Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/MlOxDkw0cp6NK58gPhRshtcJ-rI.roa
File: MlOxDkw0cp6NK58gPhRshtcJ-rI.roa (raw, json)
Hash identifier: o33xY16QpOLUVVRElgkFfvKd9we57PFtX807QshpoVY=
Subject key identifier: 32:53:B1:0E:4C:34:72:9E:8D:2B:9F:20:3E:14:6C:86:D7:09:FA:B2
Certificate issuer: /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Certificate serial: 019389050D3E1233A237758FA8902E8A6BEC
Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/MlOxDkw0cp6NK58gPhRshtcJ-rI.roa
Signing time: Mon 02 Dec 2024 20:17:09 +0000
ROA not before: Mon 02 Dec 2024 20:17:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198160
IP address blocks: 89.36.32.0/24 maxlen: 24
89.36.33.0/24 maxlen: 24
185.121.133.0/24 maxlen: 24
185.121.135.0/24 maxlen: 24
212.232.18.0/24 maxlen: 24
212.232.19.0/24 maxlen: 24
2a14:6780::/29 maxlen: 48
2a14:6780::/32 maxlen: 32
2a14:6781::/32 maxlen: 32
Validation: Failed, certificate revoked on Sun 08 Dec 2024 09:08:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:89:05:0d:3e:12:33:a2:37:75:8f:a8:90:2e:8a:6b:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Validity
Not Before: Dec 2 20:17:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3253b10e4c34729e8d2b9f203e146c86d709fab2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a2:e3:20:18:f0:2b:a8:ad:90:ff:0a:e3:0f:
a1:44:c8:59:81:a3:20:1d:6c:3d:6b:88:29:67:93:
38:f1:36:48:aa:57:75:f6:b7:0a:b6:49:27:6c:b7:
19:f7:1e:68:3b:97:90:37:35:18:0c:6e:a6:1e:fc:
ed:55:ae:3e:04:a0:51:86:d1:24:9d:f9:c9:01:7f:
2a:36:fb:87:89:da:81:27:e6:76:7a:3f:fe:4d:88:
2a:5c:82:b1:bd:9f:5c:ee:c2:1d:c5:a4:a5:96:be:
47:94:1a:86:6d:8e:1d:1c:60:b3:0e:a4:da:4f:2a:
69:aa:19:6e:4e:79:14:fb:76:8d:99:20:e7:be:60:
7c:20:99:dd:8d:60:20:55:50:c3:0c:ad:de:5e:84:
31:45:80:a4:a6:37:c3:f4:8f:48:ff:66:18:dd:c2:
ff:fe:7a:45:ed:06:68:66:eb:4a:b9:9d:04:d0:ec:
b3:09:29:af:45:5f:fe:e8:68:b9:f5:54:41:ea:47:
f9:8c:e3:86:47:c4:b6:cc:86:35:de:7d:02:7f:6a:
a1:24:47:65:a9:1b:07:93:34:49:39:ea:a1:18:72:
47:26:db:75:2a:b0:6b:d5:30:ec:c7:55:70:a0:f0:
82:01:80:4b:5a:b6:e8:41:62:91:fb:8f:fb:e2:6d:
3f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:53:B1:0E:4C:34:72:9E:8D:2B:9F:20:3E:14:6C:86:D7:09:FA:B2
X509v3 Authority Key Identifier:
keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/MlOxDkw0cp6NK58gPhRshtcJ-rI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.36.32.0/23
185.121.133.0/24
185.121.135.0/24
212.232.18.0/23
IPv6:
2a14:6780::/29
Signature Algorithm: sha256WithRSAEncryption
49:e6:e8:96:52:e6:b4:45:53:f9:73:2b:04:11:8e:14:d7:67:
