Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/VihH8UEeEh_Axn2Db79wg0c5mLM.roa
File: VihH8UEeEh_Axn2Db79wg0c5mLM.roa (raw, json)
Hash identifier: fHQvpiJj12SyBlsAF6960eE2+dsnUm6dgrs+m0KoIxM=
Subject key identifier: 56:28:47:F1:41:1E:12:1F:C0:C6:7D:83:6F:BF:70:83:47:39:98:B3
Certificate issuer: /CN=50c1e426f58e42ae30e56cdb7ff4d8f9ddd85b30
Certificate serial: 018635EECE2868827CF4D9D04C37812A5C7C
Authority key identifier: 50:C1:E4:26:F5:8E:42:AE:30:E5:6C:DB:7F:F4:D8:F9:DD:D8:5B:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/VihH8UEeEh_Axn2Db79wg0c5mLM.roa
Signing time: Thu 09 Feb 2023 11:28:08 +0000
ROA not before: Thu 09 Feb 2023 11:28:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8561
IP address blocks: 195.253.66.0/24 maxlen: 24
195.253.74.0/24 maxlen: 24
195.253.88.0/21 maxlen: 24
195.253.96.0/19 maxlen: 24
185.119.136.0/22 maxlen: 24
195.253.64.0/24 maxlen: 24
2a01:5b0:d::/48 maxlen: 48
2a01:5b0:3::/48 maxlen: 48
2a01:5b0:8::/46 maxlen: 48
2a01:5b0:10::/45 maxlen: 48
2a01:5b0:20::/43 maxlen: 48
2a01:5b0:6::/48 maxlen: 48
2a01:5b0:4::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:31:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:35:ee:ce:28:68:82:7c:f4:d9:d0:4c:37:81:2a:5c:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50c1e426f58e42ae30e56cdb7ff4d8f9ddd85b30
Validity
Not Before: Feb 9 11:28:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=562847f1411e121fc0c67d836fbf7083473998b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4c:a6:4f:d5:88:9d:ab:9b:ae:88:72:8c:18:
89:26:b7:66:57:b8:bb:e3:30:f9:6f:6e:1f:24:ff:
2c:23:35:89:f2:d6:73:11:be:e9:71:58:07:0c:e5:
89:2c:e9:66:a4:fb:54:2b:fe:6c:71:7e:4f:51:65:
34:57:d9:38:5c:fd:7b:3a:a8:2a:83:6d:66:6f:a1:
c0:a1:1f:4a:6d:83:61:07:a8:41:40:8e:11:e6:6d:
00:63:13:ea:be:b5:ab:69:1a:4c:e0:ee:60:a8:50:
21:ac:52:24:69:87:5c:fc:0f:4b:17:9e:74:f6:fc:
a5:f9:d5:4c:68:b1:df:9f:45:30:52:84:c9:8f:34:
2c:51:10:be:d1:5f:9b:28:2c:f8:a9:d4:3c:72:e1:
f2:42:b1:f5:1d:66:3d:45:ed:d2:95:1a:b5:cf:0e:
77:a5:88:da:69:b2:cb:58:fe:53:28:16:5c:59:b4:
4a:a1:95:fb:8f:ff:c3:ab:a4:c4:ba:ea:0d:d6:d7:
17:83:91:55:f7:eb:22:84:8f:31:13:6c:90:96:4b:
5b:18:c2:42:59:b4:c2:9c:17:58:66:c3:f0:e4:f6:
a7:31:f1:1c:2a:e3:46:a9:80:c1:dd:17:34:1a:82:
b3:55:79:7d:8b:c2:5c:07:bf:65:aa:44:4e:72:12:
2c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:28:47:F1:41:1E:12:1F:C0:C6:7D:83:6F:BF:70:83:47:39:98:B3
X509v3 Authority Key Identifier:
keyid:50:C1:E4:26:F5:8E:42:AE:30:E5:6C:DB:7F:F4:D8:F9:DD:D8:5B:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/VihH8UEeEh_Axn2Db79wg0c5mLM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.119.136.0/22
195.253.64.0/24
195.253.66.0/24
195.253.74.0/24
195.253.88.0-195.253.127.255
IPv6:
2a01:5b0:3::-2a01:5b0:4:ffff:ffff:ffff:ffff:ffff
2a01:5b0:6::/48
