Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/S4yM7ql5W40pyCKBpDMYqVr8Pa0.roa
File: S4yM7ql5W40pyCKBpDMYqVr8Pa0.roa (raw, json)
Hash identifier: 2+gqs4rgwcwjIf3L9UsWWJYpJJcBAc/t5mhLr1mMpuo=
Subject key identifier: 4B:8C:8C:EE:A9:79:5B:8D:29:C8:22:81:A4:33:18:A9:5A:FC:3D:AD
Certificate issuer: /CN=41b8c2f37bd8d7e04e76985a4ced4559d7651c43
Certificate serial: 018E816DDF700F0302C92B2ABD3FAFFC1476
Authority key identifier: 41:B8:C2:F3:7B:D8:D7:E0:4E:76:98:5A:4C:ED:45:59:D7:65:1C:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QbjC83vY1-BOdphaTO1FWddlHEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/S4yM7ql5W40pyCKBpDMYqVr8Pa0.roa
Signing time: Wed 27 Mar 2024 19:40:45 +0000
ROA not before: Wed 27 Mar 2024 19:40:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29014
IP address blocks: 45.139.156.0/22 maxlen: 24
85.158.0.0/22 maxlen: 24
85.158.0.0/24 maxlen: 24
85.158.4.0/23 maxlen: 23
85.158.6.0/24 maxlen: 24
85.158.7.0/24 maxlen: 24
93.92.128.0/21 maxlen: 24
93.92.128.0/23 maxlen: 23
93.92.130.0/23 maxlen: 23
93.92.132.0/24 maxlen: 24
93.92.133.0/24 maxlen: 24
93.92.134.0/23 maxlen: 23
185.8.8.0/22 maxlen: 24
185.8.8.0/24 maxlen: 24
192.42.65.0/24 maxlen: 24
193.41.116.0/23 maxlen: 24
194.126.239.0/24 maxlen: 24
195.177.232.0/23 maxlen: 24
195.177.233.0/24 maxlen: 24
2a00:12e8::/32 maxlen: 40
2a00:12e8::/40 maxlen: 40
2a00:12e8:100::/40 maxlen: 40
2a00:12e8:200::/40 maxlen: 40
2a00:12e8:300::/40 maxlen: 40
2a00:12e8:400::/40 maxlen: 40
2a00:12e8:500::/40 maxlen: 40
2a00:12e8:600::/40 maxlen: 40
2a00:12e8:800::/40 maxlen: 48
2a00:12e8:f111::/48 maxlen: 48
2a00:12e8:f123::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 12 Apr 2024 11:43:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:81:6d:df:70:0f:03:02:c9:2b:2a:bd:3f:af:fc:14:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41b8c2f37bd8d7e04e76985a4ced4559d7651c43
Validity
Not Before: Mar 27 19:40:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4b8c8ceea9795b8d29c82281a43318a95afc3dad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:1e:7b:30:c5:13:89:0c:46:1f:63:8e:38:18:
56:05:9f:15:18:9c:ed:03:32:a9:7a:ff:57:ac:eb:
16:6b:13:ac:6d:77:fd:40:bc:53:b5:f1:86:5e:ea:
4c:f1:e6:f5:68:f2:3d:b1:7b:9e:ec:1a:96:e2:bc:
33:11:92:f1:95:81:20:7f:17:ef:f0:45:98:72:05:
6b:3e:b8:81:9d:10:8a:cb:22:ad:01:7e:42:a2:1f:
97:da:35:5f:ca:7e:45:40:00:e0:f9:18:c1:4b:a2:
95:e4:bf:b2:70:53:8a:66:db:05:1e:19:e8:41:31:
c4:3c:1a:46:96:b8:75:04:ed:79:c4:c8:e9:c7:1a:
2c:f3:cf:0d:c4:dc:a6:36:b7:cf:10:eb:09:38:a5:
63:29:18:66:34:95:a6:5d:d3:c1:bd:14:e8:d7:e2:
9a:72:8c:f6:2b:c4:38:7b:a2:8a:eb:27:d4:b8:0a:
4b:a4:b2:25:0b:09:ea:2a:16:27:55:07:6c:77:97:
10:d1:7b:76:4a:75:fb:d9:d3:5d:e7:0b:63:4a:de:
df:82:b0:98:1a:e4:34:0d:df:09:99:0c:8c:96:ba:
74:40:8a:7b:18:59:6e:37:e9:4f:e7:c9:42:55:c1:
88:92:31:00:d4:56:38:76:ed:cf:7a:64:c7:fc:97:
c6:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:8C:8C:EE:A9:79:5B:8D:29:C8:22:81:A4:33:18:A9:5A:FC:3D:AD
X509v3 Authority Key Identifier:
