Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/VJL0c3iGB7YIiFKCmh9DL0yB1-A.roa
File: VJL0c3iGB7YIiFKCmh9DL0yB1-A.roa (raw, json)
Hash identifier: cjqoB/w7f5B39U/GdnqlJzSNWE2k2/bLgVZT4866DLo=
Subject key identifier: 54:92:F4:73:78:86:07:B6:08:88:52:82:9A:1F:43:2F:4C:81:D7:E0
Certificate issuer: /CN=0a5f6129142bd0a9dc69dfd402489ff25f5b3ef2
Certificate serial: 0185710BEC9F719230B76454E192DFF90B39
Authority key identifier: 0A:5F:61:29:14:2B:D0:A9:DC:69:DF:D4:02:48:9F:F2:5F:5B:3E:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cl9hKRQr0Kncad_UAkif8l9bPvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/VJL0c3iGB7YIiFKCmh9DL0yB1-A.roa
Signing time: Mon 02 Jan 2023 05:54:44 +0000
ROA not before: Mon 02 Jan 2023 05:54:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43341
IP address blocks: 185.188.120.0/22 maxlen: 22
213.211.192.0/18 maxlen: 29
88.150.0.0/17 maxlen: 29
194.45.154.0/24 maxlen: 24
2a03:5080::/32 maxlen: 56
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:29:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:0b:ec:9f:71:92:30:b7:64:54:e1:92:df:f9:0b:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a5f6129142bd0a9dc69dfd402489ff25f5b3ef2
Validity
Not Before: Jan 2 05:54:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5492f473788607b6088852829a1f432f4c81d7e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:26:f2:00:85:d9:72:8b:13:f1:35:7e:57:f9:
16:60:4b:6f:da:61:a6:eb:70:ab:9b:cb:d9:cc:da:
d5:a0:3d:8f:6a:c8:13:b4:11:01:f3:7e:f1:fb:3c:
2c:94:41:9e:ff:53:01:33:f1:58:27:4e:dc:d5:9a:
f7:13:94:c6:82:3a:47:36:a3:05:8b:d1:ae:7e:f6:
25:32:98:a4:11:ca:83:b3:c7:7a:00:2a:d8:7d:1c:
21:bc:34:cf:d7:89:07:05:87:85:1a:ab:38:fa:70:
bf:e8:08:e0:1a:81:5d:0e:eb:83:29:3e:5e:cd:3f:
63:3f:95:83:34:f3:47:5c:57:8c:92:27:c1:52:9f:
e6:57:5d:41:ea:62:0f:a9:d1:f0:d2:e9:00:8f:ea:
1f:91:57:6c:8f:19:41:b0:af:3e:47:8a:07:a6:37:
89:b7:cc:05:86:86:b1:bc:81:6b:7a:76:bf:2e:b6:
0c:a1:e2:ee:c8:ef:de:c3:cd:20:96:92:58:f5:07:
1c:e5:f6:46:1d:67:cc:7b:b1:d5:67:ee:12:b6:af:
93:47:31:42:8f:eb:1e:84:cd:19:fb:1b:75:48:02:
83:75:bb:89:e4:16:97:87:b1:ff:93:39:87:b9:90:
dd:7e:f0:e7:37:68:57:1e:cb:6d:67:7c:33:a0:b0:
45:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:92:F4:73:78:86:07:B6:08:88:52:82:9A:1F:43:2F:4C:81:D7:E0
X509v3 Authority Key Identifier:
keyid:0A:5F:61:29:14:2B:D0:A9:DC:69:DF:D4:02:48:9F:F2:5F:5B:3E:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cl9hKRQr0Kncad_UAkif8l9bPvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/VJL0c3iGB7YIiFKCmh9DL0yB1-A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/Cl9hKRQr0Kncad_UAkif8l9bPvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.150.0.0/17
185.188.120.0/22
