Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/f9c76b-4c66-4346-8ade-fc6cdaaf250b/1/KzxbyfgRFz4LUAUgvexzTWj6L2U.roa
File: KzxbyfgRFz4LUAUgvexzTWj6L2U.roa (raw, json)
Hash identifier: dawKjYruSxr/lhEWmIKbc2kwG/6QfZFTWBJzMenKMdU=
Subject key identifier: 2B:3C:5B:C9:F8:11:17:3E:0B:50:05:20:BD:EC:73:4D:68:FA:2F:65
Certificate issuer: /CN=014efdfd0647ccba734b2a05660124eb8c067567
Certificate serial: 018CC2DAE9ED9FF7FCFB8D95B6B50E355901
Authority key identifier: 01:4E:FD:FD:06:47:CC:BA:73:4B:2A:05:66:01:24:EB:8C:06:75:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AU79_QZHzLpzSyoFZgEk64wGdWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/f9c76b-4c66-4346-8ade-fc6cdaaf250b/1/KzxbyfgRFz4LUAUgvexzTWj6L2U.roa
Signing time: Mon 01 Jan 2024 02:29:35 +0000
ROA not before: Mon 01 Jan 2024 02:29:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48940
IP address blocks: 176.115.48.0/20 maxlen: 20
62.122.96.0/22 maxlen: 22
62.122.96.0/21 maxlen: 21
62.122.100.0/22 maxlen: 22
94.231.160.0/20 maxlen: 20
94.231.160.0/21 maxlen: 21
94.231.168.0/21 maxlen: 21
46.148.96.0/21 maxlen: 21
46.148.96.0/20 maxlen: 20
176.115.32.0/19 maxlen: 19
176.115.32.0/20 maxlen: 20
Validation: Failed, certificate revoked on Thu 29 Aug 2024 14:14:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:e9:ed:9f:f7:fc:fb:8d:95:b6:b5:0e:35:59:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=014efdfd0647ccba734b2a05660124eb8c067567
Validity
Not Before: Jan 1 02:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2b3c5bc9f811173e0b500520bdec734d68fa2f65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:7c:00:0b:e2:1b:99:1c:27:dd:ae:47:4f:b8:
a0:64:98:48:9d:8c:29:26:b0:89:e2:f2:fd:a3:39:
af:08:97:83:5b:41:93:35:07:21:c3:2f:bc:33:e3:
5e:93:71:d7:61:61:8f:c5:59:15:dc:0d:ac:c4:1b:
dd:0b:ba:4d:dc:61:ba:db:d5:0a:ae:11:92:c5:bb:
df:11:b4:38:55:96:b3:13:45:49:79:b0:83:21:f6:
ad:94:d4:f3:48:ce:2c:07:c1:ee:fc:95:6f:ae:a5:
33:39:6f:09:41:ac:fc:69:81:f0:6f:5f:8f:b2:d6:
ed:1b:74:7d:78:60:2a:a0:a1:58:49:41:a2:f5:47:
3e:ae:0f:13:dc:1e:27:52:8a:2d:52:c0:2e:ba:52:
44:f7:73:f2:5d:d0:02:e4:b7:70:1d:c1:59:52:cd:
ba:1e:c3:fb:80:c6:bf:09:f7:ef:e8:71:af:7d:c4:
58:17:16:8b:82:ed:60:36:c8:6a:09:a7:67:e9:48:
fa:79:7c:4e:67:65:72:e3:3b:2a:a0:f9:47:88:55:
30:0b:74:35:1a:0f:e4:0b:05:7d:74:21:0b:a7:70:
da:40:fe:c7:00:08:13:58:48:63:9f:c4:cd:27:bc:
f6:71:ec:c5:60:51:58:fa:c2:51:23:c9:38:0b:f6:
e5:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:3C:5B:C9:F8:11:17:3E:0B:50:05:20:BD:EC:73:4D:68:FA:2F:65
X509v3 Authority Key Identifier:
keyid:01:4E:FD:FD:06:47:CC:BA:73:4B:2A:05:66:01:24:EB:8C:06:75:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AU79_QZHzLpzSyoFZgEk64wGdWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f9c76b-4c66-4346-8ade-fc6cdaaf250b/1/KzxbyfgRFz4LUAUgvexzTWj6L2U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f9c76b-4c66-4346-8ade-fc6cdaaf250b/1/AU79_QZHzLpzSyoFZgEk64wGdWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.148.96.0/20
