Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/95e949-bf34-4122-8fa8-a1ae5892d421/1/f_B5D6U1xg9BNhTWa0B8DTUfK3c.roa
File: f_B5D6U1xg9BNhTWa0B8DTUfK3c.roa (raw, json)
Hash identifier: d4VpPjmPu1IGyzw4iyrVNDtQji34QFsgnSPrhIeeHos=
Subject key identifier: 7F:F0:79:0F:A5:35:C6:0F:41:36:14:D6:6B:40:7C:0D:35:1F:2B:77
Certificate issuer: /CN=937f12abaf613973feb3073d8ce637f1b00cbfa9
Certificate serial: 018E65D868EAD649A5CC2A849FE0AB990D7D
Authority key identifier: 93:7F:12:AB:AF:61:39:73:FE:B3:07:3D:8C:E6:37:F1:B0:0C:BF:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k38Sq69hOXP-swc9jOY38bAMv6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/95e949-bf34-4122-8fa8-a1ae5892d421/1/f_B5D6U1xg9BNhTWa0B8DTUfK3c.roa
Signing time: Fri 22 Mar 2024 11:07:45 +0000
ROA not before: Fri 22 Mar 2024 11:07:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29650
IP address blocks: 45.139.240.0/22 maxlen: 24
79.140.128.0/20 maxlen: 24
82.195.128.0/19 maxlen: 24
84.51.224.0/19 maxlen: 24
84.51.224.0/21 maxlen: 21
84.51.236.0/22 maxlen: 22
84.51.240.0/20 maxlen: 20
212.78.224.0/19 maxlen: 24
212.78.224.0/20 maxlen: 20
212.78.240.0/22 maxlen: 22
212.78.252.0/22 maxlen: 22
212.84.40.0/21 maxlen: 24
2001:1bd8::/32 maxlen: 48
Validation: Failed, certificate revoked on Fri 29 Mar 2024 16:58:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:65:d8:68:ea:d6:49:a5:cc:2a:84:9f:e0:ab:99:0d:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=937f12abaf613973feb3073d8ce637f1b00cbfa9
Validity
Not Before: Mar 22 11:07:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7ff0790fa535c60f413614d66b407c0d351f2b77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fd:d0:b4:b9:db:41:55:d5:f4:11:04:ff:10:
36:1c:79:d9:f7:82:cb:1d:7b:3f:fe:c1:8a:3e:ad:
a0:d1:f8:82:d4:aa:a1:d3:3d:83:a5:43:2c:4b:c7:
8d:80:e9:a1:50:d5:a0:87:13:2b:ba:18:4f:63:b0:
51:0d:68:4b:f1:10:78:48:0f:c9:82:fc:b2:28:18:
38:4f:0e:7f:11:34:c6:20:5e:99:0b:46:4e:fe:31:
88:70:66:54:d6:d2:1d:50:12:38:56:e3:0d:d7:63:
5d:cd:35:6b:bd:a6:b9:58:5e:dd:9b:ce:81:aa:38:
ca:c4:89:58:85:a9:1d:56:55:bd:b9:a3:f1:9b:70:
0c:66:28:fd:7b:5e:60:56:f8:37:9d:c1:77:d3:2d:
30:b2:9d:dc:56:ad:73:60:aa:a2:48:2b:6a:e9:81:
41:47:5a:28:c3:0e:12:3a:9c:36:92:b0:af:f4:02:
8c:86:a2:17:bd:9e:9d:12:ed:1f:19:c1:cf:3f:9b:
22:05:c2:e6:62:6a:89:3d:28:83:a4:51:e0:ad:28:
c8:40:2a:0a:1a:ca:d4:83:e4:91:53:cd:70:6c:51:
5d:8d:10:14:28:85:ed:5d:80:2d:4f:bc:27:52:6b:
a3:ff:f2:71:c4:9c:fb:1a:65:92:59:d5:8b:72:3b:
0e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:F0:79:0F:A5:35:C6:0F:41:36:14:D6:6B:40:7C:0D:35:1F:2B:77
X509v3 Authority Key Identifier:
keyid:93:7F:12:AB:AF:61:39:73:FE:B3:07:3D:8C:E6:37:F1:B0:0C:BF:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k38Sq69hOXP-swc9jOY38bAMv6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/95e949-bf34-4122-8fa8-a1ae5892d421/1/f_B5D6U1xg9BNhTWa0B8DTUfK3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/95e949-bf34-4122-8fa8-a1ae5892d421/1/k38Sq69hOXP-swc9jOY38bAMv6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.240.0/22
