Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/R_6Mzbuu1xHU3g60GDgsKtwpsv8.roa
File: R_6Mzbuu1xHU3g60GDgsKtwpsv8.roa (raw, json)
Hash identifier: UDYfLINMvLmUL3T7jAWVLL/VuwbVX3s+EJ/d2LxpGvs=
Subject key identifier: 47:FE:8C:CD:BB:AE:D7:11:D4:DE:0E:B4:18:38:2C:2A:DC:29:B2:FF
Certificate issuer: /CN=81a2d0dcd50a682f975ea3d8c38e5e67bb0322f9
Certificate serial: 018AEAC8C1990690175490ECA1506B45B1E9
Authority key identifier: 81:A2:D0:DC:D5:0A:68:2F:97:5E:A3:D8:C3:8E:5E:67:BB:03:22:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/R_6Mzbuu1xHU3g60GDgsKtwpsv8.roa
Signing time: Sun 01 Oct 2023 10:28:59 +0000
ROA not before: Sun 01 Oct 2023 10:28:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213176
IP address blocks: 212.59.64.0/24 maxlen: 24
212.59.70.0/24 maxlen: 24
212.59.66.0/24 maxlen: 24
212.59.65.0/24 maxlen: 24
212.59.67.0/24 maxlen: 24
212.59.69.0/24 maxlen: 24
212.59.68.0/24 maxlen: 24
209.35.224.0/24 maxlen: 24
209.35.226.0/24 maxlen: 24
209.35.225.0/24 maxlen: 24
209.35.227.0/24 maxlen: 24
209.35.229.0/24 maxlen: 24
209.35.228.0/24 maxlen: 24
209.35.230.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 10 Dec 2023 06:57:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ea:c8:c1:99:06:90:17:54:90:ec:a1:50:6b:45:b1:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81a2d0dcd50a682f975ea3d8c38e5e67bb0322f9
Validity
Not Before: Oct 1 10:28:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=47fe8ccdbbaed711d4de0eb418382c2adc29b2ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:68:00:45:36:2b:fc:5e:74:0e:9f:c8:95:df:
fa:53:d6:47:49:23:23:ea:bb:f8:12:1b:fc:9e:5a:
7d:28:60:94:cb:17:9d:57:f4:ca:df:b0:c8:96:f1:
6a:04:a4:cc:2c:6f:92:8f:b5:79:ef:9e:a7:3b:d7:
f3:27:77:15:3f:87:6a:d9:92:63:3d:7e:44:a2:c6:
55:ee:f1:59:30:f9:48:57:e1:27:fd:ca:e6:51:d0:
3c:19:b7:9d:40:bc:00:7f:ba:cd:44:fa:a3:92:06:
1b:a2:95:2c:0e:7c:d5:74:5f:bd:62:52:8a:59:e0:
46:0d:5d:52:6e:c9:85:37:ab:f4:0a:1d:08:c4:f4:
02:cf:5a:df:14:2d:9a:ee:c0:ea:43:e0:ba:8e:11:
d8:60:07:84:d2:34:cb:00:13:11:8b:a8:ba:30:8d:
ea:78:69:1c:f9:1b:04:a7:c9:b3:f0:a2:79:16:c1:
8a:75:5f:04:5c:a3:c5:54:57:7a:41:eb:65:f9:35:
ab:56:66:ab:00:df:41:09:68:13:87:f2:f0:b2:cb:
74:66:1b:a4:8c:e8:27:4d:97:d2:7f:4c:12:2c:a6:
e0:d4:85:a8:aa:09:3a:62:c9:9b:f4:e7:81:1c:24:
83:c9:d5:28:d7:bb:5e:1f:cb:b5:0c:b3:c1:24:ff:
a6:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:FE:8C:CD:BB:AE:D7:11:D4:DE:0E:B4:18:38:2C:2A:DC:29:B2:FF
X509v3 Authority Key Identifier:
keyid:81:A2:D0:DC:D5:0A:68:2F:97:5E:A3:D8:C3:8E:5E:67:BB:03:22:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/R_6Mzbuu1xHU3g60GDgsKtwpsv8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
