Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6891df-971e-4e60-8cbc-e3c2f32cf3b7/1/PL_B5xMZ1S37WtAhmzls5R8XPfE.roa
File: PL_B5xMZ1S37WtAhmzls5R8XPfE.roa (raw, json)
Hash identifier: 7FurxaY7g2oe7/O2P7R00+0j2+SnW+RmNqRCpUsXzxU=
Subject key identifier: 3C:BF:C1:E7:13:19:D5:2D:FB:5A:D0:21:9B:39:6C:E5:1F:17:3D:F1
Certificate issuer: /CN=966b05c661c76a5bcc48da838eedb6973f153b86
Certificate serial: 018ADD9BF3FEFC8C2CDE22C6DD62BC537E1C
Authority key identifier: 96:6B:05:C6:61:C7:6A:5B:CC:48:DA:83:8E:ED:B6:97:3F:15:3B:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lmsFxmHHalvMSNqDju22lz8VO4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6891df-971e-4e60-8cbc-e3c2f32cf3b7/1/PL_B5xMZ1S37WtAhmzls5R8XPfE.roa
Signing time: Thu 28 Sep 2023 21:04:59 +0000
ROA not before: Thu 28 Sep 2023 21:04:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206316
IP address blocks: 195.242.177.0/24 maxlen: 24
5.183.97.0/24 maxlen: 24
5.183.98.0/24 maxlen: 24
5.183.96.0/22 maxlen: 22
5.183.96.0/24 maxlen: 24
5.183.99.0/24 maxlen: 24
195.238.248.0/24 maxlen: 24
195.238.252.0/24 maxlen: 24
185.219.130.0/24 maxlen: 24
185.219.131.0/24 maxlen: 24
185.219.128.0/22 maxlen: 22
185.219.129.0/24 maxlen: 24
185.219.128.0/24 maxlen: 24
2a0e:bc04::/30 maxlen: 64
2a0b:e640::/30 maxlen: 64
2a0e:bc00::/29 maxlen: 29
2a0e:bc00::/30 maxlen: 64
2a0b:e640::/29 maxlen: 29
2a0b:e640:1::/48 maxlen: 64
2a0b:e644::/30 maxlen: 64
Validation: Failed, certificate revoked on Tue 31 Oct 2023 10:23:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:dd:9b:f3:fe:fc:8c:2c:de:22:c6:dd:62:bc:53:7e:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=966b05c661c76a5bcc48da838eedb6973f153b86
Validity
Not Before: Sep 28 21:04:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3cbfc1e71319d52dfb5ad0219b396ce51f173df1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:80:3a:79:3c:59:e4:4b:c1:af:3a:27:df:d2:
c2:f3:1a:0a:83:f3:0d:44:ca:18:8d:54:f3:bf:51:
50:f7:14:75:50:fd:fa:8e:4f:12:05:95:34:6d:4c:
22:81:ba:c7:2b:a5:02:e8:99:0a:41:ff:6e:41:cf:
d9:73:d3:7a:5e:dd:84:92:3d:b7:38:19:fd:52:82:
b6:cc:db:6c:35:d7:fa:c5:71:d6:c2:fb:09:89:16:
be:dc:41:0e:77:b9:31:e2:ae:42:3e:29:93:df:ed:
93:bf:65:e5:48:1f:a7:d0:75:43:46:11:34:57:86:
d0:e6:83:64:a8:c2:28:bc:52:ea:70:95:ba:28:f3:
be:0d:9c:e9:e1:71:ef:b0:43:23:80:a8:32:68:00:
1f:0e:a8:6a:02:7c:83:a5:a1:be:eb:82:b7:a1:8e:
0d:e8:d7:29:46:b3:bd:fc:76:21:15:8b:e1:93:a7:
8f:0f:b1:1e:52:73:20:7e:8b:35:0f:57:7c:38:c8:
1e:fb:a1:4c:c8:d6:32:41:53:a6:d7:1c:a5:8b:09:
0e:33:c7:4e:d9:64:01:db:ae:46:44:c3:13:2e:9a:
eb:d8:02:e0:38:a7:69:06:fd:76:5e:ce:5c:b5:b9:
95:bf:60:ba:0b:48:bd:89:5d:9b:ad:ca:7a:f3:7b:
6b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:BF:C1:E7:13:19:D5:2D:FB:5A:D0:21:9B:39:6C:E5:1F:17:3D:F1
X509v3 Authority Key Identifier:
