Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/2wZcR-4CWiE64Hl8C715GtdRYnM.roa
File: 2wZcR-4CWiE64Hl8C715GtdRYnM.roa (raw, json)
Hash identifier: Lwa72rz9RIZSgrBMSUOxH98n7+M81bnEGcfeRhk8CUs=
Subject key identifier: DB:06:5C:47:EE:02:5A:21:3A:E0:79:7C:0B:BD:79:1A:D7:51:62:73
Certificate issuer: /CN=66df7742890173927935206a28efbf48123e787c
Certificate serial: 018E335001F7DBF2B1B2B5D20C7EA188057E
Authority key identifier: 66:DF:77:42:89:01:73:92:79:35:20:6A:28:EF:BF:48:12:3E:78:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/2wZcR-4CWiE64Hl8C715GtdRYnM.roa
Signing time: Tue 12 Mar 2024 15:37:45 +0000
ROA not before: Tue 12 Mar 2024 15:37:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203
IP address blocks: 80.74.240.0/21 maxlen: 24
80.74.248.0/21 maxlen: 24
85.95.96.0/19 maxlen: 24
92.42.120.0/21 maxlen: 24
95.129.64.0/21 maxlen: 24
185.79.184.0/22 maxlen: 24
185.94.204.0/22 maxlen: 24
185.99.76.0/22 maxlen: 24
185.178.216.0/22 maxlen: 24
185.204.212.0/22 maxlen: 24
188.94.16.0/21 maxlen: 24
193.24.3.0/24 maxlen: 24
193.24.13.0/24 maxlen: 24
195.26.32.0/19 maxlen: 24
Validation: Failed, certificate revoked on Tue 12 Mar 2024 15:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:33:50:01:f7:db:f2:b1:b2:b5:d2:0c:7e:a1:88:05:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66df7742890173927935206a28efbf48123e787c
Validity
Not Before: Mar 12 15:37:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=db065c47ee025a213ae0797c0bbd791ad7516273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2b:14:93:01:93:40:3c:43:85:a4:98:15:95:
3a:95:4f:e1:70:a3:7c:32:0b:d2:c1:3d:8a:cb:5d:
74:a0:40:c5:2c:9a:66:dc:69:1c:0f:19:2d:ce:59:
85:71:89:96:68:20:da:c1:fe:f0:75:bc:7b:e6:ff:
32:fd:15:81:f6:d4:ed:ec:b5:ba:14:21:7d:e0:67:
14:d3:0c:d5:88:9d:5c:58:b7:f7:3d:a6:aa:bb:38:
a7:6a:26:49:1d:af:db:3c:f5:84:08:d0:5e:0a:be:
bc:09:92:6b:1e:a1:59:91:e7:af:f9:30:19:e0:ad:
63:93:1b:e7:cf:01:34:1a:74:64:6a:36:66:2e:89:
3d:65:45:ce:99:65:b5:ed:c5:8c:c8:25:53:b1:d1:
a1:62:8e:02:8b:5d:36:d8:ab:c4:9b:9f:7e:4a:0d:
fd:d9:fb:79:c6:37:91:22:d2:01:a0:69:17:dc:95:
2a:bf:03:cc:a6:26:dd:de:7d:b0:01:b9:2b:83:17:
fa:b8:99:f6:83:7c:e8:27:44:97:c8:ae:82:96:b7:
f7:26:7f:32:9d:63:34:25:51:e4:df:41:e3:22:08:
a5:93:00:8d:ab:89:59:64:bb:fa:1f:e0:d4:5b:d6:
50:a0:4f:93:a3:d3:5a:2b:91:b4:48:e4:82:f0:be:
65:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:06:5C:47:EE:02:5A:21:3A:E0:79:7C:0B:BD:79:1A:D7:51:62:73
X509v3 Authority Key Identifier:
keyid:66:DF:77:42:89:01:73:92:79:35:20:6A:28:EF:BF:48:12:3E:78:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/2wZcR-4CWiE64Hl8C715GtdRYnM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.74.240.0/20
85.95.96.0/19
92.42.120.0/21
95.129.64.0/21
185.79.184.0/22
185.94.204.0/22
185.99.76.0/22
