Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/B5mNtI2N7Frgx0hQ8itB-1RHWe0.roa
File: B5mNtI2N7Frgx0hQ8itB-1RHWe0.roa (raw, json)
Hash identifier: ta6aZOkPkF2F9IbOQDlvpu7a59yGn4/8crVo2gz0Bww=
Subject key identifier: 07:99:8D:B4:8D:8D:EC:5A:E0:C7:48:50:F2:2B:41:FB:54:47:59:ED
Certificate issuer: /CN=ef54d9e41ea5e2d161b7c4cdb2e4702c4f248e14
Certificate serial: 018CF86BC1DBD907B0A560620851373AC9EF
Authority key identifier: EF:54:D9:E4:1E:A5:E2:D1:61:B7:C4:CD:B2:E4:70:2C:4F:24:8E:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71TZ5B6l4tFht8TNsuRwLE8kjhQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/B5mNtI2N7Frgx0hQ8itB-1RHWe0.roa
Signing time: Thu 11 Jan 2024 12:07:40 +0000
ROA not before: Thu 11 Jan 2024 12:07:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 19905
IP address blocks: 144.86.231.0/24 maxlen: 24
144.86.228.0/24 maxlen: 24
144.86.229.0/24 maxlen: 24
144.86.230.0/24 maxlen: 24
185.254.12.0/24 maxlen: 24
185.254.13.0/24 maxlen: 24
185.254.14.0/24 maxlen: 24
185.254.15.0/24 maxlen: 24
185.138.120.0/24 maxlen: 24
185.138.121.0/24 maxlen: 24
185.138.122.0/24 maxlen: 24
185.138.123.0/24 maxlen: 24
199.74.188.0/24 maxlen: 24
199.74.189.0/24 maxlen: 24
199.74.190.0/24 maxlen: 24
199.74.191.0/24 maxlen: 24
93.180.216.0/24 maxlen: 24
93.180.217.0/24 maxlen: 24
93.180.218.0/24 maxlen: 24
93.180.219.0/24 maxlen: 24
93.180.221.0/24 maxlen: 24
93.180.222.0/24 maxlen: 24
93.180.223.0/24 maxlen: 24
93.180.220.0/24 maxlen: 24
195.133.223.0/24 maxlen: 24
195.133.220.0/24 maxlen: 24
195.133.221.0/24 maxlen: 24
195.133.222.0/24 maxlen: 24
185.20.196.0/24 maxlen: 24
185.20.197.0/24 maxlen: 24
185.20.198.0/24 maxlen: 24
185.20.199.0/24 maxlen: 24
2a0b:1880::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 11 Jan 2024 13:59:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f8:6b:c1:db:d9:07:b0:a5:60:62:08:51:37:3a:c9:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef54d9e41ea5e2d161b7c4cdb2e4702c4f248e14
Validity
Not Before: Jan 11 12:07:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=07998db48d8dec5ae0c74850f22b41fb544759ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:db:bd:e9:10:7e:c7:e7:6f:c4:5e:10:bc:a5:
46:92:3b:21:9e:50:f2:6c:38:0f:dc:09:27:79:4a:
b2:b4:b9:76:db:18:54:5a:f3:22:6a:16:d1:dc:e1:
5e:91:e2:05:14:3a:3d:57:13:f3:04:9e:61:55:8e:
df:c3:1e:cf:f1:c8:16:6d:3a:55:96:f4:1d:6c:7d:
7b:14:f0:94:f7:ae:b0:d8:da:97:f6:86:4e:ff:62:
72:cb:06:f4:fe:f4:9c:5c:59:3a:84:e9:e4:b4:0b:
7b:cb:76:00:28:9a:0d:85:74:dc:29:43:a4:6e:c1:
6c:27:56:7f:d1:a5:2a:33:0e:c1:48:75:6e:e4:30:
7f:cd:76:8a:d9:98:62:fa:88:f8:1d:6a:a1:63:77:
ed:10:54:02:51:e6:1e:b8:44:6b:db:46:00:c8:67:
68:66:9c:c9:dd:31:b3:90:84:6d:39:77:5f:cc:9b:
0d:b3:d6:c3:e7:b0:61:60:6a:c3:34:28:1d:65:13:
fc:de:96:b5:d1:c6:3c:4b:45:40:8b:c2:a1:6e:e6:
bd:32:ce:a3:5a:43:61:1e:f7:b5:f6:fc:bc:f3:41:
ee:d8:4c:35:e3:f1:9e:b4:71:0b:63:f7:da:43:0d:
8e:d4:62:64:fe:7a:d7:50:98:45:da:91:2d:96:2f:
95:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:99:8D:B4:8D:8D:EC:5A:E0:C7:48:50:F2:2B:41:FB:54:47:59:ED
X509v3 Authority Key Identifier:
