Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/c7lDlSGjOv_k7DwykMOIKYi1OwI.roa
File: c7lDlSGjOv_k7DwykMOIKYi1OwI.roa (raw, json)
Hash identifier: pURRs3Q6mZOFzOnnxhQGV/Da2A9DQhUA+IvEaHk608I=
Subject key identifier: 73:B9:43:95:21:A3:3A:FF:E4:EC:3C:32:90:C3:88:29:88:B5:3B:02
Certificate issuer: /CN=a36d0ae5e2fbffcce08770ebc20c216b9fbf9485
Certificate serial: 018CC8713B45050EE160BC96BE2967A05FBB
Authority key identifier: A3:6D:0A:E5:E2:FB:FF:CC:E0:87:70:EB:C2:0C:21:6B:9F:BF:94:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/c7lDlSGjOv_k7DwykMOIKYi1OwI.roa
Signing time: Tue 02 Jan 2024 04:31:53 +0000
ROA not before: Tue 02 Jan 2024 04:31:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60192
IP address blocks: 95.105.82.0/24 maxlen: 24
95.105.82.0/23 maxlen: 23
95.105.80.0/24 maxlen: 24
95.105.83.0/24 maxlen: 24
95.105.80.0/23 maxlen: 23
95.105.80.0/22 maxlen: 22
95.105.81.0/24 maxlen: 24
193.104.64.0/24 maxlen: 24
185.162.32.0/23 maxlen: 23
185.162.35.0/24 maxlen: 24
185.162.32.0/22 maxlen: 22
185.162.33.0/24 maxlen: 24
185.162.34.0/24 maxlen: 24
185.162.34.0/23 maxlen: 23
185.162.32.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 09:48:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:71:3b:45:05:0e:e1:60:bc:96:be:29:67:a0:5f:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a36d0ae5e2fbffcce08770ebc20c216b9fbf9485
Validity
Not Before: Jan 2 04:31:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=73b9439521a33affe4ec3c3290c3882988b53b02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:17:35:a0:da:88:fa:49:ab:48:18:5e:7b:11:
d9:f9:94:0a:57:3c:c0:fe:ba:53:88:33:48:80:67:
ba:2d:92:e3:f1:68:8d:97:c8:5c:bb:67:98:25:b5:
1b:fc:41:fb:a9:83:b3:fe:61:0e:81:51:57:66:df:
d6:64:27:41:6d:36:e8:ea:21:93:80:d7:06:2f:a3:
c6:d7:7d:f2:a7:4a:36:07:de:e4:55:77:70:68:86:
77:05:90:cf:66:3f:cf:57:53:6a:98:f1:a7:b6:f0:
2f:bb:c1:e7:57:6a:bf:b8:64:f2:5d:bb:d4:6a:e8:
18:8e:28:6a:b2:3c:cb:dc:ba:aa:47:7b:fd:0d:61:
28:14:98:9d:86:1d:46:88:07:3d:d2:72:1c:44:14:
6b:05:95:29:ac:a9:13:51:af:2e:93:e5:56:23:93:
7d:04:e5:14:75:94:86:a7:b9:11:7a:47:53:1b:28:
fa:2e:e1:9c:18:3f:79:bf:8b:cf:02:4d:70:c0:8e:
a3:7b:4b:50:f9:b9:a8:28:fd:1e:5f:c3:d5:6c:28:
eb:4e:80:05:a9:59:dd:73:fc:57:84:d3:89:d4:0f:
f4:c5:5d:63:59:64:f1:cd:87:a0:6e:3f:dc:35:56:
ca:37:1b:42:15:90:7c:a4:b5:e6:bd:e5:b8:ec:6e:
a8:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:B9:43:95:21:A3:3A:FF:E4:EC:3C:32:90:C3:88:29:88:B5:3B:02
X509v3 Authority Key Identifier:
keyid:A3:6D:0A:E5:E2:FB:FF:CC:E0:87:70:EB:C2:0C:21:6B:9F:BF:94:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/c7lDlSGjOv_k7DwykMOIKYi1OwI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.105.80.0/22
