Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/5f048b-2df3-4140-9f4e-6068c04d1be0/1/z9PgcvMZxomyB2jKIBIU4K0JbjA.roa
File: z9PgcvMZxomyB2jKIBIU4K0JbjA.roa (raw, json)
Hash identifier: iDAa8wGQArwOBv4cKI89M3l87QbqeP86sQfBC/lnbTI=
Subject key identifier: CF:D3:E0:72:F3:19:C6:89:B2:07:68:CA:20:12:14:E0:AD:09:6E:30
Certificate issuer: /CN=3e1f32d0cfa7a86d30e7e11a73ebbd0b24dbf41f
Certificate serial: 018F3912EF7D1333EE1D2D1959CB2F2005FF
Authority key identifier: 3E:1F:32:D0:CF:A7:A8:6D:30:E7:E1:1A:73:EB:BD:0B:24:DB:F4:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ph8y0M-nqG0w5-Eac-u9CyTb9B8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/5f048b-2df3-4140-9f4e-6068c04d1be0/1/z9PgcvMZxomyB2jKIBIU4K0JbjA.roa
Signing time: Thu 02 May 2024 11:31:33 +0000
ROA not before: Thu 02 May 2024 11:31:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208913
IP address blocks: 46.102.105.0/24 maxlen: 24
46.247.144.0/20 maxlen: 24
79.139.80.0/23 maxlen: 24
86.105.241.0/24 maxlen: 24
89.32.125.0/24 maxlen: 24
89.37.58.0/24 maxlen: 24
89.40.41.0/24 maxlen: 24
89.40.164.0/23 maxlen: 24
89.47.43.0/24 maxlen: 24
89.200.240.0/23 maxlen: 24
91.198.23.0/24 maxlen: 24
91.216.138.0/24 maxlen: 24
91.227.33.0/24 maxlen: 24
91.229.228.0/24 maxlen: 24
91.238.148.0/23 maxlen: 24
93.114.84.0/24 maxlen: 24
93.180.208.0/22 maxlen: 24
94.177.6.0/23 maxlen: 24
94.177.23.0/24 maxlen: 24
176.126.198.0/23 maxlen: 24
188.210.254.0/24 maxlen: 24
188.214.89.0/24 maxlen: 24
188.241.59.0/24 maxlen: 24
193.36.44.0/24 maxlen: 24
193.37.136.0/24 maxlen: 24
193.39.119.0/24 maxlen: 24
193.93.40.0/22 maxlen: 24
193.105.176.0/24 maxlen: 24
193.169.8.0/23 maxlen: 24
193.192.52.0/23 maxlen: 24
193.239.172.0/23 maxlen: 24
193.239.246.0/23 maxlen: 24
194.8.81.0/24 maxlen: 24
194.24.234.0/23 maxlen: 24
194.42.100.0/23 maxlen: 24
194.88.134.0/23 maxlen: 24
194.106.212.0/23 maxlen: 24
194.140.235.0/24 maxlen: 24
194.246.106.0/23 maxlen: 24
195.2.196.0/23 maxlen: 24
195.13.48.0/23 maxlen: 24
195.34.80.0/23 maxlen: 24
195.93.140.0/23 maxlen: 24
195.128.188.0/23 maxlen: 24
195.135.192.0/23 maxlen: 24
195.189.176.0/24 maxlen: 24
195.189.186.0/23 maxlen: 24
195.189.250.0/23 maxlen: 24
195.210.44.0/23 maxlen: 24
195.254.140.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 09 May 2024 02:33:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:39:12:ef:7d:13:33:ee:1d:2d:19:59:cb:2f:20:05:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e1f32d0cfa7a86d30e7e11a73ebbd0b24dbf41f
Validity
