Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/mL44j7mL40Hqw46XJi4nj2wyH50.roa
File: mL44j7mL40Hqw46XJi4nj2wyH50.roa (raw, json)
Hash identifier: tiDlEbUuJ5FGp9EHesxWxF3k5Uvspegzfpv1ToysFvk=
Subject key identifier: 98:BE:38:8F:B9:8B:E3:41:EA:C3:8E:97:26:2E:27:8F:6C:32:1F:9D
Certificate issuer: /CN=e4c86da3f483246518d368034bc86113906a55a3
Certificate serial: 019266855BB2B499325293B5C09586049A58
Authority key identifier: E4:C8:6D:A3:F4:83:24:65:18:D3:68:03:4B:C8:61:13:90:6A:55:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/mL44j7mL40Hqw46XJi4nj2wyH50.roa
Signing time: Mon 07 Oct 2024 10:27:48 +0000
ROA not before: Mon 07 Oct 2024 10:27:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29512
IP address blocks: 5.39.192.0/21 maxlen: 21
79.110.0.0/20 maxlen: 24
94.231.224.0/20 maxlen: 24
195.140.236.0/22 maxlen: 24
2a00:fbc0::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 09 Oct 2024 11:15:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:66:85:5b:b2:b4:99:32:52:93:b5:c0:95:86:04:9a:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4c86da3f483246518d368034bc86113906a55a3
Validity
Not Before: Oct 7 10:27:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=98be388fb98be341eac38e97262e278f6c321f9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:98:da:d1:72:21:f0:c6:a5:31:e7:5a:8f:e2:
a6:e0:12:3c:ec:4c:45:99:d3:74:5c:84:2b:02:ff:
9a:ba:74:e6:c5:52:b4:68:2a:bc:ae:33:10:47:20:
0e:53:a9:91:d9:f3:02:a7:cc:59:6a:05:17:46:b5:
43:69:e1:c7:a7:59:91:b2:52:1a:74:08:f1:bd:48:
b2:85:ff:c3:ae:98:b8:f7:b8:4e:03:82:e2:96:39:
27:20:11:f0:52:6c:e9:59:58:11:06:74:ae:3d:d8:
e9:28:d7:f1:01:04:6d:c7:0e:da:b2:9b:3c:6a:31:
12:6b:2c:d8:a3:f3:87:36:18:8f:8c:ab:4c:bd:c5:
65:29:49:06:8a:c8:9f:90:68:60:d5:06:d1:dd:23:
0a:15:c9:6f:e3:1b:50:f4:4f:df:07:cd:d5:7a:5c:
60:57:c5:47:1c:d1:ab:cb:1f:72:a2:24:76:36:24:
c5:64:e8:e1:e8:b0:13:09:bc:d7:7e:26:90:13:2d:
2b:af:ea:52:b0:f6:0f:54:37:ad:e6:41:28:ed:6b:
f1:8e:58:f2:a8:0d:26:32:fc:c7:e7:29:c5:e1:ab:
93:d3:85:3b:62:e3:17:4d:74:0b:8a:2f:d2:96:63:
69:ef:30:f2:21:78:f1:07:23:01:c0:bb:f8:1c:7b:
a2:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:BE:38:8F:B9:8B:E3:41:EA:C3:8E:97:26:2E:27:8F:6C:32:1F:9D
X509v3 Authority Key Identifier:
keyid:E4:C8:6D:A3:F4:83:24:65:18:D3:68:03:4B:C8:61:13:90:6A:55:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/mL44j7mL40Hqw46XJi4nj2wyH50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.39.192.0/21
79.110.0.0/20
94.231.224.0/20
195.140.236.0/22
IPv6:
2a00:fbc0::/29
Signature Algorithm: sha256WithRSAEncryption
