Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/wKEa8CYrXZpLhxDmc2z_x3JNKOs.roa
File: wKEa8CYrXZpLhxDmc2z_x3JNKOs.roa (raw, json)
Hash identifier: PX0B/91FElHw826Hkz/ucUKRDRgfGbc9M5aTGcC3xZ4=
Subject key identifier: C0:A1:1A:F0:26:2B:5D:9A:4B:87:10:E6:73:6C:FF:C7:72:4D:28:EB
Certificate issuer: /CN=3622fc2f8ad8b008357dbe6f0195960c9de61bd5
Certificate serial: 01900DC7C627B3C78AEC582BEC4DA757CA2F
Authority key identifier: 36:22:FC:2F:8A:D8:B0:08:35:7D:BE:6F:01:95:96:0C:9D:E6:1B:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/wKEa8CYrXZpLhxDmc2z_x3JNKOs.roa
Signing time: Wed 12 Jun 2024 18:48:34 +0000
ROA not before: Wed 12 Jun 2024 18:48:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200373
IP address blocks: 45.3.32.0/19 maxlen: 24
65.111.0.0/19 maxlen: 24
95.141.242.0/24 maxlen: 24
104.167.24.0/21 maxlen: 24
104.207.32.0/19 maxlen: 24
2a0a:1f40::/32 maxlen: 32
2a0a:1f41::/32 maxlen: 32
2a13:3f80::/32 maxlen: 32
2a13:3f83::/32 maxlen: 32
2a13:3f84::/32 maxlen: 32
2a13:3f85::/32 maxlen: 32
2a13:3f86::/32 maxlen: 32
2a13:3f87::/32 maxlen: 32
Validation: Failed, certificate revoked on Sat 15 Jun 2024 12:34:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:0d:c7:c6:27:b3:c7:8a:ec:58:2b:ec:4d:a7:57:ca:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3622fc2f8ad8b008357dbe6f0195960c9de61bd5
Validity
Not Before: Jun 12 18:48:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c0a11af0262b5d9a4b8710e6736cffc7724d28eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:04:cf:d1:56:18:05:d1:3b:27:25:fc:b2:4e:
b1:8f:fd:45:c5:cc:ac:72:c7:ae:4e:01:13:4a:eb:
1f:da:1a:68:93:7c:98:ba:7c:9b:7c:be:e3:de:d4:
ea:05:4b:2f:1a:66:6a:69:a2:2c:81:0e:4e:81:52:
db:5f:0c:26:ea:6d:51:98:00:52:98:02:4a:16:ca:
68:59:df:c8:d9:2c:ae:bf:2f:c3:b3:ed:7e:b8:56:
af:ef:8d:d4:7d:9a:e2:84:63:31:1e:9c:ac:58:ba:
ae:3d:07:31:2b:8d:63:63:23:e7:28:33:42:62:f1:
8e:32:d5:06:a8:6c:da:1c:6b:83:a3:8e:9c:40:03:
50:e0:9c:cd:19:ec:4d:0d:9f:96:d0:86:d7:23:dc:
b0:74:39:14:a7:f4:6a:46:6f:ae:b1:bb:2a:8a:86:
ff:16:b9:bd:0f:9d:87:29:8b:4a:de:0a:78:5c:de:
03:cf:7d:f0:8e:8d:2a:6d:90:06:47:ad:9e:45:dd:
0a:29:15:f2:a8:c4:7d:f7:46:24:34:9f:24:cd:68:
fb:5d:bb:89:c5:22:28:01:95:fe:db:4e:ec:a1:a5:
fd:c6:8c:61:40:a4:ea:9d:92:fa:1f:9f:03:87:d6:
b9:95:62:65:a9:16:c1:d8:87:a6:66:35:82:3a:27:
67:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:A1:1A:F0:26:2B:5D:9A:4B:87:10:E6:73:6C:FF:C7:72:4D:28:EB
X509v3 Authority Key Identifier:
keyid:36:22:FC:2F:8A:D8:B0:08:35:7D:BE:6F:01:95:96:0C:9D:E6:1B:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/wKEa8CYrXZpLhxDmc2z_x3JNKOs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.3.32.0/19
65.111.0.0/19
95.141.242.0/24
104.167.24.0/21
104.207.32.0/19
IPv6:
2a0a:1f40::/31