keyid:41:B8:C2:F3:7B:D8:D7:E0:4E:76:98:5A:4C:ED:45:59:D7:65:1C:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QbjC83vY1-BOdphaTO1FWddlHEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/S4yM7ql5W40pyCKBpDMYqVr8Pa0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/QbjC83vY1-BOdphaTO1FWddlHEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.156.0/22
85.158.0.0/21
93.92.128.0/21
185.8.8.0/22
192.42.65.0/24
193.41.116.0/23
194.126.239.0/24
195.177.232.0/23
IPv6:
2a00:12e8::/32
Signature Algorithm: sha256WithRSAEncryption
9f:5d:cc:8a:98:d4:c2:c8:b9:b8:c5:08:05:84:b7:03:e8:9b:
ea:6d:54:2b:04:6e:92:95:5f:55:61:2d:18:17:82:ad:5f:35:
c0:0a:ec:d1:96:40:c5:88:23:ba:7c:dd:26:d7:48:23:db:50:
8f:31:08:84:44:48:26:b8:14:ea:62:f3:63:87:ee:32:44:11:
ea:e5:f2:a5:00:60:5c:b1:ed:e3:53:b8:10:87:77:e1:f8:d1:
5d:1c:63:01:49:84:0e:c2:8c:d8:24:cf:a7:c7:10:5f:cf:bc:
76:31:b5:95:d7:90:f0:41:80:9f:e2:75:51:be:8b:e4:3e:e7:
bb:bb:42:91:bf:95:b2:95:51:28:f4:39:ac:86:bb:06:61:2d:
30:89:7a:8a:e9:00:5e:be:d8:d8:15:ac:34:cb:1f:30:04:c9:
36:ba:cf:13:f0:23:c5:bd:54:f2:84:18:08:f3:73:87:90:f6:
a9:d4:d8:2a:8a:37:42:cb:d1:bf:45:15:20:5c:d9:91:11:71:
b4:32:77:92:8b:37:c5:d2:db:f6:3d:69:cb:d7:46:fc:26:93:
0e:08:b6:64:74:b3:c4:53:9c:34:fb:a8:ca:37:ff:36:58:f1:
d0:76:49:9d:9b:43:7a:2f:8f:71:38:7c:33:25:c8:af:c7:a8:
2c:cf:49:42
-----BEGIN CERTIFICATE-----
MIIFNjCCBB6gAwIBAgISAY6Bbd9wDwMCySsqvT+v/BR2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxYjhjMmYzN2JkOGQ3ZTA0ZTc2OTg1YTRjZWQ0NTU5ZDc2
NTFjNDMwHhcNMjQwMzI3MTk0MDQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YjhjOGNlZWE5Nzk1YjhkMjljODIyODFhNDMzMThhOTVhZmMzZGFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8x57MMUTiQxGH2OOOBhWBZ8VGJzt
AzKpev9XrOsWaxOsbXf9QLxTtfGGXupM8eb1aPI9sXue7BqW4rwzEZLxlYEgfxfv
8EWYcgVrPriBnRCKyyKtAX5Coh+X2jVfyn5FQADg+RjBS6KV5L+ycFOKZtsFHhno
QTHEPBpGlrh1BO15xMjpxxos888NxNymNrfPEOsJOKVjKRhmNJWmXdPBvRTo1+Ka
coz2K8Q4e6KK6yfUuApLpLIlCwnqKhYnVQdsd5cQ0Xt2SnX72dNd5wtjSt7fgrCY
GuQ0Dd8JmQyMlrp0QIp7GFluN+lP58lCVcGIkjEA1FY4du3PemTH/JfGYQIDAQAB
o4ICQjCCAj4wHQYDVR0OBBYEFEuMjO6peVuNKcgigaQzGKla/D2tMB8GA1UdIwQY
MBaAFEG4wvN72NfgTnaYWkztRVnXZRxDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWJqQzgzdlkxLUJPZHBoYVRPMUZXZGRsSEVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8zZTNiNGItZjgyNy00MzQ3LTkwMjIt
MjgxOGY2NTc4ZDFiLzEvUzR5TTdxbDVXNDBweUNLQnBETVlxVnI4UGEwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS8zZTNiNGItZjgyNy00MzQ3LTkwMjItMjgxOGY2NTc4ZDFi
LzEvUWJqQzgzdlkxLUJPZHBoYVRPMUZXZGRsSEVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFgGCCsGAQUFBwEHAQH/BEkwRzA2BAIAATAwAwQCLYucAwQD
VZ4AAwQDXVyAAwQCuQgIAwQAwCpBAwQBwSl0AwQAwn7vAwQBw7HoMA0EAgACMAcD
BQAqABLoMA0GCSqGSIb3DQEBCwUAA4IBAQCfXcyKmNTCyLm4xQgFhLcD6JvqbVQr
BG6SlV9VYS0YF4KtXzXACuzRlkDFiCO6fN0m10gj21CPMQiEREgmuBTqYvNjh+4y
RBHq5fKlAGBcse3jU7gQh3fh+NFdHGMBSYQOwozYJM+nxxBfz7x2MbWV15DwQYCf
4nVRvovkPue7u0KRv5WylVEo9DmshrsGYS0wiXqK6QBevtjYFaw0yx8wBMk2us8T
8CPFvVTyhBgI83OHkPap1NgqijdCy9G/RRUgXNmREXG0MneSizfF0tv2PWnL10b8
JpMOCLZkdLPEU5w0+6jKN/82WPHQdkmdm0N6L49xOHwzJcivx6gsz0lC
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:58 2024 by rpki-client on console-fra.rpki-client.org