Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/mQzUfDXExUI9OxBvxO8opdhUmrQ.roa
File: mQzUfDXExUI9OxBvxO8opdhUmrQ.roa (raw, json)
Hash identifier: FjN90AZwDWamoCbfrk9v58D67WgVg0LFYvqY/uDysBs=
Subject key identifier: 99:0C:D4:7C:35:C4:C5:42:3D:3B:10:6F:C4:EF:28:A5:D8:54:9A:B4
Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial: 01856D0ACA663AD157C94AC0E23EEEEABE27
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/mQzUfDXExUI9OxBvxO8opdhUmrQ.roa
Signing time: Sun 01 Jan 2023 11:15:01 +0000
ROA not before: Sun 01 Jan 2023 11:15:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9003
IP address blocks: 195.7.96.0/19 maxlen: 19
80.70.32.0/20 maxlen: 20
91.151.112.0/20 maxlen: 20
141.170.216.0/21 maxlen: 21
213.144.192.0/19 maxlen: 19
212.39.128.0/19 maxlen: 19
84.55.128.0/18 maxlen: 18
79.174.192.0/18 maxlen: 18
46.35.0.0/19 maxlen: 19
78.155.128.0/19 maxlen: 19
Validation: Failed, certificate revoked on Thu 26 Oct 2023 08:41:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:0a:ca:66:3a:d1:57:c9:4a:c0:e2:3e:ee:ea:be:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Validity
Not Before: Jan 1 11:15:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=990cd47c35c4c5423d3b106fc4ef28a5d8549ab4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:80:e7:28:b0:bb:50:e6:a1:29:cc:ad:08:1f:
3a:40:85:b6:4e:d2:ea:e6:76:96:cf:cd:86:92:d9:
d5:c0:70:37:11:58:2d:85:4c:61:05:17:6d:1f:08:
59:e2:15:a9:f2:b3:af:52:0a:f3:5c:e9:b5:d4:09:
06:00:9b:24:49:00:be:c6:93:4c:ba:b8:93:3a:b8:
39:03:4c:ee:85:63:f3:20:1f:ab:0c:00:46:3a:45:
ee:e3:ad:90:8c:25:e4:7e:d5:a5:f1:c4:6d:b0:00:
4d:10:85:d5:77:6b:cb:6f:5a:7d:a5:5b:ab:26:67:
63:96:a9:94:ea:6d:a6:38:15:64:b1:5d:76:53:1b:
21:0d:83:21:1c:31:7b:39:cf:58:36:93:4e:fa:65:
55:64:5d:78:1f:20:49:b4:ac:54:1d:95:4a:0f:a1:
d7:41:10:24:5a:a7:5f:cd:77:d2:8b:cc:77:55:6c:
22:fe:07:29:78:71:19:a8:28:dd:2e:ff:e1:e2:9d:
69:93:b6:45:b4:13:6e:be:57:51:dc:c5:e9:0b:18:
90:43:05:ea:77:74:11:8e:e8:3d:36:75:fe:96:6c:
9c:58:c5:e0:42:0e:c5:a5:f4:cd:fb:64:35:da:65:
80:94:a4:61:97:40:b7:4f:44:6e:58:32:3c:57:35:
75:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:0C:D4:7C:35:C4:C5:42:3D:3B:10:6F:C4:EF:28:A5:D8:54:9A:B4
X509v3 Authority Key Identifier:
keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/mQzUfDXExUI9OxBvxO8opdhUmrQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.35.0.0/19
78.155.128.0/19
79.174.192.0/18
80.70.32.0/20
84.55.128.0/18
91.151.112.0/20
141.170.216.0/21
195.7.96.0/19
212.39.128.0/19
213.144.192.0/19
Signature Algorithm: sha256WithRSAEncryption
