Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/MzFvFF_cloYOh6SsK0UDaQ1Koro.roa
File: MzFvFF_cloYOh6SsK0UDaQ1Koro.roa (raw, json)
Hash identifier: s1N/yzu9dyaKj8V13IF9DSFbn223e18xxgBkktgcDl8=
Subject key identifier: 33:31:6F:14:5F:DC:96:86:0E:87:A4:AC:2B:45:03:69:0D:4A:A2:BA
Certificate issuer: /CN=c6c0fdbb65ca491cb83cc085a43e0340596ae873
Certificate serial: 0192D7CEF40872AF6A5E3867830236165A1C
Authority key identifier: C6:C0:FD:BB:65:CA:49:1C:B8:3C:C0:85:A4:3E:03:40:59:6A:E8:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xsD9u2XKSRy4PMCFpD4DQFlq6HM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/MzFvFF_cloYOh6SsK0UDaQ1Koro.roa
Signing time: Tue 29 Oct 2024 10:25:17 +0000
ROA not before: Tue 29 Oct 2024 10:25:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31631
IP address blocks: 45.150.140.0/22 maxlen: 22
79.99.88.0/22 maxlen: 22
80.252.120.0/22 maxlen: 22
103.110.208.0/22 maxlen: 22
109.224.248.0/21 maxlen: 21
185.108.168.0/22 maxlen: 22
185.205.172.0/22 maxlen: 22
193.178.54.0/23 maxlen: 23
193.178.112.0/23 maxlen: 23
195.167.138.0/24 maxlen: 24
195.167.181.0/24 maxlen: 24
195.167.182.0/24 maxlen: 24
2a06:e40::/29 maxlen: 29
Validation: Failed, certificate revoked on Fri 08 Nov 2024 16:30:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:d7:ce:f4:08:72:af:6a:5e:38:67:83:02:36:16:5a:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6c0fdbb65ca491cb83cc085a43e0340596ae873
Validity
Not Before: Oct 29 10:25:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=33316f145fdc96860e87a4ac2b4503690d4aa2ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:01:6f:c5:0b:ec:79:30:4f:db:4b:d0:53:79:
05:7d:32:60:b2:74:ca:7c:ff:f4:8b:fc:e7:1f:b3:
f9:c6:b4:7b:cb:16:15:d0:13:76:14:b1:4e:4a:3b:
b6:1d:eb:32:72:da:49:eb:2e:75:6c:df:55:22:4e:
0d:c4:06:b0:e4:e9:c8:23:73:1a:4b:b4:77:cb:e3:
bf:19:8c:ee:db:e9:18:ab:40:71:99:88:6d:bf:24:
d6:c9:83:21:5b:29:40:a2:ed:f8:75:fc:6f:6a:4f:
70:9c:b2:84:4a:6c:04:67:62:89:26:5e:0d:b7:df:
4c:77:a8:09:33:31:85:bf:a0:90:04:45:04:ca:4a:
43:e1:4d:38:be:d1:94:34:63:91:1e:bb:d5:0d:d9:
ee:39:aa:cb:a0:4e:34:c2:f3:f1:90:e4:97:95:8a:
b9:99:15:45:6b:eb:25:13:18:89:f5:dc:64:eb:e0:
8e:d8:15:b7:1a:2a:b7:cd:37:ff:36:03:bf:65:1e:
47:cc:f2:a5:0e:ca:5f:d3:51:29:b6:5a:1a:89:0f:
27:0e:75:89:cc:c1:98:8a:5e:7f:86:dd:2c:4e:dd:
13:22:64:e9:18:52:9b:05:6c:d9:e2:1a:4d:74:94:
7d:a3:55:62:75:e8:fb:08:ec:ab:e0:5d:e7:53:9a:
00:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:31:6F:14:5F:DC:96:86:0E:87:A4:AC:2B:45:03:69:0D:4A:A2:BA
X509v3 Authority Key Identifier:
keyid:C6:C0:FD:BB:65:CA:49:1C:B8:3C:C0:85:A4:3E:03:40:59:6A:E8:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xsD9u2XKSRy4PMCFpD4DQFlq6HM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/MzFvFF_cloYOh6SsK0UDaQ1Koro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.140.0/22
79.99.88.0/22
80.252.120.0/22
103.110.208.0/22
