Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/UNn5KdCeKxVyZMsWTcaWW3Fptn8.roa
File: UNn5KdCeKxVyZMsWTcaWW3Fptn8.roa (raw, json)
Hash identifier: ZsUjz3IETpyQU88EwVelMyEXLd66WUEAQgR+Zuorqpg=
Subject key identifier: 50:D9:F9:29:D0:9E:2B:15:72:64:CB:16:4D:C6:96:5B:71:69:B6:7F
Certificate issuer: /CN=1c6c48cccce321ec18702957b396381a1f1a0410
Certificate serial: 01902A790CCF6D2039FF95A1EE85BD8FCEA3
Authority key identifier: 1C:6C:48:CC:CC:E3:21:EC:18:70:29:57:B3:96:38:1A:1F:1A:04:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HGxIzMzjIewYcClXs5Y4Gh8aBBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/UNn5KdCeKxVyZMsWTcaWW3Fptn8.roa
Signing time: Tue 18 Jun 2024 08:31:34 +0000
ROA not before: Tue 18 Jun 2024 08:31:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48642
IP address blocks: 5.43.128.0/19 maxlen: 19
5.199.192.0/19 maxlen: 19
45.131.56.0/22 maxlen: 22
46.36.0.0/19 maxlen: 19
46.36.0.0/20 maxlen: 21
82.112.32.0/19 maxlen: 19
88.218.212.0/22 maxlen: 22
91.108.168.0/21 maxlen: 21
91.227.50.0/23 maxlen: 23
93.90.96.0/20 maxlen: 20
94.230.128.0/20 maxlen: 20
94.230.142.0/23 maxlen: 23
109.74.160.0/20 maxlen: 20
134.255.128.0/19 maxlen: 19
185.2.104.0/22 maxlen: 22
185.59.56.0/22 maxlen: 22
185.60.212.0/22 maxlen: 22
185.132.28.0/22 maxlen: 22
185.162.204.0/22 maxlen: 22
185.201.88.0/22 maxlen: 22
185.204.156.0/22 maxlen: 22
185.214.252.0/22 maxlen: 22
185.229.192.0/22 maxlen: 22
185.252.228.0/22 maxlen: 22
193.46.244.0/22 maxlen: 22
193.168.176.0/22 maxlen: 22
194.169.56.0/22 maxlen: 22
195.69.136.0/22 maxlen: 22
217.151.224.0/22 maxlen: 22
217.151.232.0/21 maxlen: 21
2a0a:f940::/32 maxlen: 32
2a0d:b600::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 18 Jun 2024 13:04:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:2a:79:0c:cf:6d:20:39:ff:95:a1:ee:85:bd:8f:ce:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c6c48cccce321ec18702957b396381a1f1a0410
Validity
Not Before: Jun 18 08:31:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=50d9f929d09e2b157264cb164dc6965b7169b67f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:05:c9:39:19:0f:2c:ab:af:10:a5:01:cd:6a:
65:a0:0d:ee:b7:09:dd:91:63:de:fa:97:c2:a0:ae:
39:b8:69:44:2b:2a:52:4e:24:56:da:73:f0:06:40:
94:12:fa:44:ec:1f:c4:ab:ef:a8:8b:9f:35:cb:ca:
4f:4c:45:8f:e4:48:6d:08:73:65:24:6d:db:d3:d9:
f9:19:bd:da:68:a9:0d:91:f4:8a:07:c2:48:47:38:
56:1f:3d:0d:23:b8:ab:a1:36:e1:d7:0b:b0:f6:28:
18:18:89:fc:09:7c:dc:22:7b:27:60:61:e0:7c:89:
ce:02:9c:92:85:c7:ce:f3:11:64:0e:23:bf:69:a2:
2a:83:0c:f4:b1:2f:9d:c2:42:03:1b:a4:b3:47:c2:
22:5f:81:10:c8:26:39:4c:46:ae:66:27:d3:81:e1:
70:33:ef:a1:57:b5:a0:25:83:75:c4:df:db:20:80:
8c:2a:37:91:c6:20:b3:8a:75:10:9f:b4:c7:ca:29:
d9:f5:6b:ab:0a:ac:81:d3:e7:54:81:35:3a:cd:b2:
ac:54:ce:b2:e5:f1:e1:6e:46:a2:72:c8:fb:70:3b:
eb:1b:29:a2:8d:42:2d:94:75:01:8c:52:0a:f1:de:
64:e0:fb:8f:06:43:93:1e:41:11:65:27:88:23:61:
01:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:D9:F9:29:D0:9E:2B:15:72:64:CB:16:4D:C6:96:5B:71:69:B6:7F
X509v3 Authority Key Identifier:
keyid:1C:6C:48:CC:CC:E3:21:EC:18:70:29:57:B3:96:38:1A:1F:1A:04:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HGxIzMzjIewYcClXs5Y4Gh8aBBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/UNn5KdCeKxVyZMsWTcaWW3Fptn8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/HGxIzMzjIewYcClXs5Y4Gh8aBBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.43.128.0/19
