Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/sLbscvlAmOyP73H062L3_Wfcoi0.roa
File: sLbscvlAmOyP73H062L3_Wfcoi0.roa (raw, json)
Hash identifier: jVOgtyyyTNj+lrUDm0QQJftS/JC8PcW2gZlrNpAh+ts=
Subject key identifier: B0:B6:EC:72:F9:40:98:EC:8F:EF:71:F4:EB:62:F7:FD:67:DC:A2:2D
Certificate issuer: /CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Certificate serial: 019242459375D539052D9FFA15C070ACDC38
Authority key identifier: EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/sLbscvlAmOyP73H062L3_Wfcoi0.roa
Signing time: Mon 30 Sep 2024 09:31:48 +0000
ROA not before: Mon 30 Sep 2024 09:31:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41313
IP address blocks: 46.35.160.0/19 maxlen: 24
79.110.120.0/21 maxlen: 24
80.95.16.0/21 maxlen: 24
80.95.22.0/24 maxlen: 24
93.152.234.0/23 maxlen: 24
93.175.244.0/22 maxlen: 24
95.158.128.0/18 maxlen: 24
151.252.192.0/20 maxlen: 24
185.18.228.0/22 maxlen: 24
185.40.164.0/22 maxlen: 24
212.21.128.0/19 maxlen: 24
2a00:e200::/32 maxlen: 48
2a0d:3b40::/29 maxlen: 48
Validation: Failed, certificate revoked on Mon 30 Sep 2024 09:34:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:42:45:93:75:d5:39:05:2d:9f:fa:15:c0:70:ac:dc:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Validity
Not Before: Sep 30 09:31:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b0b6ec72f94098ec8fef71f4eb62f7fd67dca22d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:e9:04:f8:3b:2d:08:a2:31:82:27:e2:93:d8:
c2:f7:e8:e8:2c:3d:84:e0:cd:56:f1:91:0b:c6:93:
12:53:f2:d6:9d:6c:b5:16:d7:f2:62:cf:16:8a:db:
93:ce:7c:8d:65:20:87:0b:e9:54:04:25:47:51:ac:
7b:f6:98:3f:a5:6c:9a:f0:92:13:49:2c:d2:48:c8:
75:8c:f5:97:28:f8:a5:d1:7a:20:79:2e:f7:60:23:
1c:6d:b1:7f:74:d5:2f:5b:6e:16:31:8f:19:f5:6a:
b4:8f:dd:15:d3:94:ee:a7:96:18:8c:91:46:12:b4:
33:97:96:32:21:10:17:5e:aa:b2:52:1e:23:eb:8b:
26:e8:ab:33:6f:f2:20:f1:09:f0:8f:4f:9d:88:34:
35:fb:14:ac:ef:2b:72:01:38:90:2a:20:d7:5d:2b:
88:43:ac:b2:9c:71:56:ba:8e:34:5f:9f:34:f4:bc:
9f:f9:fe:16:de:4f:9b:ff:31:cd:b8:00:ab:ac:02:
cb:67:97:21:5f:a4:77:1d:1f:52:ca:b7:11:59:bb:
ef:ff:f4:7c:30:24:6f:88:2f:ca:66:cd:45:af:5d:
6f:42:6f:de:f2:52:e6:43:49:93:ae:b9:9c:eb:ba:
93:f3:c2:0c:5d:ee:6c:37:dc:87:ab:61:e4:e4:75:
65:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:B6:EC:72:F9:40:98:EC:8F:EF:71:F4:EB:62:F7:FD:67:DC:A2:2D
X509v3 Authority Key Identifier:
keyid:EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/sLbscvlAmOyP73H062L3_Wfcoi0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.35.160.0/19
79.110.120.0/21
80.95.16.0/21
93.152.234.0/23
93.175.244.0/22
95.158.128.0/18
151.252.192.0/20
185.18.228.0/22
185.40.164.0/22
212.21.128.0/19
IPv6:
2a00:e200::/32