62.122.96.0/21
94.231.160.0/20
176.115.32.0/19
Signature Algorithm: sha256WithRSAEncryption
b6:84:76:1c:bc:64:fb:47:c3:cf:f2:95:57:95:d0:ef:89:82:
24:f5:f1:05:4f:e9:ae:6c:f4:46:55:7d:f4:1c:6e:a4:11:8a:
83:73:53:44:40:40:23:8b:9d:40:9b:6d:28:80:64:fc:31:68:
92:1e:d2:ae:e3:33:f0:e2:40:12:37:e8:30:8f:68:1e:81:7e:
53:9d:d2:3d:f1:0b:66:7e:e1:aa:69:42:c3:01:db:9f:3e:ec:
4a:5f:9f:6c:51:f3:0e:7d:26:1a:77:8d:16:ad:f6:cc:c4:4d:
67:f1:b9:ce:48:47:85:f8:a6:03:3a:dc:40:0b:27:7c:27:5b:
6f:53:c6:e3:7d:f8:c0:8e:84:9c:51:f4:c7:ba:8c:2a:24:6f:
3f:c9:1b:2f:f5:23:5f:90:8b:e4:ab:55:f5:2f:37:98:9a:e9:
c4:a1:88:af:4f:18:4d:5f:c9:38:ed:8c:52:90:9e:85:4d:60:
b9:21:f7:3e:66:73:11:d5:8e:ab:de:c9:c3:9d:ea:c3:4c:82:
61:f5:f9:68:de:14:a5:5f:05:99:25:58:24:4f:0b:e3:f1:01:
fa:25:51:64:b5:3f:26:b5:90:ce:35:a7:b3:d8:79:55:0f:62:
d3:63:4c:95:06:a3:fd:2c:35:9b:c4:30:2e:80:8d:de:57:32:
7e:81:ba:ee
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYzC2untn/f8+42VtrUONVkBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxNGVmZGZkMDY0N2NjYmE3MzRiMmEwNTY2MDEyNGViOGMw
Njc1NjcwHhcNMjQwMTAxMDIyOTM1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYjNjNWJjOWY4MTExNzNlMGI1MDA1MjBiZGVjNzM0ZDY4ZmEyZjY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0HwAC+IbmRwn3a5HT7igZJhInYwp
JrCJ4vL9ozmvCJeDW0GTNQchwy+8M+Nek3HXYWGPxVkV3A2sxBvdC7pN3GG629UK
rhGSxbvfEbQ4VZazE0VJebCDIfatlNTzSM4sB8Hu/JVvrqUzOW8JQaz8aYHwb1+P
stbtG3R9eGAqoKFYSUGi9Uc+rg8T3B4nUootUsAuulJE93PyXdAC5LdwHcFZUs26
HsP7gMa/Cffv6HGvfcRYFxaLgu1gNshqCadn6Uj6eXxOZ2Vy4zsqoPlHiFUwC3Q1
Gg/kCwV9dCELp3DaQP7HAAgTWEhjn8TNJ7z2cezFYFFY+sJRI8k4C/blgwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFCs8W8n4ERc+C1AFIL3sc01o+i9lMB8GA1UdIwQY
MBaAFAFO/f0GR8y6c0sqBWYBJOuMBnVnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVU3OV9RWkh6THB6U3lvRlpnRWs2NHdHZFdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9mOWM3NmItNGM2Ni00MzQ2LThhZGUt
ZmM2Y2RhYWYyNTBiLzEvS3p4YnlmZ1JGejRMVUFVZ3ZleHpUV2o2TDJVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS9mOWM3NmItNGM2Ni00MzQ2LThhZGUtZmM2Y2RhYWYyNTBi
LzEvQVU3OV9RWkh6THB6U3lvRlpnRWs2NHdHZFdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQELpRgAwQD
PnpgAwQEXuegAwQFsHMgMA0GCSqGSIb3DQEBCwUAA4IBAQC2hHYcvGT7R8PP8pVX
ldDviYIk9fEFT+mubPRGVX30HG6kEYqDc1NEQEAji51Am20ogGT8MWiSHtKu4zPw
4kASN+gwj2gegX5TndI98QtmfuGqaULDAdufPuxKX59sUfMOfSYad40WrfbMxE1n
8bnOSEeF+KYDOtxACyd8J1tvU8bjffjAjoScUfTHuowqJG8/yRsv9SNfkIvkq1X1
LzeYmunEoYivTxhNX8k47YxSkJ6FTWC5Ifc+ZnMR1Y6r3snDnerDTIJh9flo3hSl
XwWZJVgkTwvj8QH6JVFktT8mtZDONaez2HlVD2LTY0yVBqP9LDWbxDAugI3eVzJ+
gbru
-----END CERTIFICATE-----
Generated at Thu Aug 29 17:04:58 2024 by rpki-client on console-ams.rpki-client.org