Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/4bVaBrX5fBEStciLYX6IQd_FuN8.roa
File: 4bVaBrX5fBEStciLYX6IQd_FuN8.roa (raw, json)
Hash identifier: 66lh88T6f1fEMLO6hixwGw8pbzUgw4+nI0QcoXb/8cg=
Subject key identifier: E1:B5:5A:06:B5:F9:7C:11:12:B5:C8:8B:61:7E:88:41:DF:C5:B8:DF
Certificate issuer: /CN=5cf4501b755002d9143e8fa6736815e9f0f93695
Certificate serial: 0192676953383DC5DAFB5F5F6B7E955B8E47
Authority key identifier: 5C:F4:50:1B:75:50:02:D9:14:3E:8F:A6:73:68:15:E9:F0:F9:36:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XPRQG3VQAtkUPo-mc2gV6fD5NpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/4bVaBrX5fBEStciLYX6IQd_FuN8.roa
Signing time: Mon 07 Oct 2024 14:36:48 +0000
ROA not before: Mon 07 Oct 2024 14:36:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13037
IP address blocks: 51.148.0.0/16 maxlen: 16
51.155.0.0/16 maxlen: 16
62.3.64.0/18 maxlen: 18
77.104.128.0/18 maxlen: 18
82.68.0.0/15 maxlen: 15
82.71.0.0/16 maxlen: 16
82.71.240.0/20 maxlen: 20
88.97.0.0/18 maxlen: 18
88.97.64.0/19 maxlen: 19
88.97.96.0/20 maxlen: 20
88.97.172.0/24 maxlen: 24
88.97.173.0/24 maxlen: 24
88.97.174.0/24 maxlen: 24
88.97.175.0/24 maxlen: 24
88.97.176.0/20 maxlen: 20
88.98.0.0/20 maxlen: 20
88.98.16.0/23 maxlen: 23
88.98.18.0/24 maxlen: 24
88.98.21.0/24 maxlen: 24
88.98.22.0/23 maxlen: 23
88.98.24.0/21 maxlen: 21
88.98.32.0/19 maxlen: 19
88.98.64.0/19 maxlen: 19
88.98.128.0/19 maxlen: 19
88.98.160.0/21 maxlen: 21
88.98.170.0/23 maxlen: 23
88.98.172.0/22 maxlen: 22
88.98.176.0/20 maxlen: 20
146.66.64.0/18 maxlen: 18
212.23.0.0/19 maxlen: 19
212.23.0.0/23 maxlen: 23
217.155.0.0/16 maxlen: 16
2a02:8010::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 05 Nov 2024 14:54:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:67:69:53:38:3d:c5:da:fb:5f:5f:6b:7e:95:5b:8e:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cf4501b755002d9143e8fa6736815e9f0f93695
Validity
Not Before: Oct 7 14:36:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e1b55a06b5f97c1112b5c88b617e8841dfc5b8df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0d:61:03:77:eb:00:c1:6c:8c:57:74:89:5e:
8c:d7:a1:fb:76:f8:b5:57:44:9d:99:ba:0a:0c:9a:
4b:e0:45:5f:87:42:e3:f9:b6:b1:02:c6:42:92:a6:
39:4a:22:18:60:66:b4:63:07:d2:a0:77:bd:ad:83:
df:a3:85:df:4a:ed:8c:5c:3d:d0:5f:af:01:04:15:
44:65:99:a6:19:9a:e2:5b:d3:60:79:4e:9f:5e:a1:
b3:36:f0:6f:e5:66:02:cd:d6:18:19:6c:3f:ff:1b:
0b:34:d9:22:a9:2f:5f:15:de:d0:56:62:7c:46:fa:
fd:b3:58:98:f5:15:50:f1:02:aa:87:5e:9d:a8:25:
43:77:03:73:95:83:2f:96:f4:84:11:da:b5:af:b7:
ee:bd:a3:e2:44:c8:85:45:f2:65:a9:f5:ed:6a:70:
77:dd:1e:24:31:8a:41:9e:10:38:42:e7:88:b9:bf:
5d:c5:7f:df:e4:50:e6:09:70:8a:19:ba:c1:a0:0c:
36:77:d8:5c:4e:33:07:16:d9:69:6d:ba:df:40:98:
01:cf:89:fb:bb:50:52:3b:2e:f8:29:1b:91:20:a0:
18:21:1f:6f:63:aa:98:e7:bd:f3:5e:06:2e:41:b3:
17:eb:ae:76:b7:27:9b:0e:65:22:e3:8d:44:0c:a2:
5b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:B5:5A:06:B5:F9:7C:11:12:B5:C8:8B:61:7E:88:41:DF:C5:B8:DF
X509v3 Authority Key Identifier:
keyid:5C:F4:50:1B:75:50:02:D9:14:3E:8F:A6:73:68:15:E9:F0:F9:36:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPRQG3VQAtkUPo-mc2gV6fD5NpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/4bVaBrX5fBEStciLYX6IQd_FuN8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.148.0.0/16
