Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/RdLmt6pwV61xFpmN0wKnJR4sUDw.roa
File: RdLmt6pwV61xFpmN0wKnJR4sUDw.roa (raw, json)
Hash identifier: qUkBEULKYymYzDTviAiNfSab8XFVAV/rilNAQ/2rcqg=
Subject key identifier: 45:D2:E6:B7:AA:70:57:AD:71:16:99:8D:D3:02:A7:25:1E:2C:50:3C
Certificate issuer: /CN=5df5ed040efe2e581754deb5c3cd82d99dfee8d9
Certificate serial: 0185723A03008F77C0DD723C1A8D323439D1
Authority key identifier: 5D:F5:ED:04:0E:FE:2E:58:17:54:DE:B5:C3:CD:82:D9:9D:FE:E8:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfXtBA7-LlgXVN61w82C2Z3-6Nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/RdLmt6pwV61xFpmN0wKnJR4sUDw.roa
Signing time: Mon 02 Jan 2023 11:24:42 +0000
ROA not before: Mon 02 Jan 2023 11:24:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56911
IP address blocks: 176.58.80.0/21 maxlen: 21
185.169.238.0/23 maxlen: 24
185.169.237.0/24 maxlen: 24
185.169.236.0/24 maxlen: 24
185.169.236.0/23 maxlen: 24
185.49.248.0/22 maxlen: 24
185.146.64.0/24 maxlen: 24
2a0a:7300::/32 maxlen: 36
2a01:a620::/32 maxlen: 48
Validation: Failed, certificate revoked on Mon 23 Jan 2023 10:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:3a:03:00:8f:77:c0:dd:72:3c:1a:8d:32:34:39:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5df5ed040efe2e581754deb5c3cd82d99dfee8d9
Validity
Not Before: Jan 2 11:24:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=45d2e6b7aa7057ad7116998dd302a7251e2c503c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:2f:ac:7d:cb:14:ec:45:e8:14:ba:2c:4f:25:
6b:ad:73:c7:ee:c2:2f:d4:ac:e2:73:10:d9:b1:58:
3e:17:64:5f:7a:d4:1f:f2:6a:d9:4d:87:6b:54:75:
cc:99:be:cf:f1:ca:1f:1b:f8:71:40:82:8a:f3:2b:
aa:ce:7d:f8:d9:9b:ef:5e:dc:24:ca:fb:3f:86:08:
3a:f6:92:24:9b:4f:fe:d8:5d:c8:1f:6b:11:09:22:
c5:65:b1:40:65:7d:79:3e:fb:c8:d6:38:aa:95:42:
5c:2d:4f:72:20:5b:d3:9b:0b:a0:bf:52:a1:4a:49:
d6:48:49:57:f7:87:cf:1a:11:e6:b2:9c:b0:0f:0b:
69:66:69:3d:a2:fd:c5:f5:95:40:a9:df:9f:44:54:
3f:66:17:c2:eb:63:27:41:62:a2:16:03:cd:cf:aa:
ec:8e:b4:9c:f1:b4:6c:1c:01:09:24:e5:e4:10:df:
0b:c5:54:1c:d2:57:84:4d:cf:dc:04:23:6b:74:ad:
62:41:07:f6:c6:93:54:9f:34:5c:ef:ad:75:9f:2d:
04:29:b2:56:75:e9:e0:3f:d6:9e:ea:50:1c:46:6a:
d0:c6:16:7e:f5:ac:30:b5:cf:21:9c:9e:e8:69:2d:
22:e5:f8:90:9e:02:44:eb:c8:3e:eb:79:bc:7e:ef:
67:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:D2:E6:B7:AA:70:57:AD:71:16:99:8D:D3:02:A7:25:1E:2C:50:3C
X509v3 Authority Key Identifier:
keyid:5D:F5:ED:04:0E:FE:2E:58:17:54:DE:B5:C3:CD:82:D9:9D:FE:E8:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfXtBA7-LlgXVN61w82C2Z3-6Nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/RdLmt6pwV61xFpmN0wKnJR4sUDw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.58.80.0/21
185.49.248.0/22