194.45.154.0/24
213.211.192.0/18
IPv6:
2a03:5080::/32
Signature Algorithm: sha256WithRSAEncryption
36:7f:3d:75:a4:51:00:f6:41:be:37:3c:1a:3b:3b:cf:34:b6:
fc:3d:19:6a:99:15:5e:5f:fc:f5:ba:53:0c:8e:e0:fa:3d:a9:
d7:f7:b9:52:f5:9d:e2:00:b7:d9:8a:d6:eb:a4:fd:a4:83:94:
93:29:c8:48:01:f3:5d:01:b5:88:41:bb:e8:ac:56:0f:3a:a2:
88:02:11:85:95:1b:7c:8d:e8:6e:2d:8c:1a:2a:a4:a6:5c:ff:
a1:d9:50:6d:66:f5:0d:45:49:63:ee:f7:5e:91:88:2a:e1:d1:
25:18:27:75:a7:83:3f:b3:9c:ab:bb:ba:f8:34:3c:03:d4:60:
cb:c4:fd:4b:6b:9c:a0:ac:fb:ca:f9:6e:93:c3:19:5d:95:37:
e8:3b:bb:ec:b8:62:0f:82:01:70:16:05:c4:97:f6:9d:3e:0b:
80:14:c4:f4:4c:57:1e:ab:09:a4:3b:86:50:89:ac:65:4b:5b:
09:33:74:fb:52:5d:fd:9c:fa:44:f1:4d:97:13:dd:ae:e1:9c:
8b:7a:ee:e5:e0:63:db:f7:8e:b5:64:a4:72:92:10:a3:75:55:
bb:0e:9b:ad:4f:5a:cd:16:1d:c3:97:f9:be:06:af:17:2a:b7:
0a:43:c0:31:81:21:ff:df:c0:ed:9a:f8:33:74:6e:87:54:5a:
ac:6d:25:7c
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAYVxC+yfcZIwt2RU4ZLf+Qs5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhNWY2MTI5MTQyYmQwYTlkYzY5ZGZkNDAyNDg5ZmYyNWY1
YjNlZjIwHhcNMjMwMTAyMDU1NDQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NDkyZjQ3Mzc4ODYwN2I2MDg4ODUyODI5YTFmNDMyZjRjODFkN2UwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjibyAIXZcosT8TV+V/kWYEtv2mGm
63Crm8vZzNrVoD2PasgTtBEB837x+zwslEGe/1MBM/FYJ07c1Zr3E5TGgjpHNqMF
i9GufvYlMpikEcqDs8d6ACrYfRwhvDTP14kHBYeFGqs4+nC/6AjgGoFdDuuDKT5e
zT9jP5WDNPNHXFeMkifBUp/mV11B6mIPqdHw0ukAj+ofkVdsjxlBsK8+R4oHpjeJ
t8wFhoaxvIFrena/LrYMoeLuyO/ew80glpJY9Qcc5fZGHWfMe7HVZ+4Stq+TRzFC
j+sehM0Z+xt1SAKDdbuJ5BaXh7H/kzmHuZDdfvDnN2hXHsttZ3wzoLBFywIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFFSS9HN4hge2CIhSgpofQy9MgdfgMB8GA1UdIwQY
MBaAFApfYSkUK9Cp3Gnf1AJIn/JfWz7yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2w5aEtSUXIwS25jYWRfVUFraWY4bDliUHZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8wYWQyNjQtM2E1MC00NTYzLWEzNWEt
MGQyYmJlNThjMTQ1LzEvVkpMMGMzaUdCN1lJaUZLQ21oOURMMHlCMS1BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi8wYWQyNjQtM2E1MC00NTYzLWEzNWEtMGQyYmJlNThjMTQ1
LzEvQ2w5aEtSUXIwS25jYWRfVUFraWY4bDliUHZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQHWJYAAwQC
ubx4AwQAwi2aAwQG1dPAMA0EAgACMAcDBQAqA1CAMA0GCSqGSIb3DQEBCwUAA4IB
AQA2fz11pFEA9kG+NzwaOzvPNLb8PRlqmRVeX/z1ulMMjuD6PanX97lS9Z3iALfZ
itbrpP2kg5STKchIAfNdAbWIQbvorFYPOqKIAhGFlRt8jehuLYwaKqSmXP+h2VBt
ZvUNRUlj7vdekYgq4dElGCd1p4M/s5yru7r4NDwD1GDLxP1La5ygrPvK+W6Twxld
lTfoO7vsuGIPggFwFgXEl/adPguAFMT0TFceqwmkO4ZQiaxlS1sJM3T7Ul39nPpE
8U2XE92u4ZyLeu7l4GPb9461ZKRykhCjdVW7DputT1rNFh3Dl/m+Bq8XKrcKQ8Ax
gSH/38DtmvgzdG6HVFqsbSV8
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:34 2024 by rpki-client on console-fra.rpki-client.org