Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/c5f714-472c-4856-aa4b-9b21b6f6679a/1/muDxDB8WyvGr_9otudqW_vKjqn8.roa
File: muDxDB8WyvGr_9otudqW_vKjqn8.roa (raw, json)
Hash identifier: EAp2+Ak6NAXxlpbxWKehkRoLaD6wY7xrXUG5cCf5Rq4=
Subject key identifier: 9A:E0:F1:0C:1F:16:CA:F1:AB:FF:DA:2D:B9:DA:96:FE:F2:A3:AA:7F
Certificate issuer: /CN=f4c6b7dd5175be8db7a0522f7d4e41c5c42c6b29
Certificate serial: 018F95F83C04F065BCE6ADABC8B1C9F13288
Authority key identifier: F4:C6:B7:DD:51:75:BE:8D:B7:A0:52:2F:7D:4E:41:C5:C4:2C:6B:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Ma33VF1vo23oFIvfU5BxcQsayk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/c5f714-472c-4856-aa4b-9b21b6f6679a/1/muDxDB8WyvGr_9otudqW_vKjqn8.roa
Signing time: Mon 20 May 2024 12:27:04 +0000
ROA not before: Mon 20 May 2024 12:27:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212136
IP address blocks: 5.172.178.0/24 maxlen: 24
81.22.46.0/24 maxlen: 24
81.22.47.0/24 maxlen: 24
185.228.248.0/24 maxlen: 24
185.247.187.0/24 maxlen: 24
194.31.9.0/24 maxlen: 24
213.232.254.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 29 May 2024 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:95:f8:3c:04:f0:65:bc:e6:ad:ab:c8:b1:c9:f1:32:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4c6b7dd5175be8db7a0522f7d4e41c5c42c6b29
Validity
Not Before: May 20 12:27:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9ae0f10c1f16caf1abffda2db9da96fef2a3aa7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:14:25:8f:29:02:08:d6:cd:80:d0:51:70:1a:
ed:77:e2:c4:2b:94:9e:26:fc:9c:41:ef:06:f8:0c:
76:6c:ef:ab:d9:0e:7a:49:05:39:04:b3:12:4a:6a:
c1:a1:b6:3c:75:1d:80:ef:c3:fc:58:0e:f0:86:c5:
b2:5e:0a:29:9e:e7:f2:2a:cc:6a:d2:3f:ac:14:c9:
e8:01:29:1f:2c:76:b7:68:ef:9b:c9:79:44:ef:fc:
15:68:5c:0b:00:0f:61:62:25:ab:f2:7b:0f:48:57:
05:aa:4e:ec:0e:7e:8c:10:3b:bf:bc:eb:04:e7:75:
09:cc:af:27:97:4c:54:96:66:8a:5d:dc:82:0c:a5:
ec:8b:35:4a:ff:60:1f:89:6f:af:f6:9c:5d:22:69:
bc:25:93:f9:79:95:15:3b:df:37:49:5a:32:02:d5:
0e:92:d1:19:5b:4d:bb:9a:17:40:a1:b0:4f:3d:3b:
20:a4:49:95:36:16:37:3d:95:0b:5a:a8:44:a3:31:
f2:45:c9:09:42:1a:3a:f7:67:36:c7:1d:60:32:f9:
5d:07:d8:be:33:a1:f1:f9:b7:e7:10:98:21:64:22:
05:36:8e:75:08:99:40:c9:c6:ac:eb:06:4b:d3:ae:
66:ff:7c:ab:c7:8f:89:d4:15:3d:4f:0d:69:c1:5b:
df:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:E0:F1:0C:1F:16:CA:F1:AB:FF:DA:2D:B9:DA:96:FE:F2:A3:AA:7F
X509v3 Authority Key Identifier:
keyid:F4:C6:B7:DD:51:75:BE:8D:B7:A0:52:2F:7D:4E:41:C5:C4:2C:6B:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Ma33VF1vo23oFIvfU5BxcQsayk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c5f714-472c-4856-aa4b-9b21b6f6679a/1/muDxDB8WyvGr_9otudqW_vKjqn8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c5f714-472c-4856-aa4b-9b21b6f6679a/1/9Ma33VF1vo23oFIvfU5BxcQsayk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.172.178.0/24
