Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/a9cc5d-69e0-4597-ad64-fe2cb431cf2f/1/T2WJktaQZ2H4MeWJG6aKdkRJsxQ.roa
File: T2WJktaQZ2H4MeWJG6aKdkRJsxQ.roa (raw, json)
Hash identifier: B/3ULiJ6ySMaWtYjpSky/DC6RDJsEizpUaQkERpxHaM=
Subject key identifier: 4F:65:89:92:D6:90:67:61:F8:31:E5:89:1B:A6:8A:76:44:49:B3:14
Certificate issuer: /CN=15dc3cb1e07d714b725f51a66d1dcfd87ae1c51a
Certificate serial: 0193346FE9FBE68A2F95A5B092E2773BB170
Authority key identifier: 15:DC:3C:B1:E0:7D:71:4B:72:5F:51:A6:6D:1D:CF:D8:7A:E1:C5:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fdw8seB9cUtyX1GmbR3P2HrhxRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/a9cc5d-69e0-4597-ad64-fe2cb431cf2f/1/T2WJktaQZ2H4MeWJG6aKdkRJsxQ.roa
Signing time: Sat 16 Nov 2024 10:06:09 +0000
ROA not before: Sat 16 Nov 2024 10:06:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31435
IP address blocks: 82.146.20.0/23 maxlen: 23
82.146.22.0/24 maxlen: 24
82.146.26.0/23 maxlen: 23
84.238.208.0/21 maxlen: 21
84.238.220.0/22 maxlen: 22
84.238.220.0/23 maxlen: 23
84.238.222.0/24 maxlen: 24
84.238.224.0/22 maxlen: 22
185.240.152.0/23 maxlen: 23
185.240.154.0/23 maxlen: 23
185.240.181.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 17 Nov 2024 15:18:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:34:6f:e9:fb:e6:8a:2f:95:a5:b0:92:e2:77:3b:b1:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15dc3cb1e07d714b725f51a66d1dcfd87ae1c51a
Validity
Not Before: Nov 16 10:06:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4f658992d6906761f831e5891ba68a764449b314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d7:7b:ac:a7:62:60:43:f3:8e:b6:e7:85:45:
e8:b4:7e:f7:be:bb:56:3c:88:67:15:e7:96:5c:64:
43:02:91:24:88:57:f1:02:c8:8e:fb:a9:96:eb:51:
17:d5:74:26:19:02:8d:1b:2d:44:07:46:26:df:42:
10:d2:3d:0a:80:18:c7:87:c8:ba:1e:ba:d0:44:ad:
c5:31:00:bd:5c:b5:a7:71:d8:61:31:78:87:b4:de:
47:a3:7d:17:06:9e:53:f5:7e:3e:f6:9c:71:84:81:
11:46:31:21:2a:fd:3b:0a:c1:f4:2f:b9:cb:c4:6b:
0b:36:ed:d2:ea:63:a7:7f:cc:b4:02:6f:fc:80:2a:
1e:41:a9:91:7c:09:a4:c1:f6:36:35:7a:bd:02:b1:
6f:82:05:3e:ef:9e:09:54:ab:f6:0d:aa:df:e1:96:
33:50:e2:26:83:b0:74:e2:c2:64:8c:04:a5:5f:d6:
0c:b6:a0:b3:ce:c8:9f:53:11:2b:bb:1a:c9:31:53:
88:88:a8:d2:36:4b:66:c3:7c:19:34:a6:54:aa:a3:
ac:3d:8b:89:8b:11:b0:d9:3b:b5:c9:8a:50:74:9c:
4f:d3:f2:68:ad:64:32:6b:5a:46:f9:8a:e9:5f:43:
30:24:ad:fb:ff:ea:3d:fd:49:1c:09:05:42:07:b1:
20:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:65:89:92:D6:90:67:61:F8:31:E5:89:1B:A6:8A:76:44:49:B3:14
X509v3 Authority Key Identifier:
keyid:15:DC:3C:B1:E0:7D:71:4B:72:5F:51:A6:6D:1D:CF:D8:7A:E1:C5:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fdw8seB9cUtyX1GmbR3P2HrhxRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/a9cc5d-69e0-4597-ad64-fe2cb431cf2f/1/T2WJktaQZ2H4MeWJG6aKdkRJsxQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/a9cc5d-69e0-4597-ad64-fe2cb431cf2f/1/Fdw8seB9cUtyX1GmbR3P2HrhxRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.146.20.0-82.146.22.255