51.155.0.0/16
62.3.64.0/18
77.104.128.0/18
82.68.0.0/15
82.71.0.0/16
88.97.0.0-88.97.111.255
88.97.172.0-88.97.191.255
88.98.0.0-88.98.18.255
88.98.21.0-88.98.95.255
88.98.128.0-88.98.167.255
88.98.170.0-88.98.191.255
146.66.64.0/18
212.23.0.0/19
217.155.0.0/16
IPv6:
2a02:8010::/29
Signature Algorithm: sha256WithRSAEncryption
a9:08:e7:77:98:69:e6:10:a5:50:ad:fd:12:5a:d7:07:5c:04:
8f:b2:e8:cb:90:f9:b8:4c:0f:02:92:f7:0f:74:3f:8e:c9:27:
63:35:6c:64:66:fc:0f:a6:09:75:79:2e:57:21:41:d7:d5:9f:
8a:9f:7e:5b:75:ee:8b:d5:da:7a:8b:ca:53:6c:ed:bc:31:f2:
2d:80:96:35:80:de:46:f1:3a:b3:c3:ed:40:57:14:b4:61:1d:
e2:11:80:5c:9d:8c:47:c3:63:95:e0:b6:d3:cb:b5:3c:4d:78:
6a:a4:c3:af:4d:6d:9b:8c:71:4f:79:ae:27:91:b8:4b:f9:e4:
66:76:bc:16:44:99:ac:1d:c0:9e:13:18:13:be:b5:28:f7:fb:
a5:76:76:65:dd:25:5e:ef:64:64:32:bb:bb:9b:7d:0a:39:cd:
67:db:ab:5f:ff:e0:53:31:df:2a:ad:d6:ef:09:76:93:68:58:
92:f3:38:f1:c9:87:ce:b2:d9:72:ea:ad:6b:53:e8:a2:6a:48:
ae:48:14:74:fa:ee:43:fa:d8:81:1c:44:08:28:12:c5:ca:f2:
69:e2:37:47:18:44:09:a9:9d:63:ce:e2:13:31:55:f9:de:d2:
62:a0:b4:4c:6b:84:41:95:7c:5a:01:e9:0d:4b:14:66:b9:cf:
08:d2:37:33
-----BEGIN CERTIFICATE-----
MIIFjjCCBHagAwIBAgISAZJnaVM4PcXa+19fa36VW45HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjZjQ1MDFiNzU1MDAyZDkxNDNlOGZhNjczNjgxNWU5ZjBm
OTM2OTUwHhcNMjQxMDA3MTQzNjQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMWI1NWEwNmI1Zjk3YzExMTJiNWM4OGI2MTdlODg0MWRmYzViOGRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyA1hA3frAMFsjFd0iV6M16H7dvi1
V0SdmboKDJpL4EVfh0Lj+baxAsZCkqY5SiIYYGa0YwfSoHe9rYPfo4XfSu2MXD3Q
X68BBBVEZZmmGZriW9NgeU6fXqGzNvBv5WYCzdYYGWw//xsLNNkiqS9fFd7QVmJ8
Rvr9s1iY9RVQ8QKqh16dqCVDdwNzlYMvlvSEEdq1r7fuvaPiRMiFRfJlqfXtanB3
3R4kMYpBnhA4QueIub9dxX/f5FDmCXCKGbrBoAw2d9hcTjMHFtlpbbrfQJgBz4n7
u1BSOy74KRuRIKAYIR9vY6qY573zXgYuQbMX6652tyebDmUi441EDKJb5wIDAQAB
o4ICmjCCApYwHQYDVR0OBBYEFOG1Wga1+XwRErXIi2F+iEHfxbjfMB8GA1UdIwQY
MBaAFFz0UBt1UALZFD6PpnNoFenw+TaVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFBSUUczVlFBdGtVUG8tbWMyZ1Y2ZkQ1TnBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9jMWNhMDctOTY1OC00NDQ2LThjYjUt
NjBjZjlhYjFiMTNlLzEvNGJWYUJyWDVmQkVTdGNpTFlYNklRZF9GdU44LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi9jMWNhMDctOTY1OC00NDQ2LThjYjUtNjBjZjlhYjFiMTNl
LzEvWFBSUUczVlFBdGtVUG8tbWMyZ1Y2ZkQ1TnBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGvBggrBgEFBQcBBwEB/wSBnzCBnDCBigQCAAEwgYMDAwAz
lAMDADObAwQGPgNAAwQGTWiAAwMBUkQDAwBSRzALAwMAWGEDBARYYWAwDAMEAlhh
rAMEBlhhgDALAwMBWGIDBABYYhIwDAMEAFhiFQMEBVhiQDAMAwQHWGKAAwQDWGKg
MAwDBAFYYqoDBAZYYoADBAaSQkADBAXUFwADAwDZmzANBAIAAjAHAwUDKgKAEDAN
BgkqhkiG9w0BAQsFAAOCAQEAqQjnd5hp5hClUK39ElrXB1wEj7Loy5D5uEwPApL3
D3Q/jsknYzVsZGb8D6YJdXkuVyFB19Wfip9+W3Xui9XaeovKU2ztvDHyLYCWNYDe
RvE6s8PtQFcUtGEd4hGAXJ2MR8NjleC208u1PE14aqTDr01tm4xxT3muJ5G4S/nk
Zna8FkSZrB3AnhMYE761KPf7pXZ2Zd0lXu9kZDK7u5t9CjnNZ9urX//gUzHfKq3W
7wl2k2hYkvM48cmHzrLZcuqta1PoompIrkgUdPruQ/rYgRxECCgSxcryaeI3RxhE
CamdY87iEzFV+d7SYqC0TGuEQZV8WgHpDUsUZrnPCNI3Mw==
-----END CERTIFICATE-----
Generated at Tue Nov 5 19:27:10 2024 by rpki-client on console-ams.rpki-client.org