Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/dmURSYi0yiJhyegITktVjjhlmaI.roa
File: dmURSYi0yiJhyegITktVjjhlmaI.roa (raw, json)
Hash identifier: PUb28MoVqD4YtigcB/xmZynP27glBFZKJDc+VUkQYkY=
Subject key identifier: 76:65:11:49:88:B4:CA:22:61:C9:E8:08:4E:4B:55:8E:38:65:99:A2
Certificate issuer: /CN=947320d030930178e6f7ceef91d2ab8784d3dc16
Certificate serial: 0187902C17B65A15EB9C2CDA59006275A248
Authority key identifier: 94:73:20:D0:30:93:01:78:E6:F7:CE:EF:91:D2:AB:87:84:D3:DC:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lHMg0DCTAXjm987vkdKrh4TT3BY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/dmURSYi0yiJhyegITktVjjhlmaI.roa
Signing time: Mon 17 Apr 2023 17:03:41 +0000
ROA not before: Mon 17 Apr 2023 17:03:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62005
IP address blocks: 185.123.53.0/24 maxlen: 24
176.124.32.0/24 maxlen: 24
176.124.33.0/24 maxlen: 24
185.39.18.0/24 maxlen: 24
193.109.120.0/24 maxlen: 24
194.61.121.0/24 maxlen: 24
194.61.120.0/24 maxlen: 24
91.235.234.0/24 maxlen: 24
195.54.160.0/24 maxlen: 24
2a10:1fc0:f::/48 maxlen: 48
2a10:1fc0:8::/48 maxlen: 48
2a10:1fc0:3::/48 maxlen: 48
2a10:1fc0:e::/48 maxlen: 48
2a10:1fc0:1::/48 maxlen: 48
2a10:1fc0:c::/48 maxlen: 48
2a10:1fc0:2::/48 maxlen: 48
2a10:1fc0:5::/48 maxlen: 48
2a10:1fc0:10::/48 maxlen: 48
2a10:1fc0:b::/48 maxlen: 48
2a10:1fc0:6::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 18 Aug 2023 05:56:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:90:2c:17:b6:5a:15:eb:9c:2c:da:59:00:62:75:a2:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=947320d030930178e6f7ceef91d2ab8784d3dc16
Validity
Not Before: Apr 17 17:03:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7665114988b4ca2261c9e8084e4b558e386599a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:33:67:73:fa:72:fe:6c:bf:55:ed:bc:ec:11:
c3:37:d2:0a:87:c8:93:4a:36:9d:80:f2:3d:1c:01:
65:d7:58:74:b8:9c:ef:b3:a5:4f:b6:bc:05:7b:79:
11:34:d6:31:3b:dc:23:79:cd:9c:11:05:01:6f:47:
27:1b:d7:3d:b2:06:d6:5d:00:a4:66:49:c0:0e:6b:
5c:bf:fc:d8:37:04:d5:4b:8f:2f:e9:fc:ed:00:c3:
a6:f7:86:7d:0e:72:6c:4f:1e:c4:2a:e2:94:25:bf:
c7:48:7b:ff:9e:36:b4:11:b3:4e:ad:72:2c:58:ea:
e6:67:8e:08:a1:78:18:7c:ad:d6:80:66:61:48:0b:
13:b0:42:7c:60:d2:2c:5c:46:e1:06:59:f2:1c:0d:
40:97:ad:4a:a3:b7:f2:8e:81:bc:eb:96:4c:42:a9:
9d:71:10:93:b4:85:de:d7:5c:6a:4b:2d:68:52:21:
4d:6b:40:5b:9b:e4:1a:50:79:64:fc:74:cd:48:e1:
d9:e1:54:f3:1a:a4:f2:64:c7:c7:c3:18:73:b2:13:
04:77:67:c5:09:de:8c:e6:a4:74:e4:bc:59:93:b7:
28:aa:aa:37:db:7d:6a:17:ff:f0:93:c2:57:d6:43:
ff:09:77:86:13:23:ab:f2:34:11:b8:d6:09:c8:5a:
92:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:65:11:49:88:B4:CA:22:61:C9:E8:08:4E:4B:55:8E:38:65:99:A2
X509v3 Authority Key Identifier:
keyid:94:73:20:D0:30:93:01:78:E6:F7:CE:EF:91:D2:AB:87:84:D3:DC:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lHMg0DCTAXjm987vkdKrh4TT3BY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/dmURSYi0yiJhyegITktVjjhlmaI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.235.234.0/24
176.124.32.0/23
185.39.18.0/24
