Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/UXwdmk6N4nQD2H_oa3SgxRxg8i0.roa
File: UXwdmk6N4nQD2H_oa3SgxRxg8i0.roa (raw, json)
Hash identifier: M2zKH+ogMJHIx6gn2xmoKWE1wAjByMhEwZbPzwPPhXI=
Subject key identifier: 51:7C:1D:9A:4E:8D:E2:74:03:D8:7F:E8:6B:74:A0:C5:1C:60:F2:2D
Certificate issuer: /CN=5ccdeca171e422c79c938c2732a90d48a8c53c06
Certificate serial: 0191407FD3BEE7844D7247FB7506BE6E6748
Authority key identifier: 5C:CD:EC:A1:71:E4:22:C7:9C:93:8C:27:32:A9:0D:48:A8:C5:3C:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XM3soXHkIseck4wnMqkNSKjFPAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/UXwdmk6N4nQD2H_oa3SgxRxg8i0.roa
Signing time: Sun 11 Aug 2024 08:13:24 +0000
ROA not before: Sun 11 Aug 2024 08:13:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34397
IP address blocks: 79.172.128.0/18 maxlen: 18
85.129.128.0/17 maxlen: 17
85.129.164.0/22 maxlen: 22
88.213.0.0/18 maxlen: 18
88.213.6.0/24 maxlen: 24
88.213.64.0/18 maxlen: 18
88.213.64.0/21 maxlen: 21
88.213.64.0/22 maxlen: 22
88.213.72.0/21 maxlen: 21
88.213.78.0/24 maxlen: 24
88.213.126.0/23 maxlen: 23
89.4.0.0/15 maxlen: 15
89.5.220.0/23 maxlen: 23
89.5.220.0/24 maxlen: 24
93.98.0.0/16 maxlen: 16
93.98.127.0/24 maxlen: 24
212.71.32.0/19 maxlen: 19
212.71.32.0/24 maxlen: 24
212.71.33.0/24 maxlen: 24
212.71.35.0/24 maxlen: 24
212.71.37.0/24 maxlen: 24
212.71.41.0/24 maxlen: 24
212.71.42.0/24 maxlen: 24
212.71.51.0/24 maxlen: 24
212.71.53.0/24 maxlen: 24
212.107.96.0/19 maxlen: 19
212.107.97.0/24 maxlen: 24
212.107.99.0/24 maxlen: 24
212.107.103.0/24 maxlen: 24
212.107.105.0/24 maxlen: 24
212.107.106.0/24 maxlen: 24
212.118.96.0/19 maxlen: 19
212.118.100.0/24 maxlen: 24
212.118.102.0/24 maxlen: 24
212.118.106.0/24 maxlen: 24
212.118.107.0/24 maxlen: 24
212.118.108.0/22 maxlen: 22
212.118.115.0/24 maxlen: 24
212.118.117.0/24 maxlen: 24
212.118.119.0/24 maxlen: 24
212.118.122.0/24 maxlen: 24
212.118.124.0/24 maxlen: 24
212.119.64.0/20 maxlen: 20
212.119.64.0/24 maxlen: 24
212.119.69.0/24 maxlen: 24
212.119.74.0/24 maxlen: 24
212.119.80.0/21 maxlen: 21
212.119.81.0/24 maxlen: 24
212.119.82.0/24 maxlen: 24
212.119.88.0/22 maxlen: 22
212.119.92.0/23 maxlen: 23
212.119.92.0/24 maxlen: 24
212.119.93.0/24 maxlen: 24
213.181.160.0/19 maxlen: 19
213.181.190.0/24 maxlen: 24
213.210.192.0/18 maxlen: 18
