Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/vIYub-4C9vsOPn0T5hXTXeXdy04.roa
File: vIYub-4C9vsOPn0T5hXTXeXdy04.roa (raw, json)
Hash identifier: Y9szS/r2klMQE0ioRzG3fP8dXafktILnMDvgcknfGlc=
Subject key identifier: BC:86:2E:6F:EE:02:F6:FB:0E:3E:7D:13:E6:15:D3:5D:E5:DD:CB:4E
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 018CC500BC18D4F2C7FE707F1BD17BBDA0FF
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/vIYub-4C9vsOPn0T5hXTXeXdy04.roa
Signing time: Mon 01 Jan 2024 12:30:08 +0000
ROA not before: Mon 01 Jan 2024 12:30:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12586
IP address blocks: 5.83.151.0/24 maxlen: 32
5.231.233.0/24 maxlen: 32
95.215.32.0/22 maxlen: 32
89.144.0.0/18 maxlen: 32
5.175.255.0/24 maxlen: 32
94.103.160.0/20 maxlen: 32
5.230.11.0/24 maxlen: 32
5.83.128.0/20 maxlen: 32
5.230.6.0/24 maxlen: 32
5.230.0.0/15 maxlen: 32
5.230.102.0/24 maxlen: 32
94.249.128.0/17 maxlen: 32
87.239.128.0/21 maxlen: 32
5.175.128.0/17 maxlen: 32
193.28.251.0/24 maxlen: 32
85.93.0.0/19 maxlen: 32
185.47.140.0/24 maxlen: 32
185.47.141.0/24 maxlen: 32
185.121.71.0/24 maxlen: 32
178.18.144.0/20 maxlen: 32
178.18.151.0/24 maxlen: 32
185.13.156.0/22 maxlen: 32
5.230.224.0/24 maxlen: 32
89.106.64.0/19 maxlen: 32
77.90.0.0/18 maxlen: 32
77.90.11.0/24 maxlen: 24
77.90.10.0/24 maxlen: 24
77.90.8.0/24 maxlen: 24
77.90.14.0/24 maxlen: 24
77.90.15.0/24 maxlen: 24
77.90.13.0/24 maxlen: 24
83.243.80.0/21 maxlen: 32
77.90.12.0/24 maxlen: 24
85.93.20.0/24 maxlen: 32
217.69.160.0/20 maxlen: 32
195.110.14.0/23 maxlen: 32
2a02:7a0::/29 maxlen: 128
2a01:bd40::/29 maxlen: 128
2a00:12d8::/29 maxlen: 128
2a00:cdc0::/32 maxlen: 128
2a00:19d0::/29 maxlen: 128
2a02:2fc0::/29 maxlen: 128
Validation: Failed, certificate revoked on Wed 03 Jan 2024 05:12:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:bc:18:d4:f2:c7:fe:70:7f:1b:d1:7b:bd:a0:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jan 1 12:30:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bc862e6fee02f6fb0e3e7d13e615d35de5ddcb4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e5:25:75:b5:05:ce:5b:9f:60:a8:89:45:07:
5a:77:e6:08:e3:5c:1c:62:8b:09:7f:65:46:5c:26:
e0:a2:cd:7a:8a:6b:95:d8:06:9a:cf:f3:ed:2d:19:
45:03:80:b4:ae:45:f4:aa:b7:f1:ad:40:87:fe:f9:
e0:ac:e0:41:62:52:81:da:d9:8c:fd:57:ef:a1:ae:
49:ed:28:f8:75:bd:87:28:ff:46:99:c2:2d:b7:38:
29:3b:aa:01:2e:f7:93:73:dc:b1:97:5c:de:3c:bb:
a6:6a:52:32:65:3b:ac:b0:9c:bb:8f:c3:aa:0e:65:
92:00:9f:0f:6f:7b:f2:af:8c:c6:42:77:94:ab:bd:
da:3c:72:0f:e2:e0:b5:11:e1:98:4f:5f:7c:4b:07:
9e:4e:ed:a6:25:74:c2:f6:14:37:1f:e4:bb:cc:91:
5b:74:d6:2b:6b:ac:de:7e:81:6a:93:71:25:a8:16:
03:a5:77:ad:e1:bd:b6:20:26:7d:6b:a3:ee:47:4f:
58:89:4e:d1:1b:0b:f7:d8:2d:85:84:62:cd:82:c5:
1e:6d:6b:91:4c:54:b7:16:eb:58:c5:35:a9:26:bd:
a8:36:e6:6f:37:78:9e:31:a3:36:d2:67:00:1a:1e:
45:2f:ac:d1:86:3f:46:cf:33:ee:ef:ac:e5:bd:c5:
bb:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:86:2E:6F:EE:02:F6:FB:0E:3E:7D:13:E6:15:D3:5D:E5:DD:CB:4E