4f:64:64:31:ef:4f:8c:9a:56:21:4e:b2:37:1f:36:91:e6:76:
fd:b4:29:55:6b:a3:23:1d:23:fd:39:82:b7:89:29:90:a3:a1:
54:42:ef:c2:04:76:cb:a1:aa:84:ea:a1:02:56:fc:3a:a8:57:
ce:c0:fe:93:28:dd:40:dd:82:b4:dc:49:bb:52:20:19:8e:6b:
07:ef:4a:23:98:f5:7b:8b:df:5a:0e:88:4c:f6:48:04:a0:ec:
3c:f2:ce:db:8c:d7:34:5b:bb:f1:d1:51:f7:52:96:ac:90:b7:
4d:72:d5:c3:b6:73:d0:53:f7:1b:55:99:57:1b:d4:02:e8:62:
3a:41:ae:36:6c:cc:9f:70:49:bd:ed:4a:3f:91:01:ff:41:02:
7c:46:a5:aa:d0:c3:bf:68:07:6a:ba:7c:35:35:5f:0d:78:95:
3b:75:d1:57:0c:98:46:e8:7c:b8:92:9c:11:8e:d7:80:2f:42:
ad:90:75:81:16:b2:a0:70:9c:00:38:ba:d2:0e:3d:e3:7f:2f:
af:c5:cc:29:e4:66:d9:a4:16:5c:c4:c3:99:f1:12:40:ac:68:
71:05:08:e9:0f:01:97:c5:de:72:85:58:11:c3:48:72:f3:32:
4e:1f:23:50
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAZOJBQ0+EjOiN3WPqJAuimvsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyYmUyOWM5NTY4OTRjNDljNmQ0YmUwZWQ5ODg4MmI5MGQx
YmM3N2YwHhcNMjQxMjAyMjAxNzA5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMjUzYjEwZTRjMzQ3MjllOGQyYjlmMjAzZTE0NmM4NmQ3MDlmYWIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxaLjIBjwK6itkP8K4w+hRMhZgaMg
HWw9a4gpZ5M48TZIqld19rcKtkknbLcZ9x5oO5eQNzUYDG6mHvztVa4+BKBRhtEk
nfnJAX8qNvuHidqBJ+Z2ej/+TYgqXIKxvZ9c7sIdxaSllr5HlBqGbY4dHGCzDqTa
TyppqhluTnkU+3aNmSDnvmB8IJndjWAgVVDDDK3eXoQxRYCkpjfD9I9I/2YY3cL/
/npF7QZoZutKuZ0E0OyzCSmvRV/+6Gi59VRB6kf5jOOGR8S2zIY13n0Cf2qhJEdl
qRsHkzRJOeqhGHJHJtt1KrBr1TDsx1VwoPCCAYBLWrboQWKR+4/74m0/EwIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFDJTsQ5MNHKejSufID4UbIbXCfqyMB8GA1UdIwQY
MBaAFBK+KclWiUxJxtS+DtmIgrkNG8d/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXI0cHlWYUpURW5HMUw0TzJZaUN1UTBieDM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9jMjc4OGYtOGM4Yy00N2JiLWI5MjIt
YWE2ZWQ0ZGFmYjNiLzEvTWxPeERrdzBjcDZOSzU4Z1BoUnNodGNKLXJJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS9jMjc4OGYtOGM4Yy00N2JiLWI5MjItYWE2ZWQ0ZGFmYjNi
LzEvRXI0cHlWYUpURW5HMUw0TzJZaUN1UTBieDM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQBWSQgAwQA
uXmFAwQAuXmHAwQB1OgSMA0EAgACMAcDBQMqFGeAMA0GCSqGSIb3DQEBCwUAA4IB
AQBJ5uiWUua0RVP5cysEEY4U12dPZGQx70+MmlYhTrI3HzaR5nb9tClVa6MjHSP9
OYK3iSmQo6FUQu/CBHbLoaqE6qECVvw6qFfOwP6TKN1A3YK03Em7UiAZjmsH70oj
mPV7i99aDohM9kgEoOw88s7bjNc0W7vx0VH3UpaskLdNctXDtnPQU/cbVZlXG9QC
6GI6Qa42bMyfcEm97Uo/kQH/QQJ8RqWq0MO/aAdqunw1NV8NeJU7ddFXDJhG6Hy4
kpwRjteAL0KtkHWBFrKgcJwAOLrSDj3jfy+vxcwp5GbZpBZcxMOZ8RJArGhxBQjp
DwGXxd5yhVgRw0hy8zJOHyNQ
-----END CERTIFICATE-----
Generated at Thu Apr 17 22:45:37 2025 by rpki-client