Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/M5rUbKtVmRCxPCAIu8yPJTY8aqI.roa
File: M5rUbKtVmRCxPCAIu8yPJTY8aqI.roa (raw, json)
Hash identifier: s4irdqTFncRDVkIKJYMVDRzO30fxvcM3h+IYl/I71XI=
Subject key identifier: 33:9A:D4:6C:AB:55:99:10:B1:3C:20:08:BB:CC:8F:25:36:3C:6A:A2
Certificate issuer: /CN=8f368feb9e553bdd131562584a3353b1d7555c50
Certificate serial: 018980689DC185B2610091568E02EBE304D9
Authority key identifier: 8F:36:8F:EB:9E:55:3B:DD:13:15:62:58:4A:33:53:B1:D7:55:5C:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzaP655VO90TFWJYSjNTsddVXFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/M5rUbKtVmRCxPCAIu8yPJTY8aqI.roa
Signing time: Sun 23 Jul 2023 01:41:27 +0000
ROA not before: Sun 23 Jul 2023 01:41:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201565
IP address blocks: 185.11.232.0/22 maxlen: 22
185.91.150.0/23 maxlen: 24
185.91.149.0/24 maxlen: 24
185.91.148.0/24 maxlen: 24
94.176.185.0/24 maxlen: 24
94.176.184.0/24 maxlen: 24
185.59.96.0/22 maxlen: 22
89.35.206.0/24 maxlen: 24
89.35.207.0/24 maxlen: 24
2a03:7e40::/36 maxlen: 36
2a03:7e40:1000::/36 maxlen: 36
2a03:7e40:3000::/36 maxlen: 36
2a03:7e40:2000::/36 maxlen: 36
2a03:7e40:4000::/36 maxlen: 36
2a03:7e40:5000::/36 maxlen: 36
Validation: Failed, certificate revoked on Mon 07 Aug 2023 11:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:80:68:9d:c1:85:b2:61:00:91:56:8e:02:eb:e3:04:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f368feb9e553bdd131562584a3353b1d7555c50
Validity
Not Before: Jul 23 01:41:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=339ad46cab559910b13c2008bbcc8f25363c6aa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:7a:df:7c:41:f0:7b:57:da:3e:9c:71:fe:ce:
95:da:30:a0:24:b8:34:b0:4d:da:7c:b2:c4:60:c8:
4a:93:ad:d1:62:f6:97:c0:5c:a7:17:cf:70:4a:82:
e3:94:49:ba:22:92:ab:76:dd:fc:db:7b:6f:86:63:
5b:28:ed:b4:a8:68:b5:38:d5:19:fe:0c:df:c2:3e:
1c:61:b6:80:8a:23:0a:f1:95:45:a9:a6:d4:93:81:
1d:16:a5:09:7c:06:2f:e1:0e:9a:6e:a2:8f:e1:b4:
65:33:2a:af:9c:71:3d:59:f4:ca:c6:a3:5e:08:c9:
28:b2:29:f8:83:26:9d:79:15:66:55:c1:1d:72:b5:
02:9a:d1:6b:8d:7f:c1:da:e1:28:d7:b1:d9:7e:26:
80:c0:e8:ae:6b:a3:41:c5:f3:69:00:e6:27:5e:ad:
84:0a:92:88:20:38:67:69:55:82:47:3b:c0:a0:4a:
0f:52:e8:65:1f:7b:40:51:1a:ff:76:e4:c0:5b:b2:
68:1e:6d:2c:0b:79:2d:b7:1a:51:df:e4:42:a4:16:
46:a7:2a:b1:16:51:93:b0:d5:0e:4c:5d:ce:41:a3:
98:dd:ec:e9:20:ef:7f:2d:93:d1:e0:3c:62:95:dc:
ba:6d:ab:f0:48:dc:11:d1:7c:00:80:cf:40:35:46:
96:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:9A:D4:6C:AB:55:99:10:B1:3C:20:08:BB:CC:8F:25:36:3C:6A:A2
X509v3 Authority Key Identifier:
keyid:8F:36:8F:EB:9E:55:3B:DD:13:15:62:58:4A:33:53:B1:D7:55:5C:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzaP655VO90TFWJYSjNTsddVXFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/M5rUbKtVmRCxPCAIu8yPJTY8aqI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.35.206.0/23