79.140.128.0/20
82.195.128.0/19
84.51.224.0/19
212.78.224.0/19
212.84.40.0/21
IPv6:
2001:1bd8::/32
Signature Algorithm: sha256WithRSAEncryption
56:bf:a2:7b:cb:f0:95:1f:5c:1d:41:76:58:61:dd:a9:91:79:
ba:0e:c7:4a:f1:58:b4:32:ca:a6:cd:d6:86:e8:1e:cb:a8:33:
b5:91:dd:4d:f4:94:9d:77:2e:c3:a0:12:75:c2:e8:fb:ff:c2:
f0:4d:34:d4:b3:ad:f1:97:9a:ce:94:e8:7d:6a:38:b9:c4:9f:
d0:71:52:eb:85:7c:4d:de:e1:ff:22:cf:25:4b:9b:af:80:35:
e6:25:2f:11:eb:95:32:21:ae:ca:df:4d:80:41:83:e8:2a:78:
37:71:d2:a9:c0:e7:1d:97:05:ea:00:57:ce:dc:ad:89:90:9f:
8f:cf:62:52:3e:17:71:32:64:95:33:00:d2:66:d5:01:25:35:
90:46:a9:b5:97:04:20:c0:69:5d:f1:21:0d:af:e2:e9:ff:1f:
43:b2:f6:a6:b0:2c:df:b5:d2:25:17:9d:a8:74:70:8c:57:8d:
ef:a4:f4:fc:81:2c:79:12:f1:5a:11:bb:49:e8:f1:55:91:0f:
dc:05:0a:f2:9c:d0:d0:0c:20:cc:f9:b8:bb:0f:f9:32:ee:a4:
0b:6b:2f:fd:d2:d9:e9:45:7a:ae:86:99:fd:b7:b6:e1:9b:4f:
39:06:dc:16:38:f5:05:6d:38:52:06:6e:67:84:74:02:6e:2d:
72:02:4f:82
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgISAY5l2Gjq1kmlzCqEn+CrmQ19MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzN2YxMmFiYWY2MTM5NzNmZWIzMDczZDhjZTYzN2YxYjAw
Y2JmYTkwHhcNMjQwMzIyMTEwNzQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZmYwNzkwZmE1MzVjNjBmNDEzNjE0ZDY2YjQwN2MwZDM1MWYyYjc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqf3QtLnbQVXV9BEE/xA2HHnZ94LL
HXs//sGKPq2g0fiC1Kqh0z2DpUMsS8eNgOmhUNWghxMruhhPY7BRDWhL8RB4SA/J
gvyyKBg4Tw5/ETTGIF6ZC0ZO/jGIcGZU1tIdUBI4VuMN12NdzTVrvaa5WF7dm86B
qjjKxIlYhakdVlW9uaPxm3AMZij9e15gVvg3ncF30y0wsp3cVq1zYKqiSCtq6YFB
R1ooww4SOpw2krCv9AKMhqIXvZ6dEu0fGcHPP5siBcLmYmqJPSiDpFHgrSjIQCoK
GsrUg+SRU81wbFFdjRAUKIXtXYAtT7wnUmuj//JxxJz7GmWSWdWLcjsOUQIDAQAB
o4ICNjCCAjIwHQYDVR0OBBYEFH/weQ+lNcYPQTYU1mtAfA01Hyt3MB8GA1UdIwQY
MBaAFJN/EquvYTlz/rMHPYzmN/GwDL+pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazM4U3E2OWhPWFAtc3djOWpPWTM4YkFNdjZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC85NWU5NDktYmYzNC00MTIyLThmYTgt
YTFhZTU4OTJkNDIxLzEvZl9CNUQ2VTF4ZzlCTmhUV2EwQjhEVFVmSzNjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC85NWU5NDktYmYzNC00MTIyLThmYTgtYTFhZTU4OTJkNDIx
LzEvazM4U3E2OWhPWFAtc3djOWpPWTM4YkFNdjZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQCLYvwAwQE
T4yAAwQFUsOAAwQFVDPgAwQF1E7gAwQD1FQoMA0EAgACMAcDBQAgARvYMA0GCSqG
SIb3DQEBCwUAA4IBAQBWv6J7y/CVH1wdQXZYYd2pkXm6DsdK8Vi0MsqmzdaG6B7L
qDO1kd1N9JSddy7DoBJ1wuj7/8LwTTTUs63xl5rOlOh9aji5xJ/QcVLrhXxN3uH/
Is8lS5uvgDXmJS8R65UyIa7K302AQYPoKng3cdKpwOcdlwXqAFfO3K2JkJ+Pz2JS
PhdxMmSVMwDSZtUBJTWQRqm1lwQgwGld8SENr+Lp/x9DsvamsCzftdIlF52odHCM
V43vpPT8gSx5EvFaEbtJ6PFVkQ/cBQrynNDQDCDM+bi7D/ky7qQLay/90tnpRXqu
hpn9t7bhm085BtwWOPUFbThSBm5nhHQCbi1yAk+C
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:39 2024 by rpki-client on console-ams.rpki-client.org