Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/Ub6OZr5XfdpFrFYK8CY7Ga_o1ao.roa
File: Ub6OZr5XfdpFrFYK8CY7Ga_o1ao.roa (raw, json)
Hash identifier: 1sPNA0NaFLw52yESeCMtbT05GTtsE7mWTJHAJ1ifDUk=
Subject key identifier: 51:BE:8E:66:BE:57:7D:DA:45:AC:56:0A:F0:26:3B:19:AF:E8:D5:AA
Certificate issuer: /CN=b0b5a80a7106e0a4b8545c8150bb72c699fcc9a0
Certificate serial: 0189D05CA0ED920C123902F047EF50473DD2
Authority key identifier: B0:B5:A8:0A:71:06:E0:A4:B8:54:5C:81:50:BB:72:C6:99:FC:C9:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sLWoCnEG4KS4VFyBULtyxpn8yaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/Ub6OZr5XfdpFrFYK8CY7Ga_o1ao.roa
Signing time: Mon 07 Aug 2023 14:17:58 +0000
ROA not before: Mon 07 Aug 2023 14:17:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 193.164.4.0/24 maxlen: 24
185.93.70.0/24 maxlen: 24
185.93.68.0/24 maxlen: 24
193.164.6.0/24 maxlen: 24
193.164.7.0/24 maxlen: 24
193.164.5.0/24 maxlen: 24
93.177.102.0/24 maxlen: 24
2a05:f7c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 07 Aug 2023 14:53:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d0:5c:a0:ed:92:0c:12:39:02:f0:47:ef:50:47:3d:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0b5a80a7106e0a4b8545c8150bb72c699fcc9a0
Validity
Not Before: Aug 7 14:17:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=51be8e66be577dda45ac560af0263b19afe8d5aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:84:d9:63:37:e4:3b:23:84:55:04:93:7e:32:
49:fa:9b:29:de:89:0e:97:24:a0:87:ff:a4:7e:e6:
bf:db:d0:9b:52:9e:de:a0:98:e7:73:30:6c:a0:c8:
a0:21:b3:9a:38:cf:8a:b8:fa:72:c3:9a:de:06:33:
7e:b9:e7:3b:4c:de:fc:f2:8f:c6:dc:38:f6:15:bf:
b3:d2:ca:fc:bd:e0:f8:d3:8e:11:46:aa:e7:74:61:
1d:0c:49:35:1c:37:45:f5:3e:03:fc:e0:06:72:58:
8f:2d:cc:78:98:16:fd:97:e3:38:f2:a7:74:2f:58:
a7:c8:a3:76:91:9c:54:a4:cf:4c:8d:93:2e:73:41:
43:d9:51:ed:7b:14:24:49:66:b9:79:17:30:c5:32:
95:d2:90:7b:c7:e7:fc:a7:01:93:c6:81:77:e2:7b:
0b:bb:06:37:d0:2b:f4:07:8d:9a:81:20:14:ae:41:
40:83:44:13:43:89:59:4d:e9:08:99:eb:a7:e5:40:
a7:87:62:b8:c6:4b:a9:85:e5:93:61:07:49:22:83:
ef:3b:2a:77:43:96:f4:ef:9f:26:63:61:af:23:a2:
e4:9e:90:ac:8c:45:15:f4:f3:7a:43:ac:91:dc:b0:
fe:ea:cc:85:9d:96:6c:aa:ee:b7:bf:dd:d8:36:bd:
9a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:BE:8E:66:BE:57:7D:DA:45:AC:56:0A:F0:26:3B:19:AF:E8:D5:AA
X509v3 Authority Key Identifier:
keyid:B0:B5:A8:0A:71:06:E0:A4:B8:54:5C:81:50:BB:72:C6:99:FC:C9:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLWoCnEG4KS4VFyBULtyxpn8yaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/Ub6OZr5XfdpFrFYK8CY7Ga_o1ao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/sLWoCnEG4KS4VFyBULtyxpn8yaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.177.102.0/24
