Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/G2GrkOYg3gPLvcubpVjoYUA9HQI.roa
File: G2GrkOYg3gPLvcubpVjoYUA9HQI.roa (raw, json)
Hash identifier: GurUZK6h1+iKmHky5r4jGQh2YeyUmXhHh2inZSKCE+U=
Subject key identifier: 1B:61:AB:90:E6:20:DE:03:CB:BD:CB:9B:A5:58:E8:61:40:3D:1D:02
Certificate issuer: /CN=929352a8d2dd70c91ffcec8e323fe69f1e9a4139
Certificate serial: 01857127942B5F642A67F16E018EAC484501
Authority key identifier: 92:93:52:A8:D2:DD:70:C9:1F:FC:EC:8E:32:3F:E6:9F:1E:9A:41:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kpNSqNLdcMkf_OyOMj_mnx6aQTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/G2GrkOYg3gPLvcubpVjoYUA9HQI.roa
Signing time: Mon 02 Jan 2023 06:24:57 +0000
ROA not before: Mon 02 Jan 2023 06:24:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6706
IP address blocks: 83.148.0.0/18 maxlen: 18
62.44.0.0/19 maxlen: 19
195.122.192.0/19 maxlen: 19
195.128.192.0/19 maxlen: 19
88.146.0.0/17 maxlen: 17
212.27.192.0/19 maxlen: 19
195.250.128.0/19 maxlen: 19
194.213.224.0/19 maxlen: 19
213.175.32.0/19 maxlen: 19
62.177.64.0/18 maxlen: 18
212.20.96.0/19 maxlen: 19
2001:1508::/32 maxlen: 48
Validation: Failed, certificate revoked on Mon 16 Jan 2023 08:57:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:27:94:2b:5f:64:2a:67:f1:6e:01:8e:ac:48:45:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=929352a8d2dd70c91ffcec8e323fe69f1e9a4139
Validity
Not Before: Jan 2 06:24:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1b61ab90e620de03cbbdcb9ba558e861403d1d02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e1:02:f9:85:2f:22:45:62:87:e5:bd:cd:7f:
1f:6d:24:e4:8d:d4:81:87:48:f8:57:2f:ae:74:a6:
f3:c6:8d:9d:6f:3a:50:81:d2:96:f1:43:40:e9:4c:
d8:d2:2b:86:e4:97:ab:b2:b6:ea:9a:ca:c0:c3:aa:
f7:55:47:c0:6a:3c:f6:79:64:0f:c4:07:50:89:0e:
a8:40:4b:2c:51:c0:4c:10:5c:62:c3:70:49:81:70:
31:7c:66:fb:80:7c:c4:9b:80:d9:37:77:0d:af:98:
f2:ed:e8:32:d4:43:53:d1:51:80:ae:82:71:e0:ed:
ad:2f:ea:77:ff:5d:3e:2c:59:94:d2:a9:b2:01:81:
6e:e3:82:0f:b3:8e:6e:d8:03:9b:b2:61:79:27:be:
9d:fd:ff:6c:f8:bb:37:a8:13:e3:04:f4:7d:8e:5b:
27:e3:d6:06:00:41:80:62:6f:f3:63:42:8e:26:ac:
e6:b5:ae:de:d3:28:df:7e:df:52:26:c5:8e:3d:e3:
83:35:d5:49:fa:fa:83:53:4a:c3:30:45:a9:9d:e4:
82:e3:37:16:1c:03:33:f7:85:f1:f9:4f:16:f4:9b:
01:95:3c:08:dc:32:80:f3:b4:22:92:a4:81:d8:43:
b7:54:49:95:bb:0f:4e:ff:66:82:e3:f2:f9:0f:d0:
6f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:61:AB:90:E6:20:DE:03:CB:BD:CB:9B:A5:58:E8:61:40:3D:1D:02
X509v3 Authority Key Identifier:
keyid:92:93:52:A8:D2:DD:70:C9:1F:FC:EC:8E:32:3F:E6:9F:1E:9A:41:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpNSqNLdcMkf_OyOMj_mnx6aQTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/G2GrkOYg3gPLvcubpVjoYUA9HQI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.44.0.0/19
62.177.64.0/18
83.148.0.0/18
88.146.0.0/17
