Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/938722-d415-4027-a0b3-a2aa286dc448/1/xtBaslaAuoDTk98sWGnHw0csQ4U.roa
File: xtBaslaAuoDTk98sWGnHw0csQ4U.roa (raw, json)
Hash identifier: jWIkulHzTy9ILSXF0gINeJlNwCHe822p8lx8NjS6TOc=
Subject key identifier: C6:D0:5A:B2:56:80:BA:80:D3:93:DF:2C:58:69:C7:C3:47:2C:43:85
Certificate issuer: /CN=53052009ba7898d2361ca2ee7d130124f9d25125
Certificate serial: 01856F26C01E3F8041E54D68A0185ACC239A
Authority key identifier: 53:05:20:09:BA:78:98:D2:36:1C:A2:EE:7D:13:01:24:F9:D2:51:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UwUgCbp4mNI2HKLufRMBJPnSUSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/938722-d415-4027-a0b3-a2aa286dc448/1/xtBaslaAuoDTk98sWGnHw0csQ4U.roa
Signing time: Sun 01 Jan 2023 21:04:48 +0000
ROA not before: Sun 01 Jan 2023 21:04:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50881
IP address blocks: 185.94.157.0/24 maxlen: 24
185.94.158.0/24 maxlen: 24
185.94.159.0/24 maxlen: 24
185.94.156.0/24 maxlen: 24
91.228.164.0/24 maxlen: 24
91.228.165.0/24 maxlen: 24
91.228.166.0/24 maxlen: 24
91.228.167.0/24 maxlen: 24
2a05:e800::/29 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:26:c0:1e:3f:80:41:e5:4d:68:a0:18:5a:cc:23:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53052009ba7898d2361ca2ee7d130124f9d25125
Validity
Not Before: Jan 1 21:04:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c6d05ab25680ba80d393df2c5869c7c3472c4385
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f5:62:23:02:03:2f:f7:8a:92:f8:6d:2a:06:
05:35:10:1a:16:ad:ff:c9:57:b6:02:34:70:38:c9:
b9:30:ac:62:e3:94:bc:52:52:1f:42:07:59:52:dc:
20:c2:6f:1c:4c:70:8e:94:56:f0:5a:de:3b:94:e7:
14:7a:64:4a:9b:db:e8:2a:33:5e:f5:4b:38:96:10:
c8:d6:b3:09:11:bd:1b:67:5e:73:dd:8e:a0:a1:14:
7f:5c:e9:02:20:d2:15:a9:5b:7e:b5:38:a4:a9:73:
20:ee:78:21:93:85:00:bc:9b:5d:ca:0d:10:87:26:
56:69:94:b1:d6:46:52:0c:26:14:93:5d:12:52:a7:
d2:b1:a5:98:67:db:62:0f:b6:b9:f0:9e:dc:aa:02:
34:2e:f2:ab:61:93:8b:3e:8a:de:31:ae:67:47:8e:
6f:80:d8:eb:e8:42:c5:06:b6:50:90:63:84:7b:20:
a7:9d:fa:29:94:87:26:4b:b2:bf:3e:a9:d1:4a:85:
12:ed:e0:de:31:a2:24:87:f9:ef:c8:e5:e4:e7:f5:
ac:0f:1d:e5:6a:e8:ea:4e:0b:12:4c:e9:c9:42:7d:
82:bb:59:8e:bd:57:1b:1f:87:37:e5:e2:aa:29:d4:
38:08:b3:5f:03:bf:e6:be:36:07:9c:1e:8a:7c:8f:
2f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:D0:5A:B2:56:80:BA:80:D3:93:DF:2C:58:69:C7:C3:47:2C:43:85
X509v3 Authority Key Identifier:
keyid:53:05:20:09:BA:78:98:D2:36:1C:A2:EE:7D:13:01:24:F9:D2:51:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UwUgCbp4mNI2HKLufRMBJPnSUSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/938722-d415-4027-a0b3-a2aa286dc448/1/xtBaslaAuoDTk98sWGnHw0csQ4U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/938722-d415-4027-a0b3-a2aa286dc448/1/UwUgCbp4mNI2HKLufRMBJPnSUSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.164.0/22
