Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/L3MwLAWXwOIZJJuDRlvnl4ip4lw.roa
File: L3MwLAWXwOIZJJuDRlvnl4ip4lw.roa (raw, json)
Hash identifier: msC16IFecWlFvgUmoRw9/pcDOH3igzMZKY308iibo2A=
Subject key identifier: 2F:73:30:2C:05:97:C0:E2:19:24:9B:83:46:5B:E7:97:88:A9:E2:5C
Certificate issuer: /CN=65e226bcf4a830b2f448fd6ea9976b152087dd45
Certificate serial: 01875D4651ED77F41F91B5E168260FBF9317
Authority key identifier: 65:E2:26:BC:F4:A8:30:B2:F4:48:FD:6E:A9:97:6B:15:20:87:DD:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZeImvPSoMLL0SP1uqZdrFSCH3UU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/L3MwLAWXwOIZJJuDRlvnl4ip4lw.roa
Signing time: Fri 07 Apr 2023 19:51:42 +0000
ROA not before: Fri 07 Apr 2023 19:51:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42049
IP address blocks: 185.134.192.0/22 maxlen: 22
185.134.192.0/23 maxlen: 23
185.134.194.0/23 maxlen: 23
188.126.0.0/19 maxlen: 19
188.126.0.0/21 maxlen: 21
188.126.0.0/20 maxlen: 20
188.126.8.0/21 maxlen: 21
188.126.16.0/21 maxlen: 21
188.126.16.0/20 maxlen: 20
188.126.24.0/21 maxlen: 21
Validation: Failed, certificate revoked on Thu 25 May 2023 12:19:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:5d:46:51:ed:77:f4:1f:91:b5:e1:68:26:0f:bf:93:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65e226bcf4a830b2f448fd6ea9976b152087dd45
Validity
Not Before: Apr 7 19:51:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2f73302c0597c0e219249b83465be79788a9e25c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e4:9f:82:4a:4d:d4:a6:ec:d0:c7:1d:16:23:
a2:7a:c3:f9:9e:6f:58:44:8b:45:b0:57:a8:08:98:
31:9f:e6:5f:b4:27:eb:09:62:ad:68:75:bc:17:5a:
10:0e:bc:18:bf:44:c2:44:0f:8c:a9:e7:ee:da:41:
61:c0:8f:bf:6f:f5:50:c7:15:00:ec:cc:51:57:30:
b3:ad:3e:cc:60:20:83:40:c4:54:96:2a:47:34:c2:
dd:76:3e:53:cd:5a:ad:b0:16:73:dd:97:34:b5:2b:
09:8a:98:e7:ee:4d:33:37:a0:7f:36:87:3d:e0:8a:
7e:d1:ea:96:4a:46:4c:48:4f:75:5d:7a:02:3a:f2:
51:61:67:f7:3a:c1:1e:0d:2c:61:ae:6d:1d:2c:cf:
04:ca:51:71:40:5a:b0:f3:af:5b:15:61:51:02:07:
13:7d:da:ba:e9:e7:48:b9:9c:86:19:24:28:c9:44:
6e:8e:c4:fd:3e:b2:a1:45:fe:34:9e:ac:a2:4b:a0:
4f:53:a0:50:f6:66:32:78:bb:21:22:ae:aa:31:bc:
27:74:98:a3:81:a2:f0:53:01:ef:f8:8c:bd:0e:d7:
fe:23:db:42:cf:f1:44:3d:a1:a7:8b:57:e0:f6:f8:
cc:b0:ed:ce:17:88:9c:37:ff:5d:05:e4:8e:48:da:
2c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:73:30:2C:05:97:C0:E2:19:24:9B:83:46:5B:E7:97:88:A9:E2:5C
X509v3 Authority Key Identifier:
keyid:65:E2:26:BC:F4:A8:30:B2:F4:48:FD:6E:A9:97:6B:15:20:87:DD:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZeImvPSoMLL0SP1uqZdrFSCH3UU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/L3MwLAWXwOIZJJuDRlvnl4ip4lw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.134.192.0/22
