Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/TjTkV5yZ_eiEyNBXWCW7__s-O1U.roa
File: TjTkV5yZ_eiEyNBXWCW7__s-O1U.roa (raw, json)
Hash identifier: NLSgekquUms0ZXNeAm4ayYg67bkhLasGw9o1elR5Vdg=
Subject key identifier: 4E:34:E4:57:9C:99:FD:E8:84:C8:D0:57:58:25:BB:FF:FB:3E:3B:55
Certificate issuer: /CN=722a8c1d311895016108ffbd14575c77cc28773a
Certificate serial: 019039C460096BFAB5412635234905500EB7
Authority key identifier: 72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/TjTkV5yZ_eiEyNBXWCW7__s-O1U.roa
Signing time: Fri 21 Jun 2024 07:48:09 +0000
ROA not before: Fri 21 Jun 2024 07:48:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12615
IP address blocks: 78.108.249.0/24 maxlen: 24
87.246.4.0/24 maxlen: 24
109.160.44.0/24 maxlen: 24
109.160.45.0/24 maxlen: 24
109.160.118.0/24 maxlen: 24
109.160.119.0/24 maxlen: 24
185.43.59.0/24 maxlen: 24
212.70.130.0/23 maxlen: 23
212.70.132.0/24 maxlen: 24
212.70.133.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 13 Sep 2024 05:23:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:39:c4:60:09:6b:fa:b5:41:26:35:23:49:05:50:0e:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=722a8c1d311895016108ffbd14575c77cc28773a
Validity
Not Before: Jun 21 07:48:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4e34e4579c99fde884c8d0575825bbfffb3e3b55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:99:98:5d:b4:b7:2a:2f:a1:0a:78:86:99:eb:
d7:db:51:63:75:01:65:ca:c4:c2:07:3d:20:38:4b:
be:10:be:37:4d:4c:5b:44:fb:ff:e8:46:45:b2:29:
8e:23:b5:7a:1a:75:94:e1:7f:1e:e6:fe:20:af:c7:
c3:37:15:42:75:3a:12:39:ea:df:6a:48:fd:fa:74:
11:fb:6e:ec:1b:37:d9:76:ab:15:70:04:c7:9a:01:
e5:35:dc:3d:a3:3e:c0:04:12:da:b3:92:a0:c8:07:
2e:1b:a9:10:af:40:83:be:b1:51:bf:43:cf:f0:1c:
66:d0:53:4d:5a:86:c4:a1:a8:2d:59:80:d8:92:eb:
6d:c0:27:db:d0:ca:f0:c0:38:cd:65:cd:e8:8a:82:
d4:12:ad:63:7f:4b:72:dc:2e:21:6c:20:39:ec:17:
72:e0:96:ed:9d:61:3c:d1:5e:02:5f:0c:f1:fc:86:
24:5f:d8:8e:fd:ee:27:24:71:97:ed:d2:b6:0b:aa:
51:a3:9f:5b:b1:0a:2f:3a:29:80:c2:fa:ae:33:0e:
7e:75:b4:56:f5:8a:14:31:65:8d:de:08:c3:ee:fb:
6b:95:e6:07:b5:9d:cf:a6:ba:ee:0f:4d:79:cd:ed:
5b:2f:e2:21:56:a9:3c:49:d7:2d:9e:be:18:46:f4:
88:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:34:E4:57:9C:99:FD:E8:84:C8:D0:57:58:25:BB:FF:FB:3E:3B:55
X509v3 Authority Key Identifier:
keyid:72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/TjTkV5yZ_eiEyNBXWCW7__s-O1U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.108.249.0/24
87.246.4.0/24
109.160.44.0/23
109.160.118.0/23
185.43.59.0/24
212.70.130.0-212.70.133.255
Signature Algorithm: sha256WithRSAEncryption