109.224.248.0/21
185.108.168.0/22
185.205.172.0/22
193.178.54.0/23
193.178.112.0/23
195.167.138.0/24
195.167.181.0-195.167.182.255
IPv6:
2a06:e40::/29
Signature Algorithm: sha256WithRSAEncryption
be:bc:33:7a:0e:dd:47:55:25:93:9c:4a:c6:b2:20:08:bf:3e:
91:b0:fe:36:21:3a:b8:75:27:f0:4f:ae:96:ee:2b:77:41:a6:
04:59:9c:8a:66:c2:e6:1f:97:1f:6a:45:ef:f9:5b:e4:90:5e:
8a:a1:33:06:13:e0:4d:7d:29:bb:d4:f2:37:97:2c:5f:d0:e4:
a5:6b:05:a3:14:2e:f5:c5:c2:65:b4:28:b9:c6:86:4c:7d:9e:
0c:71:59:99:e6:93:f9:6c:51:ce:db:34:c9:f4:4b:c1:b4:f0:
85:e3:3a:77:20:db:d9:02:02:69:b5:f6:39:8a:69:4e:6c:76:
d9:f8:da:34:da:4c:eb:39:c9:cf:f5:40:29:44:c9:02:44:80:
a6:d3:20:87:92:2e:2d:8f:78:1e:6f:41:2e:91:49:05:08:37:
ff:22:06:b0:c8:ff:c6:af:53:92:b1:72:68:36:9a:53:a1:13:
78:e5:1c:45:d8:4f:17:74:64:98:b1:25:4f:4e:52:df:3f:a9:
79:e5:e4:46:1f:b2:cd:ab:9c:32:db:5f:56:c0:f0:78:98:98:
f0:cc:7f:18:34:06:df:18:b1:08:2b:58:b1:e6:43:80:57:39:
f0:3e:bd:78:8d:5b:21:7f:d5:24:91:0a:b3:30:03:8e:ac:51:
bf:85:47:ff
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgISAZLXzvQIcq9qXjhngwI2FlocMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2YzBmZGJiNjVjYTQ5MWNiODNjYzA4NWE0M2UwMzQwNTk2
YWU4NzMwHhcNMjQxMDI5MTAyNTE3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMzMxNmYxNDVmZGM5Njg2MGU4N2E0YWMyYjQ1MDM2OTBkNGFhMmJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAFvxQvseTBP20vQU3kFfTJgsnTK
fP/0i/znH7P5xrR7yxYV0BN2FLFOSju2HesyctpJ6y51bN9VIk4NxAaw5OnII3Ma
S7R3y+O/GYzu2+kYq0BxmYhtvyTWyYMhWylAou34dfxvak9wnLKESmwEZ2KJJl4N
t99Md6gJMzGFv6CQBEUEykpD4U04vtGUNGORHrvVDdnuOarLoE40wvPxkOSXlYq5
mRVFa+slExiJ9dxk6+CO2BW3Giq3zTf/NgO/ZR5HzPKlDspf01EptloaiQ8nDnWJ
zMGYil5/ht0sTt0TImTpGFKbBWzZ4hpNdJR9o1Videj7COyr4F3nU5oAowIDAQAB
o4ICXDCCAlgwHQYDVR0OBBYEFDMxbxRf3JaGDoekrCtFA2kNSqK6MB8GA1UdIwQY
MBaAFMbA/btlykkcuDzAhaQ+A0BZauhzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHNEOXUyWEtTUnk0UE1DRnBENERRRmxxNkhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi82NjY5YmItMWY2Mi00MmEzLTllOGQt
NDlhNjU0NTc4NmU2LzEvTXpGdkZGX2Nsb1lPaDZTc0swVURhUTFLb3JvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi82NjY5YmItMWY2Mi00MmEzLTllOGQtNDlhNjU0NTc4NmU2
LzEveHNEOXUyWEtTUnk0UE1DRnBENERRRmxxNkhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHIGCCsGAQUFBwEHAQH/BGMwYTBQBAIAATBKAwQCLZaMAwQC
T2NYAwQCUPx4AwQCZ27QAwQDbeD4AwQCuWyoAwQCuc2sAwQBwbI2AwQBwbJwAwQA
w6eKMAwDBADDp7UDBADDp7YwDQQCAAIwBwMFAyoGDkAwDQYJKoZIhvcNAQELBQAD
ggEBAL68M3oO3UdVJZOcSsayIAi/PpGw/jYhOrh1J/BPrpbuK3dBpgRZnIpmwuYf
lx9qRe/5W+SQXoqhMwYT4E19KbvU8jeXLF/Q5KVrBaMULvXFwmW0KLnGhkx9ngxx
WZnmk/lsUc7bNMn0S8G08IXjOncg29kCAmm19jmKaU5sdtn42jTaTOs5yc/1QClE
yQJEgKbTIIeSLi2PeB5vQS6RSQUIN/8iBrDI/8avU5Kxcmg2mlOhE3jlHEXYTxd0
ZJixJU9OUt8/qXnl5EYfss2rnDLbX1bA8HiYmPDMfxg0Bt8YsQgrWLHmQ4BXOfA+
vXiNWyF/1SSRCrMwA46sUb+FR/8=
-----END CERTIFICATE-----
Generated at Fri Nov 8 19:11:59 2024 by rpki-client on console-ams.rpki-client.org