Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/1e8183-aad1-4fd7-b10f-ffa4950a1ccb/1/M0mAqUiPdRe0EvQ4Thl5mLEjs48.roa
File: M0mAqUiPdRe0EvQ4Thl5mLEjs48.roa (raw, json)
Hash identifier: 9FGQ+k8c6ooUaW1oZfR1PHbSaLmzVvxhge/J585CqgI=
Subject key identifier: 33:49:80:A9:48:8F:75:17:B4:12:F4:38:4E:19:79:98:B1:23:B3:8F
Certificate issuer: /CN=a764a26f76355140aa696e0a4f1f0c312b7277c0
Certificate serial: 01856E2F95C888032614BD66782D584E80A3
Authority key identifier: A7:64:A2:6F:76:35:51:40:AA:69:6E:0A:4F:1F:0C:31:2B:72:77:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p2Sib3Y1UUCqaW4KTx8MMStyd8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/1e8183-aad1-4fd7-b10f-ffa4950a1ccb/1/M0mAqUiPdRe0EvQ4Thl5mLEjs48.roa
Signing time: Sun 01 Jan 2023 16:34:50 +0000
ROA not before: Sun 01 Jan 2023 16:34:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201000
IP address blocks: 45.156.120.0/22 maxlen: 24
185.89.72.0/22 maxlen: 24
91.245.244.0/22 maxlen: 24
185.237.148.0/22 maxlen: 24
79.143.192.0/20 maxlen: 24
185.211.252.0/22 maxlen: 24
2a03:8260::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:2f:95:c8:88:03:26:14:bd:66:78:2d:58:4e:80:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a764a26f76355140aa696e0a4f1f0c312b7277c0
Validity
Not Before: Jan 1 16:34:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=334980a9488f7517b412f4384e197998b123b38f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:c1:3a:d9:c4:ef:fe:7a:84:f2:a7:d3:d3:99:
78:dd:bb:96:14:d9:6b:2f:10:d1:0c:61:cd:13:11:
ac:32:ce:4d:0c:82:0c:8c:11:65:b6:be:07:ce:81:
52:3f:ea:0c:01:51:0a:d2:07:03:9c:18:9c:97:dd:
d0:ff:06:d3:c6:e9:f9:7f:a1:58:79:c6:7f:13:69:
1e:7c:df:3c:e6:a1:2a:e0:68:2c:4f:16:b1:4d:8a:
06:b2:46:16:78:4f:40:89:1a:4c:f5:5b:d6:19:67:
d1:96:bb:48:77:ae:2c:c6:1b:e7:0f:ea:6d:97:a6:
87:4a:01:7d:82:3c:cd:fb:cf:c6:d0:e6:61:76:af:
3b:ad:6d:95:0e:d4:5f:4b:aa:98:66:26:75:3a:b3:
1c:9d:c0:21:e3:49:2f:c9:8e:11:d2:2a:a2:1f:49:
68:2a:6e:b0:8e:d3:30:d1:ff:6e:7b:d3:1e:4f:67:
ca:55:35:9e:ec:5c:8b:1c:37:3f:e2:c4:6f:35:66:
c5:da:66:74:38:3d:33:40:c6:97:9d:14:ec:fd:58:
d3:6e:db:01:c9:4f:37:31:f5:ce:01:31:62:3c:30:
82:7b:1a:f7:79:53:bc:fc:70:2f:a2:16:2d:55:85:
c3:87:bc:7b:8d:0b:79:90:00:8d:8c:5f:24:c8:5c:
1b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:49:80:A9:48:8F:75:17:B4:12:F4:38:4E:19:79:98:B1:23:B3:8F
X509v3 Authority Key Identifier:
keyid:A7:64:A2:6F:76:35:51:40:AA:69:6E:0A:4F:1F:0C:31:2B:72:77:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p2Sib3Y1UUCqaW4KTx8MMStyd8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/1e8183-aad1-4fd7-b10f-ffa4950a1ccb/1/M0mAqUiPdRe0EvQ4Thl5mLEjs48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/1e8183-aad1-4fd7-b10f-ffa4950a1ccb/1/p2Sib3Y1UUCqaW4KTx8MMStyd8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.120.0/22
