Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/d7ab0c-3c22-4c61-a201-dd6cc97c9bdd/1/D6MqgZ5E71VQAP3q72bBdMDQp6I.roa
File: D6MqgZ5E71VQAP3q72bBdMDQp6I.roa (raw, json)
Hash identifier: m6KuybY/XKUIWk5zsSNmnlOBfEdnXXX9fyZKsq7ORC4=
Subject key identifier: 0F:A3:2A:81:9E:44:EF:55:50:00:FD:EA:EF:66:C1:74:C0:D0:A7:A2
Certificate issuer: /CN=55b296d6b534fe3a32cc1c3a4e81358f216c93c7
Certificate serial: 018BA916FC646FCACFEC05C750F77918C1AB
Authority key identifier: 55:B2:96:D6:B5:34:FE:3A:32:CC:1C:3A:4E:81:35:8F:21:6C:93:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbKW1rU0_joyzBw6ToE1jyFsk8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/d7ab0c-3c22-4c61-a201-dd6cc97c9bdd/1/D6MqgZ5E71VQAP3q72bBdMDQp6I.roa
Signing time: Tue 07 Nov 2023 09:22:17 +0000
ROA not before: Tue 07 Nov 2023 09:22:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31529
IP address blocks: 185.151.141.0/24 maxlen: 24
185.151.142.0/24 maxlen: 24
185.151.143.0/24 maxlen: 24
194.0.0.0/24 maxlen: 24
194.0.11.0/24 maxlen: 24
194.246.96.0/24 maxlen: 24
2a02:568:fe00::/48 maxlen: 48
2001:678:e::/48 maxlen: 48
2a02:568:fe01::/48 maxlen: 48
2001:678:2::/48 maxlen: 48
2a02:568:fe02::/48 maxlen: 48
2a02:56f::/32 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:a9:16:fc:64:6f:ca:cf:ec:05:c7:50:f7:79:18:c1:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55b296d6b534fe3a32cc1c3a4e81358f216c93c7
Validity
Not Before: Nov 7 09:22:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0fa32a819e44ef555000fdeaef66c174c0d0a7a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ea:e6:7a:33:39:5d:04:c0:a5:ad:7b:cf:fe:
49:98:4c:31:ca:2f:58:95:01:c7:05:6c:01:76:d3:
ef:11:17:f3:17:0f:01:a8:91:8d:83:ba:2a:21:83:
2b:33:56:53:25:9e:a0:4b:5c:31:19:e6:4c:12:f2:
d5:13:4b:57:02:9d:62:22:70:b7:0e:2c:6d:dd:11:
af:62:85:1b:40:2c:cc:db:3a:06:d5:a4:58:d0:e2:
f2:21:3f:d9:88:b9:51:cc:7c:3c:b3:2e:9a:a2:c0:
b6:2f:56:cf:3a:06:d4:84:04:b4:d3:1d:9d:d7:1c:
88:26:b2:30:7b:af:c8:fb:81:9e:f2:ee:0b:12:74:
10:19:af:66:e6:50:9d:68:2f:a1:b5:c9:8a:b9:e5:
a4:33:44:58:77:be:93:36:34:24:10:cc:6a:51:65:
a9:4c:61:d8:46:30:15:fd:57:93:fb:0b:38:96:3b:
2b:49:c5:c7:cf:49:83:c2:da:3c:3d:5e:3c:83:a6:
f6:8f:7a:80:f2:5d:dd:1f:cd:84:32:fc:fd:08:0d:
be:a5:e5:d6:67:79:3d:f3:98:78:78:65:35:c6:33:
0b:2d:b9:31:87:38:12:07:ae:08:8f:e7:49:ae:9c:
f3:c3:12:63:89:c8:dc:cc:6e:b8:fe:4c:e2:f1:2d:
e2:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:A3:2A:81:9E:44:EF:55:50:00:FD:EA:EF:66:C1:74:C0:D0:A7:A2
X509v3 Authority Key Identifier:
keyid:55:B2:96:D6:B5:34:FE:3A:32:CC:1C:3A:4E:81:35:8F:21:6C:93:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbKW1rU0_joyzBw6ToE1jyFsk8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/d7ab0c-3c22-4c61-a201-dd6cc97c9bdd/1/D6MqgZ5E71VQAP3q72bBdMDQp6I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/d7ab0c-3c22-4c61-a201-dd6cc97c9bdd/1/VbKW1rU0_joyzBw6ToE1jyFsk8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.151.141.0-185.151.143.255