194.213.224.0/19
195.122.192.0/19
195.128.192.0/19
195.250.128.0/19
212.20.96.0/19
212.27.192.0/19
213.175.32.0/19
IPv6:
2001:1508::/32
Signature Algorithm: sha256WithRSAEncryption
c8:18:f1:ac:fd:ca:2f:07:9d:37:7d:42:88:f6:59:91:eb:50:
9e:e0:2d:74:3c:d4:ec:55:c2:41:2c:53:b9:2b:bd:a8:e7:43:
22:6c:93:c1:4c:f3:ac:fa:4e:5a:e1:9f:74:07:94:a0:3f:06:
41:ea:eb:64:9c:3b:80:90:7c:71:65:39:0c:e7:9b:a7:4a:31:
71:f6:6f:37:ac:b5:e4:9b:2c:2f:94:7b:e2:0a:03:2e:9e:45:
72:4e:96:b0:9e:c5:46:bc:32:e8:72:fa:7a:30:55:91:1b:ce:
fd:ad:4c:2d:75:c3:61:74:ec:8a:71:2d:f6:75:b5:af:f9:aa:
19:cb:2e:be:b7:12:a0:9e:fa:a4:95:01:2d:74:94:1f:7f:c1:
9f:c2:81:54:70:23:2b:20:b9:18:75:31:70:dd:92:fb:61:e1:
41:e3:bf:84:9e:c0:2e:74:53:0a:f5:82:c4:93:5d:c8:48:95:
6f:76:5c:69:80:04:ca:c1:66:95:fe:99:5d:62:be:33:b6:c3:
10:22:f8:6a:23:2d:45:d2:6c:4e:6a:4f:71:48:4e:ce:0a:a8:
c0:90:27:8e:40:75:45:84:b4:b9:00:3c:1b:ef:4c:40:18:f4:
d3:74:c7:9f:0d:92:f6:7b:d6:b6:ca:98:bd:52:43:8e:44:f7:
b1:bf:b8:a0
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgISAYVxJ5QrX2QqZ/FuAY6sSEUBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyOTM1MmE4ZDJkZDcwYzkxZmZjZWM4ZTMyM2ZlNjlmMWU5
YTQxMzkwHhcNMjMwMTAyMDYyNDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYjYxYWI5MGU2MjBkZTAzY2JiZGNiOWJhNTU4ZTg2MTQwM2QxZDAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzOEC+YUvIkVih+W9zX8fbSTkjdSB
h0j4Vy+udKbzxo2dbzpQgdKW8UNA6UzY0iuG5JersrbqmsrAw6r3VUfAajz2eWQP
xAdQiQ6oQEssUcBMEFxiw3BJgXAxfGb7gHzEm4DZN3cNr5jy7egy1ENT0VGAroJx
4O2tL+p3/10+LFmU0qmyAYFu44IPs45u2AObsmF5J76d/f9s+Ls3qBPjBPR9jlsn
49YGAEGAYm/zY0KOJqzmta7e0yjfft9SJsWOPeODNdVJ+vqDU0rDMEWpneSC4zcW
HAMz94Xx+U8W9JsBlTwI3DKA87QikqSB2EO3VEmVuw9O/2aC4/L5D9BviwIDAQAB
o4ICVDCCAlAwHQYDVR0OBBYEFBthq5DmIN4Dy73Lm6VY6GFAPR0CMB8GA1UdIwQY
MBaAFJKTUqjS3XDJH/zsjjI/5p8emkE5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3BOU3FOTGRjTWtmX095T01qX21ueDZhUVRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi83YjZlZGMtYWQyMy00ZDczLWFiNTYt
MGExYTM1ODk3ZjEwLzEvRzJHcmtPWWczZ1BMdmN1YnBWam9ZVUE5SFFJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi83YjZlZGMtYWQyMy00ZDczLWFiNTYtMGExYTM1ODk3ZjEw
LzEva3BOU3FOTGRjTWtmX095T01qX21ueDZhUVRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGoGCCsGAQUFBwEHAQH/BFswWTBIBAIAATBCAwQFPiwAAwQG
PrFAAwQGU5QAAwQHWJIAAwQFwtXgAwQFw3rAAwQFw4DAAwQFw/qAAwQF1BRgAwQF
1BvAAwQF1a8gMA0EAgACMAcDBQAgARUIMA0GCSqGSIb3DQEBCwUAA4IBAQDIGPGs
/covB503fUKI9lmR61Ce4C10PNTsVcJBLFO5K72o50MibJPBTPOs+k5a4Z90B5Sg
PwZB6utknDuAkHxxZTkM55unSjFx9m83rLXkmywvlHviCgMunkVyTpawnsVGvDLo
cvp6MFWRG879rUwtdcNhdOyKcS32dbWv+aoZyy6+txKgnvqklQEtdJQff8GfwoFU
cCMrILkYdTFw3ZL7YeFB47+EnsAudFMK9YLEk13ISJVvdlxpgATKwWaV/pldYr4z
tsMQIvhqIy1F0mxOak9xSE7OCqjAkCeOQHVFhLS5ADwb70xAGPTTdMefDZL2e9a2
ypi9UkOORPexv7ig
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:29 2024 by rpki-client on console-fra.rpki-client.org