2a0d:3b40::/29
Signature Algorithm: sha256WithRSAEncryption
4f:28:15:e0:36:69:59:d7:27:51:f0:93:72:e8:a2:c2:93:e6:
f8:52:2e:1e:dc:60:98:78:53:1c:b4:81:ed:82:29:ac:da:4c:
11:4e:d0:0f:7b:78:e8:76:d1:7e:85:ac:9d:03:1c:25:44:41:
a6:bc:10:66:1d:d1:a5:01:e6:e6:e6:67:09:07:dd:bd:b9:94:
17:d1:24:ea:d8:b0:d9:a8:3f:96:35:4e:8e:a1:8a:bb:0f:a3:
ac:15:a0:d1:80:ab:b9:9a:bd:b8:0a:d3:17:35:59:a1:9f:08:
43:86:ac:2e:0c:9d:fe:96:2f:43:e8:4c:de:38:2d:73:43:c0:
b3:20:b9:15:9e:a9:2d:74:40:dc:78:61:58:59:9d:de:da:00:
7a:7c:35:99:6c:64:41:77:39:6a:1c:d6:97:67:96:3c:27:8d:
47:b4:f7:e5:2f:d0:7f:31:19:69:4c:02:32:78:75:c8:39:68:
a5:b2:f7:7b:55:51:f6:4b:b6:7d:e9:24:cc:30:50:f5:c2:c7:
49:b4:2a:11:e4:72:3d:64:05:74:56:a7:2e:3c:55:67:0f:d4:
4d:5a:30:47:0f:26:82:87:02:29:7e:cc:53:2c:f7:b3:85:d2:
88:7f:11:37:4b:ff:56:10:74:a0:92:67:d5:05:29:65:69:c5:
a0:9a:e8:38
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgISAZJCRZN11TkFLZ/6FcBwrNw4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViZWM5MDMwYzcwYTNkNDE5MmQ1OWMyOGRjYzhkNTQ3Njk0
MzQwYjMwHhcNMjQwOTMwMDkzMTQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMGI2ZWM3MmY5NDA5OGVjOGZlZjcxZjRlYjYyZjdmZDY3ZGNhMjJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ukE+DstCKIxgifik9jC9+joLD2E
4M1W8ZELxpMSU/LWnWy1FtfyYs8WituTznyNZSCHC+lUBCVHUax79pg/pWya8JIT
SSzSSMh1jPWXKPil0XogeS73YCMcbbF/dNUvW24WMY8Z9Wq0j90V05Tup5YYjJFG
ErQzl5YyIRAXXqqyUh4j64sm6Kszb/Ig8Qnwj0+diDQ1+xSs7ytyATiQKiDXXSuI
Q6yynHFWuo40X5809Lyf+f4W3k+b/zHNuACrrALLZ5chX6R3HR9SyrcRWbvv//R8
MCRviC/KZs1Fr11vQm/e8lLmQ0mTrrmc67qT88IMXe5sN9yHq2Hk5HVl+QIDAQAB
o4ICVTCCAlEwHQYDVR0OBBYEFLC27HL5QJjsj+9x9Oti9/1n3KItMB8GA1UdIwQY
MBaAFOvskDDHCj1BktWcKNzI1UdpQ0CzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNi15UU1NY0tQVUdTMVp3bzNNalZSMmxEUUxNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8zNzJiODctOTVmNC00Yzk4LWE2ZjQt
NGE2Zjg2ODMyNjVjLzEvc0xic2N2bEFtT3lQNzNIMDYyTDNfV2Zjb2kwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS8zNzJiODctOTVmNC00Yzk4LWE2ZjQtNGE2Zjg2ODMyNjVj
LzEvNi15UU1NY0tQVUdTMVp3bzNNalZSMmxEUUxNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGsGCCsGAQUFBwEHAQH/BFwwWjBCBAIAATA8AwQFLiOgAwQD
T254AwQDUF8QAwQBXZjqAwQCXa/0AwQGX56AAwQEl/zAAwQCuRLkAwQCuSikAwQF
1BWAMBQEAgACMA4DBQAqAOIAAwUDKg07QDANBgkqhkiG9w0BAQsFAAOCAQEATygV
4DZpWdcnUfCTcuiiwpPm+FIuHtxgmHhTHLSB7YIprNpMEU7QD3t46HbRfoWsnQMc
JURBprwQZh3RpQHm5uZnCQfdvbmUF9Ek6tiw2ag/ljVOjqGKuw+jrBWg0YCruZq9
uArTFzVZoZ8IQ4asLgyd/pYvQ+hM3jgtc0PAsyC5FZ6pLXRA3HhhWFmd3toAenw1
mWxkQXc5ahzWl2eWPCeNR7T35S/QfzEZaUwCMnh1yDlopbL3e1VR9ku2fekkzDBQ
9cLHSbQqEeRyPWQFdFanLjxVZw/UTVowRw8mgocCKX7MUyz3s4XSiH8RN0v/VhB0
oJJn1QUpZWnFoJroOA==
-----END CERTIFICATE-----
Generated at Sat May 10 20:47:34 2025 by rpki-client