194.0.0.0/24
194.0.11.0/24
194.246.96.0/24
IPv6:
2001:678:2::/48
2001:678:e::/48
2a02:568:fe00::-2a02:568:fe02:ffff:ffff:ffff:ffff:ffff
2a02:56f::/32
Signature Algorithm: sha256WithRSAEncryption
2d:09:24:eb:74:06:36:8e:93:de:2e:f8:f6:2b:a3:31:93:cc:
be:49:07:fe:fa:14:dc:aa:ed:13:ec:f0:76:77:d1:c8:b5:43:
09:ea:79:f1:7b:40:69:bd:89:00:8f:93:89:68:02:e2:8c:8b:
61:39:01:eb:d7:e6:70:55:5e:c1:1a:b1:8e:d6:6b:da:8c:9e:
19:5f:c4:76:fd:1e:d1:71:af:9b:1e:ce:1b:eb:95:f7:e7:06:
d4:2c:29:21:94:13:3e:89:94:ed:12:e9:d1:1d:49:49:bb:e4:
1c:85:5d:64:99:ef:35:32:1b:6a:1d:17:ab:c2:84:03:c9:65:
17:bf:a4:02:7e:3d:46:ef:f7:b2:42:73:35:63:f4:e4:d6:31:
1e:34:20:21:65:7c:0c:e9:8b:a5:1d:1d:3e:df:08:87:81:78:
ea:8f:3c:f8:ed:fe:c7:57:69:41:d5:71:47:2c:d3:ed:37:c1:
28:c4:54:4a:b0:ff:e8:4b:fb:af:14:cf:d1:d9:73:88:ac:ce:
cd:3f:6f:d5:d8:c7:bd:83:a0:4c:83:68:84:fa:90:ef:9a:38:
f5:71:8c:83:d4:99:e8:4e:07:11:03:c6:f6:aa:6d:b0:40:c9:
3d:95:3e:06:ef:e4:e6:4a:65:26:54:aa:a1:df:92:08:d4:85:
9d:7c:ff:7e
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgISAYupFvxkb8rP7AXHUPd5GMGrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1YjI5NmQ2YjUzNGZlM2EzMmNjMWMzYTRlODEzNThmMjE2
YzkzYzcwHhcNMjMxMTA3MDkyMjE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZmEzMmE4MTllNDRlZjU1NTAwMGZkZWFlZjY2YzE3NGMwZDBhN2EyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiermejM5XQTApa17z/5JmEwxyi9Y
lQHHBWwBdtPvERfzFw8BqJGNg7oqIYMrM1ZTJZ6gS1wxGeZMEvLVE0tXAp1iInC3
Dixt3RGvYoUbQCzM2zoG1aRY0OLyIT/ZiLlRzHw8sy6aosC2L1bPOgbUhAS00x2d
1xyIJrIwe6/I+4Ge8u4LEnQQGa9m5lCdaC+htcmKueWkM0RYd76TNjQkEMxqUWWp
TGHYRjAV/VeT+ws4ljsrScXHz0mDwto8PV48g6b2j3qA8l3dH82EMvz9CA2+peXW
Z3k985h4eGU1xjMLLbkxhzgSB64Ij+dJrpzzwxJjicjczG64/kzi8S3iZQIDAQAB
o4ICVzCCAlMwHQYDVR0OBBYEFA+jKoGeRO9VUAD96u9mwXTA0KeiMB8GA1UdIwQY
MBaAFFWylta1NP46MswcOk6BNY8hbJPHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmJLVzFyVTBfam95ekJ3NlRvRTFqeUZzazhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9kN2FiMGMtM2MyMi00YzYxLWEyMDEt
ZGQ2Y2M5N2M5YmRkLzEvRDZNcWdaNUU3MVZRQVAzcTcyYkJkTURRcDZJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi9kN2FiMGMtM2MyMi00YzYxLWEyMDEtZGQ2Y2M5N2M5YmRk
LzEvVmJLVzFyVTBfam95ekJ3NlRvRTFqeUZzazhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMG0GCCsGAQUFBwEHAQH/BF4wXDAmBAIAATAgMAwDBAC5l40D
BAS5l4ADBADCAAADBADCAAsDBADC9mAwMgQCAAIwLAMHACABBngAAgMHACABBngA
DjARAwYBKgIFaP4DBwAqAgVo/gIDBQAqAgVvMA0GCSqGSIb3DQEBCwUAA4IBAQAt
CSTrdAY2jpPeLvj2K6Mxk8y+SQf++hTcqu0T7PB2d9HItUMJ6nnxe0BpvYkAj5OJ
aALijIthOQHr1+ZwVV7BGrGO1mvajJ4ZX8R2/R7Rca+bHs4b65X35wbULCkhlBM+
iZTtEunRHUlJu+QchV1kme81MhtqHRerwoQDyWUXv6QCfj1G7/eyQnM1Y/Tk1jEe
NCAhZXwM6YulHR0+3wiHgXjqjzz47f7HV2lB1XFHLNPtN8EoxFRKsP/oS/uvFM/R
2XOIrM7NP2/V2Me9g6BMg2iE+pDvmjj1cYyD1JnoTgcRA8b2qm2wQMk9lT4G7+Tm
SmUmVKqh35II1IWdfP9+
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:45 2024 by rpki-client on console-fra.rpki-client.org