94.176.184.0/23
185.11.232.0/22
185.59.96.0/22
185.91.148.0/22
IPv6:
2a03:7e40::-2a03:7e40:5fff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
13:0e:de:f5:26:35:10:e7:11:9b:56:96:c0:d6:8b:59:f8:b8:
89:55:e3:73:9d:a5:d6:a5:bb:c3:4e:60:99:aa:d7:9d:57:cb:
27:aa:cd:0f:4f:c5:a3:0b:9e:a7:9a:f1:f9:b6:5a:40:d9:cb:
b2:fb:9f:85:df:a0:b6:c8:5d:bb:13:b4:ca:3f:d3:d1:48:19:
6e:88:af:3b:8a:77:3c:e0:b6:f9:b1:e4:d9:99:68:b3:20:16:
37:49:ee:de:5d:a6:dc:fe:bc:cd:bb:a5:30:90:ca:4b:7b:38:
19:5b:53:99:e4:05:db:da:8f:e3:78:0b:01:d2:94:55:6f:bd:
ad:9b:01:29:b8:fe:fc:17:b6:db:c8:c0:9a:b0:60:c7:82:98:
aa:91:dc:7c:3f:04:bb:4a:bc:af:53:d1:87:79:ff:b8:3b:e2:
7d:0d:bf:fe:6c:c3:ec:0d:46:2a:1a:63:25:39:45:56:51:b1:
ea:95:19:7b:13:f5:c9:6e:e9:81:65:c9:1e:8d:7a:15:52:c4:
d4:fd:d3:3a:d6:07:89:84:bf:ba:2b:3a:c3:86:7f:98:41:25:
94:af:32:9a:65:95:38:28:1a:e8:34:c1:51:17:7e:e4:25:a7:
63:e3:f6:63:57:90:4d:3c:d3:94:07:83:af:73:a1:79:6b:c8:
b4:89:e0:01
-----BEGIN CERTIFICATE-----
MIIFLjCCBBagAwIBAgISAYmAaJ3BhbJhAJFWjgLr4wTZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmMzY4ZmViOWU1NTNiZGQxMzE1NjI1ODRhMzM1M2IxZDc1
NTVjNTAwHhcNMjMwNzIzMDE0MTI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMzlhZDQ2Y2FiNTU5OTEwYjEzYzIwMDhiYmNjOGYyNTM2M2M2YWEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHrffEHwe1faPpxx/s6V2jCgJLg0
sE3afLLEYMhKk63RYvaXwFynF89wSoLjlEm6IpKrdt3823tvhmNbKO20qGi1ONUZ
/gzfwj4cYbaAiiMK8ZVFqabUk4EdFqUJfAYv4Q6abqKP4bRlMyqvnHE9WfTKxqNe
CMkosin4gyadeRVmVcEdcrUCmtFrjX/B2uEo17HZfiaAwOiua6NBxfNpAOYnXq2E
CpKIIDhnaVWCRzvAoEoPUuhlH3tAURr/duTAW7JoHm0sC3kttxpR3+RCpBZGpyqx
FlGTsNUOTF3OQaOY3ezpIO9/LZPR4Dxildy6bavwSNwR0XwAgM9ANUaWCQIDAQAB
o4ICOjCCAjYwHQYDVR0OBBYEFDOa1GyrVZkQsTwgCLvMjyU2PGqiMB8GA1UdIwQY
MBaAFI82j+ueVTvdExViWEozU7HXVVxQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanphUDY1NVZPOTBURldKWVNqTlRzZGRWWEZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8wNTQ3Y2ItYzVkYy00ZTJmLWFmZjct
M2VjYTdkZjJhZTU3LzEvTTVyVWJLdFZtUkN4UENBSXU4eVBKVFk4YXFJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC8wNTQ3Y2ItYzVkYy00ZTJmLWFmZjctM2VjYTdkZjJhZTU3
LzEvanphUDY1NVZPOTBURldKWVNqTlRzZGRWWEZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFAGCCsGAQUFBwEHAQH/BEEwPzAkBAIAATAeAwQBWSPOAwQB
XrC4AwQCuQvoAwQCuTtgAwQCuVuUMBcEAgACMBEwDwMFBioDfkADBgUqA35AQDAN
BgkqhkiG9w0BAQsFAAOCAQEAEw7e9SY1EOcRm1aWwNaLWfi4iVXjc52l1qW7w05g
marXnVfLJ6rND0/Fowuep5rx+bZaQNnLsvufhd+gtshduxO0yj/T0UgZboivO4p3
POC2+bHk2ZlosyAWN0nu3l2m3P68zbulMJDKS3s4GVtTmeQF29qP43gLAdKUVW+9
rZsBKbj+/Be228jAmrBgx4KYqpHcfD8Eu0q8r1PRh3n/uDvifQ2//mzD7A1GKhpj
JTlFVlGx6pUZexP1yW7pgWXJHo16FVLE1P3TOtYHiYS/uis6w4Z/mEEllK8ymmWV
OCga6DTBURd+5CWnY+P2Y1eQTTzTlAeDr3OheWvItIngAQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:51 2024 by rpki-client on console-fra.rpki-client.org