Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/M325QXEOQ2j4_bBS9T2o1gk9RA8.roa
File: M325QXEOQ2j4_bBS9T2o1gk9RA8.roa (raw, json)
Hash identifier: DH8RSUBN6HHs3r6PG+Mpy9FZwG3jmUV5yHZZ8opZfiA=
Subject key identifier: 33:7D:B9:41:71:0E:43:68:F8:FD:B0:52:F5:3D:A8:D6:09:3D:44:0F
Certificate issuer: /CN=a7436375fb0322756b55daff64e265ef72c0da52
Certificate serial: 01856D9D1C9366222E1F5586BFD45B3F7D59
Authority key identifier: A7:43:63:75:FB:03:22:75:6B:55:DA:FF:64:E2:65:EF:72:C0:DA:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p0NjdfsDInVrVdr_ZOJl73LA2lI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/M325QXEOQ2j4_bBS9T2o1gk9RA8.roa
Signing time: Sun 01 Jan 2023 13:54:51 +0000
ROA not before: Sun 01 Jan 2023 13:54:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206575
IP address blocks: 194.5.68.0/22 maxlen: 22
185.155.224.0/23 maxlen: 23
80.253.160.0/24 maxlen: 24
80.253.160.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:9d:1c:93:66:22:2e:1f:55:86:bf:d4:5b:3f:7d:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7436375fb0322756b55daff64e265ef72c0da52
Validity
Not Before: Jan 1 13:54:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=337db941710e4368f8fdb052f53da8d6093d440f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c6:f5:9e:f1:3b:87:8d:d6:05:6e:2e:02:57:
cf:42:9f:79:7d:d2:17:9a:0c:27:f0:d3:1c:d2:f6:
d8:ea:b3:32:31:95:c4:b6:4d:dd:d9:98:41:50:24:
e5:07:f2:8b:d9:ea:6a:88:0e:90:4f:6f:52:7c:66:
2b:4f:9d:69:95:cd:40:73:1b:bf:16:f1:1b:0d:13:
e6:4e:e3:2a:a4:99:70:41:25:f7:93:93:ce:24:8a:
a9:ba:02:12:e5:69:8a:b2:ca:79:90:6a:ad:98:49:
37:cc:b3:0d:8d:cd:60:0a:9f:2b:39:2d:ee:eb:e2:
49:7c:84:22:5e:d4:02:61:b7:89:34:a0:27:82:07:
5e:0c:e9:1b:83:30:2a:4d:bb:c1:16:10:cb:c8:31:
6b:81:4b:e4:fa:dc:5e:18:7d:eb:25:25:5a:21:a1:
5e:21:f3:f9:be:e1:3a:8a:48:3e:31:a7:0b:2d:54:
d5:b8:a6:b9:c9:f5:ce:c0:07:aa:71:7f:62:f8:b4:
a2:e0:ce:d7:ae:de:24:e7:56:22:0e:22:97:71:80:
d7:78:18:a8:ba:3a:e2:4a:d6:f2:bd:b3:8b:2e:03:
81:92:b3:68:a1:64:9e:da:a9:9e:03:40:5d:e5:48:
b9:75:f5:5a:37:07:e2:6d:df:29:7c:f0:cd:79:10:
67:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:7D:B9:41:71:0E:43:68:F8:FD:B0:52:F5:3D:A8:D6:09:3D:44:0F
X509v3 Authority Key Identifier:
keyid:A7:43:63:75:FB:03:22:75:6B:55:DA:FF:64:E2:65:EF:72:C0:DA:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p0NjdfsDInVrVdr_ZOJl73LA2lI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/M325QXEOQ2j4_bBS9T2o1gk9RA8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.253.160.0/22
185.155.224.0/23
194.5.68.0/22
Signature Algorithm: sha256WithRSAEncryption
