Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/5FFuKUXv_Nvo3pu8pd5woy8HtFE.roa
File: 5FFuKUXv_Nvo3pu8pd5woy8HtFE.roa (raw, json)
Hash identifier: IBiTaTcpMOzCxaYJVjrY0L5g0AobOCkfk1ciHDU2cuI=
Subject key identifier: E4:51:6E:29:45:EF:FC:DB:E8:DE:9B:BC:A5:DE:70:A3:2F:07:B4:51
Certificate issuer: /CN=50c1e426f58e42ae30e56cdb7ff4d8f9ddd85b30
Certificate serial: 018635F0A29FA711DBD9CB0BE8CD05412784
Authority key identifier: 50:C1:E4:26:F5:8E:42:AE:30:E5:6C:DB:7F:F4:D8:F9:DD:D8:5B:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/5FFuKUXv_Nvo3pu8pd5woy8HtFE.roa
Signing time: Thu 09 Feb 2023 11:30:08 +0000
ROA not before: Thu 09 Feb 2023 11:30:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8391
IP address blocks: 195.253.96.0/19 maxlen: 24
185.119.138.0/23 maxlen: 24
195.253.0.0/16 maxlen: 24
195.253.6.0/24 maxlen: 24
195.138.32.0/19 maxlen: 24
194.77.54.0/23 maxlen: 23
2a01:5b0::/32 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:31:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:35:f0:a2:9f:a7:11:db:d9:cb:0b:e8:cd:05:41:27:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50c1e426f58e42ae30e56cdb7ff4d8f9ddd85b30
Validity
Not Before: Feb 9 11:30:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e4516e2945effcdbe8de9bbca5de70a32f07b451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ed:8f:af:38:4b:07:eb:8a:c1:70:0b:1e:29:
08:70:15:cb:fc:ce:d4:e0:cc:67:5b:ce:c9:03:8c:
91:dd:e1:d8:72:8b:0f:80:e7:12:ec:41:b0:f0:bc:
46:33:c8:51:19:51:dc:23:0f:c9:2d:4d:2e:ba:43:
2f:15:8a:05:c6:2e:46:be:ad:66:6c:bd:d9:35:ab:
95:ec:c8:f8:b6:4b:20:9a:1f:b6:37:0d:ea:3d:5a:
b1:e9:2a:53:a9:18:3b:45:1e:db:90:fd:54:04:e4:
8e:d3:d9:04:4d:1e:3b:7f:ae:11:5e:88:e4:10:28:
e9:3f:88:30:9a:5a:7f:4b:ab:ce:b5:71:fa:50:c0:
f5:f7:cc:14:00:3c:da:89:74:de:00:18:18:e7:c6:
b0:36:c3:3d:55:5b:2f:e3:23:28:6b:e0:3f:37:8f:
99:6b:e3:e7:98:cc:90:9c:7a:b6:21:dd:fd:fb:d4:
08:7a:e5:5d:c0:97:b2:e1:fb:e0:a2:e0:83:b8:08:
88:b0:ea:d4:ad:07:d6:9b:a5:73:bb:26:3b:30:16:
6c:09:38:b2:63:10:c6:2a:62:c8:30:95:24:73:7d:
30:08:84:13:bc:76:d3:40:6c:69:87:73:e4:d9:8e:
be:a8:41:ad:ae:3f:1c:2a:83:a0:14:33:de:08:b9:
2f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:51:6E:29:45:EF:FC:DB:E8:DE:9B:BC:A5:DE:70:A3:2F:07:B4:51
X509v3 Authority Key Identifier:
keyid:50:C1:E4:26:F5:8E:42:AE:30:E5:6C:DB:7F:F4:D8:F9:DD:D8:5B:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/5FFuKUXv_Nvo3pu8pd5woy8HtFE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.119.138.0/23
194.77.54.0/23
195.138.32.0/19
195.253.0.0/16
IPv6:
2a01:5b0::/32
Signature Algorithm: sha256WithRSAEncryption
