Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/MZlm_6fZSfORm6bZI2fuLJjs6Yg.roa
File: MZlm_6fZSfORm6bZI2fuLJjs6Yg.roa (raw, json)
Hash identifier: h2JMLcrTlnTtg1Gb+jzcoOguFdUrGW8dlb/s9XZPSlw=
Subject key identifier: 31:99:66:FF:A7:D9:49:F3:91:9B:A6:D9:23:67:EE:2C:98:EC:E9:88
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01933E4C072FF4B49489D5808A75D6323DDF
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/MZlm_6fZSfORm6bZI2fuLJjs6Yg.roa
Signing time: Mon 18 Nov 2024 08:03:10 +0000
ROA not before: Mon 18 Nov 2024 08:03:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2.57.241.0/24 maxlen: 24
45.87.121.0/24 maxlen: 24
45.135.182.0/24 maxlen: 24
45.135.183.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
89.34.219.0/24 maxlen: 24
89.35.130.0/24 maxlen: 24
93.114.183.0/24 maxlen: 24
185.141.216.0/24 maxlen: 24
185.198.235.0/24 maxlen: 24
188.64.142.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 19 Nov 2024 14:45:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:3e:4c:07:2f:f4:b4:94:89:d5:80:8a:75:d6:32:3d:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Nov 18 08:03:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=319966ffa7d949f3919ba6d92367ee2c98ece988
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d5:26:0f:b5:d7:8c:8b:59:14:7c:e2:c7:45:
04:ec:bc:b8:5c:79:a9:c8:54:87:cb:d7:c4:98:42:
5c:77:58:e0:6c:3e:8f:0d:56:04:be:63:33:ae:36:
16:9c:ef:28:d6:ff:d0:68:d5:7c:b2:62:32:5f:b3:
15:f0:1c:57:a3:52:ac:53:41:15:42:51:09:30:13:
1a:33:d4:d4:e3:93:aa:28:f3:f6:2a:b8:86:2c:aa:
71:dc:df:90:d3:88:31:4e:4d:86:56:06:9b:6c:da:
70:d6:8b:a3:43:4e:55:38:80:7f:58:a1:c5:84:6a:
e7:d7:ea:bc:4f:80:6d:94:7c:8d:c7:6b:fe:74:9d:
54:43:f8:42:c9:b1:80:98:be:13:78:92:22:04:29:
3d:25:b8:37:cc:7b:7a:2a:1d:60:c1:04:0c:46:e0:
fd:4f:0b:6f:dd:54:4d:7f:72:dc:b9:12:2c:ca:c0:
cc:0c:31:f3:a8:7d:0c:12:05:ef:44:30:19:85:48:
30:9f:0c:93:3c:58:5b:c5:ee:3a:8e:79:c9:25:78:
19:46:e4:63:ed:bb:8e:2c:6e:7b:ac:fd:7a:9e:8a:
85:97:1f:3b:91:03:19:46:f2:cc:cd:f6:c0:19:57:
ee:98:c5:59:ab:71:54:0d:48:c0:b1:6e:ec:52:c6:
06:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:99:66:FF:A7:D9:49:F3:91:9B:A6:D9:23:67:EE:2C:98:EC:E9:88
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/MZlm_6fZSfORm6bZI2fuLJjs6Yg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.241.0/24
45.87.121.0/24
45.135.182.0/23
89.34.106.0/24
