Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/7YslX-USlrJ1LinFmB2PD-z3G2o.roa
File: 7YslX-USlrJ1LinFmB2PD-z3G2o.roa (raw, json)
Hash identifier: fLcUzpjhB5Az7OUj+mIvcdqOKlmGMVeSVEubU5GCEUA=
Subject key identifier: ED:8B:25:5F:E5:12:96:B2:75:2E:29:C5:98:1D:8F:0F:EC:F7:1B:6A
Certificate issuer: /CN=50c1e426f58e42ae30e56cdb7ff4d8f9ddd85b30
Certificate serial: 0185729EE3E2D1C08DFAD4EEE31F4058ED27
Authority key identifier: 50:C1:E4:26:F5:8E:42:AE:30:E5:6C:DB:7F:F4:D8:F9:DD:D8:5B:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/7YslX-USlrJ1LinFmB2PD-z3G2o.roa
Signing time: Mon 02 Jan 2023 13:14:53 +0000
ROA not before: Mon 02 Jan 2023 13:14:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8391
IP address blocks: 195.253.96.0/19 maxlen: 24
185.119.138.0/23 maxlen: 24
195.253.0.0/16 maxlen: 24
195.253.6.0/24 maxlen: 24
195.138.32.0/19 maxlen: 24
194.77.54.0/23 maxlen: 23
2a01:5b0::/32 maxlen: 48
Validation: Failed, certificate revoked on Thu 09 Feb 2023 11:29:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:9e:e3:e2:d1:c0:8d:fa:d4:ee:e3:1f:40:58:ed:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50c1e426f58e42ae30e56cdb7ff4d8f9ddd85b30
Validity
Not Before: Jan 2 13:14:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ed8b255fe51296b2752e29c5981d8f0fecf71b6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:79:4e:54:3e:7b:67:7c:ca:1c:21:69:da:ec:
b6:f2:31:13:97:3b:fd:02:29:3a:a6:3a:a6:88:97:
8d:9d:ad:55:f2:7e:1d:8e:88:56:4b:f7:24:91:17:
1e:38:b5:17:1f:b6:94:ff:3e:c0:70:c6:61:15:be:
c9:c0:94:85:86:8b:5a:c1:71:1c:ba:96:50:51:21:
57:3f:90:af:e6:62:10:b3:8d:08:92:1b:39:28:48:
bf:5c:51:91:77:65:70:7f:0e:80:f2:aa:ed:3c:f2:
cc:5c:c1:ef:67:d0:ff:b6:40:2d:b2:6e:f2:82:f7:
b2:24:58:6f:42:cf:3e:97:7b:6f:b3:f9:ea:5d:48:
24:12:88:99:47:2b:0f:2e:b2:ed:d0:27:ae:f6:6a:
d4:b9:72:38:3a:31:57:c7:1b:e4:73:46:9b:46:8f:
01:3d:69:6c:83:10:65:be:cd:2b:5e:df:51:77:81:
09:dd:f7:1e:c4:15:b5:22:fb:65:0e:fa:6c:b0:e1:
ea:b6:90:bc:6f:98:5a:90:4f:9a:dd:8d:d6:f9:ff:
b1:a2:cc:8f:30:3f:61:2a:e3:1d:8e:4c:99:23:5a:
3e:03:e9:7e:71:7a:f7:26:1f:e5:17:46:e0:f1:0a:
9c:b8:e8:6d:45:7e:14:05:c2:ed:90:c0:25:0e:2b:
e0:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:8B:25:5F:E5:12:96:B2:75:2E:29:C5:98:1D:8F:0F:EC:F7:1B:6A
X509v3 Authority Key Identifier:
keyid:50:C1:E4:26:F5:8E:42:AE:30:E5:6C:DB:7F:F4:D8:F9:DD:D8:5B:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/7YslX-USlrJ1LinFmB2PD-z3G2o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.119.138.0/23
194.77.54.0/23
195.138.32.0/19
195.253.0.0/16
IPv6:
2a01:5b0::/32
Signature Algorithm: sha256WithRSAEncryption