33:e1:12:dd:3b:3f:4f:b8:43:ae:81:c4:a6:7b:3e:97:f2:f7:
91:c8:2d:90:f0:b5:87:d3:67:2a:aa:79:0b:9f:6b:63:c5:58:
38:e8:ae:37:3e:88:f7:fa:ee:fd:31:54:a6:df:bd:6f:ec:ac:
37:6a:2b:0e:68:ba:9f:eb:d6:9a:75:88:78:26:08:32:1a:24:
cb:6f:6e:5a:4c:8d:c8:db:0b:b2:60:60:68:47:ad:46:c4:83:
ee:18:5a:b8:b4:51:40:21:f7:3c:b7:fc:85:66:c5:b5:5f:cd:
91:05:c3:73:7c:2e:d8:86:34:77:4c:19:9d:9b:46:5c:3c:77:
0a:61:f0:e6:f1:63:f1:a9:b7:f4:f2:bf:fb:c7:58:64:7a:9f:
f3:73:07:bb:09:35:87:e7:9c:c7:5d:e1:1e:43:c5:b5:78:b9:
30:b6:76:36:4f:65:3d:6c:8a:bd:ac:20:eb:0d:67:7e:59:c0:
51:92:4a:63:e3:c4:5d:50:7c:62:0b:32:77:cb:33:80:06:70:
56:02:18:2e:05:fd:d1:63:df:56:c4:56:fe:c1:51:f3:9f:19:
bb:29:69:3e:6f:c4:88:d9:65:bd:09:8a:80:63:27:82:e0:70:
bf:a4:ad:66:67:ff:90:a1:df:60:df:9e:a7:97:68:47:7f:20:
3f:ff:b3:fb
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAZJmhVuytJkyUpO1wJWGBJpYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0Yzg2ZGEzZjQ4MzI0NjUxOGQzNjgwMzRiYzg2MTEzOTA2
YTU1YTMwHhcNMjQxMDA3MTAyNzQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OGJlMzg4ZmI5OGJlMzQxZWFjMzhlOTcyNjJlMjc4ZjZjMzIxZjlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxpja0XIh8MalMedaj+Km4BI87ExF
mdN0XIQrAv+aunTmxVK0aCq8rjMQRyAOU6mR2fMCp8xZagUXRrVDaeHHp1mRslIa
dAjxvUiyhf/Drpi497hOA4LiljknIBHwUmzpWVgRBnSuPdjpKNfxAQRtxw7asps8
ajESayzYo/OHNhiPjKtMvcVlKUkGisifkGhg1QbR3SMKFclv4xtQ9E/fB83Velxg
V8VHHNGryx9yoiR2NiTFZOjh6LATCbzXfiaQEy0rr+pSsPYPVDet5kEo7Wvxjljy
qA0mMvzH5ynF4auT04U7YuMXTXQLii/SlmNp7zDyIXjxByMBwLv4HHui1QIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFJi+OI+5i+NB6sOOlyYuJ49sMh+dMB8GA1UdIwQY
MBaAFOTIbaP0gyRlGNNoA0vIYROQalWjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNU1odG9fU0RKR1VZMDJnRFM4aGhFNUJxVmFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9iNGU1MDMtNTc0Yi00NTY1LTkyMTct
YzUxMWEzZTkxMmI2LzEvbUw0NGo3bUw0MEhxdzQ2WEppNG5qMnd5SDUwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS9iNGU1MDMtNTc0Yi00NTY1LTkyMTctYzUxMWEzZTkxMmI2
LzEvNU1odG9fU0RKR1VZMDJnRFM4aGhFNUJxVmFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQDBSfAAwQE
T24AAwQEXufgAwQCw4zsMA0EAgACMAcDBQMqAPvAMA0GCSqGSIb3DQEBCwUAA4IB
AQAz4RLdOz9PuEOugcSmez6X8veRyC2Q8LWH02cqqnkLn2tjxVg46K43Poj3+u79
MVSm371v7Kw3aisOaLqf69aadYh4JggyGiTLb25aTI3I2wuyYGBoR61GxIPuGFq4
tFFAIfc8t/yFZsW1X82RBcNzfC7YhjR3TBmdm0ZcPHcKYfDm8WPxqbf08r/7x1hk
ep/zcwe7CTWH55zHXeEeQ8W1eLkwtnY2T2U9bIq9rCDrDWd+WcBRkkpj48RdUHxi
CzJ3yzOABnBWAhguBf3RY99WxFb+wVHznxm7KWk+b8SI2WW9CYqAYyeC4HC/pK1m
Z/+Qod9g356nl2hHfyA//7P7
-----END CERTIFICATE-----
Generated at Wed Oct 9 17:08:26 2024 by rpki-client on console-fra.rpki-client.org