209.35.224.0-209.35.230.255
212.59.64.0-212.59.70.255
Signature Algorithm: sha256WithRSAEncryption
72:15:79:22:41:92:39:cf:6b:63:90:66:3b:a0:5a:60:71:ce:
eb:99:fc:30:3c:41:b3:32:45:f5:e2:38:81:09:05:aa:be:fb:
62:43:67:29:76:f2:f3:63:d6:09:8f:d4:d2:84:fb:86:0d:c6:
41:c3:0b:47:9e:44:8f:07:69:68:bd:8c:3d:8d:b3:e3:1b:d5:
6b:d0:c0:b1:72:a7:99:30:a0:f7:f6:f8:25:ef:75:df:49:f1:
5a:1b:fd:78:a7:a0:7e:2e:db:48:42:01:42:bc:58:0c:3c:99:
3b:5c:21:9f:61:db:79:f1:65:d2:14:26:12:1e:3e:dd:60:c3:
0d:66:5c:a4:f1:2f:5f:47:7c:50:03:1b:f4:01:83:6e:0b:11:
04:82:f6:63:69:9b:05:83:9e:bd:4c:8b:8a:1e:47:4b:f3:f7:
04:59:95:1e:73:0d:73:e8:26:a3:f5:8c:1c:9d:13:62:14:ff:
68:9d:9f:99:ce:c7:a1:e3:57:4f:66:76:5d:29:50:31:93:c7:
10:e0:e8:ac:86:12:b8:a7:03:e7:4c:7a:04:c5:a9:33:0f:ae:
81:ea:03:7c:81:bc:8b:e9:57:29:be:f9:02:aa:05:be:8d:60:
3f:1f:b4:50:fb:a4:8f:69:36:63:8d:9c:2f:b2:38:65:c8:1b:
59:32:4a:e5
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgISAYrqyMGZBpAXVJDsoVBrRbHpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxYTJkMGRjZDUwYTY4MmY5NzVlYTNkOGMzOGU1ZTY3YmIw
MzIyZjkwHhcNMjMxMDAxMTAyODU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0N2ZlOGNjZGJiYWVkNzExZDRkZTBlYjQxODM4MmMyYWRjMjliMmZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmgARTYr/F50Dp/Ild/6U9ZHSSMj
6rv4Ehv8nlp9KGCUyxedV/TK37DIlvFqBKTMLG+Sj7V5756nO9fzJ3cVP4dq2ZJj
PX5EosZV7vFZMPlIV+En/crmUdA8GbedQLwAf7rNRPqjkgYbopUsDnzVdF+9YlKK
WeBGDV1SbsmFN6v0Ch0IxPQCz1rfFC2a7sDqQ+C6jhHYYAeE0jTLABMRi6i6MI3q
eGkc+RsEp8mz8KJ5FsGKdV8EXKPFVFd6Qetl+TWrVmarAN9BCWgTh/Lwsst0Zhuk
jOgnTZfSf0wSLKbg1IWoqgk6Ysmb9OeBHCSDydUo17teH8u1DLPBJP+mlwIDAQAB
o4ICHzCCAhswHQYDVR0OBBYEFEf+jM27rtcR1N4OtBg4LCrcKbL/MB8GA1UdIwQY
MBaAFIGi0NzVCmgvl16j2MOOXme7AyL5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2FMUTNOVUthQy1YWHFQWXc0NWVaN3NESXZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9kMjVhNzItYmJlMy00YWIwLTk1NjQt
ZmU0NWQ1MTYwYzM5LzEvUl82TXpidXUxeEhVM2c2MEdEZ3NLdHdwc3Y4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9kMjVhNzItYmJlMy00YWIwLTk1NjQtZmU0NWQ1MTYwYzM5
LzEvZ2FMUTNOVUthQy1YWHFQWXc0NWVaN3NESXZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAATAcMAwDBAXRI+AD
BADRI+YwDAMEBtQ7QAMEANQ7RjANBgkqhkiG9w0BAQsFAAOCAQEAchV5IkGSOc9r
Y5BmO6BaYHHO65n8MDxBszJF9eI4gQkFqr77YkNnKXby82PWCY/U0oT7hg3GQcML
R55EjwdpaL2MPY2z4xvVa9DAsXKnmTCg9/b4Je9130nxWhv9eKegfi7bSEIBQrxY
DDyZO1whn2HbefFl0hQmEh4+3WDDDWZcpPEvX0d8UAMb9AGDbgsRBIL2Y2mbBYOe
vUyLih5HS/P3BFmVHnMNc+gmo/WMHJ0TYhT/aJ2fmc7HoeNXT2Z2XSlQMZPHEODo
rIYSuKcD50x6BMWpMw+ugeoDfIG8i+lXKb75AqoFvo1gPx+0UPukj2k2Y42cL7I4
ZcgbWTJK5Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:11 2024 by rpki-client on console-ams.rpki-client.org