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/vIYub-4C9vsOPn0T5hXTXeXdy04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.128.0/20
5.83.151.0/24
5.175.128.0/17
5.230.0.0/15
77.90.0.0/18
83.243.80.0/21
85.93.0.0/19
87.239.128.0/21
89.106.64.0/19
89.144.0.0/18
94.103.160.0/20
94.249.128.0/17
95.215.32.0/22
178.18.144.0/20
185.13.156.0/22
185.47.140.0/23
185.121.71.0/24
193.28.251.0/24
195.110.14.0/23
217.69.160.0/20
IPv6:
2a00:12d8::/29
2a00:19d0::/29
2a00:cdc0::/32
2a01:bd40::/29
2a02:7a0::/29
2a02:2fc0::/29
Signature Algorithm: sha256WithRSAEncryption
3b:9a:c6:63:0f:cb:64:32:14:7c:07:63:e0:d3:6e:55:ad:69:
7a:0e:41:32:7b:e2:9f:36:bb:f9:bd:91:c9:18:23:46:0b:02:
a7:e1:d7:d7:bf:a6:87:f1:07:28:71:36:56:1a:9c:cb:4b:75:
8b:86:6d:96:69:85:34:a5:44:21:25:8e:86:18:11:75:22:7e:
f0:e6:e9:a2:de:5e:d2:f1:6a:86:45:0a:71:03:e9:61:44:81:
a3:a8:98:b8:ba:bb:60:ee:49:9a:f1:8c:fa:cb:8a:16:34:3b:
e1:48:55:16:59:82:de:92:fd:1a:12:d6:63:d8:95:77:da:9d:
1e:c1:36:08:71:c1:cc:4f:2d:bc:08:5a:e5:9d:32:3f:99:50:
ce:dc:1b:32:73:7b:d2:6a:c2:be:af:8b:1b:2a:b2:03:e2:5b:
67:e8:51:88:43:63:49:65:7f:98:0e:23:ea:f8:6e:12:1d:31:
d2:d6:45:4f:29:cb:d4:de:4d:79:e0:7a:57:f5:db:96:7b:e1:
b0:e7:c7:fe:51:a8:3a:73:09:40:12:f6:bd:2f:9e:45:4c:29:
ca:3d:48:64:e0:7a:ff:40:ed:8e:e9:7c:c1:51:4c:d1:da:5a:
b0:20:c6:66:c5:e2:da:d6:0b:6a:8b:21:a0:aa:df:d1:35:69:
43:3b:6e:be
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAYzFALwY1PLH/nB/G9F7vaD/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjQwMTAxMTIzMDA4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYzg2MmU2ZmVlMDJmNmZiMGUzZTdkMTNlNjE1ZDM1ZGU1ZGRjYjRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqeUldbUFzlufYKiJRQdad+YI41wc
YosJf2VGXCbgos16imuV2Aaaz/PtLRlFA4C0rkX0qrfxrUCH/vngrOBBYlKB2tmM
/Vfvoa5J7Sj4db2HKP9GmcIttzgpO6oBLveTc9yxl1zePLumalIyZTussJy7j8Oq
DmWSAJ8Pb3vyr4zGQneUq73aPHIP4uC1EeGYT198SweeTu2mJXTC9hQ3H+S7zJFb
dNYra6zefoFqk3ElqBYDpXet4b22ICZ9a6PuR09YiU7RGwv32C2FhGLNgsUebWuR
TFS3FutYxTWpJr2oNuZvN3ieMaM20mcAGh5FL6zRhj9GzzPu76zlvcW7pwIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFLyGLm/uAvb7Dj59E+YV013l3ctOMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvdklZdWItNEM5dnNPUG4wVDVoWFRYZVhkeTA0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHEBggrBgEFBQcBBwEB/wSBtDCBsTB9BAIAATB3AwQEBVOA
AwQABVOXAwQHBa+AAwMBBeYDBAZNWgADBANT81ADBAVVXQADBANX74ADBAVZakAD
BAZZkAADBAReZ6ADBAde+YADBAJf1yADBASyEpADBAK5DZwDBAG5L4wDBAC5eUcD
BADBHPsDBAHDbg4DBATZRaAwMAQCAAIwKgMFAyoAEtgDBQMqABnQAwUAKgDNwAMF
AyoBvUADBQMqAgegAwUDKgIvwDANBgkqhkiG9w0BAQsFAAOCAQEAO5rGYw/LZDIU
fAdj4NNuVa1peg5BMnvinza7+b2RyRgjRgsCp+HX17+mh/EHKHE2Vhqcy0t1i4Zt
lmmFNKVEISWOhhgRdSJ+8Obpot5e0vFqhkUKcQPpYUSBo6iYuLq7YO5JmvGM+suK
FjQ74UhVFlmC3pL9GhLWY9iVd9qdHsE2CHHBzE8tvAha5Z0yP5lQztwbMnN70mrC
vq+LGyqyA+JbZ+hRiENjSWV/mA4j6vhuEh0x0tZFTynL1N5NeeB6V/XblnvhsOfH
/lGoOnMJQBL2vS+eRUwpyj1IZOB6/0Dtjul8wVFM0dpasCDGZsXi2tYLaoshoKrf
0TVpQztuvg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:30 2024 by rpki-client on console-fra.rpki-client.org