Not Before: May 2 11:31:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cfd3e072f319c689b20768ca201214e0ad096e30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:73:64:27:26:bf:bb:6f:af:77:bf:ef:45:bc:
5f:c0:34:89:c1:a7:ed:55:e2:57:82:77:a6:78:d8:
a6:ef:6a:5e:fd:3e:db:65:1b:65:07:6e:3e:95:e3:
48:3e:39:0f:ff:59:bb:69:32:5f:03:10:d3:57:02:
95:f9:60:61:99:cf:c0:33:a2:97:c4:21:57:1a:49:
36:c3:96:93:34:d0:3d:5f:5c:28:76:26:53:98:a8:
2a:dd:f9:8e:31:ca:20:f6:a8:fe:dd:27:e2:0a:46:
64:bf:25:c0:46:6a:4e:be:c8:fc:ce:0c:b0:a5:cf:
9b:e0:03:24:36:5e:29:39:8d:c7:45:26:78:6b:59:
e9:0e:5f:ef:cd:7f:b0:15:e4:34:d6:73:ba:6e:28:
5f:86:23:59:03:94:bf:2c:5e:89:01:32:4a:64:01:
d8:b3:40:94:cd:d0:9b:ec:f8:e2:9c:38:cd:cd:46:
0e:68:24:93:2b:68:87:69:8c:04:46:76:46:6c:80:
a7:d8:4e:71:e9:c3:fa:7f:d6:1f:8d:0b:3f:7c:4d:
bf:35:57:30:76:56:2a:ab:04:e8:36:84:f4:0c:63:
62:b1:23:ba:38:1a:5e:87:37:82:e8:89:70:08:04:
f9:35:44:f4:f5:df:6e:c0:b7:1f:ad:4c:aa:1c:c6:
85:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:D3:E0:72:F3:19:C6:89:B2:07:68:CA:20:12:14:E0:AD:09:6E:30
X509v3 Authority Key Identifier:
keyid:3E:1F:32:D0:CF:A7:A8:6D:30:E7:E1:1A:73:EB:BD:0B:24:DB:F4:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ph8y0M-nqG0w5-Eac-u9CyTb9B8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/5f048b-2df3-4140-9f4e-6068c04d1be0/1/z9PgcvMZxomyB2jKIBIU4K0JbjA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/5f048b-2df3-4140-9f4e-6068c04d1be0/1/Ph8y0M-nqG0w5-Eac-u9CyTb9B8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.102.105.0/24
46.247.144.0/20
79.139.80.0/23
86.105.241.0/24
89.32.125.0/24
89.37.58.0/24
89.40.41.0/24
89.40.164.0/23
89.47.43.0/24
89.200.240.0/23
91.198.23.0/24
91.216.138.0/24
91.227.33.0/24
91.229.228.0/24
91.238.148.0/23
93.114.84.0/24
93.180.208.0/22
94.177.6.0/23
94.177.23.0/24
176.126.198.0/23
188.210.254.0/24
188.214.89.0/24
188.241.59.0/24
193.36.44.0/24
193.37.136.0/24
193.39.119.0/24
193.93.40.0/22
193.105.176.0/24
193.169.8.0/23
193.192.52.0/23
193.239.172.0/23
193.239.246.0/23
194.8.81.0/24
194.24.234.0/23
194.42.100.0/23
194.88.134.0/23
194.106.212.0/23
194.140.235.0/24
194.246.106.0/23
195.2.196.0/23
195.13.48.0/23
195.34.80.0/23
195.93.140.0/23
195.128.188.0/23
195.135.192.0/23
195.189.176.0/24
195.189.186.0/23
195.189.250.0/23
195.210.44.0/23
195.254.140.0/23
Signature Algorithm: sha256WithRSAEncryption
1f:be:5d:46:90:13:c7:ed:6b:91:f4:a8:2c:d0:70:94:72:61:
d5:72:d4:2b:d0:6b:e6:e7:b4:00:82:80:3f:85:c0:a7:4b:40:
62:59:2d:35:a7:5a:8a:b8:33:89:7e:7c:d3:6e:9d:28:39:78:
ed:0f:18:fe:ad:9d:71:79:65:bb:aa:2f:9a:cf:98:95:e5:4a:
46:f7:44:0f:e5:24:28:58:7b:57:49:ae:9a:db:9d:68:8f:6a:
bd:5e:76:58:a9:ca:c7:3f:a7:94:bb:10:96:bf:33:f1:01:2d:
4e:54:79:d4:7b:72:35:d3:39:b6:9b:7c:6e:00:d3:51:21:25:
a3:1d:8a:42:fa:81:0f:22:bc:ba:f3:d7:36:77:12:d4:9d:98:
1f:a2:db:97:cb:28:06:b0:6e:dd:b9:9b:52:c3:40:ab:d1:67:
74:75:38:62:24:aa:9b:87:0d:da:0d:83:d3:95:ac:89:68:c9:
77:0d:c3:f5:85:22:3d:65:91:30:cc:85:93:f0:65:c7:79:a3:
d8:f3:f4:fe:25:a8:fc:45:be:c1:27:04:f0:98:5a:42:65:22:
2c:0f:7a:91:b4:25:1b:dc:5e:0b:fe:92:d4:68:c1:22:0f:c7:
84:00:cc:bf:f7:46:33:2a:49:c5:61:94:03:b9:10:21:d0:86:
7b:ac:09:75
-----BEGIN CERTIFICATE-----
MIIGLTCCBRWgAwIBAgISAY85Eu99EzPuHS0ZWcsvIAX/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlMWYzMmQwY2ZhN2E4NmQzMGU3ZTExYTczZWJiZDBiMjRk
YmY0MWYwHhcNMjQwNTAyMTEzMTMzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZmQzZTA3MmYzMTljNjg5YjIwNzY4Y2EyMDEyMTRlMGFkMDk2ZTMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHNkJya/u2+vd7/vRbxfwDSJwaft
VeJXgnemeNim72pe/T7bZRtlB24+leNIPjkP/1m7aTJfAxDTVwKV+WBhmc/AM6KX
xCFXGkk2w5aTNNA9X1wodiZTmKgq3fmOMcog9qj+3SfiCkZkvyXARmpOvsj8zgyw
pc+b4AMkNl4pOY3HRSZ4a1npDl/vzX+wFeQ01nO6bihfhiNZA5S/LF6JATJKZAHY
s0CUzdCb7PjinDjNzUYOaCSTK2iHaYwERnZGbICn2E5x6cP6f9YfjQs/fE2/NVcw
dlYqqwToNoT0DGNisSO6OBpehzeC6IlwCAT5NUT09d9uwLcfrUyqHMaFIwIDAQAB
o4IDOTCCAzUwHQYDVR0OBBYEFM/T4HLzGcaJsgdoyiASFOCtCW4wMB8GA1UdIwQY
MBaAFD4fMtDPp6htMOfhGnPrvQsk2/QfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGg4eTBNLW5xRzB3NS1FYWMtdTlDeVRiOUI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS81ZjA0OGItMmRmMy00MTQwLTlmNGUt
NjA2OGMwNGQxYmUwLzEvejlQZ2N2TVp4b215QjJqS0lCSVU0SzBKYmpBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS81ZjA0OGItMmRmMy00MTQwLTlmNGUtNjA2OGMwNGQxYmUw
LzEvUGg4eTBNLW5xRzB3NS1FYWMtdTlDeVRiOUI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBTQYIKwYBBQUHAQcBAf8EggE8MIIBODCCATQEAgABMIIB
LAMEAC5maQMEBC73kAMEAU+LUAMEAFZp8QMEAFkgfQMEAFklOgMEAFkoKQMEAVko
pAMEAFkvKwMEAVnI8AMEAFvGFwMEAFvYigMEAFvjIQMEAFvl5AMEAVvulAMEAF1y
VAMEAl200AMEAV6xBgMEAF6xFwMEAbB+xgMEALzS/gMEALzWWQMEALzxOwMEAMEk
LAMEAMEliAMEAMEndwMEAsFdKAMEAMFpsAMEAcGpCAMEAcHANAMEAcHvrAMEAcHv
9gMEAMIIUQMEAcIY6gMEAcIqZAMEAcJYhgMEAcJq1AMEAMKM6wMEAcL2agMEAcMC
xAMEAcMNMAMEAcMiUAMEAcNdjAMEAcOAvAMEAcOHwAMEAMO9sAMEAcO9ugMEAcO9
+gMEAcPSLAMEAcP+jDANBgkqhkiG9w0BAQsFAAOCAQEAH75dRpATx+1rkfSoLNBw
lHJh1XLUK9Br5ue0AIKAP4XAp0tAYlktNadairgziX58026dKDl47Q8Y/q2dcXll
u6ovms+YleVKRvdED+UkKFh7V0mumtudaI9qvV52WKnKxz+nlLsQlr8z8QEtTlR5
1HtyNdM5tpt8bgDTUSElox2KQvqBDyK8uvPXNncS1J2YH6Lbl8soBrBu3bmbUsNA
q9FndHU4YiSqm4cN2g2D05WsiWjJdw3D9YUiPWWRMMyFk/Blx3mj2PP0/iWo/EW+
wScE8JhaQmUiLA96kbQlG9xeC/6S1GjBIg/HhADMv/dGMypJxWGUA7kQIdCGe6wJ
dQ==
Generated at Thu May 9 03:32:43 2024 by rpki-client on console-fra.rpki-client.org