Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/03bb2e-4341-4435-ade7-8ceaf11e2728/1/ME9wNbBwS1nLru6h4gYaQPEHcyE.roa
File: ME9wNbBwS1nLru6h4gYaQPEHcyE.roa (raw, json)
Hash identifier: 6LRBmqq31m8Hg9edHJZzmCCPtyeISTCTtVPlxdC7O/A=
Subject key identifier: 30:4F:70:35:B0:70:4B:59:CB:AE:EE:A1:E2:06:1A:40:F1:07:73:21
Certificate issuer: /CN=d1981d330a9eba24f1b9f7c99ac6bfdd6139aad8
Certificate serial: 01856F3917CD9424FAC805E0EB6FACD4A7B2
Authority key identifier: D1:98:1D:33:0A:9E:BA:24:F1:B9:F7:C9:9A:C6:BF:DD:61:39:AA:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ZgdMwqeuiTxuffJmsa_3WE5qtg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/03bb2e-4341-4435-ade7-8ceaf11e2728/1/ME9wNbBwS1nLru6h4gYaQPEHcyE.roa
Signing time: Sun 01 Jan 2023 21:24:50 +0000
ROA not before: Sun 01 Jan 2023 21:24:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209054
IP address blocks: 5.183.161.0/24 maxlen: 24
5.183.163.0/24 maxlen: 24
5.183.160.0/24 maxlen: 24
5.183.162.0/24 maxlen: 24
2a0e:e00::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:34:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:39:17:cd:94:24:fa:c8:05:e0:eb:6f:ac:d4:a7:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1981d330a9eba24f1b9f7c99ac6bfdd6139aad8
Validity
Not Before: Jan 1 21:24:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=304f7035b0704b59cbaeeea1e2061a40f1077321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9d:d3:61:07:18:8e:78:c6:d7:77:ae:c1:e1:
74:ff:3e:39:88:07:f4:22:cd:d3:e4:7d:d4:e9:1f:
8a:28:33:0a:6e:45:45:68:b0:9f:cd:2a:15:45:ac:
36:e8:8e:63:73:14:b8:b3:93:55:9e:ff:ee:03:0b:
94:d8:10:05:27:fd:77:c9:da:0f:66:bc:8e:77:98:
62:af:00:2d:86:d1:7a:67:6c:8c:c2:30:63:d7:9f:
46:12:d7:48:db:b8:5b:40:ce:8e:91:b5:7b:55:6f:
70:95:cf:1b:21:03:32:11:99:b3:d8:4b:d3:b9:49:
8c:d7:f6:66:28:e1:04:d5:f2:3f:d8:7d:57:27:b4:
89:4b:8b:d4:66:b9:b1:d8:c4:27:55:d4:dd:06:07:
b2:5d:98:09:c7:95:b1:7a:9b:91:30:27:dd:66:f3:
13:93:43:9b:0f:e3:a3:74:c4:1d:92:5b:5d:d3:8b:
cf:2a:32:5e:1b:e0:71:db:fd:53:a7:5b:3d:da:4e:
e2:5c:19:e8:36:a0:0e:c8:ea:d9:f8:c2:6a:73:e9:
c1:38:6e:20:a2:b5:a1:ae:90:49:09:0c:23:44:24:
b7:d2:e7:e6:77:5b:0d:07:4d:04:70:d6:90:9b:51:
df:7c:be:88:6b:d7:a3:c5:81:1a:91:bf:3d:67:f7:
03:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:4F:70:35:B0:70:4B:59:CB:AE:EE:A1:E2:06:1A:40:F1:07:73:21
X509v3 Authority Key Identifier:
keyid:D1:98:1D:33:0A:9E:BA:24:F1:B9:F7:C9:9A:C6:BF:DD:61:39:AA:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ZgdMwqeuiTxuffJmsa_3WE5qtg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/03bb2e-4341-4435-ade7-8ceaf11e2728/1/ME9wNbBwS1nLru6h4gYaQPEHcyE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/03bb2e-4341-4435-ade7-8ceaf11e2728/1/0ZgdMwqeuiTxuffJmsa_3WE5qtg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.160.0/22
