Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/B5O6PfIyxW8WDg56m4ClpWS8h6g.roa
File: B5O6PfIyxW8WDg56m4ClpWS8h6g.roa (raw, json)
Hash identifier: 9k+A7tsAS346Zq+sCm+0GnaMrQvL9tWtETzdgXiQAyY=
Subject key identifier: 07:93:BA:3D:F2:32:C5:6F:16:0E:0E:7A:9B:80:A5:A5:64:BC:87:A8
Certificate issuer: /CN=a8aba63e806a21d46035ca6e9d345b03dbc8e553
Certificate serial: 018BB3845ADB44BC2C9385413975E1EACAC2
Authority key identifier: A8:AB:A6:3E:80:6A:21:D4:60:35:CA:6E:9D:34:5B:03:DB:C8:E5:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qKumPoBqIdRgNcpunTRbA9vI5VM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/B5O6PfIyxW8WDg56m4ClpWS8h6g.roa
Signing time: Thu 09 Nov 2023 09:57:57 +0000
ROA not before: Thu 09 Nov 2023 09:57:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9008
IP address blocks: 85.93.192.0/19 maxlen: 24
80.90.32.0/19 maxlen: 24
109.69.240.0/21 maxlen: 24
195.200.240.0/23 maxlen: 24
185.211.232.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 09 Nov 2023 10:32:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b3:84:5a:db:44:bc:2c:93:85:41:39:75:e1:ea:ca:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8aba63e806a21d46035ca6e9d345b03dbc8e553
Validity
Not Before: Nov 9 09:57:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0793ba3df232c56f160e0e7a9b80a5a564bc87a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:42:28:ad:49:c0:db:62:1d:74:cd:55:9a:82:
0e:42:05:8c:c0:e5:c3:f1:13:6d:69:32:19:c0:a8:
ef:7a:46:fa:d1:cc:de:b6:fe:ad:00:af:36:1c:1e:
9b:c7:d4:38:dc:6f:e8:c3:7d:88:37:4d:c9:ba:7d:
84:77:69:50:3e:66:4a:25:14:81:df:d5:a5:99:76:
0e:46:d0:30:a5:8b:59:4d:e7:65:48:b6:78:5f:1e:
a6:ed:9e:2f:2e:56:7c:d2:0c:81:0a:5a:bf:5d:7d:
c4:c8:a1:b3:dd:e6:ab:f7:f4:31:41:83:25:75:c0:
44:58:8e:9f:ad:7e:e6:3b:5c:93:d5:91:b2:89:b0:
24:13:97:f2:62:22:e6:1b:7d:98:74:45:3d:9b:a1:
b0:1d:a6:e7:da:eb:52:59:b7:4e:22:03:8b:89:6c:
9f:69:57:8b:b1:8d:41:1e:35:6d:31:c6:a5:7e:db:
87:d7:1b:4c:52:c8:29:da:70:06:0a:38:7f:22:6b:
c2:3c:cf:19:56:4c:32:c4:bc:4e:18:22:3b:a4:15:
96:4b:d2:a6:af:ff:8d:e8:f5:88:ed:71:fe:a9:b9:
ee:06:cb:da:f2:48:5e:f5:ef:1c:73:f1:97:94:5a:
d5:26:59:6a:c6:60:14:39:c1:bb:75:69:2d:e8:dd:
cc:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:93:BA:3D:F2:32:C5:6F:16:0E:0E:7A:9B:80:A5:A5:64:BC:87:A8
X509v3 Authority Key Identifier:
keyid:A8:AB:A6:3E:80:6A:21:D4:60:35:CA:6E:9D:34:5B:03:DB:C8:E5:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qKumPoBqIdRgNcpunTRbA9vI5VM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/B5O6PfIyxW8WDg56m4ClpWS8h6g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.90.32.0/19
85.93.192.0/19
109.69.240.0/21
185.211.232.0/22