keyid:EF:54:D9:E4:1E:A5:E2:D1:61:B7:C4:CD:B2:E4:70:2C:4F:24:8E:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71TZ5B6l4tFht8TNsuRwLE8kjhQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/B5mNtI2N7Frgx0hQ8itB-1RHWe0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.180.216.0/21
144.86.228.0/22
185.20.196.0/22
185.138.120.0/22
185.254.12.0/22
195.133.220.0/22
199.74.188.0/22
IPv6:
2a0b:1880::/29
Signature Algorithm: sha256WithRSAEncryption
0a:9c:48:c2:ae:b1:de:9d:5f:8e:a0:a8:9f:93:91:a6:1a:29:
86:7c:08:e0:b1:9e:f6:e3:51:df:31:be:54:3e:57:43:15:00:
c1:04:c6:62:df:b1:f0:ee:14:53:fb:5c:9c:f8:25:4f:59:b0:
b4:50:4b:54:f8:45:52:d3:7a:73:6e:b9:9f:05:21:bc:c9:65:
07:a2:1f:79:48:e6:f3:67:96:df:30:c8:2b:1e:fd:c4:bb:9b:
ba:16:d2:07:f9:b2:8e:9c:31:1d:a8:a7:00:fc:de:96:c5:7d:
fd:39:4c:d2:5a:db:5d:6d:d3:c8:4a:92:e1:22:59:e3:11:4a:
ec:5f:99:d7:2c:1b:0b:78:9d:df:48:1c:57:72:25:7a:24:14:
40:f5:1d:e6:0d:25:65:2f:ca:99:45:c4:88:90:5a:58:2c:35:
88:1c:72:ef:b2:16:3f:46:f5:61:51:f9:1c:d0:3d:9f:29:5d:
40:42:9c:7d:22:92:f3:29:fa:00:f5:7f:9e:2a:56:99:ce:f1:
75:15:3b:b1:25:15:89:f4:fc:0c:84:56:a6:3f:f2:8a:f8:03:
ed:86:74:a0:ce:2d:9d:fa:2e:2d:29:ac:f0:34:f5:24:ee:e6:
5e:6d:fd:dd:e2:d6:8f:db:ad:fd:64:be:6e:37:f8:23:7a:0f:
94:db:d1:71
-----BEGIN CERTIFICATE-----
MIIFMDCCBBigAwIBAgISAYz4a8Hb2QewpWBiCFE3OsnvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmNTRkOWU0MWVhNWUyZDE2MWI3YzRjZGIyZTQ3MDJjNGYy
NDhlMTQwHhcNMjQwMTExMTIwNzQwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNzk5OGRiNDhkOGRlYzVhZTBjNzQ4NTBmMjJiNDFmYjU0NDc1OWVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNu96RB+x+dvxF4QvKVGkjshnlDy
bDgP3AkneUqytLl22xhUWvMiahbR3OFekeIFFDo9VxPzBJ5hVY7fwx7P8cgWbTpV
lvQdbH17FPCU966w2NqX9oZO/2Jyywb0/vScXFk6hOnktAt7y3YAKJoNhXTcKUOk
bsFsJ1Z/0aUqMw7BSHVu5DB/zXaK2Zhi+oj4HWqhY3ftEFQCUeYeuERr20YAyGdo
ZpzJ3TGzkIRtOXdfzJsNs9bD57BhYGrDNCgdZRP83pa10cY8S0VAi8Khbua9Ms6j
WkNhHve19vy880Hu2Ew14/GetHELY/faQw2O1GJk/nrXUJhF2pEtli+VLwIDAQAB
o4ICPDCCAjgwHQYDVR0OBBYEFAeZjbSNjexa4MdIUPIrQftUR1ntMB8GA1UdIwQY
MBaAFO9U2eQepeLRYbfEzbLkcCxPJI4UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzFUWjVCNmw0dEZodDhUTnN1UndMRThramhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9lYzAwZTItY2JkYS00YjMyLThjMzIt
ZmJjNmZjYjVlN2E2LzEvQjVtTnRJMk43RnJneDBoUThpdEItMVJIV2UwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9lYzAwZTItY2JkYS00YjMyLThjMzItZmJjNmZjYjVlN2E2
LzEvNzFUWjVCNmw0dEZodDhUTnN1UndMRThramhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFIGCCsGAQUFBwEHAQH/BEMwQTAwBAIAATAqAwQDXbTYAwQC
kFbkAwQCuRTEAwQCuYp4AwQCuf4MAwQCw4XcAwQCx0q8MA0EAgACMAcDBQMqCxiA
MA0GCSqGSIb3DQEBCwUAA4IBAQAKnEjCrrHenV+OoKifk5GmGimGfAjgsZ7241Hf
Mb5UPldDFQDBBMZi37Hw7hRT+1yc+CVPWbC0UEtU+EVS03pzbrmfBSG8yWUHoh95
SObzZ5bfMMgrHv3Eu5u6FtIH+bKOnDEdqKcA/N6WxX39OUzSWttdbdPISpLhIlnj
EUrsX5nXLBsLeJ3fSBxXciV6JBRA9R3mDSVlL8qZRcSIkFpYLDWIHHLvshY/RvVh
Ufkc0D2fKV1AQpx9IpLzKfoA9X+eKlaZzvF1FTuxJRWJ9PwMhFamP/KK+APthnSg
zi2d+i4tKazwNPUk7uZebf3d4taP2639ZL5uN/gjeg+U29Fx
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:27 2024 by rpki-client on console-ams.rpki-client.org