93:73:4a:1f:0b:71:a9:7e:ff:46:1b:0a:0a:81:7e:e6:e0:93:
ca:e2:7e:af:e0:69:3c:a1:f4:3d:6f:9c:17:23:d1:9e:0a:22:
fa:bc:28:78:55:ed:c6:a0:54:f4:c5:bc:c5:ac:c4:8d:2a:83:
a1:32:0a:d1:a5:cb:8b:1f:91:98:94:7f:21:13:e7:fa:77:74:
da:1c:e0:16:78:39:23:54:ea:df:fc:2d:c7:e8:04:16:ae:4f:
67:3d:4f:65:4f:c2:5e:46:f9:6b:aa:fc:5b:1e:86:c4:28:ea:
b6:f7:45:05:06:4c:40:93:a5:dc:99:b6:8e:05:17:b3:e9:fc:
30:e6:06:cb:27:52:ac:82:2f:fc:8e:ab:80:af:ff:57:75:fa:
ed:cf:ca:30:dd:b6:58:c5:0e:3a:0e:bc:00:06:eb:bb:af:a6:
0b:5f:08:94:80:09:54:52:a5:e9:4c:c4:67:4d:fb:e1:6d:12:
0b:f2:c7:ed:63:db:a7:e3:8d:73:85:0a:f3:10:1f:54:35:02:
ee:35:0b:ae:32:1f:65:38:44:78:78:a9:d5:04:77:ef:60:67:
55:55:90:09:92:99:79:ae:60:fe:23:4c:7c:60:8c:e1:7b:a3:
b8:73:3a:d9:db:c6:e9:14:53:5b:f8:3a:4d:a9:84:e3:e4:31:
67:68:8a:76
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAYVynuPi0cCN+tTu4x9AWO0nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwYzFlNDI2ZjU4ZTQyYWUzMGU1NmNkYjdmZjRkOGY5ZGRk
ODViMzAwHhcNMjMwMTAyMTMxNDUzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZDhiMjU1ZmU1MTI5NmIyNzUyZTI5YzU5ODFkOGYwZmVjZjcxYjZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXlOVD57Z3zKHCFp2uy28jETlzv9
Aik6pjqmiJeNna1V8n4djohWS/ckkRceOLUXH7aU/z7AcMZhFb7JwJSFhotawXEc
upZQUSFXP5Cv5mIQs40Ikhs5KEi/XFGRd2Vwfw6A8qrtPPLMXMHvZ9D/tkAtsm7y
gveyJFhvQs8+l3tvs/nqXUgkEoiZRysPLrLt0Ceu9mrUuXI4OjFXxxvkc0abRo8B
PWlsgxBlvs0rXt9Rd4EJ3fcexBW1IvtlDvpssOHqtpC8b5hakE+a3Y3W+f+xosyP
MD9hKuMdjkyZI1o+A+l+cXr3Jh/lF0bg8QqcuOhtRX4UBcLtkMAlDivg2QIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFO2LJV/lEpaydS4pxZgdjw/s9xtqMB8GA1UdIwQY
MBaAFFDB5Cb1jkKuMOVs23/02Pnd2FswMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVU1Ia0p2V09RcTR3NVd6YmZfVFktZDNZV3pBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi85YzZkYWQtMzc3YS00NDRlLWIwZGMt
MDYzY2U2Y2Y0NjBkLzEvN1lzbFgtVVNsckoxTGluRm1CMlBELXozRzJvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi85YzZkYWQtMzc3YS00NDRlLWIwZGMtMDYzY2U2Y2Y0NjBk
LzEvVU1Ia0p2V09RcTR3NVd6YmZfVFktZDNZV3pBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAdBAIAATAXAwQBuXeKAwQB
wk02AwQFw4ogAwMAw/0wDQQCAAIwBwMFACoBBbAwDQYJKoZIhvcNAQELBQADggEB
AJNzSh8Lcal+/0YbCgqBfubgk8rifq/gaTyh9D1vnBcj0Z4KIvq8KHhV7cagVPTF
vMWsxI0qg6EyCtGly4sfkZiUfyET5/p3dNoc4BZ4OSNU6t/8LcfoBBauT2c9T2VP
wl5G+Wuq/FsehsQo6rb3RQUGTECTpdyZto4FF7Pp/DDmBssnUqyCL/yOq4Cv/1d1
+u3PyjDdtljFDjoOvAAG67uvpgtfCJSACVRSpelMxGdN++FtEgvyx+1j26fjjXOF
CvMQH1Q1Au41C64yH2U4RHh4qdUEd+9gZ1VVkAmSmXmuYP4jTHxgjOF7o7hzOtnb
xukUU1v4Ok2phOPkMWdoinY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:31 2024 by rpki-client on console-ams.rpki-client.org