IPv6:
2a0e:e00::/32
Signature Algorithm: sha256WithRSAEncryption
1a:e0:99:4f:80:c7:88:9d:5a:3d:81:fc:8b:0b:c0:2d:9c:a1:
ba:41:3c:f1:2a:e9:4e:79:6f:9c:0c:da:c5:de:9b:d6:b9:de:
59:9f:13:36:f9:33:dd:07:88:89:21:e2:e8:87:f1:ce:57:0d:
bf:56:a9:22:d5:b3:7a:b3:44:08:8f:12:3e:0f:07:13:4c:51:
09:6a:35:17:5a:9d:6e:e8:e5:8f:80:c7:a6:b4:4b:70:60:e8:
ce:50:8c:39:aa:44:81:d7:22:f8:58:a6:eb:ab:c3:58:36:38:
5f:5f:77:c5:c8:48:34:84:9c:fc:e6:70:d4:7d:7e:3d:b2:7b:
0b:eb:db:4a:a5:50:1e:42:69:56:cc:de:33:9b:e7:d2:1e:ad:
89:8f:d0:1d:d3:8f:40:c5:9f:e7:ac:33:12:dc:cc:b2:73:18:
8b:d1:f0:18:9b:f5:70:a4:80:f7:e6:d8:51:58:57:84:e3:5d:
4d:91:9c:f0:a0:c0:e3:6e:84:80:7b:f5:24:d6:d6:98:0d:dd:
0f:1b:17:ac:6e:98:55:5a:8f:6d:70:fa:18:c7:99:d8:cb:83:
54:ba:48:91:47:20:0e:95:b9:81:a9:5e:4e:fb:76:19:c2:7e:
2d:f1:a0:a9:32:8e:46:c7:78:fa:cb:e6:02:9d:c9:2a:92:3d:
2a:82:9f:59
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVvORfNlCT6yAXg62+s1KeyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxOTgxZDMzMGE5ZWJhMjRmMWI5ZjdjOTlhYzZiZmRkNjEz
OWFhZDgwHhcNMjMwMTAxMjEyNDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMDRmNzAzNWIwNzA0YjU5Y2JhZWVlYTFlMjA2MWE0MGYxMDc3MzIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZ3TYQcYjnjG13euweF0/z45iAf0
Is3T5H3U6R+KKDMKbkVFaLCfzSoVRaw26I5jcxS4s5NVnv/uAwuU2BAFJ/13ydoP
ZryOd5hirwAthtF6Z2yMwjBj159GEtdI27hbQM6OkbV7VW9wlc8bIQMyEZmz2EvT
uUmM1/ZmKOEE1fI/2H1XJ7SJS4vUZrmx2MQnVdTdBgeyXZgJx5WxepuRMCfdZvMT
k0ObD+OjdMQdkltd04vPKjJeG+Bx2/1Tp1s92k7iXBnoNqAOyOrZ+MJqc+nBOG4g
orWhrpBJCQwjRCS30ufmd1sNB00EcNaQm1HffL6Ia9ejxYEakb89Z/cD7wIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFDBPcDWwcEtZy67uoeIGGkDxB3MhMB8GA1UdIwQY
MBaAFNGYHTMKnrok8bn3yZrGv91hOarYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFpnZE13cWV1aVR4dWZmSm1zYV8zV0U1cXRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS8wM2JiMmUtNDM0MS00NDM1LWFkZTct
OGNlYWYxMWUyNzI4LzEvTUU5d05iQndTMW5McnU2aDRnWWFRUEVIY3lFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS8wM2JiMmUtNDM0MS00NDM1LWFkZTctOGNlYWYxMWUyNzI4
LzEvMFpnZE13cWV1aVR4dWZmSm1zYV8zV0U1cXRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCBbegMA0E
AgACMAcDBQAqDg4AMA0GCSqGSIb3DQEBCwUAA4IBAQAa4JlPgMeInVo9gfyLC8At
nKG6QTzxKulOeW+cDNrF3pvWud5ZnxM2+TPdB4iJIeLoh/HOVw2/Vqki1bN6s0QI
jxI+DwcTTFEJajUXWp1u6OWPgMemtEtwYOjOUIw5qkSB1yL4WKbrq8NYNjhfX3fF
yEg0hJz85nDUfX49snsL69tKpVAeQmlWzN4zm+fSHq2Jj9Ad049AxZ/nrDMS3Myy
cxiL0fAYm/VwpID35thRWFeE411NkZzwoMDjboSAe/Uk1taYDd0PGxesbphVWo9t
cPoYx5nYy4NUukiRRyAOlbmBqV5O+3YZwn4t8aCpMo5Gx3j6y+YCnckqkj0qgp9Z
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:32 2024 by rpki-client on console-fra.rpki-client.org