Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Mybvf_eSO4sKA9e91GdJhAAVFOg.roa
File: Mybvf_eSO4sKA9e91GdJhAAVFOg.roa (raw, json)
Hash identifier: k+llN4u7PKxApPK1U5eKQ7JLl0Z5jCj5D/2ex4RWllc=
Subject key identifier: 33:26:EF:7F:F7:92:3B:8B:0A:03:D7:BD:D4:67:49:84:00:15:14:E8
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0192581E8821466C70FE3239A54A09536DAA
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Mybvf_eSO4sKA9e91GdJhAAVFOg.roa
Signing time: Fri 04 Oct 2024 15:20:48 +0000
ROA not before: Fri 04 Oct 2024 15:20:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12586
IP address blocks: 5.83.128.0/19 maxlen: 32
5.83.128.0/20 maxlen: 32
5.83.134.0/24 maxlen: 24
5.83.141.0/24 maxlen: 24
5.83.151.0/24 maxlen: 32
5.83.156.0/24 maxlen: 24
5.175.128.0/17 maxlen: 32
5.175.255.0/24 maxlen: 32
5.230.0.0/15 maxlen: 32
5.230.6.0/24 maxlen: 32
5.230.11.0/24 maxlen: 32
5.230.102.0/24 maxlen: 32
5.230.224.0/24 maxlen: 32
5.231.233.0/24 maxlen: 32
77.90.0.0/18 maxlen: 32
77.90.48.0/24 maxlen: 24
77.90.55.0/24 maxlen: 24
77.90.60.0/24 maxlen: 24
83.243.80.0/21 maxlen: 32
85.93.0.0/19 maxlen: 32
85.93.20.0/24 maxlen: 32
85.118.160.0/21 maxlen: 32
87.239.128.0/21 maxlen: 32
89.106.64.0/19 maxlen: 32
89.144.0.0/18 maxlen: 32
94.103.160.0/20 maxlen: 32
94.249.128.0/17 maxlen: 32
95.215.32.0/22 maxlen: 32
178.18.144.0/20 maxlen: 32
178.18.151.0/24 maxlen: 32
185.13.156.0/22 maxlen: 32
185.47.140.0/24 maxlen: 32
185.47.141.0/24 maxlen: 32
185.121.71.0/24 maxlen: 32
193.28.251.0/24 maxlen: 32
195.110.14.0/23 maxlen: 32
217.69.160.0/20 maxlen: 32
2a00:12d8::/29 maxlen: 128
2a00:19d0::/29 maxlen: 128
2a00:cdc0::/32 maxlen: 128
2a01:bd40::/29 maxlen: 128
2a02:7a0::/29 maxlen: 128
2a02:2fc0::/29 maxlen: 128
Validation: Failed, certificate revoked on Fri 04 Oct 2024 17:52:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:58:1e:88:21:46:6c:70:fe:32:39:a5:4a:09:53:6d:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Oct 4 15:20:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3326ef7ff7923b8b0a03d7bdd4674984001514e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ca:dd:aa:31:70:66:ef:7f:b3:08:30:ca:58:
0a:3d:cd:d1:70:64:5c:c1:e0:4c:ca:1f:5d:68:55:
ca:30:fd:b3:00:4d:bb:29:2a:00:19:a7:b4:70:4e:
25:16:63:c1:db:ef:2d:c6:10:1f:8e:a4:25:ae:74:
6b:b8:04:9d:5b:ee:4a:89:59:32:e1:fe:db:3e:ab:
5e:48:d4:70:17:c2:12:4a:8a:4a:c8:67:e4:db:a4:
1c:c0:be:2c:a3:c9:10:24:d9:30:5d:d2:41:7b:71:
30:cd:13:16:cf:02:2d:c2:7b:e0:fe:2c:ce:b4:06:
2a:b5:56:94:b3:34:0e:dc:1d:39:89:2a:3e:73:8a:
4d:41:97:37:1b:86:a8:ff:0d:91:52:aa:8e:d4:70:
c9:0a:94:cd:c9:cf:71:fb:88:75:24:80:b2:54:41:
14:37:d6:e9:5e:41:3d:e3:98:ae:13:23:20:7f:f4:
16:67:a4:7f:8a:e9:33:d7:b3:5c:d4:8a:34:cb:f0:
78:2e:e7:dd:8b:cb:a7:09:e1:7e:e1:7f:69:90:bd:
8a:0c:c9:97:53:90:85:30:51:bf:f1:92:37:3b:23:
68:6e:95:2b:7a:18:41:13:1a:e0:d1:d3:cf:ae:4b:
bd:33:a6:7d:07:10:f5:dc:be:76:94:ad:c7:0f:aa:
51:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:26:EF:7F:F7:92:3B:8B:0A:03:D7:BD:D4:67:49:84:00:15:14:E8