5e:70:b4:aa:ec:b2:bd:2f:0a:3e:2a:79:10:e3:65:84:0b:c5:
f2:e3:fd:59:a2:08:fe:fb:c8:3e:36:b2:64:cd:b1:1a:0d:c4:
71:39:41:73:9d:54:2e:97:59:fe:90:0e:40:9b:86:ae:42:3e:
70:07:89:93:08:a2:22:14:3e:18:f3:52:15:89:cc:05:df:80:
55:8a:3f:7c:1c:c5:0a:ec:49:56:74:36:c9:e1:04:da:6b:0d:
fc:65:ae:96:b7:ab:c2:9c:0b:ea:43:60:0d:ed:34:4d:ca:70:
46:35:b2:91:dd:06:b3:1c:29:a8:dd:71:c2:f3:51:b3:8b:7f:
54:7f:7c:2e:40:17:90:79:24:70:6f:55:f8:82:c0:3a:aa:e8:
b9:97:6c:66:80:92:92:16:77:c2:6f:43:17:68:b7:1e:a8:16:
fe:61:54:a6:52:e4:f9:61:4a:fb:b1:d2:d3:42:09:c7:57:18:
ef:9a:d0:fd:36:b5:59:4c:4e:29:d3:cd:ad:62:a0:2e:e9:51:
34:9f:d0:ee:3c:e0:42:c7:23:84:d6:ba:10:a8:e8:ac:19:c7:
d3:bb:99:7d:fc:35:cd:04:10:2c:02:df:69:f6:04:65:48:7c:
9a:37:5c:c3:38:22:c8:94:3a:35:11:ce:a5:81:62:e1:14:1d:
7b:69:e6:18
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAYY18KKfpxHb2csL6M0FQSeEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwYzFlNDI2ZjU4ZTQyYWUzMGU1NmNkYjdmZjRkOGY5ZGRk
ODViMzAwHhcNMjMwMjA5MTEzMDA4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNDUxNmUyOTQ1ZWZmY2RiZThkZTliYmNhNWRlNzBhMzJmMDdiNDUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAie2PrzhLB+uKwXALHikIcBXL/M7U
4MxnW87JA4yR3eHYcosPgOcS7EGw8LxGM8hRGVHcIw/JLU0uukMvFYoFxi5Gvq1m
bL3ZNauV7Mj4tksgmh+2Nw3qPVqx6SpTqRg7RR7bkP1UBOSO09kETR47f64RXojk
ECjpP4gwmlp/S6vOtXH6UMD198wUADzaiXTeABgY58awNsM9VVsv4yMoa+A/N4+Z
a+PnmMyQnHq2Id39+9QIeuVdwJey4fvgouCDuAiIsOrUrQfWm6VzuyY7MBZsCTiy
YxDGKmLIMJUkc30wCIQTvHbTQGxph3Pk2Y6+qEGtrj8cKoOgFDPeCLkvLwIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFORRbilF7/zb6N6bvKXecKMvB7RRMB8GA1UdIwQY
MBaAFFDB5Cb1jkKuMOVs23/02Pnd2FswMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVU1Ia0p2V09RcTR3NVd6YmZfVFktZDNZV3pBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi85YzZkYWQtMzc3YS00NDRlLWIwZGMt
MDYzY2U2Y2Y0NjBkLzEvNUZGdUtVWHZfTnZvM3B1OHBkNXdveThIdEZFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi85YzZkYWQtMzc3YS00NDRlLWIwZGMtMDYzY2U2Y2Y0NjBk
LzEvVU1Ia0p2V09RcTR3NVd6YmZfVFktZDNZV3pBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAdBAIAATAXAwQBuXeKAwQB
wk02AwQFw4ogAwMAw/0wDQQCAAIwBwMFACoBBbAwDQYJKoZIhvcNAQELBQADggEB
AF5wtKrssr0vCj4qeRDjZYQLxfLj/VmiCP77yD42smTNsRoNxHE5QXOdVC6XWf6Q
DkCbhq5CPnAHiZMIoiIUPhjzUhWJzAXfgFWKP3wcxQrsSVZ0NsnhBNprDfxlrpa3
q8KcC+pDYA3tNE3KcEY1spHdBrMcKajdccLzUbOLf1R/fC5AF5B5JHBvVfiCwDqq
6LmXbGaAkpIWd8JvQxdotx6oFv5hVKZS5PlhSvux0tNCCcdXGO+a0P02tVlMTinT
za1ioC7pUTSf0O484ELHI4TWuhCo6KwZx9O7mX38Nc0EECwC32n2BGVIfJo3XMM4
IsiUOjURzqWBYuEUHXtp5hg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:31 2024 by rpki-client on console-ams.rpki-client.org