Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/3879dd-ef95-45e6-8767-e681ebba4a4a/1/tuUy_nHaCmVJjU8EWASYzUUkMIo.roa
File: tuUy_nHaCmVJjU8EWASYzUUkMIo.roa (raw, json)
Hash identifier: zsPjz92Hsaa7yjMF5N9lKMQ/yT8NuFU9lwLoyChfE8U=
Subject key identifier: B6:E5:32:FE:71:DA:0A:65:49:8D:4F:04:58:04:98:CD:45:24:30:8A
Certificate issuer: /CN=40d933e82474650c6aa3e9cbf0574d27286592e7
Certificate serial: 0191034D044C90188E77B80EB599E048FEA2
Authority key identifier: 40:D9:33:E8:24:74:65:0C:6A:A3:E9:CB:F0:57:4D:27:28:65:92:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/3879dd-ef95-45e6-8767-e681ebba4a4a/1/tuUy_nHaCmVJjU8EWASYzUUkMIo.roa
Signing time: Tue 30 Jul 2024 11:01:04 +0000
ROA not before: Tue 30 Jul 2024 11:01:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207044
IP address blocks: 87.120.240.0/22 maxlen: 24
87.120.248.0/22 maxlen: 24
87.121.252.0/22 maxlen: 24
88.151.24.0/21 maxlen: 24
89.184.36.0/22 maxlen: 24
89.184.60.0/22 maxlen: 24
91.92.28.0/22 maxlen: 24
185.167.196.0/22 maxlen: 24
213.133.64.0/21 maxlen: 24
2a0b:ae00::/29 maxlen: 29
2a0b:ae00:1000::/38 maxlen: 38
2a0b:ae00:1400::/38 maxlen: 38
2a0b:ae00:1800::/38 maxlen: 38
Validation: Failed, certificate revoked on Wed 01 Jan 2025 13:48:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:03:4d:04:4c:90:18:8e:77:b8:0e:b5:99:e0:48:fe:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40d933e82474650c6aa3e9cbf0574d27286592e7
Validity
Not Before: Jul 30 11:01:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b6e532fe71da0a65498d4f04580498cd4524308a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:69:6d:ce:56:43:15:d8:80:18:8a:25:85:7b:
8a:38:34:f9:f7:b0:b5:68:51:58:8a:1c:13:6d:a4:
aa:08:d1:bf:25:f1:77:26:ff:b9:bd:d4:f4:4b:dc:
b9:1f:bb:49:a9:98:2a:e9:b5:82:32:27:06:78:83:
67:2e:f9:34:0c:23:c0:13:be:f2:ca:3c:1c:f4:2d:
90:20:7c:41:96:5c:f7:8b:b8:0b:7e:ba:fa:64:91:
8c:2d:26:cc:ef:d8:92:fc:14:2e:55:63:45:d9:e9:
78:36:13:a4:21:3a:96:30:9f:b9:dd:e0:96:2e:09:
f8:eb:f7:97:72:91:e3:a4:0a:7d:ed:a1:d7:8a:1a:
38:f6:ef:ca:1f:27:c2:61:ba:28:04:5a:96:3e:56:
62:46:09:7b:61:af:48:a0:b6:0e:a5:1d:6a:47:a4:
62:82:f5:5c:c1:3d:bd:98:36:a6:39:32:24:0a:6c:
25:c0:42:24:7e:f0:0a:b1:83:47:57:37:18:ff:bd:
c6:b0:ee:a2:8d:a1:3e:c1:05:33:c6:82:99:83:e8:
af:aa:b3:92:6b:9a:80:ea:0e:d7:a8:3c:f1:79:8e:
9b:59:b2:f9:7b:aa:b1:14:21:80:65:26:4d:44:0c:
53:ab:7a:f0:30:ce:0a:c7:2e:20:d4:2a:4b:44:78:
58:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:E5:32:FE:71:DA:0A:65:49:8D:4F:04:58:04:98:CD:45:24:30:8A
X509v3 Authority Key Identifier:
keyid:40:D9:33:E8:24:74:65:0C:6A:A3:E9:CB:F0:57:4D:27:28:65:92:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3879dd-ef95-45e6-8767-e681ebba4a4a/1/tuUy_nHaCmVJjU8EWASYzUUkMIo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3879dd-ef95-45e6-8767-e681ebba4a4a/1/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.240.0/22