213.210.195.0/24 maxlen: 24
213.210.196.0/24 maxlen: 24
213.210.216.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 09 Sep 2024 08:48:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:40:7f:d3:be:e7:84:4d:72:47:fb:75:06:be:6e:67:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ccdeca171e422c79c938c2732a90d48a8c53c06
Validity
Not Before: Aug 11 08:13:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=517c1d9a4e8de27403d87fe86b74a0c51c60f22d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f8:97:73:a3:2a:5e:17:c9:60:e7:97:19:a7:
2b:7e:74:aa:47:e8:24:52:c8:99:31:06:9a:c8:2d:
7b:f8:58:1f:0c:48:18:95:cc:8c:83:55:8b:9d:45:
52:72:6d:c4:fc:d9:df:99:ab:6e:50:ca:c9:cd:79:
37:67:0c:22:1e:f5:2f:87:1c:ae:46:d9:59:a9:05:
aa:71:f7:b8:6f:a8:fb:c9:6d:d6:90:34:17:bd:4f:
f6:33:4c:aa:25:28:8c:c2:c5:13:9d:37:54:88:ed:
72:45:e8:e3:d7:2c:4f:08:c1:00:87:20:4c:89:b3:
cd:d6:b3:d4:02:c7:82:7f:28:ce:34:fc:fa:52:0f:
cb:66:78:f8:f4:4a:59:ba:5e:59:58:fd:ab:68:d2:
3a:0d:30:9e:3b:2a:33:03:4c:ff:b4:59:b0:8b:53:
93:c5:5b:5a:a0:34:3b:d5:e9:16:8d:70:ce:24:eb:
e1:1a:7e:85:f4:e8:76:ae:a0:af:70:2e:fd:60:b4:
7d:59:ad:c3:9f:2e:0d:90:c4:23:e7:42:55:10:23:
f5:fe:e9:e9:12:96:6e:e2:99:c1:1b:f1:da:e7:22:
72:bb:c9:93:fc:ca:70:c7:9f:7f:06:9e:1d:09:55:
6e:c4:a8:58:03:e1:90:0d:ce:0e:1f:ee:99:75:ea:
7c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:7C:1D:9A:4E:8D:E2:74:03:D8:7F:E8:6B:74:A0:C5:1C:60:F2:2D
X509v3 Authority Key Identifier:
keyid:5C:CD:EC:A1:71:E4:22:C7:9C:93:8C:27:32:A9:0D:48:A8:C5:3C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XM3soXHkIseck4wnMqkNSKjFPAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/UXwdmk6N4nQD2H_oa3SgxRxg8i0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/XM3soXHkIseck4wnMqkNSKjFPAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.128.0/18
85.129.128.0/17
88.213.0.0/17
89.4.0.0/15
93.98.0.0/16
212.71.32.0/19
212.107.96.0/19
212.118.96.0/19
212.119.64.0-212.119.93.255
213.181.160.0/19
213.210.192.0/18
Signature Algorithm: sha256WithRSAEncryption
67:1d:8e:07:20:92:1c:60:79:89:da:13:5d:bd:c7:8f:a0:ac:
99:fd:a9:e1:9b:c6:f2:ee:b0:fb:a5:1f:40:54:3c:d5:4e:16:
b6:c3:b9:49:d2:15:79:d5:7a:aa:f1:b0:99:bb:03:78:69:da:
a4:53:78:1c:09:21:94:b6:f2:bd:46:e2:7f:ec:db:45:2d:55:
71:96:22:b4:20:ee:6c:47:73:da:45:7b:b6:d4:df:c0:62:b0:
eb:f3:78:41:c6:04:4e:0f:f0:a7:2c:71:0e:cc:d6:a4:b6:34:
44:a6:47:b8:eb:50:5a:e3:8d:90:cb:84:8b:a3:22:31:8b:4a:
a5:24:24:22:ca:cd:8f:cf:f9:64:f9:c2:ec:17:3e:e6:81:09:
42:83:08:98:06:5c:94:16:1e:d9:8e:4a:eb:97:73:53:1a:fc:
34:1c:7d:6e:20:f4:dd:09:53:c0:d3:38:52:25:94:aa:cb:8e:
9f:70:d2:f9:5c:41:38:27:f3:8e:5b:7a:59:c0:a4:61:ad:48:
5a:db:c7:65:22:7f:b4:f4:ce:60:fd:71:b4:64:c2:ac:e3:e9:
f2:51:a6:1c:d3:91:74:35:fb:ec:82:a8:5d:8c:01:9c:73:14:
40:c0:40:10:85:51:32:68:92:95:73:39:08:0a:54:b3:e0:48:
c8:b3:cf:90
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgISAZFAf9O+54RNckf7dQa+bmdIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjY2RlY2ExNzFlNDIyYzc5YzkzOGMyNzMyYTkwZDQ4YThj
NTNjMDYwHhcNMjQwODExMDgxMzI0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MTdjMWQ5YTRlOGRlMjc0MDNkODdmZTg2Yjc0YTBjNTFjNjBmMjJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfiXc6MqXhfJYOeXGacrfnSqR+gk
UsiZMQaayC17+FgfDEgYlcyMg1WLnUVScm3E/NnfmatuUMrJzXk3ZwwiHvUvhxyu
RtlZqQWqcfe4b6j7yW3WkDQXvU/2M0yqJSiMwsUTnTdUiO1yRejj1yxPCMEAhyBM
ibPN1rPUAseCfyjONPz6Ug/LZnj49EpZul5ZWP2raNI6DTCeOyozA0z/tFmwi1OT
xVtaoDQ71ekWjXDOJOvhGn6F9Oh2rqCvcC79YLR9Wa3Dny4NkMQj50JVECP1/unp
EpZu4pnBG/Ha5yJyu8mT/Mpwx59/Bp4dCVVuxKhYA+GQDc4OH+6Zdep8lwIDAQAB
o4ICSzCCAkcwHQYDVR0OBBYEFFF8HZpOjeJ0A9h/6Gt0oMUcYPItMB8GA1UdIwQY
MBaAFFzN7KFx5CLHnJOMJzKpDUioxTwGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWE0zc29YSGtJc2VjazR3bk1xa05TS2pGUEFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9iOGY1ZTYtYzk1MS00ZGRiLWI0ZjUt
YTg4MWVjODIyOGI1LzEvVVh3ZG1rNk40blFEMkhfb2EzU2d4UnhnOGkwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi9iOGY1ZTYtYzk1MS00ZGRiLWI0ZjUtYTg4MWVjODIyOGI1
LzEvWE0zc29YSGtJc2VjazR3bk1xa05TS2pGUEFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGEGCCsGAQUFBwEHAQH/BFIwUDBOBAIAATBIAwQGT6yAAwQH
VYGAAwQHWNUAAwMBWQQDAwBdYgMEBdRHIAMEBdRrYAMEBdR2YDAMAwQG1HdAAwQB
1HdcAwQF1bWgAwQG1dLAMA0GCSqGSIb3DQEBCwUAA4IBAQBnHY4HIJIcYHmJ2hNd
vcePoKyZ/anhm8by7rD7pR9AVDzVTha2w7lJ0hV51Xqq8bCZuwN4adqkU3gcCSGU
tvK9RuJ/7NtFLVVxliK0IO5sR3PaRXu21N/AYrDr83hBxgROD/CnLHEOzNaktjRE
pke461Ba442Qy4SLoyIxi0qlJCQiys2Pz/lk+cLsFz7mgQlCgwiYBlyUFh7Zjkrr
l3NTGvw0HH1uIPTdCVPA0zhSJZSqy46fcNL5XEE4J/OOW3pZwKRhrUha28dlIn+0
9M5g/XG0ZMKs4+nyUaYc05F0NfvsgqhdjAGccxRAwEAQhVEyaJKVczkIClSz4EjI
s8+Q
-----END CERTIFICATE-----
Generated at Mon Sep 9 10:15:52 2024 by rpki-client on console-ams.rpki-client.org