Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/Sx3T6Biu0ECCW_k4J_wUlYYvGe8.roa
File: Sx3T6Biu0ECCW_k4J_wUlYYvGe8.roa (raw, json)
Hash identifier: qHDvL7GwMWf3b+a2bsoleW+QjFijQoajPNG7w3KmDGU=
Subject key identifier: 4B:1D:D3:E8:18:AE:D0:40:82:5B:F9:38:27:FC:14:95:86:2F:19:EF
Certificate issuer: /CN=abc8dbe52083ad335c9f1fde6016ec8b49293140
Certificate serial: 01856C53F25A63B0D20A4BAD0D6E4CD50A6E
Authority key identifier: AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/Sx3T6Biu0ECCW_k4J_wUlYYvGe8.roa
Signing time: Sun 01 Jan 2023 07:55:18 +0000
ROA not before: Sun 01 Jan 2023 07:55:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21219
IP address blocks: 46.164.128.0/18 maxlen: 24
195.225.52.0/23 maxlen: 24
194.110.79.0/24 maxlen: 24
193.238.96.0/22 maxlen: 24
185.46.248.0/22 maxlen: 24
94.232.72.0/21 maxlen: 24
195.114.128.0/19 maxlen: 24
80.77.32.0/20 maxlen: 24
194.146.196.0/22 maxlen: 24
91.237.152.0/24 maxlen: 24
193.109.164.0/22 maxlen: 24
93.183.192.0/18 maxlen: 24
195.69.176.0/22 maxlen: 24
176.241.128.0/19 maxlen: 24
91.197.220.0/22 maxlen: 24
176.241.104.0/21 maxlen: 24
91.204.92.0/22 maxlen: 24
194.29.60.0/22 maxlen: 24
176.102.32.0/19 maxlen: 24
77.88.200.0/21 maxlen: 24
77.88.208.0/20 maxlen: 24
176.112.0.0/19 maxlen: 24
5.1.0.0/19 maxlen: 24
88.81.224.0/19 maxlen: 24
188.247.96.0/19 maxlen: 24
193.109.80.0/24 maxlen: 24
217.112.208.0/20 maxlen: 24
91.193.68.0/22 maxlen: 24
77.88.214.0/23 maxlen: 23
77.88.240.0/20 maxlen: 24
185.8.40.0/22 maxlen: 24
178.213.168.0/21 maxlen: 24
188.0.64.0/19 maxlen: 24
31.128.64.0/23 maxlen: 24
31.128.68.0/22 maxlen: 24
31.128.72.0/21 maxlen: 24
31.128.80.0/20 maxlen: 24
31.3.192.0/20 maxlen: 24
193.108.48.0/22 maxlen: 24
195.114.133.0/24 maxlen: 24
77.222.128.0/19 maxlen: 24
109.206.32.0/19 maxlen: 24
80.91.160.0/20 maxlen: 24
85.159.0.0/21 maxlen: 24
193.108.128.0/23 maxlen: 24
80.91.176.0/20 maxlen: 24
193.41.48.0/22 maxlen: 24
213.111.192.0/18 maxlen: 24
80.249.224.0/20 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:53:f2:5a:63:b0:d2:0a:4b:ad:0d:6e:4c:d5:0a:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abc8dbe52083ad335c9f1fde6016ec8b49293140
Validity
Not Before: Jan 1 07:55:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4b1dd3e818aed040825bf93827fc1495862f19ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:52:a1:00:21:76:f7:1a:35:ee:fd:9b:21:fc:
