Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/MQ74fGoMWn9PCMysFMJl-48bgno.roa
File: MQ74fGoMWn9PCMysFMJl-48bgno.roa (raw, json)
Hash identifier: cHEUXX4aASTE1N+L/z5ALin56DJrh/5uo+P5egyRFZI=
Subject key identifier: 31:0E:F8:7C:6A:0C:5A:7F:4F:08:CC:AC:14:C2:65:FB:8F:1B:82:7A
Certificate issuer: /CN=76670236cd0e038684a33194bde7d4b95adc66f7
Certificate serial: 018CC5006014C84C171859EF63A4A843A013
Authority key identifier: 76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/MQ74fGoMWn9PCMysFMJl-48bgno.roa
Signing time: Mon 01 Jan 2024 12:29:45 +0000
ROA not before: Mon 01 Jan 2024 12:29:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207713
IP address blocks: 2a05:541:135::/48 maxlen: 48
2a05:541:125::/48 maxlen: 48
2a05:541:140::/48 maxlen: 48
2a05:541:121::/48 maxlen: 48
2a05:541:141::/48 maxlen: 48
2a05:541:131::/48 maxlen: 48
2a05:541:126::/48 maxlen: 48
2a05:541:136::/48 maxlen: 48
2a05:541:137::/48 maxlen: 48
2a05:541:127::/48 maxlen: 48
2a05:541:132::/48 maxlen: 48
2a05:541:122::/48 maxlen: 48
2a05:541:123::/48 maxlen: 48
2a05:541:133::/48 maxlen: 48
2a05:541:138::/48 maxlen: 48
2a05:541:139::/48 maxlen: 48
2a05:541:119::/48 maxlen: 48
2a05:541:109::/48 maxlen: 48
2a05:541:129::/48 maxlen: 48
2a05:541:134::/48 maxlen: 48
2a05:541:114::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 15 Jan 2024 11:30:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:60:14:c8:4c:17:18:59:ef:63:a4:a8:43:a0:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76670236cd0e038684a33194bde7d4b95adc66f7
Validity
Not Before: Jan 1 12:29:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=310ef87c6a0c5a7f4f08ccac14c265fb8f1b827a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:59:3f:5b:8e:30:61:77:61:7a:36:1c:82:f7:
00:c4:83:79:5e:2e:d3:4b:f5:3a:56:06:85:b0:23:
a6:c7:b6:b2:0c:c0:38:48:74:87:bc:af:43:cf:07:
f0:34:5e:32:3a:7f:ab:29:51:8d:f5:a7:34:7d:05:
7b:59:75:54:17:4b:04:b6:6d:41:6a:09:6d:74:8c:
27:03:3a:6d:f4:76:59:fd:a5:79:2e:c0:2a:36:1f:
3a:65:71:99:8f:bb:8d:ec:38:94:81:8d:5b:64:50:
b9:bc:50:e7:19:dd:a5:83:12:af:4d:d8:cc:bd:de:
d7:18:01:2d:e2:e0:05:29:62:54:62:06:ee:a1:70:
89:25:57:5d:c2:1c:93:83:40:49:a3:1c:0f:ad:d6:
ba:59:37:af:07:d4:17:a0:59:0a:7e:3b:f9:db:59:
7d:fd:59:c7:ac:40:b3:2f:ad:19:e7:ea:50:d9:23:
78:59:1f:60:8e:eb:32:64:75:a5:6d:9b:21:f0:83:
33:6c:ba:0b:8c:21:1c:32:de:85:6f:f7:41:d8:7e:
7a:a5:86:f0:dd:c1:1d:11:66:3d:03:51:9b:57:c5:
b4:f3:2c:73:58:7e:4b:43:12:18:9c:c5:a5:7d:89:
d7:11:4a:1d:86:76:57:fb:cf:b1:a7:c9:b7:ee:e7:
ae:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:0E:F8:7C:6A:0C:5A:7F:4F:08:CC:AC:14:C2:65:FB:8F:1B:82:7A
X509v3 Authority Key Identifier:
keyid:76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/MQ74fGoMWn9PCMysFMJl-48bgno.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:541:109::/48
2a05:541:114::/48