2a13:3f80::/32
2a13:3f83::-2a13:3f87:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
a0:a2:cf:fd:c9:45:33:9d:8d:1d:ce:ce:d8:c0:84:d7:1a:52:
a5:e6:79:9a:04:27:6a:a8:92:d2:69:31:4b:52:ef:c9:4b:22:
f6:5b:95:40:bd:da:8e:80:b7:87:46:76:fa:18:75:83:b6:2e:
a8:9d:4e:9b:d5:a9:33:ec:8a:89:d5:17:0c:e3:ff:f2:a4:07:
0f:dc:c2:ac:b3:00:86:56:63:10:a0:75:18:93:b1:a9:5b:7f:
95:98:27:9b:21:73:76:55:e9:dd:93:b3:ad:50:bb:95:62:c7:
9e:61:05:d5:43:70:36:c9:f7:04:ca:5e:46:4d:9c:a3:2d:9e:
a8:7e:b8:38:26:05:4b:9c:a0:fc:93:61:fc:c3:95:48:48:d7:
27:36:7a:c6:f9:17:72:df:60:ff:61:29:99:45:97:79:40:7d:
1d:be:b5:e5:0d:c9:a6:c5:61:06:95:69:12:ab:47:63:eb:1a:
ca:b5:60:55:2c:0c:24:96:c7:14:ed:d1:f3:78:a1:80:22:d3:
0c:79:05:05:8f:28:85:d8:8c:6e:06:71:f7:a1:48:6c:ff:72:
79:cf:aa:f1:54:27:3b:6a:e4:49:80:3a:87:28:4e:b1:09:9c:
25:ed:b3:5b:d1:79:5d:98:61:9f:94:5c:01:c3:8f:e3:35:98:
5a:60:3a:2c
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgISAZANx8Yns8eK7Fgr7E2nV8ovMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2MjJmYzJmOGFkOGIwMDgzNTdkYmU2ZjAxOTU5NjBjOWRl
NjFiZDUwHhcNMjQwNjEyMTg0ODM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMGExMWFmMDI2MmI1ZDlhNGI4NzEwZTY3MzZjZmZjNzcyNGQyOGViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvATP0VYYBdE7JyX8sk6xj/1Fxcys
cseuTgETSusf2hpok3yYunybfL7j3tTqBUsvGmZqaaIsgQ5OgVLbXwwm6m1RmABS
mAJKFspoWd/I2Syuvy/Ds+1+uFav743UfZrihGMxHpysWLquPQcxK41jYyPnKDNC
YvGOMtUGqGzaHGuDo46cQANQ4JzNGexNDZ+W0IbXI9ywdDkUp/RqRm+usbsqiob/
Frm9D52HKYtK3gp4XN4Dz33wjo0qbZAGR62eRd0KKRXyqMR990YkNJ8kzWj7XbuJ
xSIoAZX+207soaX9xoxhQKTqnZL6H58Dh9a5lWJlqRbB2IemZjWCOidnyQIDAQAB
o4ICRzCCAkMwHQYDVR0OBBYEFMChGvAmK12aS4cQ5nNs/8dyTSjrMB8GA1UdIwQY
MBaAFDYi/C+K2LAINX2+bwGVlgyd5hvVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmlMOEw0cllzQWcxZmI1dkFaV1dESjNtRzlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9mNjNlNTgtOWVmYy00MDgyLTgyYmIt
MDg4MzVkZmY2YzRmLzEvd0tFYThDWXJYWnBMaHhEbWMyel94M0pOS09zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS9mNjNlNTgtOWVmYy00MDgyLTgyYmItMDg4MzVkZmY2YzRm
LzEvTmlMOEw0cllzQWcxZmI1dkFaV1dESjNtRzlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMF0GCCsGAQUFBwEHAQH/BE4wTDAkBAIAATAeAwQFLQMgAwQF
QW8AAwQAX43yAwQDaKcYAwQFaM8gMCQEAgACMB4DBQEqCh9AAwUAKhM/gDAOAwUA
KhM/gwMFAyoTP4AwDQYJKoZIhvcNAQELBQADggEBAKCiz/3JRTOdjR3OztjAhNca
UqXmeZoEJ2qoktJpMUtS78lLIvZblUC92o6At4dGdvoYdYO2LqidTpvVqTPsionV
Fwzj//KkBw/cwqyzAIZWYxCgdRiTsalbf5WYJ5shc3ZV6d2Ts61Qu5Vix55hBdVD
cDbJ9wTKXkZNnKMtnqh+uDgmBUucoPyTYfzDlUhI1yc2esb5F3LfYP9hKZlFl3lA
fR2+teUNyabFYQaVaRKrR2PrGsq1YFUsDCSWxxTt0fN4oYAi0wx5BQWPKIXYjG4G
cfehSGz/cnnPqvFUJztq5EmAOocoTrEJnCXts1vReV2YYZ+UXAHDj+M1mFpgOiw=
-----END CERTIFICATE-----
Generated at Sat Jun 15 14:43:00 2024 by rpki-client on console-fra.rpki-client.org