0f:91:c7:0e:92:a1:40:92:4d:40:9e:77:f8:71:d8:
54:a7:9d:8b:92:88:2c:36:20:3b:6a:da:67:7d:ee:
79:53:59:6c:8c:7b:42:9f:fc:95:8e:cc:e2:8d:48:
7a:b3:9b:67:3f:74:46:9d:ec:9c:45:b4:9d:c9:38:
35:60:9b:10:27:1f:fa:b1:b6:b5:2b:8e:9d:16:ff:
e4:8e:85:4c:d6:cc:9f:f5:40:61:da:33:df:77:86:
2c:fd:fe:ad:68:8d:4a:ca:ea:0a:19:d6:1e:ea:63:
df:c8:2f:4c:16:f0:86:dd:f6:4e:ef:9e:ab:0a:32:
70:85:97:fa:ce:16:85:59:01:fb:81:34:b7:ae:5d:
80:fb:61:cd:c3:fb:d1:61:96:76:84:63:5a:44:0e:
4d:34:b4:47:d4:a3:f4:c2:a0:e5:92:0d:fa:54:20:
bd:4f:be:2a:d5:dd:33:39:be:6d:65:dc:8d:e5:8b:
e4:9f:1f:40:be:ae:e5:5b:7e:a8:da:8b:c7:90:47:
d5:35:5d:e8:ac:b9:53:3a:a8:a5:77:d4:44:de:c4:
23:00:99:6c:1a:66:84:2f:61:67:f1:56:5c:00:82:
b9:94:85:b0:75:a5:da:f9:0b:9d:6d:c1:cf:2a:95:
a9:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:1D:D3:E8:18:AE:D0:40:82:5B:F9:38:27:FC:14:95:86:2F:19:EF
X509v3 Authority Key Identifier:
keyid:AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/Sx3T6Biu0ECCW_k4J_wUlYYvGe8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.1.0.0/19
31.3.192.0/20
31.128.64.0/23
31.128.68.0-31.128.95.255
46.164.128.0/18
77.88.200.0-77.88.223.255
77.88.240.0/20
77.222.128.0/19
80.77.32.0/20
80.91.160.0/19
80.249.224.0/20
85.159.0.0/21
88.81.224.0/19
91.193.68.0/22
91.197.220.0/22
91.204.92.0/22
91.237.152.0/24
93.183.192.0/18
94.232.72.0/21
109.206.32.0/19
176.102.32.0/19
176.112.0.0/19
176.241.104.0/21
176.241.128.0/19
178.213.168.0/21
185.8.40.0/22
185.46.248.0/22
188.0.64.0/19
188.247.96.0/19
193.41.48.0/22
193.108.48.0/22
193.108.128.0/23
193.109.80.0/24
193.109.164.0/22
193.238.96.0/22
194.29.60.0/22
194.110.79.0/24
194.146.196.0/22
195.69.176.0/22
195.114.128.0/19
195.225.52.0/23
213.111.192.0/18
217.112.208.0/20
Signature Algorithm: sha256WithRSAEncryption
42:1c:c3:06:48:57:91:90:50:a7:99:97:75:2e:99:23:4e:9a:
e4:df:dc:11:21:a0:ed:1a:0e:6f:6c:09:fe:fe:ac:c7:a3:47:
83:89:59:df:0a:19:36:22:0c:e3:b4:9e:86:6f:18:87:74:da:
27:b3:d7:91:42:2d:4d:ec:86:72:8e:c3:7c:a4:27:dd:cd:83:
d2:b4:26:c2:f1:46:d4:85:4a:1b:c8:fd:24:c4:d0:19:e4:1c:
84:0e:03:9b:af:cf:42:53:3a:b2:74:35:f6:0c:c9:90:43:83:
94:89:80:60:f7:f4:2c:41:5d:c1:8a:b9:b5:46:98:28:ac:e6:
62:b8:50:8b:c2:e6:8d:9e:57:c5:9b:9d:32:05:7b:f1:58:a7:
84:f3:53:c4:e7:fc:63:03:45:e2:f8:fe:34:78:bf:5a:97:d6:
fd:9b:90:53:75:85:6a:8c:13:30:88:0c:80:0d:1f:b9:b6:1a:
87:fc:e7:24:f8:31:54:7d:88:6c:45:84:1c:ff:4e:3b:c3:13:
b4:27:5f:a4:e0:4b:a3:58:c3:22:c5:d8:6e:13:75:37:69:5c:
ed:4a:71:fd:55:c8:11:d3:b9:0f:c0:3a:17:78:72:2d:98:08:
47:cf:d1:76:98:85:5a:6e:38:9e:09:a4:57:33:20:75:1e:e0:
83:4d:55:4a
-----BEGIN CERTIFICATE-----
MIIGEzCCBPugAwIBAgISAYVsU/JaY7DSCkutDW5M1QpuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiYzhkYmU1MjA4M2FkMzM1YzlmMWZkZTYwMTZlYzhiNDky
OTMxNDAwHhcNMjMwMTAxMDc1NTE4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YjFkZDNlODE4YWVkMDQwODI1YmY5MzgyN2ZjMTQ5NTg2MmYxOWVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFKhACF29xo17v2bIfwPkccOkqFA
kk1Annf4cdhUp52LkogsNiA7atpnfe55U1lsjHtCn/yVjszijUh6s5tnP3RGneyc
RbSdyTg1YJsQJx/6sba1K46dFv/kjoVM1syf9UBh2jPfd4Ys/f6taI1KyuoKGdYe
6mPfyC9MFvCG3fZO756rCjJwhZf6zhaFWQH7gTS3rl2A+2HNw/vRYZZ2hGNaRA5N
NLRH1KP0wqDlkg36VCC9T74q1d0zOb5tZdyN5Yvknx9Avq7lW36o2ovHkEfVNV3o
rLlTOqild9RE3sQjAJlsGmaEL2Fn8VZcAIK5lIWwdaXa+QudbcHPKpWpMwIDAQAB
o4IDHzCCAxswHQYDVR0OBBYEFEsd0+gYrtBAglv5OCf8FJWGLxnvMB8GA1UdIwQY
MBaAFKvI2+Ugg60zXJ8f3mAW7ItJKTFAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcThqYjVTQ0RyVE5jbnhfZVlCYnNpMGtwTVVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9jZTZjY2ItMjVjZi00OTE3LWIzY2Qt
MzA1NmFmOWEzMzVlLzEvU3gzVDZCaXUwRUNDV19rNEpfd1VsWVl2R2U4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS9jZTZjY2ItMjVjZi00OTE3LWIzY2QtMzA1NmFmOWEzMzVl
LzEvcThqYjVTQ0RyVE5jbnhfZVlCYnNpMGtwTVVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBMwYIKwYBBQUHAQcBAf8EggEiMIIBHjCCARoEAgABMIIB
EgMEBQUBAAMEBB8DwAMEAR+AQDAMAwQCH4BEAwQFH4BAAwQGLqSAMAwDBANNWMgD
BAVNWMADBARNWPADBAVN3oADBARQTSADBAVQW6ADBARQ+eADBANVnwADBAVYUeAD
BAJbwUQDBAJbxdwDBAJbzFwDBABb7ZgDBAZdt8ADBANe6EgDBAVtziADBAWwZiAD
BAWwcAADBAOw8WgDBAWw8YADBAOy1agDBAK5CCgDBAK5LvgDBAW8AEADBAW892AD
BALBKTADBALBbDADBAHBbIADBADBbVADBALBbaQDBALB7mADBALCHTwDBADCbk8D
BALCksQDBALDRbADBAXDcoADBAHD4TQDBAbVb8ADBATZcNAwDQYJKoZIhvcNAQEL
BQADggEBAEIcwwZIV5GQUKeZl3UumSNOmuTf3BEhoO0aDm9sCf7+rMejR4OJWd8K
GTYiDOO0noZvGId02iez15FCLU3shnKOw3ykJ93Ng9K0JsLxRtSFShvI/STE0Bnk
HIQOA5uvz0JTOrJ0NfYMyZBDg5SJgGD39CxBXcGKubVGmCis5mK4UIvC5o2eV8Wb
nTIFe/FYp4TzU8Tn/GMDReL4/jR4v1qX1v2bkFN1hWqMEzCIDIANH7m2Gof85yT4
MVR9iGxFhBz/TjvDE7QnX6TgS6NYwyLF2G4TdTdpXO1Kcf1VyBHTuQ/AOhd4ci2Y
CEfP0XaYhVpuOJ4JpFczIHUe4INNVUo=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:32 2024 by rpki-client on console-fra.rpki-client.org