188.126.0.0/19
Signature Algorithm: sha256WithRSAEncryption
22:7f:fb:44:4d:0e:5a:01:b2:ae:bb:8c:8c:d0:ff:5a:84:48:
1a:15:e2:70:eb:64:bf:52:66:9b:f3:41:d6:58:e8:77:89:c0:
1d:c0:2e:90:a6:e9:80:eb:6e:58:e5:66:42:54:c5:b8:a8:6f:
e5:15:29:48:c3:30:e5:6d:63:9e:be:71:78:11:a1:49:b7:bc:
0a:d5:d4:3c:83:37:2e:12:ec:8c:c6:eb:ed:c1:64:f9:a6:45:
65:d7:c9:b5:81:5a:ce:4f:38:c6:82:b0:9f:e4:67:9e:e7:32:
6b:e2:a0:4c:b8:5d:3f:eb:82:94:6b:f2:19:1d:5b:eb:bf:71:
95:13:19:a0:c8:d9:56:76:8d:0f:15:44:32:1b:e0:4b:5d:21:
7d:85:86:6b:30:a5:f4:78:96:d0:f7:5a:8c:80:d5:c2:5b:9b:
63:72:15:5a:91:39:db:0f:b4:5d:e7:36:77:0c:ef:bd:53:b2:
3c:80:00:44:45:e2:93:2a:9d:d2:05:bd:86:84:48:da:10:f2:
78:03:4e:d2:a9:de:5e:ef:42:3c:a8:4a:6c:a0:03:87:74:a9:
56:68:a0:ae:e3:65:33:75:ca:c6:98:af:93:ea:bb:e1:86:c3:
67:2f:a8:1e:23:f8:ff:a2:26:33:ba:00:19:7e:8b:b5:ca:28:
f0:e0:98:cb
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYddRlHtd/QfkbXhaCYPv5MXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1ZTIyNmJjZjRhODMwYjJmNDQ4ZmQ2ZWE5OTc2YjE1MjA4
N2RkNDUwHhcNMjMwNDA3MTk1MTQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZjczMzAyYzA1OTdjMGUyMTkyNDliODM0NjViZTc5Nzg4YTllMjVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAleSfgkpN1Kbs0McdFiOiesP5nm9Y
RItFsFeoCJgxn+ZftCfrCWKtaHW8F1oQDrwYv0TCRA+Mqefu2kFhwI+/b/VQxxUA
7MxRVzCzrT7MYCCDQMRUlipHNMLddj5TzVqtsBZz3Zc0tSsJipjn7k0zN6B/Noc9
4Ip+0eqWSkZMSE91XXoCOvJRYWf3OsEeDSxhrm0dLM8EylFxQFqw869bFWFRAgcT
fdq66edIuZyGGSQoyURujsT9PrKhRf40nqyiS6BPU6BQ9mYyeLshIq6qMbwndJij
gaLwUwHv+Iy9Dtf+I9tCz/FEPaGni1fg9vjMsO3OF4icN/9dBeSOSNosvQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFC9zMCwFl8DiGSSbg0Zb55eIqeJcMB8GA1UdIwQY
MBaAFGXiJrz0qDCy9Ej9bqmXaxUgh91FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmVJbXZQU29NTEwwU1AxdXFaZHJGU0NIM1VVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9mNTg3M2EtODkzMi00MjZmLTgxNzUt
MzhjOGRhZmIzZTRmLzEvTDNNd0xBV1h3T0laSkp1RFJsdm5sNGlwNGx3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9mNTg3M2EtODkzMi00MjZmLTgxNzUtMzhjOGRhZmIzZTRm
LzEvWmVJbXZQU29NTEwwU1AxdXFaZHJGU0NIM1VVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCuYbAAwQF
vH4AMA0GCSqGSIb3DQEBCwUAA4IBAQAif/tETQ5aAbKuu4yM0P9ahEgaFeJw62S/
Umab80HWWOh3icAdwC6QpumA625Y5WZCVMW4qG/lFSlIwzDlbWOevnF4EaFJt7wK
1dQ8gzcuEuyMxuvtwWT5pkVl18m1gVrOTzjGgrCf5Gee5zJr4qBMuF0/64KUa/IZ
HVvrv3GVExmgyNlWdo0PFUQyG+BLXSF9hYZrMKX0eJbQ91qMgNXCW5tjchVakTnb
D7Rd5zZ3DO+9U7I8gABEReKTKp3SBb2GhEjaEPJ4A07Sqd5e70I8qEpsoAOHdKlW
aKCu42UzdcrGmK+T6rvhhsNnL6geI/j/oiYzugAZfou1yijw4JjL
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:08 2024 by rpki-client on console-ams.rpki-client.org