185.123.53.0/24
193.109.120.0/24
194.61.120.0/23
195.54.160.0/24
IPv6:
2a10:1fc0:1::-2a10:1fc0:3:ffff:ffff:ffff:ffff:ffff
2a10:1fc0:5::-2a10:1fc0:6:ffff:ffff:ffff:ffff:ffff
2a10:1fc0:8::/48
2a10:1fc0:b::-2a10:1fc0:c:ffff:ffff:ffff:ffff:ffff
2a10:1fc0:e::-2a10:1fc0:10:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
a6:cd:bc:6c:aa:9e:0c:ac:ac:6d:94:77:62:5a:4e:52:6f:0f:
39:f5:2d:9d:19:ec:e9:05:c3:0b:23:90:1b:3f:da:1c:47:30:
24:9f:9e:e2:a0:b0:a2:3a:f1:fb:4a:d3:d0:2b:a9:00:61:e1:
43:25:58:70:26:65:01:dc:fc:83:c5:d0:ff:1d:9f:fd:6b:a7:
e7:88:6a:17:85:2d:08:17:66:c9:21:a0:15:07:62:d4:97:d5:
f7:e0:d5:17:e3:4b:03:e8:4b:3c:26:6e:8e:e2:06:d0:fe:b7:
37:3c:fd:6f:cf:bd:a0:fe:ed:71:fa:8f:3c:18:33:80:2f:8e:
ec:27:72:f0:f6:42:5a:08:89:d5:d2:22:0d:38:46:24:80:00:
f7:c8:eb:d6:5a:33:1a:74:67:b8:3f:ea:6c:25:dd:ea:9a:85:
1e:80:f1:94:94:d3:55:89:ae:a9:48:e9:d9:ad:63:f4:ee:d4:
ca:08:b0:02:02:2e:e3:16:6f:4f:14:f7:09:16:66:78:b8:ad:
84:e9:6c:58:29:4d:e7:06:57:bd:fe:d2:c0:be:e3:29:62:18:
94:b2:57:6b:38:d9:3c:0a:8d:7d:6c:69:e3:09:a9:5a:7d:10:
fc:19:7b:33:ab:62:e9:93:c8:ed:ac:6d:cd:01:14:7c:a0:8f:
d3:e4:e1:77
-----BEGIN CERTIFICATE-----
MIIFhTCCBG2gAwIBAgISAYeQLBe2WhXrnCzaWQBidaJIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0NzMyMGQwMzA5MzAxNzhlNmY3Y2VlZjkxZDJhYjg3ODRk
M2RjMTYwHhcNMjMwNDE3MTcwMzQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NjY1MTE0OTg4YjRjYTIyNjFjOWU4MDg0ZTRiNTU4ZTM4NjU5OWEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTNnc/py/my/Ve287BHDN9IKh8iT
SjadgPI9HAFl11h0uJzvs6VPtrwFe3kRNNYxO9wjec2cEQUBb0cnG9c9sgbWXQCk
ZknADmtcv/zYNwTVS48v6fztAMOm94Z9DnJsTx7EKuKUJb/HSHv/nja0EbNOrXIs
WOrmZ44IoXgYfK3WgGZhSAsTsEJ8YNIsXEbhBlnyHA1Al61Ko7fyjoG865ZMQqmd
cRCTtIXe11xqSy1oUiFNa0Bbm+QaUHlk/HTNSOHZ4VTzGqTyZMfHwxhzshMEd2fF
Cd6M5qR05LxZk7coqqo3231qF//wk8JX1kP/CXeGEyOr8jQRuNYJyFqSxQIDAQAB
o4ICkTCCAo0wHQYDVR0OBBYEFHZlEUmItMoiYcnoCE5LVY44ZZmiMB8GA1UdIwQY
MBaAFJRzINAwkwF45vfO75HSq4eE09wWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEhNZzBEQ1RBWGptOTg3dmtkS3JoNFRUM0JZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC84MmU4NzYtYzk5Ny00NjA1LTg3YWEt
OGFjNGEyMTkzOGI0LzEvZG1VUlNZaTB5aUpoeWVnSVRrdFZqamhsbWFJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC84MmU4NzYtYzk5Ny00NjA1LTg3YWEtOGFjNGEyMTkzOGI0
LzEvbEhNZzBEQ1RBWGptOTg3dmtkS3JoNFRUM0JZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGmBggrBgEFBQcBBwEB/wSBljCBkzAwBAIAATAqAwQAW+vq
AwQBsHwgAwQAuScSAwQAuXs1AwQAwW14AwQBwj14AwQAwzagMF8EAgACMFkwEgMH
ACoQH8AAAQMHAioQH8AAADASAwcAKhAfwAAFAwcAKhAfwAAGAwcAKhAfwAAIMBID
BwAqEB/AAAsDBwAqEB/AAAwwEgMHASoQH8AADgMHACoQH8AAEDANBgkqhkiG9w0B
AQsFAAOCAQEAps28bKqeDKysbZR3YlpOUm8POfUtnRns6QXDCyOQGz/aHEcwJJ+e
4qCwojrx+0rT0CupAGHhQyVYcCZlAdz8g8XQ/x2f/Wun54hqF4UtCBdmySGgFQdi
1JfV9+DVF+NLA+hLPCZujuIG0P63Nzz9b8+9oP7tcfqPPBgzgC+O7Cdy8PZCWgiJ
1dIiDThGJIAA98jr1lozGnRnuD/qbCXd6pqFHoDxlJTTVYmuqUjp2a1j9O7Uygiw
AgIu4xZvTxT3CRZmeLithOlsWClN5wZXvf7SwL7jKWIYlLJXazjZPAqNfWxp4wmp
Wn0Q/Bl7M6ti6ZPI7axtzQEUfKCP0+Thdw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:23 2024 by rpki-client on console-fra.rpki-client.org