Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/5vVDJNSI4Y3WP3AjccOCNmFYRWA.roa
File: 5vVDJNSI4Y3WP3AjccOCNmFYRWA.roa (raw, json)
Hash identifier: gkOXy+ldZ298yNBCe5gsngD0nJYRXgCeLxai63JG0Uw=
Subject key identifier: E6:F5:43:24:D4:88:E1:8D:D6:3F:70:23:71:C3:82:36:61:58:45:60
Certificate issuer: /CN=ba0d738dd28ff2549456ce66e744898372fc503d
Certificate serial: 01856EB8E239568E054E2CEE1F60CCF0ED7A
Authority key identifier: BA:0D:73:8D:D2:8F:F2:54:94:56:CE:66:E7:44:89:83:72:FC:50:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ug1zjdKP8lSUVs5m50SJg3L8UD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/5vVDJNSI4Y3WP3AjccOCNmFYRWA.roa
Signing time: Sun 01 Jan 2023 19:04:48 +0000
ROA not before: Sun 01 Jan 2023 19:04:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31229
IP address blocks: 193.29.205.0/24 maxlen: 24
185.23.21.0/24 maxlen: 24
185.23.20.0/24 maxlen: 24
185.23.20.0/22 maxlen: 22
185.23.23.0/24 maxlen: 24
185.23.22.0/24 maxlen: 24
178.216.200.0/21 maxlen: 21
46.245.192.0/22 maxlen: 22
46.245.192.0/24 maxlen: 24
46.245.193.0/24 maxlen: 24
46.245.195.0/24 maxlen: 24
46.245.196.0/22 maxlen: 22
46.245.194.0/24 maxlen: 24
92.43.112.0/21 maxlen: 21
109.205.48.0/21 maxlen: 21
91.102.112.0/21 maxlen: 21
5.149.160.0/21 maxlen: 21
5.149.165.0/24 maxlen: 24
109.205.55.0/24 maxlen: 24
193.187.64.0/24 maxlen: 24
193.187.68.0/23 maxlen: 23
193.187.66.0/23 maxlen: 23
193.187.71.0/24 maxlen: 24
193.187.70.0/24 maxlen: 24
194.50.186.0/24 maxlen: 24
185.49.150.0/23 maxlen: 23
185.49.148.0/23 maxlen: 23
2a02:951::/32 maxlen: 32
2001:67c:6c8::/48 maxlen: 48
2a02:952::/32 maxlen: 32
2a02:950::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:b8:e2:39:56:8e:05:4e:2c:ee:1f:60:cc:f0:ed:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba0d738dd28ff2549456ce66e744898372fc503d
Validity
Not Before: Jan 1 19:04:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e6f54324d488e18dd63f702371c3823661584560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:98:ed:30:0d:cc:7f:64:72:8e:ac:ff:2e:92:
b6:6c:27:7e:d1:94:43:4a:2e:18:76:6a:3e:d9:73:
96:49:bc:c7:31:dc:e9:ec:f7:b9:e1:7c:b3:f7:1a:
fa:1b:53:7c:21:ba:e0:cf:0f:07:46:81:a7:d8:ca:
43:83:bf:05:ad:97:60:d8:ae:18:f7:21:8e:06:86:
86:f3:48:33:80:83:51:2d:26:dd:e8:c3:24:b4:2a:
26:fe:1b:64:71:25:3e:50:ba:cc:8c:b6:8a:cb:48:
80:fd:eb:a1:b5:10:3d:84:20:7f:c0:fd:5d:3b:60:
57:c5:cd:31:6e:6c:e6:0c:1c:b8:a8:04:c5:f4:55:
54:c7:22:21:97:b0:0d:db:46:93:06:40:96:08:b5:
b8:c0:73:9b:a1:cf:41:13:b5:7b:fb:6d:d6:67:26:
ec:4d:04:d5:05:00:86:d3:9a:c8:e7:e0:2c:e0:64:
4d:55:b6:e7:ab:d5:1a:63:3e:a2:94:d9:e4:5d:e3:
77:f3:43:65:fa:1f:dc:ec:96:3c:b5:d4:ef:d3:8e:
85:80:85:c6:ed:15:04:1d:9b:48:9f:48:61:de:1f:
6c:fd:cb:b7:15:21:3b:44:55:53:b3:c7:39:3b:03:
bb:59:04:d1:83:38:57:e3:1d:00:31:d6:be:ee:d5:
97:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:F5:43:24:D4:88:E1:8D:D6:3F:70:23:71:C3:82:36:61:58:45:60
X509v3 Authority Key Identifier:
keyid:BA:0D:73:8D:D2:8F:F2:54:94:56:CE:66:E7:44:89:83:72:FC:50:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ug1zjdKP8lSUVs5m50SJg3L8UD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/5vVDJNSI4Y3WP3AjccOCNmFYRWA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.149.160.0/21
