Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/XMkRc6CgSPMzgCUGcgXa-aXmNjY.roa
File: XMkRc6CgSPMzgCUGcgXa-aXmNjY.roa (raw, json)
Hash identifier: tb5yvF7/6y0ojTe0YNMBwiEXogV1/P/2+Ta5qN4MXH8=
Subject key identifier: 5C:C9:11:73:A0:A0:48:F3:33:80:25:06:72:05:DA:F9:A5:E6:36:36
Certificate issuer: /CN=89056fa9625b6c87404267c6dc219924ac160045
Certificate serial: 01919AA92778173CBDAC430708787C3690EB
Authority key identifier: 89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/XMkRc6CgSPMzgCUGcgXa-aXmNjY.roa
Signing time: Wed 28 Aug 2024 20:24:22 +0000
ROA not before: Wed 28 Aug 2024 20:24:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 136258
IP address blocks: 46.16.128.0/24 maxlen: 24
46.16.129.0/24 maxlen: 24
46.16.130.0/24 maxlen: 24
109.104.152.0/24 maxlen: 24
109.104.153.0/24 maxlen: 24
109.104.155.0/24 maxlen: 24
147.78.0.0/24 maxlen: 24
147.78.1.0/24 maxlen: 24
147.78.2.0/24 maxlen: 24
147.78.3.0/24 maxlen: 24
185.126.238.0/24 maxlen: 24
185.126.239.0/24 maxlen: 24
185.213.23.0/24 maxlen: 24
2a11:840:6::/48 maxlen: 48
2a11:840:7::/48 maxlen: 48
2a11:840:8::/48 maxlen: 48
2a11:840:10::/48 maxlen: 48
2a11:840:11::/48 maxlen: 48
2a11:840:12::/48 maxlen: 48
2a11:840:13::/48 maxlen: 48
2a11:840:14::/48 maxlen: 48
2a11:840:17::/48 maxlen: 48
2a11:840:18::/48 maxlen: 48
2a11:840:19::/48 maxlen: 48
2a11:840:20::/48 maxlen: 48
2a11:840:21::/48 maxlen: 48
2a11:840:22::/48 maxlen: 48
2a11:840:24::/48 maxlen: 48
2a11:840:25::/48 maxlen: 48
2a11:840:26::/48 maxlen: 48
2a11:840:30::/48 maxlen: 48
2a11:840:33::/48 maxlen: 48
2a11:840:40::/48 maxlen: 48
2a11:840:41::/48 maxlen: 48
2a11:840:47::/48 maxlen: 48
2a11:840:48::/48 maxlen: 48
2a11:840:54::/48 maxlen: 48
2a11:840:60::/48 maxlen: 48
2a11:840:61::/48 maxlen: 48
2a11:840:62::/48 maxlen: 48
2a11:840:63::/48 maxlen: 48
2a11:840:64::/48 maxlen: 48
2a11:840:65::/48 maxlen: 48
2a11:840:66::/48 maxlen: 48
2a11:840:67::/48 maxlen: 48
2a11:840:68::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 30 Aug 2024 18:37:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:9a:a9:27:78:17:3c:bd:ac:43:07:08:78:7c:36:90:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89056fa9625b6c87404267c6dc219924ac160045
Validity
