Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/24lu6H1q76zKMTD8b01fpispMOs.roa
File: 24lu6H1q76zKMTD8b01fpispMOs.roa (raw, json)
Hash identifier: yOeQjNSzYGc6NLiiUsJWQRjQIEzgw+4eqCU/lgbFQSU=
Subject key identifier: DB:89:6E:E8:7D:6A:EF:AC:CA:31:30:FC:6F:4D:5F:A6:2B:29:30:EB
Certificate issuer: /CN=722a8c1d311895016108ffbd14575c77cc28773a
Certificate serial: 018D9E28AB5BE72E93A7E4FC57A88D17672B
Authority key identifier: 72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/24lu6H1q76zKMTD8b01fpispMOs.roa
Signing time: Mon 12 Feb 2024 16:31:21 +0000
ROA not before: Mon 12 Feb 2024 16:31:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49040
IP address blocks: 78.108.244.0/24 maxlen: 24
78.108.245.0/24 maxlen: 24
78.108.246.0/24 maxlen: 24
83.222.160.0/24 maxlen: 24
83.222.167.0/24 maxlen: 24
83.222.170.0/24 maxlen: 24
83.222.172.0/24 maxlen: 24
109.160.56.0/24 maxlen: 24
109.160.59.0/24 maxlen: 24
109.160.85.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 13 Feb 2024 08:23:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:9e:28:ab:5b:e7:2e:93:a7:e4:fc:57:a8:8d:17:67:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=722a8c1d311895016108ffbd14575c77cc28773a
Validity
Not Before: Feb 12 16:31:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=db896ee87d6aefacca3130fc6f4d5fa62b2930eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:fd:87:3d:18:6f:64:19:da:d1:35:87:6f:d4:
27:37:2f:5b:c4:5e:25:ba:b8:3d:71:d6:98:74:6a:
7f:39:b5:9e:e0:16:b2:87:34:20:fe:41:7b:1d:6e:
34:2a:fa:28:11:2e:dc:46:86:5b:b3:c8:be:a3:b2:
5b:bc:1e:e1:e9:be:ee:f1:d6:7c:bc:8f:f7:c7:29:
11:64:08:8a:b4:4c:36:16:4c:88:1c:f6:41:35:08:
c6:36:bb:91:de:32:77:15:e2:8c:13:a7:31:cd:db:
ba:27:d2:81:47:fe:33:54:17:56:3b:3d:25:a7:a2:
a1:9f:f1:f6:bf:89:25:30:d2:aa:44:5d:ec:0f:43:
f4:e4:f0:9c:c6:6f:c2:b6:94:55:ba:5d:69:f2:69:
a5:ce:9f:5d:9c:b3:e4:46:b3:66:76:51:d2:46:50:
f3:85:69:84:69:b9:25:3a:88:8f:79:f8:0f:2f:61:
31:66:db:b1:64:ff:68:25:8f:81:32:8f:c6:f0:78:
52:c3:de:6d:cc:43:02:55:ef:40:30:10:d4:67:68:
b1:54:e3:f6:eb:00:3e:57:18:5c:df:23:c0:c2:db:
0c:84:ef:ee:d0:30:e1:6b:22:65:d5:ac:90:7c:7d:
29:74:19:c1:a8:3c:5f:b1:d4:ed:e2:84:7a:0c:e5:
0d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:89:6E:E8:7D:6A:EF:AC:CA:31:30:FC:6F:4D:5F:A6:2B:29:30:EB
X509v3 Authority Key Identifier:
keyid:72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/24lu6H1q76zKMTD8b01fpispMOs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.108.244.0-78.108.246.255
83.222.160.0/24
83.222.167.0/24
83.222.170.0/24
83.222.172.0/24
109.160.56.0/24
109.160.59.0/24