46.245.192.0/21
91.102.112.0/21
92.43.112.0/21
109.205.48.0/21
178.216.200.0/21
185.23.20.0/22
185.49.148.0/22
193.29.205.0/24
193.187.64.0/24
193.187.66.0-193.187.71.255
194.50.186.0/24
IPv6:
2001:67c:6c8::/48
2a02:950::-2a02:952:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
5e:26:ce:dc:dd:81:e0:a6:f4:86:38:88:81:5b:26:a3:a7:80:
ad:c6:95:97:d3:9d:cc:5e:4e:a9:3b:09:90:b3:65:90:3a:cb:
54:f8:d8:3b:af:45:e1:56:e5:9c:8e:cf:0f:21:60:3a:cb:79:
38:09:6d:ae:72:66:bd:c3:5a:1c:4f:d7:48:fa:80:7c:d3:a1:
ca:3d:17:da:69:e0:e4:1a:e6:8d:16:1b:a7:0d:60:f6:16:f3:
51:fc:60:02:44:30:71:da:96:f3:fa:18:41:41:b6:26:0a:85:
c1:d1:8b:ae:49:58:f3:99:d1:c1:da:14:8a:2a:ef:02:02:8d:
49:8b:3f:84:b5:86:c9:08:5a:95:e0:bd:53:81:bd:f2:dc:d5:
7b:44:78:1b:60:15:e6:e5:4d:8a:40:30:f7:57:7f:62:b1:d6:
4d:1a:b2:f3:00:f3:7a:4f:6a:d5:32:0d:e3:06:3a:7f:dd:05:
74:b8:af:41:16:58:4c:24:35:a4:0b:cc:ab:cd:64:08:57:09:
2f:d5:82:a5:53:1a:03:44:ce:2e:59:14:be:6f:7c:8c:49:f9:
01:a8:cf:81:9b:41:a7:2a:e6:74:74:a6:6a:f9:23:e4:ed:c4:
56:d5:39:c0:fb:07:b0:be:c6:51:c4:a4:3f:cf:4e:3a:67:61:
49:d2:d7:7a
-----BEGIN CERTIFICATE-----
MIIFaTCCBFGgAwIBAgISAYVuuOI5Vo4FTizuH2DM8O16MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhMGQ3MzhkZDI4ZmYyNTQ5NDU2Y2U2NmU3NDQ4OTgzNzJm
YzUwM2QwHhcNMjMwMTAxMTkwNDQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNmY1NDMyNGQ0ODhlMThkZDYzZjcwMjM3MWMzODIzNjYxNTg0NTYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZjtMA3Mf2Ryjqz/LpK2bCd+0ZRD
Si4Ydmo+2XOWSbzHMdzp7Pe54Xyz9xr6G1N8Ibrgzw8HRoGn2MpDg78FrZdg2K4Y
9yGOBoaG80gzgINRLSbd6MMktCom/htkcSU+ULrMjLaKy0iA/euhtRA9hCB/wP1d
O2BXxc0xbmzmDBy4qATF9FVUxyIhl7AN20aTBkCWCLW4wHOboc9BE7V7+23WZybs
TQTVBQCG05rI5+As4GRNVbbnq9UaYz6ilNnkXeN380Nl+h/c7JY8tdTv046FgIXG
7RUEHZtIn0hh3h9s/cu3FSE7RFVTs8c5OwO7WQTRgzhX4x0AMda+7tWXiwIDAQAB
o4ICdTCCAnEwHQYDVR0OBBYEFOb1QyTUiOGN1j9wI3HDgjZhWEVgMB8GA1UdIwQY
MBaAFLoNc43Sj/JUlFbOZudEiYNy/FA9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWcxempkS1A4bFNVVnM1bTUwU0pnM0w4VUQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC8xY2Q3NmMtMDIwMS00NzAzLThlZDYt
YmViNmRhMDM3NTVlLzEvNXZWREpOU0k0WTNXUDNBamNjT0NObUZZUldBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC8xY2Q3NmMtMDIwMS00NzAzLThlZDYtYmViNmRhMDM3NTVl
LzEvdWcxempkS1A4bFNVVnM1bTUwU0pnM0w4VUQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGKBggrBgEFBQcBBwEB/wR7MHkwVgQCAAEwUAMEAwWVoAME
Ay71wAMEA1tmcAMEA1wrcAMEA23NMAMEA7LYyAMEArkXFAMEArkxlAMEAMEdzQME
AMG7QDAMAwQBwbtCAwQDwbtAAwQAwjK6MB8EAgACMBkDBwAgAQZ8BsgwDgMFBCoC
CVADBQAqAglSMA0GCSqGSIb3DQEBCwUAA4IBAQBeJs7c3YHgpvSGOIiBWyajp4Ct
xpWX053MXk6pOwmQs2WQOstU+Ng7r0XhVuWcjs8PIWA6y3k4CW2ucma9w1ocT9dI
+oB806HKPRfaaeDkGuaNFhunDWD2FvNR/GACRDBx2pbz+hhBQbYmCoXB0YuuSVjz
mdHB2hSKKu8CAo1Jiz+EtYbJCFqV4L1Tgb3y3NV7RHgbYBXm5U2KQDD3V39isdZN
GrLzAPN6T2rVMg3jBjp/3QV0uK9BFlhMJDWkC8yrzWQIVwkv1YKlUxoDRM4uWRS+
b3yMSfkBqM+Bm0GnKuZ0dKZq+SPk7cRW1TnA+wewvsZRxKQ/z046Z2FJ0td6
-----END CERTIFICATE-----
Generated at Mon Jan 1 19:26:41 2024 by rpki-client on console-fra.rpki-client.org