keyid:96:6B:05:C6:61:C7:6A:5B:CC:48:DA:83:8E:ED:B6:97:3F:15:3B:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lmsFxmHHalvMSNqDju22lz8VO4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6891df-971e-4e60-8cbc-e3c2f32cf3b7/1/PL_B5xMZ1S37WtAhmzls5R8XPfE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6891df-971e-4e60-8cbc-e3c2f32cf3b7/1/lmsFxmHHalvMSNqDju22lz8VO4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.96.0/22
185.219.128.0/22
195.238.248.0/24
195.238.252.0/24
195.242.177.0/24
IPv6:
2a0b:e640::/29
2a0e:bc00::/29
Signature Algorithm: sha256WithRSAEncryption
a6:86:8c:89:88:4b:0c:c5:b7:67:35:0d:e4:9d:35:ef:3b:ef:
77:65:a8:a2:87:e8:1a:aa:b3:50:9d:c3:d9:96:49:43:42:d5:
f1:35:c8:c7:e9:56:83:80:a5:bb:fb:9f:7e:a0:cd:f0:df:a9:
22:65:ed:7d:04:2c:97:45:11:e3:13:cf:5f:b5:83:ac:08:3f:
48:2e:83:d3:4a:e2:23:32:da:f2:b8:2a:e1:02:ad:e7:63:ef:
a5:9f:95:4d:f3:e2:11:56:6d:6b:4f:51:e1:97:6f:0b:ce:7a:
6f:e6:11:ff:ee:27:cd:0a:35:05:6e:4d:22:c8:57:88:5d:4f:
0c:45:3c:f4:14:16:ea:02:75:d2:dc:0c:2a:2c:09:e9:76:b2:
25:27:bc:c8:27:b0:79:d5:54:69:c9:87:e9:b0:f5:4a:86:a4:
8c:f3:a7:78:6a:92:6c:f8:33:a0:8c:17:22:dd:1e:27:3f:e8:
13:02:a6:71:bf:0b:1e:fb:c2:f6:cd:b4:ec:06:6c:b6:1b:19:
4c:fa:37:97:0f:45:8c:f5:14:c6:fa:57:2c:97:02:34:79:f0:
2c:34:84:0a:d9:db:bf:34:cd:88:58:2f:a2:6d:1a:9c:8c:bb:
8e:c8:c9:9d:38:01:9a:c7:c8:06:06:58:6c:62:9d:42:61:2a:
9b:19:12:f5
-----BEGIN CERTIFICATE-----
MIIFKzCCBBOgAwIBAgISAYrdm/P+/Iws3iLG3WK8U34cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2NmIwNWM2NjFjNzZhNWJjYzQ4ZGE4MzhlZWRiNjk3M2Yx
NTNiODYwHhcNMjMwOTI4MjEwNDU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzY2JmYzFlNzEzMTlkNTJkZmI1YWQwMjE5YjM5NmNlNTFmMTczZGYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAioA6eTxZ5EvBrzon39LC8xoKg/MN
RMoYjVTzv1FQ9xR1UP36jk8SBZU0bUwigbrHK6UC6JkKQf9uQc/Zc9N6Xt2Ekj23
OBn9UoK2zNtsNdf6xXHWwvsJiRa+3EEOd7kx4q5CPimT3+2Tv2XlSB+n0HVDRhE0
V4bQ5oNkqMIovFLqcJW6KPO+DZzp4XHvsEMjgKgyaAAfDqhqAnyDpaG+64K3oY4N
6NcpRrO9/HYhFYvhk6ePD7EeUnMgfos1D1d8OMge+6FMyNYyQVOm1xyliwkOM8dO
2WQB265GRMMTLprr2ALgOKdpBv12Xs5ctbmVv2C6C0i9iV2brcp683trPwIDAQAB
o4ICNzCCAjMwHQYDVR0OBBYEFDy/wecTGdUt+1rQIZs5bOUfFz3xMB8GA1UdIwQY
MBaAFJZrBcZhx2pbzEjag47ttpc/FTuGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbG1zRnhtSEhhbHZNU05xRGp1MjJsejhWTzRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC82ODkxZGYtOTcxZS00ZTYwLThjYmMt
ZTNjMmYzMmNmM2I3LzEvUExfQjV4TVoxUzM3V3RBaG16bHM1UjhYUGZFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC82ODkxZGYtOTcxZS00ZTYwLThjYmMtZTNjMmYzMmNmM2I3
LzEvbG1zRnhtSEhhbHZNU05xRGp1MjJsejhWTzRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME0GCCsGAQUFBwEHAQH/BD4wPDAkBAIAATAeAwQCBbdgAwQC
uduAAwQAw+74AwQAw+78AwQAw/KxMBQEAgACMA4DBQMqC+ZAAwUDKg68ADANBgkq
hkiG9w0BAQsFAAOCAQEApoaMiYhLDMW3ZzUN5J017zvvd2WooofoGqqzUJ3D2ZZJ
Q0LV8TXIx+lWg4Clu/uffqDN8N+pImXtfQQsl0UR4xPPX7WDrAg/SC6D00riIzLa
8rgq4QKt52PvpZ+VTfPiEVZta09R4ZdvC856b+YR/+4nzQo1BW5NIshXiF1PDEU8
9BQW6gJ10twMKiwJ6XayJSe8yCewedVUacmH6bD1SoakjPOneGqSbPgzoIwXIt0e
Jz/oEwKmcb8LHvvC9s207AZsthsZTPo3lw9FjPUUxvpXLJcCNHnwLDSECtnbvzTN
iFgvom0anIy7jsjJnTgBmsfIBgZYbGKdQmEqmxkS9Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:11 2024 by rpki-client on console-fra.rpki-client.org