2a01:5b0:8::/46
2a01:5b0:d::/48
2a01:5b0:10::/45
2a01:5b0:20::/43
Signature Algorithm: sha256WithRSAEncryption
59:1b:63:ba:28:c8:19:e3:e8:ce:e9:59:ea:26:79:99:6c:21:
39:76:6b:e8:8a:61:84:9c:11:a3:97:9c:9b:46:e1:25:fb:35:
bf:40:82:64:8a:7b:17:cc:74:83:c0:53:74:58:d2:48:2b:8c:
35:61:53:07:d7:b9:bc:58:54:c3:06:51:db:2c:e5:15:91:19:
74:f8:f2:7c:fc:85:f4:97:e7:06:e3:dc:e8:25:23:95:4f:f9:
d5:55:35:5b:3e:ac:6b:40:09:fa:47:86:24:5a:2e:28:14:d2:
b4:29:98:9a:e8:50:c6:ae:f2:0b:ab:e7:e6:ca:55:77:20:37:
08:1e:34:4a:63:02:c4:9a:a6:04:7d:c4:a8:ad:89:c6:c6:11:
58:24:f8:90:e6:6a:3c:d0:19:c6:b3:30:62:20:17:37:40:9c:
56:0c:67:7b:5f:0b:e9:1b:90:3e:de:48:1f:dd:4d:ca:f6:1c:
d0:95:c1:03:65:68:2a:66:3c:51:47:8d:80:6f:f5:e2:2c:a4:
18:e6:07:94:af:45:b9:d4:5e:e4:eb:c9:a8:2e:1a:75:70:ca:
86:23:51:f4:3c:f5:33:35:1a:cc:de:ca:94:43:50:6f:f9:11:
cc:51:bb:96:b8:53:fa:c3:1b:c8:ab:b2:38:a5:5b:9e:6a:2e:
f4:17:fd:5b
-----BEGIN CERTIFICATE-----
MIIFZzCCBE+gAwIBAgISAYY17s4oaIJ89NnQTDeBKlx8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwYzFlNDI2ZjU4ZTQyYWUzMGU1NmNkYjdmZjRkOGY5ZGRk
ODViMzAwHhcNMjMwMjA5MTEyODA4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NjI4NDdmMTQxMWUxMjFmYzBjNjdkODM2ZmJmNzA4MzQ3Mzk5OGIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUymT9WInaubrohyjBiJJrdmV7i7
4zD5b24fJP8sIzWJ8tZzEb7pcVgHDOWJLOlmpPtUK/5scX5PUWU0V9k4XP17Oqgq
g21mb6HAoR9KbYNhB6hBQI4R5m0AYxPqvrWraRpM4O5gqFAhrFIkaYdc/A9LF550
9vyl+dVMaLHfn0UwUoTJjzQsURC+0V+bKCz4qdQ8cuHyQrH1HWY9Re3SlRq1zw53
pYjaabLLWP5TKBZcWbRKoZX7j//Dq6TEuuoN1tcXg5FV9+sihI8xE2yQlktbGMJC
WbTCnBdYZsPw5PanMfEcKuNGqYDB3Rc0GoKzVXl9i8JcB79lqkROchIscwIDAQAB
o4ICczCCAm8wHQYDVR0OBBYEFFYoR/FBHhIfwMZ9g2+/cINHOZizMB8GA1UdIwQY
MBaAFFDB5Cb1jkKuMOVs23/02Pnd2FswMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVU1Ia0p2V09RcTR3NVd6YmZfVFktZDNZV3pBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi85YzZkYWQtMzc3YS00NDRlLWIwZGMt
MDYzY2U2Y2Y0NjBkLzEvVmloSDhVRWVFaF9BeG4yRGI3OXdnMGM1bUxNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi85YzZkYWQtMzc3YS00NDRlLWIwZGMtMDYzY2U2Y2Y0NjBk
LzEvVU1Ia0p2V09RcTR3NVd6YmZfVFktZDNZV3pBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGIBggrBgEFBQcBBwEB/wR5MHcwLAQCAAEwJgMEArl3iAME
AMP9QAMEAMP9QgMEAMP9SjAMAwQDw/1YAwQHw/0AMEcEAgACMEEwEgMHACoBBbAA
AwMHACoBBbAABAMHACoBBbAABgMHAioBBbAACAMHACoBBbAADQMHAyoBBbAAEAMH
BSoBBbAAIDANBgkqhkiG9w0BAQsFAAOCAQEAWRtjuijIGePozulZ6iZ5mWwhOXZr
6IphhJwRo5ecm0bhJfs1v0CCZIp7F8x0g8BTdFjSSCuMNWFTB9e5vFhUwwZR2yzl
FZEZdPjyfPyF9JfnBuPc6CUjlU/51VU1Wz6sa0AJ+keGJFouKBTStCmYmuhQxq7y
C6vn5spVdyA3CB40SmMCxJqmBH3EqK2JxsYRWCT4kOZqPNAZxrMwYiAXN0CcVgxn
e18L6RuQPt5IH91NyvYc0JXBA2VoKmY8UUeNgG/14iykGOYHlK9FudRe5OvJqC4a
dXDKhiNR9Dz1MzUazN7KlENQb/kRzFG7lrhT+sMbyKuyOKVbnmou9Bf9Ww==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:31 2024 by rpki-client on console-ams.rpki-client.org