Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/UHaSyqPLdKbQxWTnd2IpMazciIY.roa
File: UHaSyqPLdKbQxWTnd2IpMazciIY.roa (raw, json)
Hash identifier: 0GWftycHsPI7DAfohdJ5UmWlfd3dxBXx6Pe9DAq/lrM=
Subject key identifier: 50:76:92:CA:A3:CB:74:A6:D0:C5:64:E7:77:62:29:31:AC:DC:88:86
Certificate issuer: /CN=49596cecc21dd02677a727ef37f0689546ea5097
Certificate serial: 018CC64B4E402C348783C5E0CEF0FDF95BC7
Authority key identifier: 49:59:6C:EC:C2:1D:D0:26:77:A7:27:EF:37:F0:68:95:46:EA:50:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SVls7MId0CZ3pyfvN_BolUbqUJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/UHaSyqPLdKbQxWTnd2IpMazciIY.roa
Signing time: Mon 01 Jan 2024 18:31:13 +0000
ROA not before: Mon 01 Jan 2024 18:31:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5390
IP address blocks: 83.119.0.0/19 maxlen: 24
83.119.0.0/21 maxlen: 24
85.148.0.0/15 maxlen: 16
83.119.8.0/21 maxlen: 24
83.119.16.0/20 maxlen: 24
83.119.14.0/24 maxlen: 24
83.118.224.0/22 maxlen: 24
85.150.0.0/16 maxlen: 16
2a02:2500::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 18 Mar 2024 11:45:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:4e:40:2c:34:87:83:c5:e0:ce:f0:fd:f9:5b:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49596cecc21dd02677a727ef37f0689546ea5097
Validity
Not Before: Jan 1 18:31:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=507692caa3cb74a6d0c564e777622931acdc8886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:01:f4:31:d8:a2:1f:f4:9a:34:3b:c0:72:77:
f1:72:89:6d:f2:16:4b:6e:9f:3b:0b:7a:67:6c:61:
37:52:40:73:4d:0c:a2:11:37:79:aa:3f:8d:43:a8:
ff:e4:4d:81:8d:5f:1f:c8:f6:6e:5b:9f:a4:0a:83:
5f:0c:18:7e:b7:49:22:fe:c2:8d:2e:80:76:bb:42:
b2:d4:08:b5:72:23:c4:e1:65:45:b6:c8:a3:fc:80:
b7:c0:60:fb:61:fb:d5:69:99:f7:ad:a5:4a:86:2b:
f4:3a:73:9a:19:c7:99:c8:c4:18:31:bb:80:e6:d1:
d9:ff:39:71:6d:29:07:e8:2a:fe:58:b7:cb:9f:3b:
5a:b9:6b:89:47:c5:94:b0:93:19:f9:d1:5f:ad:60:
16:02:aa:a5:9f:0d:84:fb:e4:8b:6e:54:0b:7f:ed:
a3:0d:de:bf:5a:f9:42:72:59:3d:44:e6:02:2a:12:
5d:ca:83:e6:5c:ab:bf:11:3d:34:77:45:19:f5:04:
c5:ae:4d:e2:5a:18:82:ce:18:21:bd:dd:87:02:01:
51:37:60:83:6b:e3:f8:87:70:8d:95:c8:99:b9:11:
0f:71:94:06:eb:fa:85:2f:cf:ca:fb:c5:bb:e9:d5:
2a:ea:d3:d2:63:b6:0b:b1:a0:f4:d0:28:a4:5c:0a:
a5:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:76:92:CA:A3:CB:74:A6:D0:C5:64:E7:77:62:29:31:AC:DC:88:86
X509v3 Authority Key Identifier:
keyid:49:59:6C:EC:C2:1D:D0:26:77:A7:27:EF:37:F0:68:95:46:EA:50:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SVls7MId0CZ3pyfvN_BolUbqUJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/UHaSyqPLdKbQxWTnd2IpMazciIY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/SVls7MId0CZ3pyfvN_BolUbqUJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.118.224.0/22
