusTyCuQmmWML8jv3nRIYEk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.115.0/24
45.9.168.0/24
77.242.152.0/23
77.242.155.0/24
83.137.157.0/24
88.209.205.0-88.209.206.255
88.209.228.0/24
88.209.236.0/22
92.52.217.0/24
194.41.47.0/24
Signature Algorithm: sha256WithRSAEncryption
91:ba:2b:44:ff:aa:b4:c5:3a:e8:c8:06:fb:64:6e:f0:b2:c2:
44:16:bf:4d:36:eb:63:ca:2f:c0:20:1e:d1:e3:2b:0d:99:25:
98:70:d8:83:73:c8:fb:2c:c5:53:26:67:72:3e:11:ab:c9:9c:
b8:7b:96:7d:54:48:c4:ac:ef:a3:41:45:4b:b0:08:3b:89:7f:
46:69:50:69:81:64:df:76:82:23:53:34:98:db:73:42:23:64:
8a:72:2d:c9:4b:86:5d:57:c3:64:31:13:51:8a:11:80:fc:a3:
19:34:d7:b8:1a:a6:dd:92:db:c6:c2:9c:c1:3d:72:64:e5:c4:
40:1c:c5:b7:b4:68:c5:21:f0:a0:20:98:d7:36:34:85:45:69:
31:d8:e2:13:31:6e:06:a5:59:06:9f:6f:3d:72:52:ef:70:f4:
94:a4:70:c8:96:ed:ed:88:cb:88:ec:10:d1:59:21:30:79:34:
62:fd:08:50:a4:0c:a7:f6:00:ff:b0:62:62:de:72:29:8d:e3:
b1:ef:68:d3:42:09:aa:08:de:9b:e3:70:48:0d:77:de:73:0e:
5f:41:0c:61:69:6a:28:71:56:bd:78:51:97:7c:b4:17:34:f3:
73:6d:81:3e:22:7b:1b:8a:e7:0b:83:c6:6a:da:5e:26:96:14:
40:06:75:be
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgISAZHH7eiMvIlephW0hjNUTCllMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkYWFhMGUwODIzNjAzNjBhY2RhMzQ3NjY0ZWI4MzE0ZWIx
MWRhMTAwHhcNMjQwOTA2MTUyMjIzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OWY1NmYyZWViMTNjODJiOTA5YTY1OGMyZmM4ZWZkZTc0NDg2MDQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjquVjudeCp5tZB8rU6bMDQkwh+yh
T1CCxdX1+/+oB7th++zE/om162JVx+0Y0UKEjS1QYLRPGo0UwnBzKARxHhK4JHc4
RWwJcIALerI/zN5RZh4O9LjR8W2DIVgTOt8PeXdenqh0IfsTj+QAEkqvQS3S4zOi
pXD6hPQi5QHS+FGtZkHpSidvkkTj3AkYAmYzGOZIFgNKK6o1kIR/0krbnNong8vy
ynkz/NwxR3E8zHE0hGx1MZwKtogboI+FKrwHc1Wj9KXJAWfQyZHeA+mVkn5jKtk7
y9YRxB23mFPyGqkrmgSK2wokyQdAmYc3dqPpzaqHfKi97OMntdywOicefQIDAQAB
o4ICRzCCAkMwHQYDVR0OBBYEFHn1by7rE8grkJpljC/I7950SGBJMB8GA1UdIwQY
MBaAFM2qoOCCNgNgrNo0dmTrgxTrEdoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2Mt
N2U0ZDZmNmY2ZTY2LzEvZWZWdkx1c1R5Q3VRbW1XTUw4anYzblJJWUVrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2MtN2U0ZDZmNmY2ZTY2
LzEvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMF0GCCsGAQUFBwEHAQH/BE4wTDBKBAIAATBEAwQABbZzAwQA
LQmoAwQBTfKYAwQATfKbAwQAU4mdMAwDBABY0c0DBABY0c4DBABY0eQDBAJY0ewD
BABcNNkDBADCKS8wDQYJKoZIhvcNAQELBQADggEBAJG6K0T/qrTFOujIBvtkbvCy
wkQWv00262PKL8AgHtHjKw2ZJZhw2INzyPssxVMmZ3I+EavJnLh7ln1USMSs76NB
RUuwCDuJf0ZpUGmBZN92giNTNJjbc0IjZIpyLclLhl1Xw2QxE1GKEYD8oxk017ga
pt2S28bCnME9cmTlxEAcxbe0aMUh8KAgmNc2NIVFaTHY4hMxbgalWQafbz1yUu9w
9JSkcMiW7e2Iy4jsENFZITB5NGL9CFCkDKf2AP+wYmLecimN47HvaNNCCaoI3pvj
cEgNd95zDl9BDGFpaihxVr14UZd8tBc083NtgT4iexuK5wuDxmraXiaWFEAGdb4=
-----END CERTIFICATE-----
Generated at Thu Sep 12 14:04:24 2024 by rpki-client on console-ams.rpki-client.org