00:bc:b0:dc:12:92:ef:a0:96:4b:49:3b:3d:bf:f7:eb:9a:bf:
76:19:95:45:23:27:68:ef:2e:eb:49:7b:0e:a2:ab:96:27:8a:
9e:9e:43:8d:23:23:46:0b:d8:94:9f:f4:03:94:f7:59:36:f1:
62:5d:91:39:65:50:6b:5a:63:01:a0:4b:63:35:9e:3c:ff:63:
c0:7c:00:0a:c4:ac:fb:70:ab:72:d6:ae:de:de:02:bb:bf:40:
36:dd:34:6f:da:e3:a2:c8:f2:b6:b7:c0:3f:6f:d5:eb:f5:cc:
14:a2:52:1e:d8:2e:bb:8a:73:61:1a:c6:84:f1:1b:6b:42:42:
55:55:f1:bb:7e:b7:01:01:22:0f:6d:b0:d6:0d:6c:35:9b:e4:
0d:01:ff:fd:bf:f6:5a:89:e6:34:5c:48:96:da:a8:67:7b:60:
c0:9e:90:54:9c:a7:f9:7d:a4:80:a8:be:c2:47:7a:6a:f6:be:
e9:57:13:79:29:9e:ef:42:33:8b:39:e6:b9:33:3a:1c:ad:78:
6a:7b:ff:03:88:eb:fd:de:58:28:23:b4:2e:3b:ef:af:f8:3e:
50:0d:8b:22:40:2e:44:6d:d0:01:de:35:81:74:0f:40:2e:3e:
3e:8c:2d:5f:e1:2d:b3:8e:af:0e:ad:d8:d3:4a:e7:c2:68:63:
19:21:a6:54
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgISAYVtCspmOtFXyUrA4j7u6r4nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwZWY1ZmJiZmNhN2E5M2NmZWU5NjVlZWI2YmRlZTZmYjQz
YzQwM2UwHhcNMjMwMTAxMTExNTAxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OTBjZDQ3YzM1YzRjNTQyM2QzYjEwNmZjNGVmMjhhNWQ4NTQ5YWI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYDnKLC7UOahKcytCB86QIW2TtLq
5naWz82GktnVwHA3EVgthUxhBRdtHwhZ4hWp8rOvUgrzXOm11AkGAJskSQC+xpNM
uriTOrg5A0zuhWPzIB+rDABGOkXu462QjCXkftWl8cRtsABNEIXVd2vLb1p9pVur
JmdjlqmU6m2mOBVksV12UxshDYMhHDF7Oc9YNpNO+mVVZF14HyBJtKxUHZVKD6HX
QRAkWqdfzXfSi8x3VWwi/gcpeHEZqCjdLv/h4p1pk7ZFtBNuvldR3MXpCxiQQwXq
d3QRjug9NnX+lmycWMXgQg7FpfTN+2Q12mWAlKRhl0C3T0RuWDI8VzV1EwIDAQAB
o4ICPzCCAjswHQYDVR0OBBYEFJkM1Hw1xMVCPTsQb8TvKKXYVJq0MB8GA1UdIwQY
MBaAFKDvX7v8p6k8/ull7ra97m+0PEA+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb085ZnVfeW5xVHotNldYdXRyM3ViN1E4UUQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9mZTkxNWMtYmY3MC00NjAyLThhM2Mt
MDI5MmIwMjAxNTBhLzEvbVF6VWZEWEV4VUk5T3hCdnhPOG9wZGhVbXJRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi9mZTkxNWMtYmY3MC00NjAyLThhM2MtMDI5MmIwMjAxNTBh
LzEvb085ZnVfeW5xVHotNldYdXRyM3ViN1E4UUQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8AwQFLiMAAwQF
TpuAAwQGT67AAwQEUEYgAwQGVDeAAwQEW5dwAwQDjarYAwQFwwdgAwQF1CeAAwQF
1ZDAMA0GCSqGSIb3DQEBCwUAA4IBAQAAvLDcEpLvoJZLSTs9v/frmr92GZVFIydo
7y7rSXsOoquWJ4qenkONIyNGC9iUn/QDlPdZNvFiXZE5ZVBrWmMBoEtjNZ48/2PA
fAAKxKz7cKty1q7e3gK7v0A23TRv2uOiyPK2t8A/b9Xr9cwUolIe2C67inNhGsaE
8RtrQkJVVfG7frcBASIPbbDWDWw1m+QNAf/9v/ZaieY0XEiW2qhne2DAnpBUnKf5
faSAqL7CR3pq9r7pVxN5KZ7vQjOLOea5MzocrXhqe/8DiOv93lgoI7QuO++v+D5Q
DYsiQC5EbdAB3jWBdA9ALj4+jC1f4S2zjq8OrdjTSufCaGMZIaZU
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:51 2024 by rpki-client on console-ams.rpki-client.org