Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/ad4e57-d901-4485-98d2-9196ce446527/1/Bag_PWX3fERx_IME5pvlAI1WoiI.roa
File: Bag_PWX3fERx_IME5pvlAI1WoiI.roa (raw, json)
Hash identifier: HbY0/f4wfdJvGnNvjq8z4uUfyZI+OpF9k0rTPO+HSAs=
Subject key identifier: 05:A8:3F:3D:65:F7:7C:44:71:FC:83:04:E6:9B:E5:00:8D:56:A2:22
Certificate issuer: /CN=ef3e71b96992da3d91c88dd74ef41f9b95b9485b
Certificate serial: 018DCCB67F34E8F91D7EF86BA9D8C7771302
Authority key identifier: EF:3E:71:B9:69:92:DA:3D:91:C8:8D:D7:4E:F4:1F:9B:95:B9:48:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7z5xuWmS2j2RyI3XTvQfm5W5SFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/ad4e57-d901-4485-98d2-9196ce446527/1/Bag_PWX3fERx_IME5pvlAI1WoiI.roa
Signing time: Wed 21 Feb 2024 17:28:48 +0000
ROA not before: Wed 21 Feb 2024 17:28:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12541
IP address blocks: 84.18.0.0/19 maxlen: 19
92.60.160.0/20 maxlen: 20
92.60.170.0/24 maxlen: 24
92.60.173.0/24 maxlen: 24
92.60.174.0/24 maxlen: 24
185.66.60.0/22 maxlen: 22
185.66.60.0/24 maxlen: 24
185.66.61.0/24 maxlen: 24
185.66.62.0/24 maxlen: 24
212.49.128.0/18 maxlen: 18
212.49.129.0/24 maxlen: 24
212.49.189.0/24 maxlen: 24
212.66.161.0/24 maxlen: 24
212.66.162.0/23 maxlen: 23
212.66.163.0/24 maxlen: 24
212.66.164.0/22 maxlen: 22
212.66.168.0/21 maxlen: 21
212.66.176.0/20 maxlen: 20
212.163.0.0/16 maxlen: 16
212.163.1.0/24 maxlen: 24
212.163.5.0/24 maxlen: 24
212.163.31.0/24 maxlen: 24
212.163.48.0/24 maxlen: 24
212.163.91.0/24 maxlen: 24
212.163.92.0/24 maxlen: 24
212.163.94.0/24 maxlen: 24
212.163.130.0/24 maxlen: 24
212.163.185.0/24 maxlen: 24
212.163.193.0/24 maxlen: 24
212.163.216.0/22 maxlen: 22
212.163.220.0/22 maxlen: 22
212.163.225.0/24 maxlen: 24
212.163.226.0/24 maxlen: 24
212.163.227.0/24 maxlen: 24
212.163.235.0/24 maxlen: 24
212.163.240.0/20 maxlen: 20
213.9.128.0/17 maxlen: 17
213.9.142.0/23 maxlen: 23
213.9.144.0/24 maxlen: 24
213.9.162.0/23 maxlen: 23
213.9.182.0/24 maxlen: 24
213.9.185.0/24 maxlen: 24
213.9.186.0/24 maxlen: 24
213.9.190.0/23 maxlen: 23
213.9.217.0/24 maxlen: 24
213.9.240.0/23 maxlen: 23
213.9.244.0/24 maxlen: 24
213.9.245.0/24 maxlen: 24
213.9.246.0/24 maxlen: 24
213.9.247.0/24 maxlen: 24
213.9.248.0/24 maxlen: 24
213.192.192.0/18 maxlen: 18
213.192.193.0/24 maxlen: 24
213.192.200.0/22 maxlen: 22
213.192.203.0/24 maxlen: 24
213.192.206.0/23 maxlen: 23
213.192.212.0/22 maxlen: 22
213.192.213.0/24 maxlen: 24
213.192.216.0/21 maxlen: 21
213.192.224.0/22 maxlen: 22
213.192.228.0/23 maxlen: 23
213.192.232.0/22 maxlen: 22
213.192.238.0/24 maxlen: 24