185.162.32.0/22
193.104.64.0/24
Signature Algorithm: sha256WithRSAEncryption
91:d7:c8:3a:fa:35:94:e0:68:dc:5e:26:7f:05:8b:c8:c3:08:
9e:b8:cc:87:db:f2:53:cd:99:12:c3:f0:ec:cf:83:a2:2c:ad:
af:34:65:2d:10:9b:c3:1c:fd:92:96:44:64:37:25:4d:fb:e0:
ff:60:a0:68:d2:ba:b5:66:b6:9d:40:d7:c7:8c:f3:2b:af:e0:
41:e8:28:48:8e:50:f7:28:78:a9:0a:7d:b8:06:5d:34:8e:ac:
d4:eb:0f:af:63:38:c1:bc:cf:0d:46:03:12:93:da:e2:1c:a2:
11:f2:3f:b8:11:19:5b:c4:d5:64:b7:04:70:92:e2:fe:0d:38:
22:90:0e:77:18:57:0a:68:27:39:a2:62:f9:0b:b5:d8:35:33:
b3:b2:5d:d7:da:f2:42:84:c6:f4:e1:bc:1a:8a:89:34:fe:0c:
dd:2a:f2:07:2c:ec:49:9d:30:f7:58:48:01:44:33:df:7d:af:
14:5a:64:1a:a7:ad:bb:66:a5:87:85:3f:ca:eb:1d:2d:ad:e3:
82:cf:4e:65:0e:97:20:0c:d7:75:75:5b:51:22:ee:6e:51:72:
0c:42:ae:c8:3c:53:3a:ff:b7:95:bb:e6:f6:68:f8:f4:95:1e:
a4:a3:5c:b6:54:aa:ba:a8:b6:6c:22:8b:7e:80:dc:40:fb:4f:
f7:b1:29:38
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYzIcTtFBQ7hYLyWvilnoF+7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzNmQwYWU1ZTJmYmZmY2NlMDg3NzBlYmMyMGMyMTZiOWZi
Zjk0ODUwHhcNMjQwMTAyMDQzMTUzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3M2I5NDM5NTIxYTMzYWZmZTRlYzNjMzI5MGMzODgyOTg4YjUzYjAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBc1oNqI+kmrSBheexHZ+ZQKVzzA
/rpTiDNIgGe6LZLj8WiNl8hcu2eYJbUb/EH7qYOz/mEOgVFXZt/WZCdBbTbo6iGT
gNcGL6PG133yp0o2B97kVXdwaIZ3BZDPZj/PV1NqmPGntvAvu8HnV2q/uGTyXbvU
augYjihqsjzL3LqqR3v9DWEoFJidhh1GiAc90nIcRBRrBZUprKkTUa8uk+VWI5N9
BOUUdZSGp7kRekdTGyj6LuGcGD95v4vPAk1wwI6je0tQ+bmoKP0eX8PVbCjrToAF
qVndc/xXhNOJ1A/0xV1jWWTxzYegbj/cNVbKNxtCFZB8pLXmveW47G6olwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFHO5Q5Uhozr/5Ow8MpDDiCmItTsCMB8GA1UdIwQY
MBaAFKNtCuXi+//M4Idw68IMIWufv5SFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzIwSzVlTDdfOHpnaDNEcndnd2hhNS1fbElVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC84Y2FjMGMtMzQyNi00ZjA3LWFmMjAt
Y2JiOTUxODNiMjdhLzEvYzdsRGxTR2pPdl9rN0R3eWtNT0lLWWkxT3dJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC84Y2FjMGMtMzQyNi00ZjA3LWFmMjAtY2JiOTUxODNiMjdh
LzEvbzIwSzVlTDdfOHpnaDNEcndnd2hhNS1fbElVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCX2lQAwQC
uaIgAwQAwWhAMA0GCSqGSIb3DQEBCwUAA4IBAQCR18g6+jWU4GjcXiZ/BYvIwwie
uMyH2/JTzZkSw/Dsz4OiLK2vNGUtEJvDHP2SlkRkNyVN++D/YKBo0rq1ZradQNfH
jPMrr+BB6ChIjlD3KHipCn24Bl00jqzU6w+vYzjBvM8NRgMSk9riHKIR8j+4ERlb
xNVktwRwkuL+DTgikA53GFcKaCc5omL5C7XYNTOzsl3X2vJChMb04bwaiok0/gzd
KvIHLOxJnTD3WEgBRDPffa8UWmQap627ZqWHhT/K6x0treOCz05lDpcgDNd1dVtR
Iu5uUXIMQq7IPFM6/7eVu+b2aPj0lR6ko1y2VKq6qLZsIot+gNxA+0/3sSk4
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:07:25 2025 by rpki-client