87.120.248.0/22
87.121.252.0/22
88.151.24.0/21
89.184.36.0/22
89.184.60.0/22
91.92.28.0/22
185.167.196.0/22
213.133.64.0/21
IPv6:
2a0b:ae00::/29
Signature Algorithm: sha256WithRSAEncryption
2a:b2:18:46:36:f2:e8:85:8d:28:2e:09:a8:88:66:7b:1c:36:
d5:2e:ad:47:24:76:63:ad:7f:19:2e:d0:da:c4:06:c8:f2:c2:
31:f3:4c:d1:26:2b:3e:5a:b5:4a:73:d7:9c:d3:44:9c:8a:2b:
fb:97:d7:2e:b3:9c:67:fa:93:b4:31:33:5c:0a:c8:f7:bf:60:
69:63:0f:6d:43:1c:22:b6:7c:af:ef:06:12:be:5e:df:0b:77:
bb:a1:ff:30:eb:ed:d9:e0:2e:86:19:ae:3e:6d:a0:ec:54:3e:
e1:ed:dd:2d:a8:ef:13:51:ea:f8:ba:7e:c4:4b:a0:77:c4:51:
b8:aa:11:dd:0e:34:bb:29:bb:ed:89:7d:92:4a:2e:c2:03:b5:
4c:20:21:e6:d9:5a:cc:bf:b4:c6:7b:99:6e:ef:e2:a4:18:de:
3e:c9:3b:03:56:da:5a:61:6c:4a:48:14:89:40:09:eb:10:bf:
71:2a:4e:b8:9f:35:bc:2d:19:51:24:08:68:f7:9e:ca:51:e6:
4c:5b:04:b8:7a:8a:db:dd:35:4d:27:fa:76:9c:f3:ad:64:71:
51:15:17:a3:47:9d:a4:e5:58:1a:77:15:c0:a8:c2:72:35:0b:
f9:04:b1:43:a9:85:60:f6:cd:e2:90:c9:e0:49:e2:48:05:df:
65:4e:68:fa
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgISAZEDTQRMkBiOd7gOtZngSP6iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwZDkzM2U4MjQ3NDY1MGM2YWEzZTljYmYwNTc0ZDI3Mjg2
NTkyZTcwHhcNMjQwNzMwMTEwMTA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNmU1MzJmZTcxZGEwYTY1NDk4ZDRmMDQ1ODA0OThjZDQ1MjQzMDhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2ltzlZDFdiAGIolhXuKODT597C1
aFFYihwTbaSqCNG/JfF3Jv+5vdT0S9y5H7tJqZgq6bWCMicGeINnLvk0DCPAE77y
yjwc9C2QIHxBllz3i7gLfrr6ZJGMLSbM79iS/BQuVWNF2el4NhOkITqWMJ+53eCW
Lgn46/eXcpHjpAp97aHXiho49u/KHyfCYbooBFqWPlZiRgl7Ya9IoLYOpR1qR6Ri
gvVcwT29mDamOTIkCmwlwEIkfvAKsYNHVzcY/73GsO6ijaE+wQUzxoKZg+ivqrOS
a5qA6g7XqDzxeY6bWbL5e6qxFCGAZSZNRAxTq3rwMM4Kxy4g1CpLRHhYyQIDAQAB
o4ICSDCCAkQwHQYDVR0OBBYEFLblMv5x2gplSY1PBFgEmM1FJDCKMB8GA1UdIwQY
MBaAFEDZM+gkdGUMaqPpy/BXTScoZZLnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUU5rejZDUjBaUXhxby1uTDhGZE5KeWhsa3VjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8zODc5ZGQtZWY5NS00NWU2LTg3Njct
ZTY4MWViYmE0YTRhLzEvdHVVeV9uSGFDbVZKalU4RVdBU1l6VVVrTUlvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi8zODc5ZGQtZWY5NS00NWU2LTg3NjctZTY4MWViYmE0YTRh
LzEvUU5rejZDUjBaUXhxby1uTDhGZE5KeWhsa3VjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMF4GCCsGAQUFBwEHAQH/BE8wTTA8BAIAATA2AwQCV3jwAwQC
V3j4AwQCV3n8AwQDWJcYAwQCWbgkAwQCWbg8AwQCW1wcAwQCuafEAwQD1YVAMA0E
AgACMAcDBQMqC64AMA0GCSqGSIb3DQEBCwUAA4IBAQAqshhGNvLohY0oLgmoiGZ7
HDbVLq1HJHZjrX8ZLtDaxAbI8sIx80zRJis+WrVKc9ec00Sciiv7l9cus5xn+pO0
MTNcCsj3v2BpYw9tQxwitnyv7wYSvl7fC3e7of8w6+3Z4C6GGa4+baDsVD7h7d0t
qO8TUer4un7ES6B3xFG4qhHdDjS7KbvtiX2SSi7CA7VMICHm2VrMv7TGe5lu7+Kk
GN4+yTsDVtpaYWxKSBSJQAnrEL9xKk64nzW8LRlRJAho957KUeZMWwS4eorb3TVN
J/p2nPOtZHFRFRejR52k5VgadxXAqMJyNQv5BLFDqYVg9s3ikMngSeJIBd9lTmj6
-----END CERTIFICATE-----
Generated at Thu May 15 11:19:23 2025 by rpki-client