Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/wnfNufTmfzaMGINP5OjXmI1r56s.roa
File: wnfNufTmfzaMGINP5OjXmI1r56s.roa (raw, json)
Hash identifier: jyQGcbg6UhlVY1V1eMH31AR9QuxUT863wTNUAU4BPlk=
Subject key identifier: C2:77:CD:B9:F4:E6:7F:36:8C:18:83:4F:E4:E8:D7:98:8D:6B:E7:AB
Certificate issuer: /CN=ad2cf03e44da28b7319ea7b7b5b110b9b8cb7a70
Certificate serial: 018CC4930F5B93120B6CAE5D6877C7713E64
Authority key identifier: AD:2C:F0:3E:44:DA:28:B7:31:9E:A7:B7:B5:B1:10:B9:B8:CB:7A:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSzwPkTaKLcxnqe3tbEQubjLenA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/wnfNufTmfzaMGINP5OjXmI1r56s.roa
Signing time: Mon 01 Jan 2024 10:30:21 +0000
ROA not before: Mon 01 Jan 2024 10:30:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2586
IP address blocks: 194.204.0.0/18 maxlen: 20
194.55.8.0/22 maxlen: 22
81.90.112.0/20 maxlen: 23
194.150.64.0/22 maxlen: 24
85.253.0.0/16 maxlen: 16
87.119.160.0/19 maxlen: 21
95.129.192.0/21 maxlen: 23
62.65.192.0/18 maxlen: 18
91.213.43.0/24 maxlen: 24
94.246.216.0/21 maxlen: 22
94.246.224.0/19 maxlen: 19
145.14.32.0/20 maxlen: 20
178.23.112.0/21 maxlen: 23
185.13.16.0/22 maxlen: 24
82.131.0.0/17 maxlen: 17
146.255.176.0/21 maxlen: 23
145.14.16.0/20 maxlen: 20
2001:1bf0::/29 maxlen: 29
2001:1530::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 16 May 2024 06:48:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:0f:5b:93:12:0b:6c:ae:5d:68:77:c7:71:3e:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad2cf03e44da28b7319ea7b7b5b110b9b8cb7a70
Validity
Not Before: Jan 1 10:30:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c277cdb9f4e67f368c18834fe4e8d7988d6be7ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:41:e0:c8:4f:5a:f9:21:4b:6f:d8:2c:8a:50:
c9:fa:c6:ce:c9:81:ae:c3:2a:ad:4c:0a:4d:ff:e5:
f8:59:63:eb:08:b5:58:39:80:1b:12:65:61:78:bd:
e6:ec:04:ec:ad:f4:cd:42:84:14:3c:bc:2a:a1:05:
c2:92:30:45:58:17:a2:ab:f0:16:d4:59:9a:05:29:
80:b9:54:47:9d:c5:aa:f5:ee:c2:c5:2e:8c:1a:14:
08:2e:75:00:7a:60:5b:ea:7b:e1:ac:64:0c:71:a6:
47:76:2d:b2:14:a9:9f:96:ff:7d:79:c1:27:b4:c5:
64:0e:28:0b:e4:09:66:98:95:83:26:c0:3c:35:93:
4d:7c:da:61:43:9f:46:14:63:95:20:24:d1:f6:56:
ab:2a:46:9b:12:50:76:f3:a6:17:16:f3:ce:f7:f2:
72:fa:99:fe:d2:d1:27:81:d4:0b:e3:72:b6:c3:33:
5e:65:6c:3a:51:58:53:01:cb:e5:90:27:58:37:f8:
b4:78:98:a4:1d:14:8a:a9:44:84:f4:09:49:fe:0f:
2e:af:a7:1f:ee:1c:e6:91:8d:70:09:a0:54:d6:9f:
b2:21:14:b3:7f:27:b4:16:d8:c5:59:4c:db:85:78:
cc:e2:35:7a:b3:f0:76:00:74:30:7d:39:32:e4:a6:
51:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:77:CD:B9:F4:E6:7F:36:8C:18:83:4F:E4:E8:D7:98:8D:6B:E7:AB
X509v3 Authority Key Identifier:
keyid:AD:2C:F0:3E:44:DA:28:B7:31:9E:A7:B7:B5:B1:10:B9:B8:CB:7A:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSzwPkTaKLcxnqe3tbEQubjLenA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/wnfNufTmfzaMGINP5OjXmI1r56s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/rSzwPkTaKLcxnqe3tbEQubjLenA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.65.192.0/18
81.90.112.0/20