Not Before: Aug 28 20:24:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5cc91173a0a048f3338025067205daf9a5e63636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:29:3e:73:82:a5:fc:30:9b:ce:69:8b:47:cf:
63:0b:dd:50:f0:0f:4a:c6:0a:f2:7a:69:15:09:14:
55:2a:b9:54:eb:62:99:39:49:74:7e:a0:d2:37:af:
d6:52:9e:38:34:5f:f0:c7:b4:4f:7e:c0:69:c0:f2:
78:56:83:58:59:dd:1b:2f:e8:cb:3b:01:b1:ad:dd:
e4:51:4b:bf:eb:19:14:b3:b6:5a:04:1d:65:a1:3a:
d2:55:37:55:1e:2c:10:ca:d4:06:0a:c8:18:68:58:
b7:3b:1e:9c:36:ec:20:27:ce:91:07:bc:5b:8d:70:
d6:a8:67:86:f2:bb:57:d0:8c:65:1f:1b:15:86:35:
bd:52:f2:60:d0:72:19:6f:dc:69:b1:55:37:6c:86:
bb:90:ae:a3:16:13:bf:9c:49:5e:34:ee:ca:d2:a5:
ec:d0:c4:ba:3b:dc:e0:79:59:3e:61:d0:e7:2d:ba:
3a:8b:0b:dc:87:e2:6a:2c:7d:3a:08:ae:8f:73:0d:
d1:67:92:cf:13:f7:97:4f:10:5c:06:a0:06:38:f1:
98:7b:db:10:00:01:96:7d:f4:a0:8c:9a:9a:d7:07:
56:93:0b:fb:92:86:f3:30:fb:9b:78:20:43:7e:e8:
c0:20:c1:fb:62:e8:ad:89:86:a5:ec:22:4b:3b:bb:
ca:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:C9:11:73:A0:A0:48:F3:33:80:25:06:72:05:DA:F9:A5:E6:36:36
X509v3 Authority Key Identifier:
keyid:89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/XMkRc6CgSPMzgCUGcgXa-aXmNjY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.16.128.0-46.16.130.255
109.104.152.0/23
109.104.155.0/24
147.78.0.0/22
185.126.238.0/23
185.213.23.0/24
IPv6:
2a11:840:6::-2a11:840:8:ffff:ffff:ffff:ffff:ffff
2a11:840:10::-2a11:840:14:ffff:ffff:ffff:ffff:ffff
2a11:840:17::-2a11:840:19:ffff:ffff:ffff:ffff:ffff
2a11:840:20::-2a11:840:22:ffff:ffff:ffff:ffff:ffff
2a11:840:24::-2a11:840:26:ffff:ffff:ffff:ffff:ffff
2a11:840:30::/48
2a11:840:33::/48
2a11:840:40::/47
2a11:840:47::-2a11:840:48:ffff:ffff:ffff:ffff:ffff
2a11:840:54::/48
2a11:840:60::-2a11:840:68:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
02:82:a5:83:9b:64:d4:a3:27:5d:89:6e:f9:59:14:96:69:d1:
ed:24:9c:5a:58:7b:6b:be:56:5b:bf:71:4a:b1:89:a1:5f:51:
db:3e:17:87:e7:b4:32:10:2a:e3:15:c2:ed:be:92:2f:7e:df:
e5:95:39:45:ec:24:92:f1:0d:3e:12:19:10:bb:87:ba:7b:fe:
71:2d:b9:cb:5a:cb:e8:42:05:35:a5:2c:5e:2e:9a:9e:69:cf:
1f:78:e4:5a:83:9e:cc:88:9c:36:eb:f0:58:2e:3e:7d:01:46:
01:e2:ee:ec:c1:70:95:92:38:fb:28:87:57:13:73:fb:97:b0:
7e:6d:fe:97:a3:43:2d:55:2f:ff:3f:4d:e3:f3:9c:a5:c8:bd:
60:06:ed:41:06:66:d1:de:8b:5a:91:88:ff:c9:48:37:2c:4d:
7c:75:a4:f8:3f:0f:e6:c7:19:25:cd:a3:a1:72:13:33:0d:81:
00:9f:e5:91:f3:db:af:95:8e:2b:2d:7d:e3:e4:f2:02:93:72:
6a:50:c3:4c:86:9b:37:b7:8c:56:03:8d:e5:22:cc:b1:dd:33:
d3:d7:f0:ac:fe:f6:93:73:a7:d1:db:d3:58:ff:e3:b4:58:48:
48:b6:9b:3d:2d:b4:1e:02:d6:65:4c:fb:0c:9c:1f:8d:5b:5b:
47:87:38:7d
-----BEGIN CERTIFICATE-----
MIIF4TCCBMmgAwIBAgISAZGaqSd4Fzy9rEMHCHh8NpDrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5MDU2ZmE5NjI1YjZjODc0MDQyNjdjNmRjMjE5OTI0YWMx
NjAwNDUwHhcNMjQwODI4MjAyNDIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1Y2M5MTE3M2EwYTA0OGYzMzM4MDI1MDY3MjA1ZGFmOWE1ZTYzNjM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqik+c4Kl/DCbzmmLR89jC91Q8A9K
xgryemkVCRRVKrlU62KZOUl0fqDSN6/WUp44NF/wx7RPfsBpwPJ4VoNYWd0bL+jL
OwGxrd3kUUu/6xkUs7ZaBB1loTrSVTdVHiwQytQGCsgYaFi3Ox6cNuwgJ86RB7xb
jXDWqGeG8rtX0IxlHxsVhjW9UvJg0HIZb9xpsVU3bIa7kK6jFhO/nEleNO7K0qXs
0MS6O9zgeVk+YdDnLbo6iwvch+JqLH06CK6Pcw3RZ5LPE/eXTxBcBqAGOPGYe9sQ
AAGWffSgjJqa1wdWkwv7kobzMPubeCBDfujAIMH7YuitiYal7CJLO7vKewIDAQAB
o4IC7TCCAukwHQYDVR0OBBYEFFzJEXOgoEjzM4AlBnIF2vml5jY2MB8GA1UdIwQY
MBaAFIkFb6liW2yHQEJnxtwhmSSsFgBFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVFWdnFXSmJiSWRBUW1mRzNDR1pKS3dXQUVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi85OWFlMmYtMzljYy00M2YzLTk0MWQt
NTE5MjAzNzMzNTNjLzEvWE1rUmM2Q2dTUE16Z0NVR2NnWGEtYVhtTmpZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi85OWFlMmYtMzljYy00M2YzLTk0MWQtNTE5MjAzNzMzNTNj
LzEvaVFWdnFXSmJiSWRBUW1mRzNDR1pKS3dXQUVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBAQYIKwYBBQUHAQcBAf8EgfEwge4wMgQCAAEwLDAMAwQH
LhCAAwQALhCCAwQBbWiYAwQAbWibAwQCk04AAwQBuX7uAwQAudUXMIG3BAIAAjCB
sDASAwcBKhEIQAAGAwcAKhEIQAAIMBIDBwQqEQhAABADBwAqEQhAABQwEgMHACoR
CEAAFwMHASoRCEAAGDASAwcFKhEIQAAgAwcAKhEIQAAiMBIDBwIqEQhAACQDBwAq
EQhAACYDBwAqEQhAADADBwAqEQhAADMDBwEqEQhAAEAwEgMHACoRCEAARwMHACoR
CEAASAMHACoRCEAAVDASAwcFKhEIQABgAwcAKhEIQABoMA0GCSqGSIb3DQEBCwUA
A4IBAQACgqWDm2TUoyddiW75WRSWadHtJJxaWHtrvlZbv3FKsYmhX1HbPheH57Qy
ECrjFcLtvpIvft/llTlF7CSS8Q0+EhkQu4e6e/5xLbnLWsvoQgU1pSxeLpqeac8f
eORag57MiJw26/BYLj59AUYB4u7swXCVkjj7KIdXE3P7l7B+bf6Xo0MtVS//P03j
85ylyL1gBu1BBmbR3otakYj/yUg3LE18daT4Pw/mxxklzaOhchMzDYEAn+WR89uv
lY4rLX3j5PICk3JqUMNMhps3t4xWA43lIsyx3TPT1/Cs/vaTc6fR29NY/+O0WEhI
tps9LbQeAtZlTPsMnB+NW1tHhzh9
Generated at Fri Aug 30 21:07:17 2024 by rpki-client on console-fra.rpki-client.org