5.199.192.0/19
45.131.56.0/22
46.36.0.0/19
82.112.32.0/19
88.218.212.0/22
91.108.168.0/21
91.227.50.0/23
93.90.96.0/20
94.230.128.0/20
109.74.160.0/20
134.255.128.0/19
185.2.104.0/22
185.59.56.0/22
185.60.212.0/22
185.132.28.0/22
185.162.204.0/22
185.201.88.0/22
185.204.156.0/22
185.214.252.0/22
185.229.192.0/22
185.252.228.0/22
193.46.244.0/22
193.168.176.0/22
194.169.56.0/22
195.69.136.0/22
217.151.224.0/22
217.151.232.0/21
IPv6:
2a0a:f940::/32
2a0d:b600::/29
Signature Algorithm: sha256WithRSAEncryption
cf:91:2a:3c:95:bd:b9:62:8c:92:cd:32:e4:0f:2d:d3:18:ff:
73:b5:b1:29:4b:55:9e:82:7b:ea:d0:3a:5d:11:34:64:70:5b:
3d:aa:6f:05:57:5d:16:9e:69:8d:31:fe:58:ea:98:01:f2:5f:
60:8c:fe:09:ba:57:00:2c:20:64:8d:ac:63:12:d6:34:1a:9e:
bf:55:66:09:d1:f9:d7:07:79:54:e5:a4:0d:6c:eb:67:ae:77:
2b:6c:c0:8c:5c:95:0c:3e:32:0c:9f:9b:69:fd:4c:6c:f4:6e:
b4:b0:29:8c:1f:97:c4:8a:26:1e:53:f2:0c:a6:97:64:d0:0e:
fe:7b:d3:1d:ba:5e:1c:aa:02:17:35:f8:f8:0a:c3:4b:91:d8:
9d:75:59:e8:f4:4c:d3:80:2c:7a:5f:57:bb:22:55:03:f1:28:
4e:1b:18:9a:34:15:6e:c7:02:e4:58:22:28:12:d3:a8:b2:f3:
a7:5e:c3:53:51:4a:ce:c8:b5:1c:f9:e7:00:a6:28:c0:af:d5:
e5:70:a2:31:31:b8:2e:58:0c:79:27:f6:b4:33:74:bd:7d:42:
92:fc:7c:18:92:82:24:c0:e6:b7:07:76:6f:3e:46:ac:f9:d5:
dc:e6:34:cb:fe:ac:49:6e:fa:14:f3:d5:ab:22:a3:5f:c9:06:
74:32:d4:6d
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgISAZAqeQzPbSA5/5Wh7oW9j86jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjNmM0OGNjY2NlMzIxZWMxODcwMjk1N2IzOTYzODFhMWYx
YTA0MTAwHhcNMjQwNjE4MDgzMTM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MGQ5ZjkyOWQwOWUyYjE1NzI2NGNiMTY0ZGM2OTY1YjcxNjliNjdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3AXJORkPLKuvEKUBzWploA3utwnd
kWPe+pfCoK45uGlEKypSTiRW2nPwBkCUEvpE7B/Eq++oi581y8pPTEWP5EhtCHNl
JG3b09n5Gb3aaKkNkfSKB8JIRzhWHz0NI7iroTbh1wuw9igYGIn8CXzcInsnYGHg
fInOApyShcfO8xFkDiO/aaIqgwz0sS+dwkIDG6SzR8IiX4EQyCY5TEauZifTgeFw
M++hV7WgJYN1xN/bIICMKjeRxiCzinUQn7THyinZ9WurCqyB0+dUgTU6zbKsVM6y
5fHhbkaicsj7cDvrGymijUItlHUBjFIK8d5k4PuPBkOTHkERZSeII2EB/QIDAQAB
o4ICxjCCAsIwHQYDVR0OBBYEFFDZ+SnQnisVcmTLFk3GlltxabZ/MB8GA1UdIwQY
MBaAFBxsSMzM4yHsGHApV7OWOBofGgQQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEd4SXpNempJZXdZY0NsWHM1WTRHaDhhQkJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS84ZTRlNjgtYmQyYS00ZGMyLWFhZTYt
YTA1NjBhYzgyYmE3LzEvVU5uNUtkQ2VLeFZ5Wk1zV1RjYVdXM0ZwdG44LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS84ZTRlNjgtYmQyYS00ZGMyLWFhZTYtYTA1NjBhYzgyYmE3
LzEvSEd4SXpNempJZXdZY0NsWHM1WTRHaDhhQkJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHbBggrBgEFBQcBBwEB/wSByzCByDCBrwQCAAEwgagDBAUF
K4ADBAUFx8ADBAItgzgDBAUuJAADBAVScCADBAJY2tQDBANbbKgDBAFb4zIDBARd
WmADBARe5oADBARtSqADBAWG/4ADBAK5AmgDBAK5OzgDBAK5PNQDBAK5hBwDBAK5
oswDBAK5yVgDBAK5zJwDBAK51vwDBAK55cADBAK5/OQDBALBLvQDBALBqLADBALC
qTgDBALDRYgDBALZl+ADBAPZl+gwFAQCAAIwDgMFACoK+UADBQMqDbYAMA0GCSqG
SIb3DQEBCwUAA4IBAQDPkSo8lb25YoySzTLkDy3TGP9ztbEpS1Wegnvq0DpdETRk
cFs9qm8FV10WnmmNMf5Y6pgB8l9gjP4JulcALCBkjaxjEtY0Gp6/VWYJ0fnXB3lU
5aQNbOtnrncrbMCMXJUMPjIMn5tp/Uxs9G60sCmMH5fEiiYeU/IMppdk0A7+e9Md
ul4cqgIXNfj4CsNLkdiddVno9EzTgCx6X1e7IlUD8ShOGxiaNBVuxwLkWCIoEtOo
svOnXsNTUUrOyLUc+ecApijAr9XlcKIxMbguWAx5J/a0M3S9fUKS/HwYkoIkwOa3
B3ZvPkas+dXc5jTL/qxJbvoU89WrIqNfyQZ0MtRt
-----END CERTIFICATE-----
Generated at Tue Jun 18 16:21:50 2024 by rpki-client on console-ams.rpki-client.org