82.146.26.0/23
84.238.208.0/21
84.238.220.0-84.238.227.255
185.240.152.0/22
185.240.181.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:ac:5e:80:1c:41:d5:31:47:96:c0:ac:87:e5:ae:f5:91:d5:
0b:ec:c0:c9:5a:80:5b:b7:d0:aa:c6:12:b5:2e:f4:57:ce:cb:
73:a8:61:89:77:51:58:1b:73:b1:9f:70:94:7a:da:4f:2b:7a:
d9:83:13:07:69:e2:ac:05:07:46:c2:c8:4b:e1:4d:90:eb:e5:
a0:6b:45:33:8e:ef:32:ee:7e:a9:76:cd:1e:88:98:57:b6:6c:
fa:78:9f:be:43:ac:f9:79:44:d8:10:19:9f:ec:ed:e7:6b:f9:
40:b4:9f:c5:45:83:28:d2:4e:be:43:13:32:bd:db:e2:05:14:
e8:5c:4a:dc:b8:80:da:5f:b4:4e:4b:9f:3a:15:c1:7b:57:01:
83:6d:d4:d3:d3:a3:dd:25:a6:c0:f0:c6:9a:57:19:52:19:f0:
35:57:b9:13:c8:e3:74:a4:3a:ec:b4:71:6e:7a:ee:36:ba:f0:
de:9b:66:65:72:23:99:6e:fc:c1:35:72:b0:96:db:03:06:bf:
7e:2e:bc:73:e5:e0:0c:d0:27:49:31:01:76:b5:f6:61:ce:6c:
42:12:74:28:f8:28:8e:d8:8f:f7:55:13:3d:2d:c6:6d:a9:e6:
18:3e:61:2a:2c:d3:c2:91:94:59:01:2f:7a:e0:57:7b:4c:9c:
13:a2:b6:6e
-----BEGIN CERTIFICATE-----
MIIFKzCCBBOgAwIBAgISAZM0b+n75oovlaWwkuJ3O7FwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZGMzY2IxZTA3ZDcxNGI3MjVmNTFhNjZkMWRjZmQ4N2Fl
MWM1MWEwHhcNMjQxMTE2MTAwNjA5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZjY1ODk5MmQ2OTA2NzYxZjgzMWU1ODkxYmE2OGE3NjQ0NDliMzE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9d7rKdiYEPzjrbnhUXotH73vrtW
PIhnFeeWXGRDApEkiFfxAsiO+6mW61EX1XQmGQKNGy1EB0Ym30IQ0j0KgBjHh8i6
HrrQRK3FMQC9XLWncdhhMXiHtN5Ho30XBp5T9X4+9pxxhIERRjEhKv07CsH0L7nL
xGsLNu3S6mOnf8y0Am/8gCoeQamRfAmkwfY2NXq9ArFvggU+754JVKv2Darf4ZYz
UOImg7B04sJkjASlX9YMtqCzzsifUxEruxrJMVOIiKjSNktmw3wZNKZUqqOsPYuJ
ixGw2Tu1yYpQdJxP0/JorWQya1pG+YrpX0MwJK37/+o9/UkcCQVCB7EgLwIDAQAB
o4ICNzCCAjMwHQYDVR0OBBYEFE9liZLWkGdh+DHliRuminZESbMUMB8GA1UdIwQY
MBaAFBXcPLHgfXFLcl9Rpm0dz9h64cUaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmR3OHNlQjljVXR5WDFHbWJSM1AySHJoeFJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9hOWNjNWQtNjllMC00NTk3LWFkNjQt
ZmUyY2I0MzFjZjJmLzEvVDJXSmt0YVFaMkg0TWVXSkc2YUtka1JKc3hRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC9hOWNjNWQtNjllMC00NTk3LWFkNjQtZmUyY2I0MzFjZjJm
LzEvRmR3OHNlQjljVXR5WDFHbWJSM1AySHJoeFJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME0GCCsGAQUFBwEHAQH/BD4wPDA6BAIAATA0MAwDBAJSkhQD
BABSkhYDBAFSkhoDBANU7tAwDAMEAlTu3AMEAlTu4AMEArnwmAMEALnwtTANBgkq
hkiG9w0BAQsFAAOCAQEAnqxegBxB1TFHlsCsh+Wu9ZHVC+zAyVqAW7fQqsYStS70
V87Lc6hhiXdRWBtzsZ9wlHraTyt62YMTB2nirAUHRsLIS+FNkOvloGtFM47vMu5+
qXbNHoiYV7Zs+nifvkOs+XlE2BAZn+zt52v5QLSfxUWDKNJOvkMTMr3b4gUU6FxK
3LiA2l+0TkufOhXBe1cBg23U09Oj3SWmwPDGmlcZUhnwNVe5E8jjdKQ67LRxbnru
Nrrw3ptmZXIjmW78wTVysJbbAwa/fi68c+XgDNAnSTEBdrX2Yc5sQhJ0KPgojtiP
91UTPS3GbanmGD5hKizTwpGUWQEveuBXe0ycE6K2bg==
Generated at Sun Nov 17 17:45:25 2024 by rpki-client on console-fra.rpki-client.org