83.119.0.0/19
85.148.0.0-85.150.255.255
IPv6:
2a02:2500::/32
Signature Algorithm: sha256WithRSAEncryption
a5:9c:0b:58:42:1c:39:60:74:5c:b2:87:43:06:de:67:73:5f:
2e:31:67:ad:81:24:0b:bb:d0:06:90:1f:14:0f:fb:63:8f:6b:
53:fb:8e:69:f0:14:bf:de:0c:7b:99:19:25:26:67:11:6d:8a:
a6:ba:09:2c:4f:f3:cb:38:1b:e7:d9:f2:59:32:ab:c1:08:83:
6e:e8:2a:fd:0d:9b:85:d8:17:68:65:35:4e:24:16:16:1b:b9:
f3:f7:c2:16:6d:27:42:27:f0:12:a6:a4:3b:43:e6:86:9a:2a:
c3:d1:f3:73:1b:7f:2c:85:ad:e2:9d:92:f0:1c:77:08:57:6f:
09:72:80:6d:de:fc:85:03:3e:6b:1d:e6:b6:92:79:cb:ad:f3:
3c:52:87:40:75:c0:c7:64:3c:54:45:8a:01:0e:99:9f:5c:4a:
f3:80:5c:0b:40:87:f9:ee:c4:25:be:f4:d9:1e:25:e9:48:f4:
2c:50:a9:bc:d1:90:d8:54:93:e2:da:22:36:55:62:be:30:b8:
5c:c0:ff:65:a5:fb:85:8b:80:c9:c4:31:62:62:dc:e0:f8:53:
59:f4:bf:83:c7:b5:46:ba:ba:65:9d:df:1a:3b:b7:63:89:99:
66:fb:01:5f:ee:e6:46:83:e7:7e:d8:2d:7a:10:1b:8e:a6:ea:
2b:c2:68:8f
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAYzGS05ALDSHg8XgzvD9+VvHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5NTk2Y2VjYzIxZGQwMjY3N2E3MjdlZjM3ZjA2ODk1NDZl
YTUwOTcwHhcNMjQwMTAxMTgzMTEzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MDc2OTJjYWEzY2I3NGE2ZDBjNTY0ZTc3NzYyMjkzMWFjZGM4ODg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwH0MdiiH/SaNDvAcnfxcolt8hZL
bp87C3pnbGE3UkBzTQyiETd5qj+NQ6j/5E2BjV8fyPZuW5+kCoNfDBh+t0ki/sKN
LoB2u0Ky1Ai1ciPE4WVFtsij/IC3wGD7YfvVaZn3raVKhiv0OnOaGceZyMQYMbuA
5tHZ/zlxbSkH6Cr+WLfLnztauWuJR8WUsJMZ+dFfrWAWAqqlnw2E++SLblQLf+2j
Dd6/WvlCclk9ROYCKhJdyoPmXKu/ET00d0UZ9QTFrk3iWhiCzhghvd2HAgFRN2CD
a+P4h3CNlciZuREPcZQG6/qFL8/K+8W76dUq6tPSY7YLsaD00CikXAql5QIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFFB2ksqjy3Sm0MVk53diKTGs3IiGMB8GA1UdIwQY
MBaAFElZbOzCHdAmd6cn7zfwaJVG6lCXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1ZsczdNSWQwQ1ozcHlmdk5fQm9sVWJxVUpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9lN2JkMDEtNDMyZi00YmY5LTgwYzUt
ODk3ZDAwOTc3ZmYyLzEvVUhhU3lxUExkS2JReFdUbmQySXBNYXpjaUlZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9lN2JkMDEtNDMyZi00YmY5LTgwYzUtODk3ZDAwOTc3ZmYy
LzEvU1ZsczdNSWQwQ1ozcHlmdk5fQm9sVWJxVUpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQCU3bgAwQF
U3cAMAoDAwJVlAMDAFWWMA0EAgACMAcDBQAqAiUAMA0GCSqGSIb3DQEBCwUAA4IB
AQClnAtYQhw5YHRcsodDBt5nc18uMWetgSQLu9AGkB8UD/tjj2tT+45p8BS/3gx7
mRklJmcRbYqmugksT/PLOBvn2fJZMqvBCINu6Cr9DZuF2BdoZTVOJBYWG7nz98IW
bSdCJ/ASpqQ7Q+aGmirD0fNzG38sha3inZLwHHcIV28JcoBt3vyFAz5rHea2knnL
rfM8UodAdcDHZDxURYoBDpmfXErzgFwLQIf57sQlvvTZHiXpSPQsUKm80ZDYVJPi
2iI2VWK+MLhcwP9lpfuFi4DJxDFiYtzg+FNZ9L+Dx7VGurplnd8aO7djiZlm+wFf
7uZGg+d+2C16EBuOpuorwmiP
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:22 2024 by rpki-client on console-ams.rpki-client.org