Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/EmULRdwr-xAg4QayPVcysc2Xvvc.roa
File: EmULRdwr-xAg4QayPVcysc2Xvvc.roa (raw, json)
Hash identifier: M5l/zeKyc3KoSVFNID0VJwJ9/pO+U5qxsrA24dRthWI=
Subject key identifier: 12:65:0B:45:DC:2B:FB:10:20:E1:06:B2:3D:57:32:B1:CD:97:BE:F7
Certificate issuer: /CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Certificate serial: 0187915DE6512C15B3C4A05025465D89A4E1
Authority key identifier: 4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/EmULRdwr-xAg4QayPVcysc2Xvvc.roa
Signing time: Mon 17 Apr 2023 22:37:42 +0000
ROA not before: Mon 17 Apr 2023 22:37:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2856
IP address blocks: 85.8.160.0/22 maxlen: 22
147.78.68.0/22 maxlen: 22
5.133.124.0/22 maxlen: 22
193.187.132.0/22 maxlen: 22
83.171.244.0/22 maxlen: 22
193.187.140.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 13 Sep 2023 20:15:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:91:5d:e6:51:2c:15:b3:c4:a0:50:25:46:5d:89:a4:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Validity
Not Before: Apr 17 22:37:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=12650b45dc2bfb1020e106b23d5732b1cd97bef7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:77:5f:c4:bf:58:a6:13:ee:ba:ec:5b:2c:84:
12:11:3d:9c:5b:ff:f2:02:6b:e6:2d:b7:75:f0:6e:
87:e5:f6:27:b1:64:c2:73:ce:bd:92:08:2a:43:8c:
e9:cb:c3:e3:e9:43:2b:47:a8:9d:a5:17:1d:7a:9b:
03:54:9c:0d:5f:1a:57:d0:7e:88:09:38:fe:bc:2b:
1c:ba:dc:95:76:3a:78:8d:29:5b:84:e1:cf:50:e5:
ea:97:b3:e2:83:d1:6a:8d:67:83:8e:5d:64:22:48:
2d:93:53:8c:64:d7:ca:19:da:98:ab:3f:40:cd:52:
e5:8d:90:34:a8:e6:cd:fd:6f:09:e6:79:86:73:af:
a1:be:c9:07:7f:49:73:bd:8e:a5:28:8c:4d:6a:4b:
b6:e4:3c:3a:1d:ac:9e:7d:82:01:7f:6a:6c:b5:dc:
c6:95:5d:df:b6:10:55:ac:67:34:d1:28:e7:a4:8c:
d5:ab:71:90:29:da:90:27:ca:21:a6:0d:77:c5:c4:
67:08:c7:ef:4f:6c:22:35:3b:39:61:cb:85:6d:11:
b3:24:84:72:36:27:44:ad:d6:26:5b:90:2e:d8:f3:
1b:1a:85:27:cd:15:ca:14:5e:ea:64:e8:9e:3c:65:
0d:38:88:a6:3d:3d:87:f2:4d:0f:24:32:8d:7c:8b:
52:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:65:0B:45:DC:2B:FB:10:20:E1:06:B2:3D:57:32:B1:CD:97:BE:F7
X509v3 Authority Key Identifier:
keyid:4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/EmULRdwr-xAg4QayPVcysc2Xvvc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.133.124.0/22
83.171.244.0/22
85.8.160.0/22
147.78.68.0/22
193.187.132.0/22
193.187.140.0/22
Signature Algorithm: sha256WithRSAEncryption
08:2f:a3:b1:d9:78:f4:55:df:27:35:6b:ac:5e:b0:aa:d3:ba:
ba:ba:50:b3:a1:c1:f2:2e:61:59:2b:d4:7f:85:f4:fc:46:c8:
a2:e2:a2:9a:ba:ac:c0:53:1b:4d:86:5e:85:a9:8b:3f:00:60:
60:20:4d:f2:de:12:9b:3e:d4:4e:dc:35:98:4e:f5:f9:3e:ac:
c7:76:03:fe:4a:a8:e7:de:9b:7f:73:ce:0f:71:0c:9e:7a:85:
85:bb:f8:db:0d:4e:64:e6:01:aa:75:0f:aa:94:0d:3e:e7:0a:
e6:b0:5a:8e:27:4a:d5:08:e0:27:f9:fa:2d:c5:d5:d1:36:ab:
08:04:18:89:2f:16:63:3d:c0:d5:f6:8a:91:07:e6:ea:8e:95:
a3:c3:b9:7d:4d:d4:b7:02:a9:35:cc:d2:8a:15:a3:ce:02:9a:
11:eb:f4:b2:27:41:d3:30:16:97:31:4d:cf:76:24:04:99:d9:
23:d5:98:04:f0:f1:43:53:19:e5:22:c4:7f:ea:7e:59:43:59:
b6:c0:b0:6e:93:7c:93:1f:7a:93:46:1a:de:01:56:bb:ce:06:
2d:43:25:45:df:21:ba:09:5d:f7:15:fa:98:b0:3a:89:41:dc:
95:f8:8b:50:03:e8:7e:ab:d3:e4:49:2a:ac:73:b7:29:40:92:
ec:98:64:91
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAYeRXeZRLBWzxKBQJUZdiaThMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmOTUwOWIzM2RhNTVmM2U1ZDUyODNlYjYyMWQwZDM1ZDdh
ZWVkNWMwHhcNMjMwNDE3MjIzNzQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMjY1MGI0NWRjMmJmYjEwMjBlMTA2YjIzZDU3MzJiMWNkOTdiZWY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgHdfxL9YphPuuuxbLIQSET2cW//y
AmvmLbd18G6H5fYnsWTCc869kggqQ4zpy8Pj6UMrR6idpRcdepsDVJwNXxpX0H6I
CTj+vCscutyVdjp4jSlbhOHPUOXql7Pig9FqjWeDjl1kIkgtk1OMZNfKGdqYqz9A
zVLljZA0qObN/W8J5nmGc6+hvskHf0lzvY6lKIxNaku25Dw6HayefYIBf2pstdzG
lV3fthBVrGc00SjnpIzVq3GQKdqQJ8ohpg13xcRnCMfvT2wiNTs5YcuFbRGzJIRy
NidErdYmW5Au2PMbGoUnzRXKFF7qZOiePGUNOIimPT2H8k0PJDKNfItSiwIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFBJlC0XcK/sQIOEGsj1XMrHNl773MB8GA1UdIwQY
MBaAFE+VCbM9pV8+XVKD62IdDTXXru1cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDVVSnN6MmxYejVkVW9QclloME5OZGV1N1Z3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi82ZmMxYmMtYTVmOC00MmE4LTk1ZTQt
NjAxMDdlMmI1MTA5LzEvRW1VTFJkd3IteEFnNFFheVBWY3lzYzJYdnZjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi82ZmMxYmMtYTVmOC00MmE4LTk1ZTQtNjAxMDdlMmI1MTA5
LzEvVDVVSnN6MmxYejVkVW9QclloME5OZGV1N1Z3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQCBYV8AwQC
U6v0AwQCVQigAwQCk05EAwQCwbuEAwQCwbuMMA0GCSqGSIb3DQEBCwUAA4IBAQAI
L6Ox2Xj0Vd8nNWusXrCq07q6ulCzocHyLmFZK9R/hfT8Rsii4qKauqzAUxtNhl6F
qYs/AGBgIE3y3hKbPtRO3DWYTvX5PqzHdgP+Sqjn3pt/c84PcQyeeoWFu/jbDU5k
5gGqdQ+qlA0+5wrmsFqOJ0rVCOAn+fotxdXRNqsIBBiJLxZjPcDV9oqRB+bqjpWj
w7l9TdS3Aqk1zNKKFaPOApoR6/SyJ0HTMBaXMU3PdiQEmdkj1ZgE8PFDUxnlIsR/
6n5ZQ1m2wLBuk3yTH3qTRhreAVa7zgYtQyVF3yG6CV33FfqYsDqJQdyV+ItQA+h+
q9PkSSqsc7cpQJLsmGSR
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:49 2024 by rpki-client on console-ams.rpki-client.org