185.178.216.0/22
185.204.212.0/22
188.94.16.0/21
193.24.3.0/24
193.24.13.0/24
195.26.32.0/19
Signature Algorithm: sha256WithRSAEncryption
5c:9b:e3:37:31:50:0f:93:f0:92:02:19:db:fb:c1:48:ae:57:
80:e2:1f:ce:97:30:e6:80:fb:63:08:02:bc:77:f5:78:16:6b:
7a:3d:58:ed:0d:1c:34:c1:d4:b1:90:0b:2b:36:f6:8a:36:0e:
43:63:c0:56:34:7e:fb:71:5c:d7:56:68:a6:24:bf:2c:3f:72:
2a:d6:4d:7e:1e:8f:fe:85:75:fe:eb:80:a1:d0:9a:cf:76:e4:
3e:83:1d:79:cb:35:a0:89:3c:b7:b7:ec:c7:a1:7f:93:87:8f:
57:3c:c6:60:98:41:5a:36:35:c8:16:00:22:c4:9b:f6:5d:29:
9d:22:41:0e:d3:f0:05:4b:51:36:5f:0d:c5:1f:61:d9:80:41:
4f:fc:81:86:36:0f:05:23:19:34:f8:40:8d:a0:9c:44:b9:2e:
23:21:67:f8:ec:b5:95:2f:fd:b9:e1:9e:66:6c:e3:a5:af:8b:
96:52:de:05:17:59:4e:8c:67:9c:7d:08:16:c6:65:c7:ac:d9:
4b:5f:c5:52:a8:39:7a:2d:f3:39:aa:4a:35:33:4c:33:a6:d0:
28:26:b7:81:e2:d3:52:16:62:d2:d7:b7:39:94:a2:ae:c1:1c:
de:3d:7d:9e:42:25:37:fd:4e:92:1e:51:40:fd:71:aa:5e:fc:
d5:58:96:9b
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgISAY4zUAH32/KxsrXSDH6hiAV+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2ZGY3NzQyODkwMTczOTI3OTM1MjA2YTI4ZWZiZjQ4MTIz
ZTc4N2MwHhcNMjQwMzEyMTUzNzQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYjA2NWM0N2VlMDI1YTIxM2FlMDc5N2MwYmJkNzkxYWQ3NTE2MjczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCsUkwGTQDxDhaSYFZU6lU/hcKN8
MgvSwT2Ky110oEDFLJpm3GkcDxktzlmFcYmWaCDawf7wdbx75v8y/RWB9tTt7LW6
FCF94GcU0wzViJ1cWLf3PaaquzinaiZJHa/bPPWECNBeCr68CZJrHqFZkeev+TAZ
4K1jkxvnzwE0GnRkajZmLok9ZUXOmWW17cWMyCVTsdGhYo4Ci1022KvEm59+Sg39
2ft5xjeRItIBoGkX3JUqvwPMpibd3n2wAbkrgxf6uJn2g3zoJ0SXyK6Clrf3Jn8y
nWM0JVHk30HjIgilkwCNq4lZZLv6H+DUW9ZQoE+To9NaK5G0SOSC8L5lHwIDAQAB
o4ICUTCCAk0wHQYDVR0OBBYEFNsGXEfuAlohOuB5fAu9eRrXUWJzMB8GA1UdIwQY
MBaAFGbfd0KJAXOSeTUgaijvv0gSPnh8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnQ5M1Fva0JjNUo1TlNCcUtPLV9TQkktZUh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9lODQzNDAtMTI4YS00NDk3LTk0NmYt
MDk3ODdmMTUyYWRlLzEvMndaY1ItNENXaUU2NEhsOEM3MTVHdGRSWW5NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS9lODQzNDAtMTI4YS00NDk3LTk0NmYtMDk3ODdmMTUyYWRl
LzEvWnQ5M1Fva0JjNUo1TlNCcUtPLV9TQkktZUh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGcGCCsGAQUFBwEHAQH/BFgwVjBUBAIAATBOAwQEUErwAwQF
VV9gAwQDXCp4AwQDX4FAAwQCuU+4AwQCuV7MAwQCuWNMAwQCubLYAwQCuczUAwQD
vF4QAwQAwRgDAwQAwRgNAwQFwxogMA0GCSqGSIb3DQEBCwUAA4IBAQBcm+M3MVAP
k/CSAhnb+8FIrleA4h/OlzDmgPtjCAK8d/V4Fmt6PVjtDRw0wdSxkAsrNvaKNg5D
Y8BWNH77cVzXVmimJL8sP3Iq1k1+Ho/+hXX+64Ch0JrPduQ+gx15yzWgiTy3t+zH
oX+Th49XPMZgmEFaNjXIFgAixJv2XSmdIkEO0/AFS1E2Xw3FH2HZgEFP/IGGNg8F
Ixk0+ECNoJxEuS4jIWf47LWVL/254Z5mbOOlr4uWUt4FF1lOjGecfQgWxmXHrNlL
X8VSqDl6LfM5qko1M0wzptAoJreB4tNSFmLS17c5lKKuwRzePX2eQiU3/U6SHlFA
/XGqXvzVWJab
-----END CERTIFICATE-----
Generated at Tue Mar 12 23:02:58 2024 by rpki-client on console.sobornost.net