213.192.239.0/24 maxlen: 24
213.192.240.0/24 maxlen: 24
213.192.241.0/24 maxlen: 24
213.192.242.0/23 maxlen: 23
213.192.244.0/23 maxlen: 23
213.192.246.0/24 maxlen: 24
213.192.247.0/24 maxlen: 24
213.192.248.0/21 maxlen: 21
213.192.249.0/24 maxlen: 24
213.192.251.0/24 maxlen: 24
213.192.252.0/23 maxlen: 23
213.192.253.0/24 maxlen: 24
213.192.254.0/24 maxlen: 24
213.192.255.0/24 maxlen: 24
2001:ac0::/29 maxlen: 29
2001:ac0::/32 maxlen: 32
2001:ac0:30fd::/48 maxlen: 48
2001:ac0:c040::/44 maxlen: 44
2001:ac0:c0c0::/44 maxlen: 44
2001:ac0:c880::/44 maxlen: 44
Validation: Failed, certificate revoked on Wed 21 Feb 2024 23:28:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:cc:b6:7f:34:e8:f9:1d:7e:f8:6b:a9:d8:c7:77:13:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef3e71b96992da3d91c88dd74ef41f9b95b9485b
Validity
Not Before: Feb 21 17:28:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=05a83f3d65f77c4471fc8304e69be5008d56a222
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:a3:be:f9:4a:0c:ce:c8:38:fc:a5:d4:4c:e5:
6d:49:6b:22:47:fa:ed:a6:65:ea:f5:af:04:c1:77:
0c:8b:5f:04:23:18:6c:09:24:8e:42:cc:57:c7:8d:
4d:ea:37:1b:52:fd:3f:19:62:7a:8a:3b:2d:93:13:
85:fc:00:74:af:51:02:25:29:59:89:c3:13:5e:79:
32:67:47:73:39:fb:77:10:b3:3b:74:a2:30:ec:62:
fe:f4:70:8d:1c:fd:c5:e9:7b:b4:1e:b2:60:44:8e:
14:27:f6:7f:a9:8f:b6:31:02:4e:01:61:f6:a3:f9:
38:df:67:24:88:f0:2b:ad:d0:8f:78:aa:c4:93:c8:
1f:cd:d1:ab:6b:cf:1f:3c:b6:fc:36:b1:f1:27:da:
49:69:c5:cd:7e:15:16:c0:87:68:e9:c7:9a:bf:0e:
d3:8c:67:46:70:55:96:90:59:91:38:a7:b5:0c:ea:
df:4d:43:4b:e7:0c:2b:33:cc:61:2b:32:fa:2d:dd:
fd:2b:12:d3:72:af:fe:33:43:f7:93:80:ec:d4:fa:
17:46:85:18:cd:0c:e3:95:67:44:15:2e:04:ba:23:
f8:02:49:08:2b:d5:5f:5e:57:f4:8b:aa:cd:8f:4d:
e0:66:11:3f:21:55:fa:9f:ae:f3:bd:a6:27:8a:b5:
4d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:A8:3F:3D:65:F7:7C:44:71:FC:83:04:E6:9B:E5:00:8D:56:A2:22
X509v3 Authority Key Identifier:
keyid:EF:3E:71:B9:69:92:DA:3D:91:C8:8D:D7:4E:F4:1F:9B:95:B9:48:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7z5xuWmS2j2RyI3XTvQfm5W5SFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/ad4e57-d901-4485-98d2-9196ce446527/1/Bag_PWX3fERx_IME5pvlAI1WoiI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/ad4e57-d901-4485-98d2-9196ce446527/1/7z5xuWmS2j2RyI3XTvQfm5W5SFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.18.0.0/19
92.60.160.0/20
185.66.60.0/22
212.49.128.0/18
212.66.161.0-212.66.191.255
212.163.0.0/16
213.9.128.0/17
213.192.192.0/18
IPv6:
2001:ac0::/29
Signature Algorithm: sha256WithRSAEncryption
85:ed:1c:71:e8:a5:1d:16:33:03:d8:1a:0e:fd:1c:ce:cd:c0:
de:ad:ad:a9:7c:9e:8f:8d:54:01:37:a1:b5:88:8f:58:3a:f0:
fa:0f:79:bf:63:4b:23:87:4f:80:0b:34:d2:da:79:04:b3:63:
e5:86:8b:9f:47:08:49:3a:2d:8f:56:9e:d3:14:67:6d:af:6d:
e0:d8:14:a7:48:e5:23:b4:4f:6b:7c:ad:55:86:0e:86:c0:2d:
cc:8e:f2:cb:e3:47:67:bc:7a:fd:36:1c:a2:d1:f3:4a:ab:e2:
c4:88:7a:b0:21:c6:b5:4c:13:ea:ed:81:6e:46:f7:f4:4d:1f:
e9:5e:ee:98:64:8b:b4:34:69:e7:2d:dc:b6:e1:f4:7d:88:e1:
29:3d:1b:63:97:d3:62:4a:78:b1:9c:ba:35:2e:f5:e5:b5:15:
94:d6:2b:cf:0a:f3:64:57:96:1a:18:db:7c:be:b2:6e:c3:e0:
2d:06:05:c1:b1:5c:69:69:84:d8:c1:32:5e:bb:07:39:14:73:
38:9f:eb:e1:72:8b:23:2a:24:df:ec:45:78:e6:a1:49:f0:14:
be:68:82:1c:51:c7:5c:63:3b:46:21:3c:35:f1:b1:4f:86:2d:
42:02:7f:96:81:dc:34:52:a0:d9:62:61:50:1b:cc:8d:61:fe:
59:bf:d0:b9
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgISAY3Mtn806PkdfvhrqdjHdxMCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmM2U3MWI5Njk5MmRhM2Q5MWM4OGRkNzRlZjQxZjliOTVi
OTQ4NWIwHhcNMjQwMjIxMTcyODQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNWE4M2YzZDY1Zjc3YzQ0NzFmYzgzMDRlNjliZTUwMDhkNTZhMjIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgqO++UoMzsg4/KXUTOVtSWsiR/rt
pmXq9a8EwXcMi18EIxhsCSSOQsxXx41N6jcbUv0/GWJ6ijstkxOF/AB0r1ECJSlZ
icMTXnkyZ0dzOft3ELM7dKIw7GL+9HCNHP3F6Xu0HrJgRI4UJ/Z/qY+2MQJOAWH2
o/k432ckiPArrdCPeKrEk8gfzdGra88fPLb8NrHxJ9pJacXNfhUWwIdo6ceavw7T
jGdGcFWWkFmROKe1DOrfTUNL5wwrM8xhKzL6Ld39KxLTcq/+M0P3k4Ds1PoXRoUY
zQzjlWdEFS4EuiP4AkkIK9VfXlf0i6rNj03gZhE/IVX6n67zvaYnirVNJwIDAQAB
o4ICSTCCAkUwHQYDVR0OBBYEFAWoPz1l93xEcfyDBOab5QCNVqIiMB8GA1UdIwQY
MBaAFO8+cblpkto9kciN1070H5uVuUhbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3o1eHVXbVMyajJSeUkzWFR2UWZtNVc1U0ZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9hZDRlNTctZDkwMS00NDg1LTk4ZDIt
OTE5NmNlNDQ2NTI3LzEvQmFnX1BXWDNmRVJ4X0lNRTVwdmxBSTFXb2lJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS9hZDRlNTctZDkwMS00NDg1LTk4ZDItOTE5NmNlNDQ2NTI3
LzEvN3o1eHVXbVMyajJSeUkzWFR2UWZtNVc1U0ZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMF8GCCsGAQUFBwEHAQH/BFAwTjA9BAIAATA3AwQFVBIAAwQE
XDygAwQCuUI8AwQG1DGAMAwDBADUQqEDBAbUQoADAwDUowMEB9UJgAMEBtXAwDAN
BAIAAjAHAwUDIAEKwDANBgkqhkiG9w0BAQsFAAOCAQEAhe0cceilHRYzA9gaDv0c
zs3A3q2tqXyej41UATehtYiPWDrw+g95v2NLI4dPgAs00tp5BLNj5YaLn0cISTot
j1ae0xRnba9t4NgUp0jlI7RPa3ytVYYOhsAtzI7yy+NHZ7x6/TYcotHzSqvixIh6
sCHGtUwT6u2Bbkb39E0f6V7umGSLtDRp5y3ctuH0fYjhKT0bY5fTYkp4sZy6NS71
5bUVlNYrzwrzZFeWGhjbfL6ybsPgLQYFwbFcaWmE2MEyXrsHORRzOJ/r4XKLIyok
3+xFeOahSfAUvmiCHFHHXGM7RiE8NfGxT4YtQgJ/loHcNFKg2WJhUBvMjWH+Wb/Q
uQ==
-----END CERTIFICATE-----
Generated at Thu Feb 22 02:26:27 2024 by rpki-client on console-fra.rpki-client.org