185.93.68.0/24
185.93.70.0/24
193.164.4.0/22
IPv6:
2a05:f7c0::/29
Signature Algorithm: sha256WithRSAEncryption
3d:28:23:a1:67:73:a3:90:59:d4:63:87:f3:ac:01:cc:64:64:
c6:3f:5e:8c:52:d6:bf:e1:fe:48:d2:f9:73:6c:88:6a:3f:7b:
31:ac:bb:87:3d:75:79:1a:3a:91:e8:ca:3e:85:6e:ec:eb:39:
c5:38:d1:94:04:be:89:b0:09:78:38:34:af:fd:1e:c6:61:36:
0c:b8:31:ac:a8:69:f7:7e:af:e3:8f:29:ef:08:56:1f:90:df:
bc:8a:d4:8e:e1:85:f2:d4:5f:4b:fe:b4:d6:e5:93:5e:20:24:
bb:78:c8:b7:ec:f5:3c:97:6a:4a:2e:33:47:b5:ba:13:65:b5:
df:7b:8f:e7:e3:3a:f5:97:bd:9d:33:3a:36:a6:bf:75:be:b2:
bf:60:e1:3a:04:8c:2a:03:ab:72:46:11:ee:9c:a6:fa:90:1e:
4e:bc:5b:dd:81:46:6d:0a:94:f9:9a:52:31:20:42:a8:ee:3e:
0a:3b:8c:31:82:7b:0e:8f:1d:0b:19:c2:89:e0:fd:dc:70:e6:
e8:4d:4c:f0:6b:a3:59:9b:5c:8e:14:a9:aa:27:3e:f0:b7:67:
cd:60:73:95:ef:d5:54:37:bc:c2:b3:46:94:1b:05:88:4a:3f:
16:75:c7:67:8e:ce:f2:42:5c:c0:98:5a:4b:45:dc:c2:2f:14:
05:6f:12:19
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAYnQXKDtkgwSOQLwR+9QRz3SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwYjVhODBhNzEwNmUwYTRiODU0NWM4MTUwYmI3MmM2OTlm
Y2M5YTAwHhcNMjMwODA3MTQxNzU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MWJlOGU2NmJlNTc3ZGRhNDVhYzU2MGFmMDI2M2IxOWFmZThkNWFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxITZYzfkOyOEVQSTfjJJ+psp3okO
lySgh/+kfua/29CbUp7eoJjnczBsoMigIbOaOM+KuPpyw5reBjN+uec7TN788o/G
3Dj2Fb+z0sr8veD4044RRqrndGEdDEk1HDdF9T4D/OAGcliPLcx4mBb9l+M48qd0
L1inyKN2kZxUpM9MjZMuc0FD2VHtexQkSWa5eRcwxTKV0pB7x+f8pwGTxoF34nsL
uwY30Cv0B42agSAUrkFAg0QTQ4lZTekImeun5UCnh2K4xkupheWTYQdJIoPvOyp3
Q5b0758mY2GvI6LknpCsjEUV9PN6Q6yR3LD+6syFnZZsqu63v93YNr2aNQIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFFG+jma+V33aRaxWCvAmOxmv6NWqMB8GA1UdIwQY
MBaAFLC1qApxBuCkuFRcgVC7csaZ/MmgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0xXb0NuRUc0S1M0VkZ5QlVMdHl4cG44eWFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9mMTUzZGMtY2JmYi00YTRmLTgwZDIt
NzQ1ZTA4ZmU1OGM2LzEvVWI2T1pyNVhmZHBGckZZSzhDWTdHYV9vMWFvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi9mMTUzZGMtY2JmYi00YTRmLTgwZDItNzQ1ZTA4ZmU1OGM2
LzEvc0xXb0NuRUc0S1M0VkZ5QlVMdHl4cG44eWFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQAXbFmAwQA
uV1EAwQAuV1GAwQCwaQEMA0EAgACMAcDBQMqBffAMA0GCSqGSIb3DQEBCwUAA4IB
AQA9KCOhZ3OjkFnUY4fzrAHMZGTGP16MUta/4f5I0vlzbIhqP3sxrLuHPXV5GjqR
6Mo+hW7s6znFONGUBL6JsAl4ODSv/R7GYTYMuDGsqGn3fq/jjynvCFYfkN+8itSO
4YXy1F9L/rTW5ZNeICS7eMi37PU8l2pKLjNHtboTZbXfe4/n4zr1l72dMzo2pr91
vrK/YOE6BIwqA6tyRhHunKb6kB5OvFvdgUZtCpT5mlIxIEKo7j4KO4wxgnsOjx0L
GcKJ4P3ccOboTUzwa6NZm1yOFKmqJz7wt2fNYHOV79VUN7zCs0aUGwWISj8Wdcdn
js7yQlzAmFpLRdzCLxQFbxIZ
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:32 2024 by rpki-client on console-fra.rpki-client.org