Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/8d5a9b-b21e-421e-bce8-389f92195beb/1/Xlfqo47J3Mie267o5JjPbjFBN_s.roa
File: Xlfqo47J3Mie267o5JjPbjFBN_s.roa (raw, json)
Hash identifier: cAVeJfr4LNoATy6nEZPqr01+BnVpoRc10z55wFzMcTs=
Subject key identifier: 5E:57:EA:A3:8E:C9:DC:C8:9E:DB:AE:E8:E4:98:CF:6E:31:41:37:FB
Certificate issuer: /CN=9ae389b1cc399e216fced8d39ec3ee89fc20b839
Certificate serial: 018CE9E30F4E09A5585CCDB8EEDF52759B38
Authority key identifier: 9A:E3:89:B1:CC:39:9E:21:6F:CE:D8:D3:9E:C3:EE:89:FC:20:B8:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/muOJscw5niFvztjTnsPuifwguDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/8d5a9b-b21e-421e-bce8-389f92195beb/1/Xlfqo47J3Mie267o5JjPbjFBN_s.roa
Signing time: Mon 08 Jan 2024 16:23:40 +0000
ROA not before: Mon 08 Jan 2024 16:23:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 53766
IP address blocks: 136.144.98.0/23 maxlen: 23
136.144.96.0/23 maxlen: 23
136.144.102.0/23 maxlen: 23
136.144.104.0/23 maxlen: 23
136.144.100.0/23 maxlen: 23
136.144.112.0/24 maxlen: 24
136.144.109.0/24 maxlen: 24
136.144.108.0/24 maxlen: 24
136.144.111.0/24 maxlen: 24
136.144.110.0/24 maxlen: 24
136.144.106.0/23 maxlen: 23
159.100.160.0/23 maxlen: 23
136.144.116.0/24 maxlen: 24
159.100.170.0/23 maxlen: 23
136.144.115.0/24 maxlen: 24
136.144.118.0/24 maxlen: 24
159.100.172.0/23 maxlen: 23
136.144.117.0/24 maxlen: 24
136.144.113.0/24 maxlen: 24
159.100.166.0/23 maxlen: 23
136.144.114.0/24 maxlen: 24
136.144.123.0/24 maxlen: 24
136.144.122.0/24 maxlen: 24
136.144.125.0/24 maxlen: 24
136.144.124.0/24 maxlen: 24
136.144.119.0/24 maxlen: 24
136.144.121.0/24 maxlen: 24
159.100.174.0/23 maxlen: 23
136.144.120.0/24 maxlen: 24
136.144.126.0/24 maxlen: 24
136.144.127.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 12 Jan 2024 15:04:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:e9:e3:0f:4e:09:a5:58:5c:cd:b8:ee:df:52:75:9b:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ae389b1cc399e216fced8d39ec3ee89fc20b839
Validity
Not Before: Jan 8 16:23:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5e57eaa38ec9dcc89edbaee8e498cf6e314137fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:6a:e3:33:4b:54:c3:94:32:88:ca:f5:df:af:
c6:30:7e:50:a6:ce:6e:f6:b3:47:ac:8a:ec:97:f6:
ef:17:77:66:eb:f9:6b:66:a4:0e:cc:c2:77:da:dc:
74:91:64:f8:31:d9:f8:72:7b:5c:c1:fe:0f:7e:27:
f5:74:3c:e0:ed:6e:0d:f2:21:1a:b8:14:d3:84:6b:
ed:bf:35:e2:d0:f5:07:c2:89:ab:38:14:c2:e5:dc:
ed:4d:22:60:de:0e:fc:80:9a:94:8c:a0:f6:7b:e2:
32:d1:0c:0e:b6:0c:fc:24:b5:4b:28:ed:1d:d1:3c:
a4:8a:4a:43:8b:a3:94:c9:dc:89:e3:31:b1:81:62:
c4:35:d9:3a:6f:1e:f0:93:a0:bd:03:a4:88:ad:b3:
0c:58:e3:c8:22:c3:c4:eb:b9:f4:56:e0:76:28:36:
b5:d8:50:b3:88:9b:b0:33:9c:37:ba:25:55:46:7f:
a6:d8:e9:c4:32:89:7c:1a:8e:ca:ad:ea:7a:b0:76:
38:57:8a:79:ae:41:ca:79:75:60:5e:66:1f:8a:55:
14:cf:3c:a1:3e:d1:02:e3:e4:cc:9a:a0:50:1a:f8:
f0:17:e9:a2:ce:4b:36:d8:2d:fc:42:5c:9f:41:c1:
81:fa:44:99:33:61:76:48:2d:33:83:9a:d8:f3:8f:
1a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:57:EA:A3:8E:C9:DC:C8:9E:DB:AE:E8:E4:98:CF:6E:31:41:37:FB
X509v3 Authority Key Identifier:
keyid:9A:E3:89:B1:CC:39:9E:21:6F:CE:D8:D3:9E:C3:EE:89:FC:20:B8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/muOJscw5niFvztjTnsPuifwguDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d5a9b-b21e-421e-bce8-389f92195beb/1/Xlfqo47J3Mie267o5JjPbjFBN_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d5a9b-b21e-421e-bce8-389f92195beb/1/muOJscw5niFvztjTnsPuifwguDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
136.144.96.0/19
159.100.160.0/23
159.100.166.0/23
159.100.170.0-159.100.175.255
Signature Algorithm: sha256WithRSAEncryption
89:31:cc:1b:11:08:ff:f2:06:7d:54:1b:f4:ab:70:84:e5:9e:
95:47:b1:ed:8b:13:99:9a:6c:e9:f3:d6:ab:85:e7:41:8a:4b:
2e:b9:f8:48:4a:1d:96:d9:7f:c0:0d:4f:62:b8:4a:25:93:48:
76:8c:0f:1f:a4:10:4e:50:ba:d4:96:de:98:3f:4a:77:92:5d:
be:3e:50:91:12:05:8c:5a:a4:5d:f1:dc:28:85:42:5e:49:5b:
a0:62:24:0d:51:56:aa:4b:d8:03:3e:68:e4:b1:1b:22:a3:60:
e3:72:71:51:ee:2b:57:be:bc:a1:f7:0d:54:41:34:88:5b:06:
a8:3f:07:0f:e0:e6:93:21:71:ac:37:29:a8:ef:f7:9b:45:93:
5c:7c:0d:44:f3:2b:66:30:73:75:3c:fe:26:db:de:92:42:a0:
7a:73:89:af:32:47:e5:36:e1:66:bf:fd:d2:cb:a6:eb:a0:a0:
d3:1b:61:db:14:5c:c1:72:f7:fa:4f:f1:39:9d:ac:a3:8d:95:
46:d6:a7:11:30:30:d1:b8:b3:76:dd:22:4b:da:4f:c0:5c:11:
f0:38:00:4e:46:e0:77:27:74:4f:30:bd:b1:ba:d7:a0:0b:c7:
8d:1d:a6:ae:b9:a8:09:e7:ed:00:16:14:d9:51:63:0d:06:f6:
02:26:03:82
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAYzp4w9OCaVYXM247t9SdZs4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhZTM4OWIxY2MzOTllMjE2ZmNlZDhkMzllYzNlZTg5ZmMy
MGI4MzkwHhcNMjQwMTA4MTYyMzQwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZTU3ZWFhMzhlYzlkY2M4OWVkYmFlZThlNDk4Y2Y2ZTMxNDEzN2ZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWrjM0tUw5QyiMr136/GMH5Qps5u
9rNHrIrsl/bvF3dm6/lrZqQOzMJ32tx0kWT4Mdn4cntcwf4Pfif1dDzg7W4N8iEa
uBTThGvtvzXi0PUHwomrOBTC5dztTSJg3g78gJqUjKD2e+Iy0QwOtgz8JLVLKO0d
0TykikpDi6OUydyJ4zGxgWLENdk6bx7wk6C9A6SIrbMMWOPIIsPE67n0VuB2KDa1
2FCziJuwM5w3uiVVRn+m2OnEMol8Go7Krep6sHY4V4p5rkHKeXVgXmYfilUUzzyh
PtEC4+TMmqBQGvjwF+mizks22C38QlyfQcGB+kSZM2F2SC0zg5rY848afwIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFF5X6qOOydzIntuu6OSYz24xQTf7MB8GA1UdIwQY
MBaAFJrjibHMOZ4hb87Y057D7on8ILg5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXVPSnNjdzVuaUZ2enRqVG5zUHVpZndndURrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS84ZDVhOWItYjIxZS00MjFlLWJjZTgt
Mzg5ZjkyMTk1YmViLzEvWGxmcW80N0ozTWllMjY3bzVKalBiakZCTl9zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS84ZDVhOWItYjIxZS00MjFlLWJjZTgtMzg5ZjkyMTk1YmVi
LzEvbXVPSnNjdzVuaUZ2enRqVG5zUHVpZndndURrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQFiJBgAwQB
n2SgAwQBn2SmMAwDBAGfZKoDBASfZKAwDQYJKoZIhvcNAQELBQADggEBAIkxzBsR
CP/yBn1UG/SrcITlnpVHse2LE5mabOnz1quF50GKSy65+EhKHZbZf8ANT2K4SiWT
SHaMDx+kEE5QutSW3pg/SneSXb4+UJESBYxapF3x3CiFQl5JW6BiJA1RVqpL2AM+
aOSxGyKjYONycVHuK1e+vKH3DVRBNIhbBqg/Bw/g5pMhcaw3Kajv95tFk1x8DUTz
K2Ywc3U8/ibb3pJCoHpzia8yR+U24Wa//dLLpuugoNMbYdsUXMFy9/pP8TmdrKON
lUbWpxEwMNG4s3bdIkvaT8BcEfA4AE5G4HcndE8wvbG616ALx40dpq65qAnn7QAW
FNlRYw0G9gImA4I=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:25 2024 by rpki-client on console-fra.rpki-client.org