79.143.192.0/20
91.245.244.0/22
185.89.72.0/22
185.211.252.0/22
185.237.148.0/22
IPv6:
2a03:8260::/32
Signature Algorithm: sha256WithRSAEncryption
da:65:ad:9c:cd:c5:a6:ea:12:da:02:fd:b1:b2:d5:5a:c1:85:
4a:01:1e:3e:11:36:55:ce:a1:75:e7:1d:9d:5b:86:28:a5:f6:
f0:6f:e3:a0:eb:ea:fe:40:85:d1:19:8f:0a:33:c2:5f:7a:d4:
57:65:6d:2b:d8:71:ca:e9:bb:4e:e3:a5:c0:65:ff:3c:d4:e2:
42:3f:fc:16:69:e4:c3:f3:6a:a3:24:81:0d:76:eb:26:70:a9:
fc:68:f0:6c:ef:94:45:36:19:e3:28:a4:30:bd:4e:ac:5a:48:
ee:7a:4d:67:43:ae:44:46:ba:c7:c1:2d:9c:c8:57:33:4c:60:
37:6e:6d:20:52:6d:02:34:67:d4:55:f5:7a:2e:68:08:4a:cb:
9b:b3:40:8b:41:e7:4e:4f:43:0e:6c:7d:5d:35:e3:5e:79:fd:
10:fe:74:d6:d1:9a:36:94:9b:3d:4c:77:22:d0:85:b7:6a:d8:
dd:8c:8d:0e:35:f9:04:ae:93:ad:d1:3d:3b:e6:08:a6:c8:c2:
5b:ea:0c:f2:b5:32:f4:bc:78:dc:f7:27:1d:8b:c7:e0:bf:6b:
20:69:97:8e:43:40:99:57:95:2e:5e:a3:2a:24:34:78:41:e0:
23:40:32:8e:a9:16:a8:ee:fd:7f:5b:ab:fc:6f:54:d9:45:c5:
31:4b:5e:c7
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgISAYVuL5XIiAMmFL1meC1YToCjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3NjRhMjZmNzYzNTUxNDBhYTY5NmUwYTRmMWYwYzMxMmI3
Mjc3YzAwHhcNMjMwMTAxMTYzNDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMzQ5ODBhOTQ4OGY3NTE3YjQxMmY0Mzg0ZTE5Nzk5OGIxMjNiMzhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhcE62cTv/nqE8qfT05l43buWFNlr
LxDRDGHNExGsMs5NDIIMjBFltr4HzoFSP+oMAVEK0gcDnBicl93Q/wbTxun5f6FY
ecZ/E2kefN885qEq4GgsTxaxTYoGskYWeE9AiRpM9VvWGWfRlrtId64sxhvnD+pt
l6aHSgF9gjzN+8/G0OZhdq87rW2VDtRfS6qYZiZ1OrMcncAh40kvyY4R0iqiH0lo
Km6wjtMw0f9ue9MeT2fKVTWe7FyLHDc/4sRvNWbF2mZ0OD0zQMaXnRTs/VjTbtsB
yU83MfXOATFiPDCCexr3eVO8/HAvohYtVYXDh7x7jQt5kACNjF8kyFwbRQIDAQAB
o4ICNjCCAjIwHQYDVR0OBBYEFDNJgKlIj3UXtBL0OE4ZeZixI7OPMB8GA1UdIwQY
MBaAFKdkom92NVFAqmluCk8fDDErcnfAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDJTaWIzWTFVVUNxYVc0S1R4OE1NU3R5ZDhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8xZTgxODMtYWFkMS00ZmQ3LWIxMGYt
ZmZhNDk1MGExY2NiLzEvTTBtQXFVaVBkUmUwRXZRNFRobDVtTEVqczQ4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi8xZTgxODMtYWFkMS00ZmQ3LWIxMGYtZmZhNDk1MGExY2Ni
LzEvcDJTaWIzWTFVVUNxYVc0S1R4OE1NU3R5ZDhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQCLZx4AwQE
T4/AAwQCW/X0AwQCuVlIAwQCudP8AwQCue2UMA0EAgACMAcDBQAqA4JgMA0GCSqG
SIb3DQEBCwUAA4IBAQDaZa2czcWm6hLaAv2xstVawYVKAR4+ETZVzqF15x2dW4Yo
pfbwb+Og6+r+QIXRGY8KM8JfetRXZW0r2HHK6btO46XAZf881OJCP/wWaeTD82qj
JIENdusmcKn8aPBs75RFNhnjKKQwvU6sWkjuek1nQ65ERrrHwS2cyFczTGA3bm0g
Um0CNGfUVfV6LmgISsubs0CLQedOT0MObH1dNeNeef0Q/nTW0Zo2lJs9THci0IW3
atjdjI0ONfkErpOt0T075gimyMJb6gzytTL0vHjc9ycdi8fgv2sgaZeOQ0CZV5Uu
XqMqJDR4QeAjQDKOqRao7v1/W6v8b1TZRcUxS17H
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:35 2024 by rpki-client on console-fra.rpki-client.org