89.34.219.0/24
89.35.130.0/24
93.114.183.0/24
185.141.216.0/24
185.198.235.0/24
188.64.142.0/24
Signature Algorithm: sha256WithRSAEncryption
42:96:bc:b7:49:8b:14:c6:89:3a:15:94:c1:38:9c:46:86:86:
a7:19:bb:41:e9:b7:93:6b:1c:c6:75:ec:1a:38:6e:f6:be:ca:
3d:ab:6c:4b:4a:65:f0:c8:d0:de:da:7c:70:ca:47:7f:bb:e7:
0a:9e:94:a8:d2:8b:e5:20:73:e5:87:20:be:d8:dc:85:9b:9c:
8f:72:95:02:52:11:e4:bd:66:e2:cd:68:f6:e8:b2:83:53:1d:
88:06:8c:38:81:64:50:4c:5a:a0:79:eb:0b:11:7e:9c:4d:1f:
aa:db:be:08:f0:b7:63:06:13:d6:b3:e0:a5:ee:42:34:02:af:
4f:dd:4f:87:e4:a3:e4:c1:de:06:62:2d:19:7b:5c:73:43:9f:
33:62:00:a9:90:bc:2a:8c:05:91:a2:6a:9c:db:62:b6:66:46:
a1:54:3f:70:69:12:6f:2f:c8:7a:50:62:06:11:56:da:ba:9b:
02:78:22:5b:8e:94:18:0e:02:87:02:83:53:3f:a8:e7:e1:6e:
36:93:b4:70:0f:08:97:91:12:48:19:71:d5:51:f4:4a:d9:24:
ba:b7:72:d4:28:79:06:ff:2d:8d:98:f6:03:11:ec:0b:c6:25:
3a:53:52:ec:ee:46:46:bb:e8:8e:37:9f:ca:d0:f1:79:25:4c:
c5:a8:7e:1d
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgISAZM+TAcv9LSUidWAinXWMj3fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjQxMTE4MDgwMzEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMTk5NjZmZmE3ZDk0OWYzOTE5YmE2ZDkyMzY3ZWUyYzk4ZWNlOTg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1NUmD7XXjItZFHzix0UE7Ly4XHmp
yFSHy9fEmEJcd1jgbD6PDVYEvmMzrjYWnO8o1v/QaNV8smIyX7MV8BxXo1KsU0EV
QlEJMBMaM9TU45OqKPP2KriGLKpx3N+Q04gxTk2GVgabbNpw1oujQ05VOIB/WKHF
hGrn1+q8T4BtlHyNx2v+dJ1UQ/hCybGAmL4TeJIiBCk9Jbg3zHt6Kh1gwQQMRuD9
Twtv3VRNf3LcuRIsysDMDDHzqH0MEgXvRDAZhUgwnwyTPFhbxe46jnnJJXgZRuRj
7buOLG57rP16noqFlx87kQMZRvLMzfbAGVfumMVZq3FUDUjAsW7sUsYG6wIDAQAB
o4ICPzCCAjswHQYDVR0OBBYEFDGZZv+n2UnzkZum2SNn7iyY7OmIMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvTVpsbV82ZlpTZk9SbTZiWkkyZnVMSmpzNllnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8AwQAAjnxAwQA
LVd5AwQBLYe2AwQAWSJqAwQAWSLbAwQAWSOCAwQAXXK3AwQAuY3YAwQAucbrAwQA
vECOMA0GCSqGSIb3DQEBCwUAA4IBAQBClry3SYsUxok6FZTBOJxGhoanGbtB6beT
axzGdewaOG72vso9q2xLSmXwyNDe2nxwykd/u+cKnpSo0ovlIHPlhyC+2NyFm5yP
cpUCUhHkvWbizWj26LKDUx2IBow4gWRQTFqgeesLEX6cTR+q274I8LdjBhPWs+Cl
7kI0Aq9P3U+H5KPkwd4GYi0Ze1xzQ58zYgCpkLwqjAWRomqc22K2ZkahVD9waRJv
L8h6UGIGEVbaupsCeCJbjpQYDgKHAoNTP6jn4W42k7RwDwiXkRJIGXHVUfRK2SS6
t3LUKHkG/y2NmPYDEewLxiU6U1Ls7kZGu+iON5/K0PF5JUzFqH4d
-----END CERTIFICATE-----
Generated at Tue Nov 19 17:32:30 2024 by rpki-client on console-fra.rpki-client.org