a2:47:2b:00:7b:7e:e4:34:43:9a:e6:6c:a8:8e:89:47:25:d8:
90:97:10:b3:67:b1:2c:30:f5:59:f5:63:5c:d9:36:0a:fb:0e:
8b:36:9d:0d:f2:54:ed:cd:dc:ce:bb:07:5a:e5:90:ef:07:ba:
86:8d:07:1f:b4:b0:a6:53:78:44:b2:4d:7e:cf:eb:e5:8e:6f:
a8:58:17:76:e9:79:f2:8c:45:33:1f:25:bd:7a:29:9b:91:2c:
fa:25:0a:14:3e:0c:d1:76:24:27:8e:5f:f3:20:90:44:5f:fe:
22:8f:5c:2f:dd:79:87:f1:89:74:e3:ed:6e:18:b2:bc:ea:71:
52:74:77:38:0e:7b:b6:81:22:48:89:ed:d7:c1:1c:a9:89:91:
fa:b6:36:43:8b:df:94:08:63:d5:1b:72:1b:83:35:0c:64:13:
c1:54:90:85:26:99:5a:64:ee:f0:48:e7:ed:93:46:fe:40:9b:
c3:93:34:ea:0b:06:69:b6:e0:91:2c:dd:36:a4:2f:af:94:1e:
ec:b1:5d:8e:80:93:20:a6:17:b2:df:ec:c4:4d:ac:ce:fe:21:
80:0d:8e:8d:18:c5:dc:97:b2:fb:bb:c5:84:a8:0c:c2:ba:87:
10:ac:73:81:4a:a4:2e:17:8b:14:df:6e:43:38:4b:3b:2c:3a:
a7:7f:82:dc
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgISAZA5xGAJa/q1QSY1I0kFUA63MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMmE4YzFkMzExODk1MDE2MTA4ZmZiZDE0NTc1Yzc3Y2My
ODc3M2EwHhcNMjQwNjIxMDc0ODA5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZTM0ZTQ1NzljOTlmZGU4ODRjOGQwNTc1ODI1YmJmZmZiM2UzYjU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpmYXbS3Ki+hCniGmevX21FjdQFl
ysTCBz0gOEu+EL43TUxbRPv/6EZFsimOI7V6GnWU4X8e5v4gr8fDNxVCdToSOerf
akj9+nQR+27sGzfZdqsVcATHmgHlNdw9oz7ABBLas5KgyAcuG6kQr0CDvrFRv0PP
8Bxm0FNNWobEoagtWYDYkuttwCfb0MrwwDjNZc3oioLUEq1jf0ty3C4hbCA57Bdy
4JbtnWE80V4CXwzx/IYkX9iO/e4nJHGX7dK2C6pRo59bsQovOimAwvquMw5+dbRW
9YoUMWWN3gjD7vtrleYHtZ3PprruD015ze1bL+IhVqk8Sdctnr4YRvSIEwIDAQAB
o4ICLzCCAiswHQYDVR0OBBYEFE405Fecmf3ohMjQV1glu//7PjtVMB8GA1UdIwQY
MBaAFHIqjB0xGJUBYQj/vRRXXHfMKHc6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2lxTUhURVlsUUZoQ1AtOUZGZGNkOHdvZHpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9iMWY2ZWUtYzRlZi00MzU1LWFmMzYt
YTU1OGVlNjU0MzFmLzEvVGpUa1Y1eVpfZWlFeU5CWFdDVzdfX3MtTzFVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9iMWY2ZWUtYzRlZi00MzU1LWFmMzYtYTU1OGVlNjU0MzFm
LzEvY2lxTUhURVlsUUZoQ1AtOUZGZGNkOHdvZHpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsAwQATmz5AwQA
V/YEAwQBbaAsAwQBbaB2AwQAuSs7MAwDBAHURoIDBAHURoQwDQYJKoZIhvcNAQEL
BQADggEBAKJHKwB7fuQ0Q5rmbKiOiUcl2JCXELNnsSww9Vn1Y1zZNgr7Dos2nQ3y
VO3N3M67B1rlkO8HuoaNBx+0sKZTeESyTX7P6+WOb6hYF3bpefKMRTMfJb16KZuR
LPolChQ+DNF2JCeOX/MgkERf/iKPXC/deYfxiXTj7W4YsrzqcVJ0dzgOe7aBIkiJ
7dfBHKmJkfq2NkOL35QIY9UbchuDNQxkE8FUkIUmmVpk7vBI5+2TRv5Am8OTNOoL
Bmm24JEs3TakL6+UHuyxXY6AkyCmF7Lf7MRNrM7+IYANjo0YxdyXsvu7xYSoDMK6
hxCsc4FKpC4XixTfbkM4SzssOqd/gtw=
-----END CERTIFICATE-----
Generated at Fri Sep 13 06:20:12 2024 by rpki-client on console-fra.rpki-client.org