Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/u_Zd9KMPBMqI3qqwGTUOKbhO-I0.roa
File: u_Zd9KMPBMqI3qqwGTUOKbhO-I0.roa (raw, json)
Hash identifier: VwQmO+/ZuKS7dgc0vUJ7fCgzc+MohHBWPOlEvn2/wXk=
Subject key identifier: BB:F6:5D:F4:A3:0F:04:CA:88:DE:AA:B0:19:35:0E:29:B8:4E:F8:8D
Certificate issuer: /CN=ac9e2efcdc213ac5b1b0879d922a178b850f451f
Certificate serial: 018D9E450E6349910DFDD399581C1DAFA184
Authority key identifier: AC:9E:2E:FC:DC:21:3A:C5:B1:B0:87:9D:92:2A:17:8B:85:0F:45:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJ4u_NwhOsWxsIedkioXi4UPRR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/u_Zd9KMPBMqI3qqwGTUOKbhO-I0.roa
Signing time: Mon 12 Feb 2024 17:02:22 +0000
ROA not before: Mon 12 Feb 2024 17:02:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29104
IP address blocks: 37.35.0.0/21 maxlen: 21
37.35.6.0/24 maxlen: 24
185.116.132.0/22 maxlen: 22
185.116.134.0/24 maxlen: 24
192.54.144.0/24 maxlen: 24
193.56.125.0/24 maxlen: 24
193.56.130.0/23 maxlen: 23
193.56.130.0/24 maxlen: 24
193.56.131.0/24 maxlen: 24
2a00:4f40::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 12 Mar 2024 14:31:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:9e:45:0e:63:49:91:0d:fd:d3:99:58:1c:1d:af:a1:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9e2efcdc213ac5b1b0879d922a178b850f451f
Validity
Not Before: Feb 12 17:02:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bbf65df4a30f04ca88deaab019350e29b84ef88d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:0e:df:79:9f:8b:60:6f:5e:f7:4d:6e:90:23:
a1:aa:8f:1a:d1:0a:53:f0:c4:f3:be:b4:6a:b9:a8:
ae:91:55:14:77:cf:a3:41:98:ad:2b:75:f6:98:83:
80:2c:00:37:04:6b:f8:df:b5:95:01:11:54:b3:0f:
11:62:92:d1:bd:25:95:3d:8c:62:5d:e0:49:fa:71:
f2:a0:c7:c9:34:48:17:1f:52:70:0c:13:10:ad:30:
16:98:a9:58:39:4c:9c:8c:5a:03:94:62:84:c1:ba:
d2:1f:60:19:ad:29:f1:70:76:00:94:7d:0e:19:cc:
ad:f7:73:fe:a9:58:f8:4b:8d:ef:9c:e5:f5:bc:8d:
25:2e:07:5c:8e:c9:db:d4:2a:fe:6c:1a:a6:b6:d5:
64:90:61:05:2d:f2:af:b7:2b:9a:2c:0c:a4:0c:9c:
d8:85:c6:99:fb:40:c2:0e:f1:4e:7b:c6:b5:a9:e2:
5d:3f:28:12:c2:96:0c:70:f5:84:5f:48:58:04:73:
66:53:83:53:86:e0:16:50:ff:c5:81:7b:5f:92:38:
3a:fe:68:bb:e2:e2:c1:e8:7c:c5:b5:c3:e1:22:42:
01:76:27:9c:f3:29:96:9f:22:26:10:5e:cf:8f:d9:
59:fe:61:77:6b:27:47:f5:27:3e:1d:e0:59:15:76:
66:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:F6:5D:F4:A3:0F:04:CA:88:DE:AA:B0:19:35:0E:29:B8:4E:F8:8D
X509v3 Authority Key Identifier:
keyid:AC:9E:2E:FC:DC:21:3A:C5:B1:B0:87:9D:92:2A:17:8B:85:0F:45:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJ4u_NwhOsWxsIedkioXi4UPRR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/u_Zd9KMPBMqI3qqwGTUOKbhO-I0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/rJ4u_NwhOsWxsIedkioXi4UPRR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.35.0.0/21