2a05:541:119::/48
2a05:541:121::-2a05:541:123:ffff:ffff:ffff:ffff:ffff
2a05:541:125::-2a05:541:127:ffff:ffff:ffff:ffff:ffff
2a05:541:129::/48
2a05:541:131::-2a05:541:139:ffff:ffff:ffff:ffff:ffff
2a05:541:140::/47
Signature Algorithm: sha256WithRSAEncryption
1f:b7:12:4b:a9:a7:40:fa:92:ab:f1:a1:c9:51:d7:ac:96:1b:
cc:5a:07:a5:b0:20:84:a9:db:f0:eb:a1:9a:64:21:7a:bd:e8:
97:69:42:e2:af:2c:72:57:5d:49:90:27:2e:ca:42:f4:2c:fd:
09:26:29:ff:6d:11:05:e4:dd:b3:93:f3:86:26:5f:1c:f9:3c:
6b:b9:95:9e:2e:5c:8e:34:40:63:47:f6:6a:ec:93:61:77:4f:
bd:f8:03:74:06:7d:f8:5a:42:38:1d:12:80:a5:87:8d:fe:3d:
fb:c5:26:2e:ea:0b:ab:52:e2:02:62:ea:b1:77:ef:27:1d:91:
06:46:77:63:da:03:77:58:1e:35:2a:9f:b7:9e:fc:84:0c:a9:
0b:65:b4:49:7e:9f:3c:d1:4b:25:d4:21:0b:b2:7c:1e:e9:bb:
6f:87:8d:0f:98:1d:f0:00:07:94:98:6b:60:cd:bc:c2:cf:5d:
17:d2:ff:01:c9:c4:08:8a:cf:b0:12:07:45:83:db:e7:ff:38:
d5:fd:bd:ec:82:dd:75:21:51:7c:f0:6f:b6:31:49:6f:70:bc:
66:d2:58:d4:97:81:6e:06:07:6f:27:ce:f6:20:85:de:dd:29:
40:2f:5c:e6:8c:30:f8:d3:58:4c:9a:7f:88:91:6e:be:41:3c:
d7:8a:a3:1e
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgISAYzFAGAUyEwXGFnvY6SoQ6ATMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2NjcwMjM2Y2QwZTAzODY4NGEzMzE5NGJkZTdkNGI5NWFk
YzY2ZjcwHhcNMjQwMTAxMTIyOTQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMTBlZjg3YzZhMGM1YTdmNGYwOGNjYWMxNGMyNjVmYjhmMWI4MjdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVk/W44wYXdhejYcgvcAxIN5Xi7T
S/U6VgaFsCOmx7ayDMA4SHSHvK9DzwfwNF4yOn+rKVGN9ac0fQV7WXVUF0sEtm1B
agltdIwnAzpt9HZZ/aV5LsAqNh86ZXGZj7uN7DiUgY1bZFC5vFDnGd2lgxKvTdjM
vd7XGAEt4uAFKWJUYgbuoXCJJVddwhyTg0BJoxwPrda6WTevB9QXoFkKfjv521l9
/VnHrECzL60Z5+pQ2SN4WR9gjusyZHWlbZsh8IMzbLoLjCEcMt6Fb/dB2H56pYbw
3cEdEWY9A1GbV8W08yxzWH5LQxIYnMWlfYnXEUodhnZX+8+xp8m37ueuIQIDAQAB
o4ICbTCCAmkwHQYDVR0OBBYEFDEO+HxqDFp/TwjMrBTCZfuPG4J6MB8GA1UdIwQY
MBaAFHZnAjbNDgOGhKMxlL3n1Lla3Gb3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8xODA5ZGEtMWM2Zi00NGRiLWFhMjgt
YmE0ZmMyMzQ2ODNlLzEvTVE3NGZHb01XbjlQQ015c0ZNSmwtNDhiZ25vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi8xODA5ZGEtMWM2Zi00NGRiLWFhMjgtYmE0ZmMyMzQ2ODNl
LzEvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGCBggrBgEFBQcBBwEB/wRzMHEwbwQCAAIwaQMHACoFBUEB
CQMHACoFBUEBFAMHACoFBUEBGTASAwcAKgUFQQEhAwcCKgUFQQEgMBIDBwAqBQVB
ASUDBwMqBQVBASADBwAqBQVBASkwEgMHACoFBUEBMQMHASoFBUEBOAMHASoFBUEB
QDANBgkqhkiG9w0BAQsFAAOCAQEAH7cSS6mnQPqSq/GhyVHXrJYbzFoHpbAghKnb
8OuhmmQher3ol2lC4q8sclddSZAnLspC9Cz9CSYp/20RBeTds5PzhiZfHPk8a7mV
ni5cjjRAY0f2auyTYXdPvfgDdAZ9+FpCOB0SgKWHjf49+8UmLuoLq1LiAmLqsXfv
Jx2RBkZ3Y9oDd1geNSqft578hAypC2W0SX6fPNFLJdQhC7J8Hum7b4eND5gd8AAH
lJhrYM28ws9dF9L/AcnECIrPsBIHRYPb5/841f297ILddSFRfPBvtjFJb3C8ZtJY
1JeBbgYHbyfO9iCF3t0pQC9c5oww+NNYTJp/iJFuvkE814qjHg==
-----END CERTIFICATE-----
Generated at Mon Jan 15 14:32:52 2024 by rpki-client on console-ams.rpki-client.org