195.200.240.0/23
Signature Algorithm: sha256WithRSAEncryption
9d:cf:3c:7f:f7:46:c4:00:73:e6:fd:e6:b9:bb:d8:7d:d5:c4:
5d:7a:d5:3f:b9:d5:4d:35:43:84:76:31:d9:63:e7:1d:8a:a1:
59:59:a2:9e:6c:c6:46:66:f3:27:4c:43:4a:e6:f6:be:48:d3:
42:6b:e5:fb:26:e5:87:7c:4e:24:15:8b:cd:78:6a:c1:14:5c:
32:4a:c1:e0:f1:f2:b7:6f:b4:ad:fb:b0:3d:c1:71:46:cf:32:
c7:a4:35:61:ab:4a:52:6e:6e:52:7d:6f:4d:e1:a3:1d:bb:83:
ca:ed:9d:3d:b0:d0:f7:93:e9:68:e5:bc:f5:0c:b8:30:83:8d:
15:cb:d2:a5:73:ee:7c:e3:9f:7c:b7:e3:90:4a:9c:00:db:3e:
b9:b4:35:28:26:1a:f2:f7:7d:7c:16:b6:de:7d:b8:d7:b1:e3:
5f:f6:f7:86:f7:ab:e4:a9:4b:3d:88:f7:9b:65:26:0f:b6:83:
75:71:89:39:8a:5a:37:e4:36:0e:ab:86:6e:4d:b4:94:56:d7:
be:18:d9:2b:77:ea:9f:d9:b3:75:23:37:cd:4b:25:45:18:ce:
64:f4:7f:3c:48:77:93:81:73:35:16:7d:af:28:b8:32:d3:99:
5d:a9:75:42:a2:7f:d1:77:18:50:e7:55:d2:39:ae:b0:87:16:
47:8c:d9:b2
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYuzhFrbRLwsk4VBOXXh6srCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4YWJhNjNlODA2YTIxZDQ2MDM1Y2E2ZTlkMzQ1YjAzZGJj
OGU1NTMwHhcNMjMxMTA5MDk1NzU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNzkzYmEzZGYyMzJjNTZmMTYwZTBlN2E5YjgwYTVhNTY0YmM4N2E4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlUIorUnA22IddM1VmoIOQgWMwOXD
8RNtaTIZwKjvekb60czetv6tAK82HB6bx9Q43G/ow32IN03Jun2Ed2lQPmZKJRSB
39WlmXYORtAwpYtZTedlSLZ4Xx6m7Z4vLlZ80gyBClq/XX3EyKGz3ear9/QxQYMl
dcBEWI6frX7mO1yT1ZGyibAkE5fyYiLmG32YdEU9m6GwHabn2utSWbdOIgOLiWyf
aVeLsY1BHjVtMcalftuH1xtMUsgp2nAGCjh/ImvCPM8ZVkwyxLxOGCI7pBWWS9Km
r/+N6PWI7XH+qbnuBsva8khe9e8cc/GXlFrVJllqxmAUOcG7dWkt6N3MaQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFAeTuj3yMsVvFg4OepuApaVkvIeoMB8GA1UdIwQY
MBaAFKirpj6AaiHUYDXKbp00WwPbyOVTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUt1bVBvQnFJZFJnTmNwdW5UUmJBOXZJNVZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi82MTg2ZGEtNTFkNC00NjE4LTk1Zjkt
ZjRhMzllMThjZmI0LzEvQjVPNlBmSXl4VzhXRGc1Nm00Q2xwV1M4aDZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi82MTg2ZGEtNTFkNC00NjE4LTk1ZjktZjRhMzllMThjZmI0
LzEvcUt1bVBvQnFJZFJnTmNwdW5UUmJBOXZJNVZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQFUFogAwQF
VV3AAwQDbUXwAwQCudPoAwQBw8jwMA0GCSqGSIb3DQEBCwUAA4IBAQCdzzx/90bE
AHPm/ea5u9h91cRdetU/udVNNUOEdjHZY+cdiqFZWaKebMZGZvMnTENK5va+SNNC
a+X7JuWHfE4kFYvNeGrBFFwySsHg8fK3b7St+7A9wXFGzzLHpDVhq0pSbm5SfW9N
4aMdu4PK7Z09sND3k+lo5bz1DLgwg40Vy9Klc+584598t+OQSpwA2z65tDUoJhry
9318FrbefbjXseNf9veG96vkqUs9iPebZSYPtoN1cYk5ilo35DYOq4ZuTbSUVte+
GNkrd+qf2bN1IzfNSyVFGM5k9H88SHeTgXM1Fn2vKLgy05ldqXVCon/RdxhQ51XS
Oa6whxZHjNmy
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:14 2024 by rpki-client on console-ams.rpki-client.org