185.94.156.0/22
IPv6:
2a05:e800::/29
Signature Algorithm: sha256WithRSAEncryption
76:7c:e7:f9:f3:a5:6d:55:76:db:0e:44:a3:74:ee:94:0c:f1:
f4:ea:d5:35:00:7b:d4:22:a3:3d:c0:a4:45:38:90:50:18:99:
94:33:4b:78:d1:b2:a1:75:62:5e:76:d2:4c:4d:ea:04:ec:7f:
f4:70:6f:6b:94:61:bb:cf:1a:22:9d:a1:b0:c6:10:ef:ed:a0:
1f:ac:65:de:20:a7:d1:8f:3b:8c:e6:6a:ba:d4:fa:4b:2f:79:
6d:b6:7c:b5:a4:f5:40:15:b4:2c:d1:82:1d:bf:04:07:84:3c:
fd:43:19:cc:da:40:c9:80:95:ec:f3:52:8d:18:39:4c:97:c3:
4a:c2:5e:03:55:7f:4e:5f:3a:85:c1:60:d1:63:96:f8:6b:8c:
0a:45:98:08:f1:dc:03:ad:de:f2:76:20:8f:38:f5:b9:ad:af:
8e:02:9b:ee:38:e6:d0:51:b9:a6:d3:28:1c:d7:c6:9a:56:07:
00:37:cd:78:ce:95:f5:f8:f6:ce:9c:8d:4c:af:a9:c1:10:08:
0b:a8:08:82:a5:80:fe:f5:ef:5e:89:43:ae:35:1b:ea:42:1e:
6e:2a:2f:50:02:67:9a:aa:44:61:51:12:87:07:ab:10:b0:48:
43:fd:c1:ed:97:22:af:cb:5e:4b:d3:d1:81:b1:2e:02:8a:af:
36:ad:03:ad
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYVvJsAeP4BB5U1ooBhazCOaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzMDUyMDA5YmE3ODk4ZDIzNjFjYTJlZTdkMTMwMTI0Zjlk
MjUxMjUwHhcNMjMwMTAxMjEwNDQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNmQwNWFiMjU2ODBiYTgwZDM5M2RmMmM1ODY5YzdjMzQ3MmM0Mzg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPViIwIDL/eKkvhtKgYFNRAaFq3/
yVe2AjRwOMm5MKxi45S8UlIfQgdZUtwgwm8cTHCOlFbwWt47lOcUemRKm9voKjNe
9Us4lhDI1rMJEb0bZ15z3Y6goRR/XOkCINIVqVt+tTikqXMg7nghk4UAvJtdyg0Q
hyZWaZSx1kZSDCYUk10SUqfSsaWYZ9tiD7a58J7cqgI0LvKrYZOLPoreMa5nR45v
gNjr6ELFBrZQkGOEeyCnnfoplIcmS7K/PqnRSoUS7eDeMaIkh/nvyOXk5/WsDx3l
aujqTgsSTOnJQn2Cu1mOvVcbH4c35eKqKdQ4CLNfA7/mvjYHnB6KfI8v2wIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFMbQWrJWgLqA05PfLFhpx8NHLEOFMB8GA1UdIwQY
MBaAFFMFIAm6eJjSNhyi7n0TAST50lElMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXdVZ0NicDRtTkkySEtMdWZSTUJKUG5TVVNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC85Mzg3MjItZDQxNS00MDI3LWEwYjMt
YTJhYTI4NmRjNDQ4LzEveHRCYXNsYUF1b0RUazk4c1dHbkh3MGNzUTRVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC85Mzg3MjItZDQxNS00MDI3LWEwYjMtYTJhYTI4NmRjNDQ4
LzEvVXdVZ0NicDRtTkkySEtMdWZSTUJKUG5TVVNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCW+SkAwQC
uV6cMA0EAgACMAcDBQMqBegAMA0GCSqGSIb3DQEBCwUAA4IBAQB2fOf586VtVXbb
DkSjdO6UDPH06tU1AHvUIqM9wKRFOJBQGJmUM0t40bKhdWJedtJMTeoE7H/0cG9r
lGG7zxoinaGwxhDv7aAfrGXeIKfRjzuM5mq61PpLL3lttny1pPVAFbQs0YIdvwQH
hDz9QxnM2kDJgJXs81KNGDlMl8NKwl4DVX9OXzqFwWDRY5b4a4wKRZgI8dwDrd7y
diCPOPW5ra+OApvuOObQUbmm0ygc18aaVgcAN814zpX1+PbOnI1Mr6nBEAgLqAiC
pYD+9e9eiUOuNRvqQh5uKi9QAmeaqkRhURKHB6sQsEhD/cHtlyKvy15L09GBsS4C
iq82rQOt
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:56 2024 by rpki-client on console-fra.rpki-client.org