Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/1MV8fYmqCkTdX7jd4IZa5UKnDlI.roa
File: 1MV8fYmqCkTdX7jd4IZa5UKnDlI.roa (raw, json)
Hash identifier: KKJldAXwvikRLq7wsmz65pBvYBYfV8+538N4agBt6Vw=
Subject key identifier: D4:C5:7C:7D:89:AA:0A:44:DD:5F:B8:DD:E0:86:5A:E5:42:A7:0E:52
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 018D692B05F185D53362F3A51A2213CE9CD7
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/1MV8fYmqCkTdX7jd4IZa5UKnDlI.roa
Signing time: Fri 02 Feb 2024 09:34:03 +0000
ROA not before: Fri 02 Feb 2024 09:34:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34665
IP address blocks: 5.183.129.0/24 maxlen: 24
45.14.222.0/24 maxlen: 24
91.188.212.0/22 maxlen: 22
194.32.238.0/24 maxlen: 24
194.32.239.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 Feb 2024 18:41:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:69:2b:05:f1:85:d5:33:62:f3:a5:1a:22:13:ce:9c:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Feb 2 09:34:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d4c57c7d89aa0a44dd5fb8dde0865ae542a70e52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:71:ea:38:a3:51:d6:42:b2:4d:07:4a:2f:fa:
d4:b8:1c:64:f9:4b:3e:18:66:4d:94:cb:ec:51:54:
18:e9:92:dc:48:fc:1a:80:e1:4d:5c:65:88:10:c7:
94:ae:94:da:31:7e:f7:f6:da:ac:2e:38:ac:0d:bd:
5e:bc:be:3c:70:98:b2:4d:f5:7a:a6:01:2e:03:ac:
90:dd:b9:3e:37:bf:bc:77:dc:f9:43:15:5b:50:a9:
4d:97:53:01:7a:fb:44:e7:08:4c:2c:60:5c:20:74:
1f:e9:45:44:a3:80:44:fc:07:44:b4:dc:f9:6d:7f:
d0:38:02:ad:88:93:99:65:83:18:4a:e3:64:97:56:
da:7b:6e:09:e0:6b:a4:6e:4f:a2:cc:da:a9:45:e6:
15:73:e0:83:e5:14:14:c2:12:f0:13:92:9b:1e:36:
fb:7e:66:00:ec:e3:24:70:b5:16:ce:7e:50:25:10:
1d:62:ae:66:2b:46:4e:fd:06:31:b9:6b:43:f8:10:
43:af:29:b9:ee:06:98:96:00:a6:08:9e:31:d1:b4:
b2:d1:a6:68:59:a5:aa:bd:fa:9a:45:95:86:3e:d9:
c7:f2:83:05:f6:e8:6a:d1:90:2e:9b:50:73:54:8a:
d1:53:35:47:d6:f8:3b:bf:ac:2f:82:e0:97:da:bd:
22:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:C5:7C:7D:89:AA:0A:44:DD:5F:B8:DD:E0:86:5A:E5:42:A7:0E:52
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/1MV8fYmqCkTdX7jd4IZa5UKnDlI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.129.0/24
45.14.222.0/24
91.188.212.0/22
194.32.238.0/23
Signature Algorithm: sha256WithRSAEncryption
64:b8:ff:50:7c:3a:af:73:71:64:32:56:a1:6f:3e:c4:57:2f:
2d:4c:3a:5c:03:b6:99:14:77:5f:70:96:53:78:5a:13:32:cf:
79:15:91:6d:d1:fa:2c:f1:e0:92:b1:be:42:df:7a:47:8d:2f:
99:a7:51:14:4e:d5:8c:ec:4b:b4:9c:38:07:41:7e:1e:56:af:
41:94:e1:2d:4b:6e:41:32:d5:60:98:4f:60:8e:67:33:6b:41:
31:ca:b8:b6:17:f6:8d:9f:b7:6d:67:88:e9:9a:2e:d6:90:de:
c4:96:ff:be:d3:9f:a1:2f:3c:08:b7:52:86:76:f7:db:cf:c5:
45:9e:54:eb:5c:0a:58:fa:0a:19:02:eb:21:5d:c6:1c:5d:66:
3e:bc:ff:08:d7:1a:b6:29:75:48:ef:73:4b:c9:84:76:4e:0e:
c1:a5:fb:42:77:44:d7:56:ab:7f:c2:e4:69:5a:ab:55:22:4c:
69:42:ea:33:61:0c:4c:71:0e:fd:32:2b:9a:52:b5:28:be:e1:
92:35:90:0b:c4:60:59:bd:fd:e9:69:41:80:05:51:0e:80:27:
8d:7c:be:d1:bb:5a:ee:09:1c:0a:52:07:c2:88:13:55:30:89:
72:07:ec:e1:e5:ea:3f:e3:e7:4f:59:14:a2:db:1d:e2:51:f5:
fa:a3:21:8f
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAY1pKwXxhdUzYvOlGiITzpzXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3NmJiNDhlOTNlOGEwMDU4YzVjNzJhODFhODc5OTQ1NTMw
N2VlNTYwHhcNMjQwMjAyMDkzNDAzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNGM1N2M3ZDg5YWEwYTQ0ZGQ1ZmI4ZGRlMDg2NWFlNTQyYTcwZTUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHHqOKNR1kKyTQdKL/rUuBxk+Us+
GGZNlMvsUVQY6ZLcSPwagOFNXGWIEMeUrpTaMX739tqsLjisDb1evL48cJiyTfV6
pgEuA6yQ3bk+N7+8d9z5QxVbUKlNl1MBevtE5whMLGBcIHQf6UVEo4BE/AdEtNz5
bX/QOAKtiJOZZYMYSuNkl1bae24J4Gukbk+izNqpReYVc+CD5RQUwhLwE5KbHjb7
fmYA7OMkcLUWzn5QJRAdYq5mK0ZO/QYxuWtD+BBDrym57gaYlgCmCJ4x0bSy0aZo
WaWqvfqaRZWGPtnH8oMF9uhq0ZAum1BzVIrRUzVH1vg7v6wvguCX2r0iLQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFNTFfH2JqgpE3V+43eCGWuVCpw5SMB8GA1UdIwQY
MBaAFNdrtI6T6KAFjFxyqBqHmUVTB+5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgt
OGJmYmRkNDVjYjYyLzEvMU1WOGZZbXFDa1RkWDdqZDRJWmE1VUtuRGxJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgtOGJmYmRkNDVjYjYy
LzEvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQABbeBAwQA
LQ7eAwQCW7zUAwQBwiDuMA0GCSqGSIb3DQEBCwUAA4IBAQBkuP9QfDqvc3FkMlah
bz7EVy8tTDpcA7aZFHdfcJZTeFoTMs95FZFt0fos8eCSsb5C33pHjS+Zp1EUTtWM
7Eu0nDgHQX4eVq9BlOEtS25BMtVgmE9gjmcza0Exyri2F/aNn7dtZ4jpmi7WkN7E
lv++05+hLzwIt1KGdvfbz8VFnlTrXApY+goZAushXcYcXWY+vP8I1xq2KXVI73NL
yYR2Tg7BpftCd0TXVqt/wuRpWqtVIkxpQuozYQxMcQ79MiuaUrUovuGSNZALxGBZ
vf3paUGABVEOgCeNfL7Ru1ruCRwKUgfCiBNVMIlyB+zh5eo/4+dPWRSi2x3iUfX6
oyGP
-----END CERTIFICATE-----
Generated at Mon Feb 5 22:57:47 2024 by rpki-client on console-fra.rpki-client.org