Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/uIR77Tdvt-wYbo5nkOcMj1f_29c.roa
File: uIR77Tdvt-wYbo5nkOcMj1f_29c.roa (raw, json)
Hash identifier: B9E6wW/oRlZcxXBETI/azVPcABpJr6A4BrkraMQZfTo=
Subject key identifier: B8:84:7B:ED:37:6F:B7:EC:18:6E:8E:67:90:E7:0C:8F:57:FF:DB:D7
Certificate issuer: /CN=5cf4501b755002d9143e8fa6736815e9f0f93695
Certificate serial: 018FFF3C3864788B9A44BFFBD3CEDC331D2C
Authority key identifier: 5C:F4:50:1B:75:50:02:D9:14:3E:8F:A6:73:68:15:E9:F0:F9:36:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XPRQG3VQAtkUPo-mc2gV6fD5NpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/uIR77Tdvt-wYbo5nkOcMj1f_29c.roa
Signing time: Sun 09 Jun 2024 23:01:27 +0000
ROA not before: Sun 09 Jun 2024 23:01:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13037
IP address blocks: 51.148.0.0/16 maxlen: 16
51.155.0.0/16 maxlen: 16
51.170.0.0/16 maxlen: 16
62.3.64.0/18 maxlen: 18
77.104.128.0/18 maxlen: 18
82.68.0.0/15 maxlen: 15
82.70.0.0/16 maxlen: 16
82.71.0.0/16 maxlen: 16
82.71.240.0/20 maxlen: 20
88.97.0.0/18 maxlen: 18
88.97.64.0/19 maxlen: 19
88.97.96.0/20 maxlen: 20
88.97.160.0/23 maxlen: 23
88.97.162.0/23 maxlen: 23
88.97.164.0/23 maxlen: 23
88.97.166.0/23 maxlen: 23
88.97.168.0/24 maxlen: 24
88.97.169.0/24 maxlen: 24
88.97.170.0/24 maxlen: 24
88.97.171.0/24 maxlen: 24
88.97.172.0/24 maxlen: 24
88.97.173.0/24 maxlen: 24
88.97.174.0/24 maxlen: 24
88.97.175.0/24 maxlen: 24
88.97.176.0/20 maxlen: 20
88.98.0.0/20 maxlen: 20
88.98.16.0/23 maxlen: 23
88.98.18.0/24 maxlen: 24
88.98.21.0/24 maxlen: 24
88.98.22.0/23 maxlen: 23
88.98.24.0/21 maxlen: 21
88.98.32.0/19 maxlen: 19
88.98.64.0/19 maxlen: 19
88.98.128.0/19 maxlen: 19
88.98.160.0/21 maxlen: 21
88.98.170.0/23 maxlen: 23
88.98.172.0/22 maxlen: 22
88.98.176.0/20 maxlen: 20
146.66.64.0/18 maxlen: 18
212.23.0.0/19 maxlen: 19
217.155.0.0/16 maxlen: 16
2a02:8010::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 11 Jun 2024 09:19:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:ff:3c:38:64:78:8b:9a:44:bf:fb:d3:ce:dc:33:1d:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cf4501b755002d9143e8fa6736815e9f0f93695
Validity
Not Before: Jun 9 23:01:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b8847bed376fb7ec186e8e6790e70c8f57ffdbd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:76:57:ba:19:f8:ea:8f:81:b8:ae:e0:88:f1:
1e:45:3f:ae:10:88:72:4c:a5:0e:bc:9c:5a:87:5c:
1d:22:8e:b9:9d:45:c4:4e:24:27:c1:3e:93:6d:7b:
7f:a4:a0:67:89:df:1a:4a:31:d3:c8:5d:06:a6:c2:
78:0f:85:96:cc:e3:bd:24:4c:7f:2b:d5:ef:f8:c2:
b8:bb:94:b0:f3:0b:2f:92:1e:75:80:3e:05:6d:cd:
70:81:b3:a2:33:b7:db:90:67:e5:13:b9:e6:13:52:
19:90:3e:2a:97:3d:b8:f7:9b:b5:ec:ad:2c:1b:a4:
77:68:ce:60:fa:1a:28:eb:77:04:91:08:41:bf:c9:
2d:27:fd:bb:c6:0c:74:fe:97:17:80:cd:3a:5f:5d:
7d:e9:22:35:04:b1:5e:ae:1c:18:1a:61:20:5a:e1:
6e:cc:6d:a3:b5:c3:ff:d7:f6:7b:7d:dc:03:a7:27:
ce:aa:05:04:92:eb:c3:86:ce:15:4e:ed:05:f5:29:
59:9a:66:a1:50:20:7f:ef:a0:c2:f9:d6:c0:bc:31:
c1:e2:ee:cc:ef:8e:21:a3:3b:9d:f5:ea:ab:e8:20:
91:73:68:63:1f:48:c9:d2:40:fb:6d:df:4b:83:88:
0c:8f:01:ed:8f:3d:38:6f:c7:5d:59:0b:43:9d:74:
8c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:84:7B:ED:37:6F:B7:EC:18:6E:8E:67:90:E7:0C:8F:57:FF:DB:D7
X509v3 Authority Key Identifier:
keyid:5C:F4:50:1B:75:50:02:D9:14:3E:8F:A6:73:68:15:E9:F0:F9:36:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPRQG3VQAtkUPo-mc2gV6fD5NpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/uIR77Tdvt-wYbo5nkOcMj1f_29c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.148.0.0/16
51.155.0.0/16
51.170.0.0/16
62.3.64.0/18
77.104.128.0/18
82.68.0.0/14
88.97.0.0-88.97.111.255
88.97.160.0/19
88.98.0.0-88.98.18.255
88.98.21.0-88.98.95.255
88.98.128.0-88.98.167.255
88.98.170.0-88.98.191.255
146.66.64.0/18
212.23.0.0/19
217.155.0.0/16
IPv6:
2a02:8010::/29
Signature Algorithm: sha256WithRSAEncryption
51:6f:05:37:7c:f1:c3:24:1f:b5:db:97:1e:f6:fe:ad:8f:a8:
35:72:85:a9:7d:c4:09:f5:1b:8f:fe:98:b0:fe:e2:54:b8:e2:
65:91:35:f1:9e:70:ef:27:5f:a8:67:4f:69:cc:f7:02:2b:3f:
71:d1:62:6a:63:f0:11:19:5a:58:a7:35:42:4e:d3:94:ef:da:
ac:35:a4:ec:e2:f9:f2:4d:ae:25:29:6e:d5:e6:e4:4b:e4:ce:
1c:03:da:56:25:59:70:7e:cb:57:eb:ff:01:ad:85:4f:1b:18:
67:3c:b3:bb:63:3d:35:e5:67:f1:75:f8:34:96:db:01:24:4a:
8e:7b:2d:1d:5d:aa:f0:62:4e:47:28:8b:64:6c:b3:97:ab:bd:
2a:2a:18:d0:9d:85:1a:43:6f:cf:0d:7d:ba:ac:51:0c:41:cb:
68:e4:ed:45:72:51:5b:6a:fd:5b:10:5e:64:59:26:26:03:53:
6d:8c:14:4c:06:a7:19:8d:9e:2e:06:fb:d4:71:a9:0e:ba:0d:
95:0c:8b:11:6d:32:1f:42:5f:61:e2:32:5f:8e:78:cf:0f:71:
d5:d1:69:bb:45:b7:f3:f3:d3:f7:9e:81:75:ad:f6:db:57:22:
b2:87:7e:bb:a7:bd:6e:35:31:d3:69:8a:a0:45:30:47:ad:1c:
d9:b5:e8:a8
-----BEGIN CERTIFICATE-----
MIIFhTCCBG2gAwIBAgISAY//PDhkeIuaRL/7087cMx0sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjZjQ1MDFiNzU1MDAyZDkxNDNlOGZhNjczNjgxNWU5ZjBm
OTM2OTUwHhcNMjQwNjA5MjMwMTI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiODg0N2JlZDM3NmZiN2VjMTg2ZThlNjc5MGU3MGM4ZjU3ZmZkYmQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8HZXuhn46o+BuK7giPEeRT+uEIhy
TKUOvJxah1wdIo65nUXETiQnwT6TbXt/pKBnid8aSjHTyF0GpsJ4D4WWzOO9JEx/
K9Xv+MK4u5Sw8wsvkh51gD4Fbc1wgbOiM7fbkGflE7nmE1IZkD4qlz2495u17K0s
G6R3aM5g+hoo63cEkQhBv8ktJ/27xgx0/pcXgM06X1196SI1BLFerhwYGmEgWuFu
zG2jtcP/1/Z7fdwDpyfOqgUEkuvDhs4VTu0F9SlZmmahUCB/76DC+dbAvDHB4u7M
744hozud9eqr6CCRc2hjH0jJ0kD7bd9Lg4gMjwHtjz04b8ddWQtDnXSM7wIDAQAB
o4ICkTCCAo0wHQYDVR0OBBYEFLiEe+03b7fsGG6OZ5DnDI9X/9vXMB8GA1UdIwQY
MBaAFFz0UBt1UALZFD6PpnNoFenw+TaVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFBSUUczVlFBdGtVUG8tbWMyZ1Y2ZkQ1TnBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9jMWNhMDctOTY1OC00NDQ2LThjYjUt
NjBjZjlhYjFiMTNlLzEvdUlSNzdUZHZ0LXdZYm81bmtPY01qMWZfMjljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi9jMWNhMDctOTY1OC00NDQ2LThjYjUtNjBjZjlhYjFiMTNl
LzEvWFBSUUczVlFBdGtVUG8tbWMyZ1Y2ZkQ1TnBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGmBggrBgEFBQcBBwEB/wSBljCBkzCBgQQCAAEwewMDADOU
AwMAM5sDAwAzqgMEBj4DQAMEBk1ogAMDAlJEMAsDAwBYYQMEBFhhYAMEBVhhoDAL
AwMBWGIDBABYYhIwDAMEAFhiFQMEBVhiQDAMAwQHWGKAAwQDWGKgMAwDBAFYYqoD
BAZYYoADBAaSQkADBAXUFwADAwDZmzANBAIAAjAHAwUDKgKAEDANBgkqhkiG9w0B
AQsFAAOCAQEAUW8FN3zxwyQftduXHvb+rY+oNXKFqX3ECfUbj/6YsP7iVLjiZZE1
8Z5w7ydfqGdPacz3Ais/cdFiamPwERlaWKc1Qk7TlO/arDWk7OL58k2uJSlu1ebk
S+TOHAPaViVZcH7LV+v/Aa2FTxsYZzyzu2M9NeVn8XX4NJbbASRKjnstHV2q8GJO
RyiLZGyzl6u9KioY0J2FGkNvzw19uqxRDEHLaOTtRXJRW2r9WxBeZFkmJgNTbYwU
TAanGY2eLgb71HGpDroNlQyLEW0yH0JfYeIyX454zw9x1dFpu0W38/PT956Bda32
21cisod+u6e9bjUx02mKoEUwR60c2bXoqA==
-----END CERTIFICATE-----
Generated at Tue Jun 11 12:41:28 2024 by rpki-client on console-ams.rpki-client.org