109.160.85.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:21:6f:2e:46:85:95:6c:f2:83:69:93:e1:8b:e2:a3:84:dd:
a1:da:f6:4f:41:5d:df:e4:ab:b5:35:01:22:e3:52:ed:0e:53:
4c:28:80:ce:84:2b:6c:1d:43:54:a3:42:22:13:ce:43:46:ce:
92:4e:8b:76:88:b8:70:bf:48:a1:c2:cf:c3:87:47:4e:d6:68:
3a:f9:bd:48:4a:d1:d8:e2:6b:07:a6:33:01:b6:b9:8f:18:bd:
92:20:59:ad:92:d4:b2:44:99:e7:ab:5c:75:7c:e3:70:1f:ce:
b4:db:65:6a:2d:c2:af:78:d4:ca:e8:c5:c1:0f:ad:0a:3e:9b:
cf:e3:73:53:4d:14:ef:dc:14:4d:f5:86:bc:a6:43:da:cf:58:
d4:23:78:b0:ed:eb:c4:1d:2c:ba:00:90:d1:44:9d:2a:47:76:
55:cb:6c:e4:12:5e:16:32:f9:77:d4:0a:33:91:20:ca:75:26:
75:47:bd:43:8a:7b:87:b9:7a:f7:16:8f:04:59:04:4f:5f:4f:
2f:b8:e2:99:08:22:54:73:1f:2f:70:51:fd:ad:8a:33:76:51:
2d:ac:7a:f0:56:60:9c:d6:b4:11:32:52:a9:f1:64:d9:17:ce:
c1:34:64:eb:97:31:a5:74:d7:78:d5:36:c0:d8:70:37:3a:99:
d2:1b:e5:f1
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgISAY2eKKtb5y6Tp+T8V6iNF2crMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMmE4YzFkMzExODk1MDE2MTA4ZmZiZDE0NTc1Yzc3Y2My
ODc3M2EwHhcNMjQwMjEyMTYzMTIxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYjg5NmVlODdkNmFlZmFjY2EzMTMwZmM2ZjRkNWZhNjJiMjkzMGViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/2HPRhvZBna0TWHb9QnNy9bxF4l
urg9cdaYdGp/ObWe4BayhzQg/kF7HW40KvooES7cRoZbs8i+o7JbvB7h6b7u8dZ8
vI/3xykRZAiKtEw2FkyIHPZBNQjGNruR3jJ3FeKME6cxzdu6J9KBR/4zVBdWOz0l
p6Khn/H2v4klMNKqRF3sD0P05PCcxm/CtpRVul1p8mmlzp9dnLPkRrNmdlHSRlDz
hWmEabklOoiPefgPL2ExZtuxZP9oJY+BMo/G8HhSw95tzEMCVe9AMBDUZ2ixVOP2
6wA+Vxhc3yPAwtsMhO/u0DDhayJl1ayQfH0pdBnBqDxfsdTt4oR6DOUNFwIDAQAB
o4ICOzCCAjcwHQYDVR0OBBYEFNuJbuh9au+syjEw/G9NX6YrKTDrMB8GA1UdIwQY
MBaAFHIqjB0xGJUBYQj/vRRXXHfMKHc6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2lxTUhURVlsUUZoQ1AtOUZGZGNkOHdvZHpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9iMWY2ZWUtYzRlZi00MzU1LWFmMzYt
YTU1OGVlNjU0MzFmLzEvMjRsdTZIMXE3NnpLTVREOGIwMWZwaXNwTU9zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9iMWY2ZWUtYzRlZi00MzU1LWFmMzYtYTU1OGVlNjU0MzFm
LzEvY2lxTUhURVlsUUZoQ1AtOUZGZGNkOHdvZHpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFEGCCsGAQUFBwEHAQH/BEIwQDA+BAIAATA4MAwDBAJObPQD
BABObPYDBABT3qADBABT3qcDBABT3qoDBABT3qwDBABtoDgDBABtoDsDBABtoFUw
DQYJKoZIhvcNAQELBQADggEBABohby5GhZVs8oNpk+GL4qOE3aHa9k9BXd/kq7U1
ASLjUu0OU0wogM6EK2wdQ1SjQiITzkNGzpJOi3aIuHC/SKHCz8OHR07WaDr5vUhK
0djiawemMwG2uY8YvZIgWa2S1LJEmeerXHV843AfzrTbZWotwq941MroxcEPrQo+
m8/jc1NNFO/cFE31hrymQ9rPWNQjeLDt68QdLLoAkNFEnSpHdlXLbOQSXhYy+XfU
CjORIMp1JnVHvUOKe4e5evcWjwRZBE9fTy+44pkIIlRzHy9wUf2tijN2US2sevBW
YJzWtBEyUqnxZNkXzsE0ZOuXMaV013jVNsDYcDc6mdIb5fE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:27 2024 by rpki-client on console-ams.rpki-client.org