185.116.132.0/22
192.54.144.0/24
193.56.125.0/24
193.56.130.0/23
IPv6:
2a00:4f40::/32
Signature Algorithm: sha256WithRSAEncryption
28:15:77:f9:20:b1:ea:94:6b:3a:0b:ff:94:11:73:65:31:09:
67:a0:b2:30:e1:57:df:1d:ca:ab:76:7e:9d:93:38:72:b8:2d:
88:34:58:21:e2:fe:3d:f0:93:b6:96:b2:78:e7:1a:be:8d:02:
8a:13:ce:1a:7a:ca:c4:c5:18:8c:14:0e:8f:ad:3c:cb:86:11:
02:16:a5:97:68:7a:7f:b3:48:20:42:1a:0d:5c:e1:20:8b:d3:
07:f9:56:69:f0:14:73:3a:09:96:08:f2:2a:ee:64:e0:f8:07:
aa:59:aa:e1:37:d3:dc:76:44:6c:af:51:88:8e:8c:5f:bc:a4:
9e:2e:15:2e:1c:cc:4c:1b:b9:5a:42:df:8e:f8:b3:8d:78:bc:
75:20:1c:1e:be:e8:09:6f:c8:e0:98:2c:0f:4c:cd:4c:1c:39:
23:08:ba:c4:70:55:ae:ed:9b:44:b4:d6:b5:33:04:5f:f7:4e:
79:dd:6c:e7:fd:fb:32:d3:9e:52:07:41:f1:be:f7:d0:8f:a6:
c6:c1:ba:cb:13:33:a3:ee:91:84:83:c7:b2:bd:17:d7:12:a2:
35:91:b4:5f:2e:b2:78:06:08:4e:d4:44:0e:49:a8:a2:c0:49:
b3:60:ff:ce:82:1f:56:88:f7:ff:b3:81:44:6a:00:f7:c0:db:
b7:b2:c9:f1
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgISAY2eRQ5jSZEN/dOZWBwdr6GEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjOWUyZWZjZGMyMTNhYzViMWIwODc5ZDkyMmExNzhiODUw
ZjQ1MWYwHhcNMjQwMjEyMTcwMjIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYmY2NWRmNGEzMGYwNGNhODhkZWFhYjAxOTM1MGUyOWI4NGVmODhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjw7feZ+LYG9e901ukCOhqo8a0QpT
8MTzvrRquaiukVUUd8+jQZitK3X2mIOALAA3BGv437WVARFUsw8RYpLRvSWVPYxi
XeBJ+nHyoMfJNEgXH1JwDBMQrTAWmKlYOUycjFoDlGKEwbrSH2AZrSnxcHYAlH0O
Gcyt93P+qVj4S43vnOX1vI0lLgdcjsnb1Cr+bBqmttVkkGEFLfKvtyuaLAykDJzY
hcaZ+0DCDvFOe8a1qeJdPygSwpYMcPWEX0hYBHNmU4NThuAWUP/FgXtfkjg6/mi7
4uLB6HzFtcPhIkIBdiec8ymWnyImEF7Pj9lZ/mF3aydH9Sc+HeBZFXZmTwIDAQAB
o4ICMDCCAiwwHQYDVR0OBBYEFLv2XfSjDwTKiN6qsBk1Dim4TviNMB8GA1UdIwQY
MBaAFKyeLvzcITrFsbCHnZIqF4uFD0UfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcko0dV9Od2hPc1d4c0llZGtpb1hpNFVQUlI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9kMWZhYTktYjVhMy00ZDQ5LTg2OGEt
N2M3YmYyNzE3NWM1LzEvdV9aZDlLTVBCTXFJM3Fxd0dUVU9LYmhPLUkwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC9kMWZhYTktYjVhMy00ZDQ5LTg2OGEtN2M3YmYyNzE3NWM1
LzEvcko0dV9Od2hPc1d4c0llZGtpb1hpNFVQUlI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQDJSMAAwQC
uXSEAwQAwDaQAwQAwTh9AwQBwTiCMA0EAgACMAcDBQAqAE9AMA0GCSqGSIb3DQEB
CwUAA4IBAQAoFXf5ILHqlGs6C/+UEXNlMQlnoLIw4VffHcqrdn6dkzhyuC2INFgh
4v498JO2lrJ45xq+jQKKE84aesrExRiMFA6PrTzLhhECFqWXaHp/s0ggQhoNXOEg
i9MH+VZp8BRzOgmWCPIq7mTg+AeqWarhN9PcdkRsr1GIjoxfvKSeLhUuHMxMG7la
Qt+O+LONeLx1IBwevugJb8jgmCwPTM1MHDkjCLrEcFWu7ZtEtNa1MwRf90553Wzn
/fsy055SB0HxvvfQj6bGwbrLEzOj7pGEg8eyvRfXEqI1kbRfLrJ4BghO1EQOSaii
wEmzYP/Ogh9WiPf/s4FEagD3wNu3ssnx
-----END CERTIFICATE-----
Generated at Tue Mar 12 19:22:35 2024 by rpki-client on console.sobornost.net