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Mybvf_eSO4sKA9e91GdJhAAVFOg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.128.0/19
5.175.128.0/17
5.230.0.0/15
77.90.0.0/18
83.243.80.0/21
85.93.0.0/19
85.118.160.0/21
87.239.128.0/21
89.106.64.0/19
89.144.0.0/18
94.103.160.0/20
94.249.128.0/17
95.215.32.0/22
178.18.144.0/20
185.13.156.0/22
185.47.140.0/23
185.121.71.0/24
193.28.251.0/24
195.110.14.0/23
217.69.160.0/20
IPv6:
2a00:12d8::/29
2a00:19d0::/29
2a00:cdc0::/32
2a01:bd40::/29
2a02:7a0::/29
2a02:2fc0::/29
Signature Algorithm: sha256WithRSAEncryption
2b:b9:55:33:3c:f8:4b:4f:47:7a:eb:e3:6d:66:1e:0e:3f:09:
61:38:32:fc:f7:06:b0:a5:c7:7a:23:d2:c3:be:78:fb:d0:7c:
c9:3f:05:1a:2d:65:c0:5f:7a:83:5e:c5:f8:8e:48:9f:f8:00:
29:d5:ee:19:6b:04:22:3f:82:42:72:c1:50:5a:0a:7c:8d:f1:
07:76:b6:ca:6b:da:c4:07:c6:26:5a:f3:56:02:a8:0d:0f:95:
6a:b7:79:fa:73:21:c9:eb:5f:fd:fd:26:b9:e5:10:3e:ea:37:
d2:4c:6c:43:a9:d1:45:35:11:07:be:2a:33:0b:34:5e:a4:16:
00:c8:10:c8:10:a2:d8:5e:9d:99:fa:df:f5:08:41:bc:ad:09:
04:71:9c:7c:52:d8:b6:1d:2d:6e:7a:75:2a:38:aa:5e:3c:a8:
d5:fa:0d:8e:88:0b:75:05:12:1c:13:38:0c:a7:29:b7:38:55:
a8:c2:d2:cb:17:80:39:82:77:98:48:66:73:b3:24:83:07:76:
ed:26:b3:af:7c:b5:cb:8b:42:1a:c6:36:eb:96:f2:11:e0:f5:
71:c8:1c:96:08:93:69:ac:de:0d:6d:d0:80:91:11:40:17:06:
8e:fd:77:0b:95:2d:0d:0c:ce:36:46:0c:22:59:2b:07:83:c9:
46:7a:a3:67
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZJYHoghRmxw/jI5pUoJU22qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjQxMDA0MTUyMDQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMzI2ZWY3ZmY3OTIzYjhiMGEwM2Q3YmRkNDY3NDk4NDAwMTUxNGU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkcrdqjFwZu9/swgwylgKPc3RcGRc
weBMyh9daFXKMP2zAE27KSoAGae0cE4lFmPB2+8txhAfjqQlrnRruASdW+5KiVky
4f7bPqteSNRwF8ISSopKyGfk26QcwL4so8kQJNkwXdJBe3EwzRMWzwItwnvg/izO
tAYqtVaUszQO3B05iSo+c4pNQZc3G4ao/w2RUqqO1HDJCpTNyc9x+4h1JICyVEEU
N9bpXkE945iuEyMgf/QWZ6R/iukz17Nc1Io0y/B4Lufdi8unCeF+4X9pkL2KDMmX
U5CFMFG/8ZI3OyNobpUrehhBExrg0dPPrku9M6Z9BxD13L52lK3HD6pRhQIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFDMm73/3kjuLCgPXvdRnSYQAFRToMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvTXlidmZfZVNPNHNLQTllOTFHZEpoQUFWRk9nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHEBggrBgEFBQcBBwEB/wSBtDCBsTB9BAIAATB3AwQFBVOA
AwQHBa+AAwMBBeYDBAZNWgADBANT81ADBAVVXQADBANVdqADBANX74ADBAVZakAD
BAZZkAADBAReZ6ADBAde+YADBAJf1yADBASyEpADBAK5DZwDBAG5L4wDBAC5eUcD
BADBHPsDBAHDbg4DBATZRaAwMAQCAAIwKgMFAyoAEtgDBQMqABnQAwUAKgDNwAMF
AyoBvUADBQMqAgegAwUDKgIvwDANBgkqhkiG9w0BAQsFAAOCAQEAK7lVMzz4S09H
euvjbWYeDj8JYTgy/PcGsKXHeiPSw754+9B8yT8FGi1lwF96g17F+I5In/gAKdXu
GWsEIj+CQnLBUFoKfI3xB3a2ymvaxAfGJlrzVgKoDQ+Vard5+nMhyetf/f0mueUQ
Puo30kxsQ6nRRTURB74qMws0XqQWAMgQyBCi2F6dmfrf9QhBvK0JBHGcfFLYth0t
bnp1KjiqXjyo1foNjogLdQUSHBM4DKcptzhVqMLSyxeAOYJ3mEhmc7Mkgwd27Saz
r3y1y4tCGsY265byEeD1ccgclgiTaazeDW3QgJERQBcGjv13C5UtDQzONkYMIlkr
B4PJRnqjZw==
-----END CERTIFICATE-----
Generated at Sat Apr 12 02:56:16 2025 by rpki-client