82.131.0.0/17
85.253.0.0/16
87.119.160.0/19
91.213.43.0/24
94.246.216.0-94.246.255.255
95.129.192.0/21
145.14.16.0-145.14.47.255
146.255.176.0/21
178.23.112.0/21
185.13.16.0/22
194.55.8.0/22
194.150.64.0/22
194.204.0.0/18
IPv6:
2001:1530::/32
2001:1bf0::/29
Signature Algorithm: sha256WithRSAEncryption
07:1e:8c:25:2e:9e:a0:5c:a3:07:dc:ac:b0:13:d0:4a:94:da:
bc:2c:17:25:b6:f6:f7:d8:33:9f:e6:f1:16:ba:c2:6b:34:12:
13:be:2f:98:dc:c5:af:0c:47:e3:31:ef:c4:44:2a:ba:77:ad:
07:3a:bc:13:08:88:1a:80:d8:44:41:ec:f8:7a:c6:ff:b5:7b:
82:a9:f1:5f:04:d7:d0:e9:60:ae:4e:93:25:50:76:45:7d:6e:
3b:4b:4e:22:06:ae:81:85:2d:32:ff:91:e0:3b:6c:54:39:e8:
71:fc:6e:f7:b5:94:c9:63:c7:ac:df:5d:79:f6:38:6b:f7:ab:
72:6a:f4:68:56:87:f7:90:bc:eb:dd:4b:5f:90:1a:28:8a:19:
8d:f0:e9:2f:1f:65:60:b3:2c:88:ad:ad:d1:2f:c4:35:d4:7e:
a9:3e:4e:ea:ab:ef:10:8a:20:f5:ba:59:84:70:e5:9c:7e:19:
52:cb:58:bb:8b:11:97:98:61:a3:7f:bd:56:50:b5:8d:8e:08:
65:d5:a5:23:74:85:6b:40:1a:b2:4f:54:ac:bb:07:5e:de:53:
bd:65:04:61:31:ed:40:9f:ab:99:a0:48:4a:3d:4a:4e:15:48:
80:2e:6e:02:05:b1:4e:42:dc:30:d0:25:6d:01:07:0b:0a:eb:
18:78:70:82
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYzEkw9bkxILbK5daHfHcT5kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkMmNmMDNlNDRkYTI4YjczMTllYTdiN2I1YjExMGI5Yjhj
YjdhNzAwHhcNMjQwMTAxMTAzMDIxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMjc3Y2RiOWY0ZTY3ZjM2OGMxODgzNGZlNGU4ZDc5ODhkNmJlN2FiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhkHgyE9a+SFLb9gsilDJ+sbOyYGu
wyqtTApN/+X4WWPrCLVYOYAbEmVheL3m7ATsrfTNQoQUPLwqoQXCkjBFWBeiq/AW
1FmaBSmAuVRHncWq9e7CxS6MGhQILnUAemBb6nvhrGQMcaZHdi2yFKmflv99ecEn
tMVkDigL5AlmmJWDJsA8NZNNfNphQ59GFGOVICTR9larKkabElB286YXFvPO9/Jy
+pn+0tEngdQL43K2wzNeZWw6UVhTAcvlkCdYN/i0eJikHRSKqUSE9AlJ/g8ur6cf
7hzmkY1wCaBU1p+yIRSzfye0FtjFWUzbhXjM4jV6s/B2AHQwfTky5KZRDQIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFMJ3zbn05n82jBiDT+To15iNa+erMB8GA1UdIwQY
MBaAFK0s8D5E2ii3MZ6nt7WxELm4y3pwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclN6d1BrVGFLTGN4bnFlM3RiRVF1YmpMZW5BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9jYWUzMTktNTU3MS00NmY5LWI1N2Qt
YmUwNjVlMWFjMDY3LzEvd25mTnVmVG1memFNR0lOUDVPalhtSTFyNTZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS9jYWUzMTktNTU3MS00NmY5LWI1N2QtYmUwNjVlMWFjMDY3
LzEvclN6d1BrVGFLTGN4bnFlM3RiRVF1YmpMZW5BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGZBggrBgEFBQcBBwEB/wSBiTCBhjBuBAIAATBoAwQGPkHA
AwQEUVpwAwQHUoMAAwMAVf0DBAVXd6ADBABb1SswCwMEA1722AMDAF72AwQDX4HA
MAwDBASRDhADBASRDiADBAOS/7ADBAOyF3ADBAK5DRADBALCNwgDBALClkADBAbC
zAAwFAQCAAIwDgMFACABFTADBQMgARvwMA0GCSqGSIb3DQEBCwUAA4IBAQAHHowl
Lp6gXKMH3KywE9BKlNq8LBcltvb32DOf5vEWusJrNBITvi+Y3MWvDEfjMe/ERCq6
d60HOrwTCIgagNhEQez4esb/tXuCqfFfBNfQ6WCuTpMlUHZFfW47S04iBq6BhS0y
/5HgO2xUOehx/G73tZTJY8es31159jhr96tyavRoVof3kLzr3UtfkBooihmN8Okv
H2VgsyyIra3RL8Q11H6pPk7qq+8QiiD1ulmEcOWcfhlSy1i7ixGXmGGjf71WULWN
jghl1aUjdIVrQBqyT1Ssuwde3lO9ZQRhMe1An6uZoEhKPUpOFUiALm4CBbFOQtww
0CVtAQcLCusYeHCC
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:22 2024 by rpki-client on console-fra.rpki-client.org