81.22.46.0/23
185.228.248.0/24
185.247.187.0/24
194.31.9.0/24
213.232.254.0/24
Signature Algorithm: sha256WithRSAEncryption
43:24:77:60:b0:6d:c6:9b:be:05:9b:17:4e:c8:24:06:be:0e:
05:6b:ea:a9:d3:16:5f:62:a9:72:6f:05:b6:96:9e:c8:5a:c7:
88:bc:33:fd:eb:a0:ef:e9:6d:1f:8c:e8:19:d1:62:84:34:30:
0f:1d:76:5b:4f:9d:a6:47:56:17:75:59:db:34:03:40:ea:cd:
52:79:9c:17:41:9d:3a:b8:83:32:de:c0:81:fc:99:a0:9a:a9:
bf:bb:83:9f:67:04:6e:a7:68:6b:bb:58:0d:27:86:61:19:e1:
16:c9:1b:9d:87:51:d1:36:cb:3c:6f:86:e3:d3:78:39:1f:13:
a4:8a:e4:f9:fd:31:44:c0:f4:16:32:b7:25:32:9a:79:aa:6e:
9d:d2:42:25:b6:db:4f:93:47:e6:d5:23:8c:99:c2:48:76:b4:
a2:87:ce:09:a8:02:a3:03:b6:b5:9b:3c:c0:dc:df:16:95:93:
7f:a5:2c:cc:7e:45:f8:4b:2a:6c:dd:59:2a:2d:7e:11:7e:7a:
cc:5c:2a:12:87:cc:88:c6:84:14:f8:09:99:0a:ff:68:49:cc:
49:be:1a:99:a5:57:70:58:86:85:90:08:49:f3:d0:5a:7b:3e:
78:07:f5:fd:3b:58:05:ea:3a:50:74:8c:64:fc:f6:85:43:24:
7e:f4:dd:7c
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAY+V+DwE8GW85q2ryLHJ8TKIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0YzZiN2RkNTE3NWJlOGRiN2EwNTIyZjdkNGU0MWM1YzQy
YzZiMjkwHhcNMjQwNTIwMTIyNzA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YWUwZjEwYzFmMTZjYWYxYWJmZmRhMmRiOWRhOTZmZWYyYTNhYTdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRQljykCCNbNgNBRcBrtd+LEK5Se
JvycQe8G+Ax2bO+r2Q56SQU5BLMSSmrBobY8dR2A78P8WA7whsWyXgopnufyKsxq
0j+sFMnoASkfLHa3aO+byXlE7/wVaFwLAA9hYiWr8nsPSFcFqk7sDn6MEDu/vOsE
53UJzK8nl0xUlmaKXdyCDKXsizVK/2AfiW+v9pxdImm8JZP5eZUVO983SVoyAtUO
ktEZW027mhdAobBPPTsgpEmVNhY3PZULWqhEozHyRckJQho692c2xx1gMvldB9i+
M6Hx+bfnEJghZCIFNo51CJlAycas6wZL065m/3yrx4+J1BU9Tw1pwVvfwQIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFJrg8QwfFsrxq//aLbnalv7yo6p/MB8GA1UdIwQY
MBaAFPTGt91Rdb6Nt6BSL31OQcXELGspMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOU1hMzNWRjF2bzIzb0ZJdmZVNUJ4Y1FzYXlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9jNWY3MTQtNDcyYy00ODU2LWFhNGIt
OWIyMWI2ZjY2NzlhLzEvbXVEeERCOFd5dkdyXzlvdHVkcVdfdktqcW44LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS9jNWY3MTQtNDcyYy00ODU2LWFhNGItOWIyMWI2ZjY2Nzlh
LzEvOU1hMzNWRjF2bzIzb0ZJdmZVNUJ4Y1FzYXlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQABayyAwQB
URYuAwQAueT4AwQAufe7AwQAwh8JAwQA1ej+MA0GCSqGSIb3DQEBCwUAA4IBAQBD
JHdgsG3Gm74FmxdOyCQGvg4Fa+qp0xZfYqlybwW2lp7IWseIvDP966Dv6W0fjOgZ
0WKENDAPHXZbT52mR1YXdVnbNANA6s1SeZwXQZ06uIMy3sCB/Jmgmqm/u4OfZwRu
p2hru1gNJ4ZhGeEWyRudh1HRNss8b4bj03g5HxOkiuT5/TFEwPQWMrclMpp5qm6d
0kIltttPk0fm1SOMmcJIdrSih84JqAKjA7a1mzzA3N8WlZN/pSzMfkX4Syps3Vkq
LX4RfnrMXCoSh8yIxoQU+AmZCv9oScxJvhqZpVdwWIaFkAhJ89Baez54B/X9O1gF
6jpQdIxk/PaFQyR+9N18
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:14 2024 by rpki-client on console-ams.rpki-client.org