8e:a2:0d:9b:b8:8d:3c:43:0e:ca:2d:6d:ee:6a:71:66:7d:b9:
03:67:1e:cc:7e:b6:68:49:61:20:51:99:47:3e:0f:03:8a:76:
db:b7:7b:33:fb:23:35:19:9f:10:8a:e2:62:24:c7:4e:e4:37:
fa:0b:c5:6e:b2:7b:b3:26:41:cf:cb:f1:66:ee:4c:0b:db:75:
5d:89:73:1f:b4:fb:13:99:f1:fb:95:df:5e:cf:19:7d:94:6c:
d8:0f:7a:ef:d8:a1:4b:09:5b:c5:a5:95:0c:bc:e9:94:72:40:
59:c4:d8:47:b7:54:3b:92:2d:7c:5b:30:cd:fd:08:9b:14:6e:
82:ee:97:5f:1a:90:6a:8e:ff:d1:77:49:ac:93:d1:84:83:83:
27:68:67:57:a0:07:6e:cf:d7:0f:cb:a7:40:2e:cd:11:ab:99:
4c:2b:bd:f4:53:fa:8d:e5:ef:1d:e1:e4:13:0d:49:74:22:94:
e6:03:d5:63:bb:60:31:eb:7c:35:10:48:bc:ba:ec:aa:51:da:
d2:aa:dc:b2:16:c2:88:b8:3b:ed:63:de:e5:c8:f3:a9:e7:1f:
79:a1:35:95:b9:0d:ae:fd:99:e8:dd:eb:69:a3:96:e0:b2:cc:
a3:38:1d:aa:69:d4:e9:a0:03:20:25:36:2a:af:f5:6b:48:82:
f4:a4:79:ef
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYVtnRyTZiIuH1WGv9RbP31ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3NDM2Mzc1ZmIwMzIyNzU2YjU1ZGFmZjY0ZTI2NWVmNzJj
MGRhNTIwHhcNMjMwMTAxMTM1NDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMzdkYjk0MTcxMGU0MzY4ZjhmZGIwNTJmNTNkYThkNjA5M2Q0NDBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMb1nvE7h43WBW4uAlfPQp95fdIX
mgwn8NMc0vbY6rMyMZXEtk3d2ZhBUCTlB/KL2epqiA6QT29SfGYrT51plc1Acxu/
FvEbDRPmTuMqpJlwQSX3k5POJIqpugIS5WmKssp5kGqtmEk3zLMNjc1gCp8rOS3u
6+JJfIQiXtQCYbeJNKAnggdeDOkbgzAqTbvBFhDLyDFrgUvk+txeGH3rJSVaIaFe
IfP5vuE6ikg+MacLLVTVuKa5yfXOwAeqcX9i+LSi4M7Xrt4k51YiDiKXcYDXeBio
ujriStbyvbOLLgOBkrNooWSe2qmeA0Bd5Ui5dfVaNwfibd8pfPDNeRBnFwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFDN9uUFxDkNo+P2wUvU9qNYJPUQPMB8GA1UdIwQY
MBaAFKdDY3X7AyJ1a1Xa/2TiZe9ywNpSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDBOamRmc0RJblZyVmRyX1pPSmw3M0xBMmxJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9lNWUzZmEtOTllZS00NWNmLWJkOWEt
MGU2YzFmZTlkMDE1LzEvTTMyNVFYRU9RMmo0X2JCUzlUMm8xZ2s5UkE4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9lNWUzZmEtOTllZS00NWNmLWJkOWEtMGU2YzFmZTlkMDE1
LzEvcDBOamRmc0RJblZyVmRyX1pPSmw3M0xBMmxJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCUP2gAwQB
uZvgAwQCwgVEMA0GCSqGSIb3DQEBCwUAA4IBAQCOog2buI08Qw7KLW3uanFmfbkD
Zx7MfrZoSWEgUZlHPg8Dinbbt3sz+yM1GZ8QiuJiJMdO5Df6C8VusnuzJkHPy/Fm
7kwL23VdiXMftPsTmfH7ld9ezxl9lGzYD3rv2KFLCVvFpZUMvOmUckBZxNhHt1Q7
ki18WzDN/QibFG6C7pdfGpBqjv/Rd0msk9GEg4MnaGdXoAduz9cPy6dALs0Rq5lM
K730U/qN5e8d4eQTDUl0IpTmA9Vju2Ax63w1EEi8uuyqUdrSqtyyFsKIuDvtY97l
yPOp5x95oTWVuQ2u/Zno3etpo5bgssyjOB2qadTpoAMgJTYqr/VrSIL0pHnv
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:19 2024 by rpki-client on console-fra.rpki-client.org