Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/a7ddf6-2394-48d3-bfa1-6d655cd94468/1/K-BWz0iqNWFlY8lyIJhrT6QEw5E.roa
File: K-BWz0iqNWFlY8lyIJhrT6QEw5E.roa (raw, json)
Hash identifier: nLxvWs7PHO8NkVPDHWrF8nS+LxsF6VED2Tkx+I9Rplg=
Subject key identifier: 2B:E0:56:CF:48:AA:35:61:65:63:C9:72:20:98:6B:4F:A4:04:C3:91
Certificate issuer: /CN=d513872512f1f2d037b401c2603ca8994e721e55
Certificate serial: 01887791ECBE6559E226BD330000CCF0ECB6
Authority key identifier: D5:13:87:25:12:F1:F2:D0:37:B4:01:C2:60:3C:A8:99:4E:72:1E:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ROHJRLx8tA3tAHCYDyomU5yHlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/a7ddf6-2394-48d3-bfa1-6d655cd94468/1/K-BWz0iqNWFlY8lyIJhrT6QEw5E.roa
Signing time: Thu 01 Jun 2023 15:27:11 +0000
ROA not before: Thu 01 Jun 2023 15:27:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49367
IP address blocks: 83.136.104.0/21 maxlen: 24
94.198.96.0/21 maxlen: 24
95.141.32.0/20 maxlen: 24
94.198.101.0/24 maxlen: 24
158.58.168.0/21 maxlen: 24
158.58.172.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:77:91:ec:be:65:59:e2:26:bd:33:00:00:cc:f0:ec:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d513872512f1f2d037b401c2603ca8994e721e55
Validity
Not Before: Jun 1 15:27:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2be056cf48aa35616563c97220986b4fa404c391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:4b:82:53:18:49:09:0a:8e:87:5e:6f:97:ac:
28:9f:5b:f1:7c:95:e4:b1:54:eb:c2:ca:1a:f5:da:
84:1c:7f:af:d0:d2:2a:3b:54:94:d8:df:e0:04:86:
c4:4a:82:33:ff:1a:0b:5c:30:aa:80:f4:e7:40:14:
22:d3:c9:18:7d:f7:d4:7d:43:d1:e0:23:5f:13:d5:
1c:3f:5a:8d:54:aa:77:00:21:05:e6:bc:a8:9f:d4:
37:3b:12:43:f9:bf:19:17:26:16:a4:5d:95:ae:86:
c4:ff:62:d0:af:11:24:a1:28:8f:5a:04:4d:4d:61:
4c:e9:51:a1:22:b0:bb:6f:ae:6d:6c:c0:ae:b1:65:
34:b1:23:a3:ed:8d:19:de:c0:ad:be:db:e6:3c:88:
4f:c8:84:c5:f8:e2:1d:e6:a0:6d:bc:7b:d6:6e:0a:
13:19:e8:4d:1f:af:2e:4d:62:55:4b:40:bc:3c:5c:
9b:71:e5:8d:1f:80:4d:08:7c:41:73:00:41:a1:37:
42:fa:21:31:d6:17:5d:b5:d1:4b:17:8b:00:7e:c0:
d2:b5:2c:ee:0b:4c:ed:e9:3b:62:fc:42:a4:bc:bb:
d8:d6:46:b6:07:af:a5:df:a3:6b:3a:6d:b3:2a:dd:
81:48:40:29:83:34:8f:17:25:56:27:b0:25:8c:29:
d3:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:E0:56:CF:48:AA:35:61:65:63:C9:72:20:98:6B:4F:A4:04:C3:91
X509v3 Authority Key Identifier:
keyid:D5:13:87:25:12:F1:F2:D0:37:B4:01:C2:60:3C:A8:99:4E:72:1E:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ROHJRLx8tA3tAHCYDyomU5yHlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/a7ddf6-2394-48d3-bfa1-6d655cd94468/1/K-BWz0iqNWFlY8lyIJhrT6QEw5E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/a7ddf6-2394-48d3-bfa1-6d655cd94468/1/1ROHJRLx8tA3tAHCYDyomU5yHlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.136.104.0/21