185.146.64.0/24
185.169.236.0/22
IPv6:
2a01:a620::/32
2a0a:7300::/32
Signature Algorithm: sha256WithRSAEncryption
90:38:60:68:10:7e:a0:e8:7c:12:22:f0:7e:59:1c:9c:13:fb:
7d:af:5d:ae:5d:61:92:c9:63:0d:42:4d:e5:56:2e:dc:12:38:
d6:a7:da:80:89:67:77:0d:a1:a7:60:db:40:6e:1c:a7:43:50:
4c:03:7e:cb:5f:c5:2f:58:5b:56:12:34:ad:95:c9:9e:cf:70:
76:4f:9d:8e:78:ad:98:ea:01:67:a5:c8:5a:38:24:b8:8b:52:
00:f8:22:9b:07:fc:49:62:92:66:1c:42:d2:ba:2f:fc:10:a0:
09:52:16:3c:02:f7:da:0b:37:bc:22:e2:f5:15:66:93:a2:1f:
9e:d5:08:db:bb:2c:8a:0d:ca:e2:5d:fd:93:b0:e8:e0:49:12:
aa:0d:55:5d:fc:fc:4e:c0:a0:a2:5d:18:3d:a7:4f:ae:50:d4:
f1:0b:4c:6c:66:9c:92:97:6b:8d:0d:9e:35:2a:d8:5b:af:d3:
fb:3f:ac:d1:cb:a5:65:6b:43:e1:96:86:e2:d3:45:9b:a2:e9:
47:5f:f6:45:58:3c:c1:16:6e:79:8e:22:a5:39:85:81:04:04:
9f:13:00:92:0c:b3:55:5f:7e:bb:9e:ae:dd:37:42:6e:3e:28:
0a:33:79:93:a8:a0:4d:85:1f:d3:60:b5:4c:33:bf:a7:9e:23:
8f:ff:84:38
-----BEGIN CERTIFICATE-----
MIIFJTCCBA2gAwIBAgISAYVyOgMAj3fA3XI8Go0yNDnRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkZjVlZDA0MGVmZTJlNTgxNzU0ZGViNWMzY2Q4MmQ5OWRm
ZWU4ZDkwHhcNMjMwMTAyMTEyNDQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NWQyZTZiN2FhNzA1N2FkNzExNjk5OGRkMzAyYTcyNTFlMmM1MDNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhC+sfcsU7EXoFLosTyVrrXPH7sIv
1KzicxDZsVg+F2RfetQf8mrZTYdrVHXMmb7P8cofG/hxQIKK8yuqzn342ZvvXtwk
yvs/hgg69pIkm0/+2F3IH2sRCSLFZbFAZX15PvvI1jiqlUJcLU9yIFvTmwugv1Kh
SknWSElX94fPGhHmspywDwtpZmk9ov3F9ZVAqd+fRFQ/ZhfC62MnQWKiFgPNz6rs
jrSc8bRsHAEJJOXkEN8LxVQc0leETc/cBCNrdK1iQQf2xpNUnzRc7611ny0EKbJW
dengP9ae6lAcRmrQxhZ+9awwtc8hnJ7oaS0i5fiQngJE68g+63m8fu9nkQIDAQAB
o4ICMTCCAi0wHQYDVR0OBBYEFEXS5reqcFetcRaZjdMCpyUeLFA8MB8GA1UdIwQY
MBaAFF317QQO/i5YF1TetcPNgtmd/ujZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGZYdEJBNy1MbGdYVk42MXc4MkMyWjMtNk5rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9iM2Q3NmYtNmVmOS00YzRhLTgxMmMt
YmVmZTRiMzRjNmYwLzEvUmRMbXQ2cHdWNjF4RnBtTjB3S25KUjRzVUR3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni9iM2Q3NmYtNmVmOS00YzRhLTgxMmMtYmVmZTRiMzRjNmYw
LzEvWGZYdEJBNy1MbGdYVk42MXc4MkMyWjMtNk5rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEcGCCsGAQUFBwEHAQH/BDgwNjAeBAIAATAYAwQDsDpQAwQC
uTH4AwQAuZJAAwQCuansMBQEAgACMA4DBQAqAaYgAwUAKgpzADANBgkqhkiG9w0B
AQsFAAOCAQEAkDhgaBB+oOh8EiLwflkcnBP7fa9drl1hksljDUJN5VYu3BI41qfa
gIlndw2hp2DbQG4cp0NQTAN+y1/FL1hbVhI0rZXJns9wdk+djnitmOoBZ6XIWjgk
uItSAPgimwf8SWKSZhxC0rov/BCgCVIWPAL32gs3vCLi9RVmk6IfntUI27ssig3K
4l39k7Do4EkSqg1VXfz8TsCgol0YPadPrlDU8QtMbGackpdrjQ2eNSrYW6/T+z+s
0culZWtD4ZaG4tNFm6LpR1/2RVg8wRZueY4ipTmFgQQEnxMAkgyzVV9+u56u3TdC
bj4oCjN5k6igTYUf02C1TDO/p54jj/+EOA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:21 2024 by rpki-client on console-fra.rpki-client.org