94.198.96.0/21
95.141.32.0/20
158.58.168.0/21
Signature Algorithm: sha256WithRSAEncryption
22:f7:fc:7c:f7:10:4c:bf:56:9b:0b:69:67:29:6f:f8:98:aa:
ec:cd:7c:42:8a:c0:22:57:ce:4d:cf:9e:a0:33:ed:aa:6b:7f:
00:b7:43:33:5c:80:a7:e3:93:a6:94:0f:17:bd:9a:ef:87:94:
85:d0:d2:bf:11:40:72:1d:90:57:15:51:29:d2:b8:6b:01:7d:
bf:3e:23:42:36:2a:d2:42:ff:3d:04:17:07:36:d4:48:a8:8d:
f3:96:1c:6f:77:80:56:07:75:78:ee:49:74:9b:e1:22:94:d2:
6b:13:ed:52:b7:4d:ef:5d:fa:8c:c8:98:5b:a3:84:25:e7:b2:
c2:93:a5:84:41:9c:a7:48:69:aa:f2:b7:a6:6a:31:2d:2e:b8:
ba:06:d4:c6:de:78:56:8b:52:48:ba:e4:a5:f3:0d:8a:e7:1b:
52:ad:a2:5d:08:21:76:34:5c:10:4f:dc:d0:08:3e:ef:b9:33:
d1:82:ad:23:1a:cb:7e:cc:0c:45:80:88:8b:94:6d:34:c0:74:
f8:68:01:d6:d9:59:93:e7:98:15:5c:41:7a:c0:02:74:2b:b9:
56:46:9a:64:a4:0f:a7:47:e5:0f:01:69:fd:70:64:67:2f:6c:
14:a3:b3:d6:7a:aa:e6:0d:37:7d:09:b6:0a:a2:50:46:58:e1:
d2:0b:29:fb
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYh3key+ZVniJr0zAADM8Oy2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1MTM4NzI1MTJmMWYyZDAzN2I0MDFjMjYwM2NhODk5NGU3
MjFlNTUwHhcNMjMwNjAxMTUyNzExWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYmUwNTZjZjQ4YWEzNTYxNjU2M2M5NzIyMDk4NmI0ZmE0MDRjMzkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg0uCUxhJCQqOh15vl6won1vxfJXk
sVTrwsoa9dqEHH+v0NIqO1SU2N/gBIbESoIz/xoLXDCqgPTnQBQi08kYfffUfUPR
4CNfE9UcP1qNVKp3ACEF5ryon9Q3OxJD+b8ZFyYWpF2VrobE/2LQrxEkoSiPWgRN
TWFM6VGhIrC7b65tbMCusWU0sSOj7Y0Z3sCtvtvmPIhPyITF+OId5qBtvHvWbgoT
GehNH68uTWJVS0C8PFybceWNH4BNCHxBcwBBoTdC+iEx1hddtdFLF4sAfsDStSzu
C0zt6Tti/EKkvLvY1ka2B6+l36NrOm2zKt2BSEApgzSPFyVWJ7AljCnT3wIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFCvgVs9IqjVhZWPJciCYa0+kBMORMB8GA1UdIwQY
MBaAFNUThyUS8fLQN7QBwmA8qJlOch5VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVJPSEpSTHg4dEEzdEFIQ1lEeW9tVTV5SGxVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9hN2RkZjYtMjM5NC00OGQzLWJmYTEt
NmQ2NTVjZDk0NDY4LzEvSy1CV3owaXFOV0ZsWThseUlKaHJUNlFFdzVFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS9hN2RkZjYtMjM5NC00OGQzLWJmYTEtNmQ2NTVjZDk0NDY4
LzEvMVJPSEpSTHg4dEEzdEFIQ1lEeW9tVTV5SGxVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQDU4hoAwQD
XsZgAwQEX40gAwQDnjqoMA0GCSqGSIb3DQEBCwUAA4IBAQAi9/x89xBMv1abC2ln
KW/4mKrszXxCisAiV85Nz56gM+2qa38At0MzXICn45OmlA8XvZrvh5SF0NK/EUBy
HZBXFVEp0rhrAX2/PiNCNirSQv89BBcHNtRIqI3zlhxvd4BWB3V47kl0m+EilNJr
E+1St03vXfqMyJhbo4Ql57LCk6WEQZynSGmq8remajEtLri6BtTG3nhWi1JIuuSl
8w2K5xtSraJdCCF2NFwQT9zQCD7vuTPRgq0jGst+zAxFgIiLlG00wHT4aAHW2VmT
55gVXEF6wAJ0K7lWRppkpA+nR+UPAWn9cGRnL2wUo7PWeqrmDTd9CbYKolBGWOHS
Cyn7
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:13:26 2024 by rpki-client on console-ams.rpki-client.org