Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/uMsseV-eezv0cvfoBc9IXn3lc2E.roa
File: uMsseV-eezv0cvfoBc9IXn3lc2E.roa (raw, json)
Hash identifier: dCOdJjvLNVGdj+fNzLfR2zcGmy9NXG7Y3vOniEaxzz8=
Subject key identifier: B8:CB:2C:79:5F:9E:7B:3B:F4:72:F7:E8:05:CF:48:5E:7D:E5:73:61
Certificate issuer: /CN=973bec33ae738c98958819c6c13bb335ee34ab4c
Certificate serial: 0185CF6703AAAE5782BE81E8E1E816029FF1
Authority key identifier: 97:3B:EC:33:AE:73:8C:98:95:88:19:C6:C1:3B:B3:35:EE:34:AB:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lzvsM65zjJiViBnGwTuzNe40q0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/uMsseV-eezv0cvfoBc9IXn3lc2E.roa
Signing time: Fri 20 Jan 2023 13:38:32 +0000
ROA not before: Fri 20 Jan 2023 13:38:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209723
IP address blocks: 2.59.200.0/23 maxlen: 23
88.218.148.0/23 maxlen: 23
88.218.150.0/23 maxlen: 23
5.183.60.0/23 maxlen: 23
5.183.62.0/23 maxlen: 23
147.78.226.0/23 maxlen: 23
147.78.224.0/23 maxlen: 23
85.209.4.0/23 maxlen: 23
85.209.6.0/23 maxlen: 23
2a09:ac80::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 15 Feb 2023 19:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:cf:67:03:aa:ae:57:82:be:81:e8:e1:e8:16:02:9f:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=973bec33ae738c98958819c6c13bb335ee34ab4c
Validity
Not Before: Jan 20 13:38:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b8cb2c795f9e7b3bf472f7e805cf485e7de57361
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b8:ef:d6:94:d5:02:8a:81:02:93:57:24:62:
c2:f7:03:66:2e:2f:3e:9c:0d:75:0d:b4:37:cd:1b:
7b:fc:d1:b7:42:d1:c7:2c:d3:6b:4b:fd:09:52:0b:
74:41:d1:97:15:df:b9:24:bc:f9:01:50:9f:ee:10:
75:a3:fd:2a:86:29:c2:aa:f2:1b:af:51:58:a9:c3:
c5:3d:04:cc:12:de:d0:ed:ab:e7:54:60:de:8e:d7:
d6:c2:11:90:e1:9c:96:60:cd:3e:f8:42:26:14:d2:
a5:72:d3:81:46:43:6c:0a:6c:ef:03:e6:97:92:d1:
bc:5d:42:fc:10:0d:0a:f5:02:4d:0c:2f:62:7d:b1:
cb:42:16:8f:de:1a:84:f2:5d:7d:d5:bb:f3:37:a2:
b4:76:a2:2c:0e:e2:24:1f:fc:85:ce:c9:03:da:b0:
b9:ac:dd:e0:8a:69:b8:0f:d8:1d:3b:dd:66:72:69:
1b:46:9d:43:99:d4:72:62:1f:45:3f:30:ad:48:2c:
03:e6:57:c9:10:d1:af:17:d3:be:7e:b0:da:de:58:
d9:c5:fd:0a:08:9c:8e:95:d7:bf:1f:84:8a:24:5d:
e1:bc:99:62:cb:8c:47:52:5c:d6:d9:b7:7b:5d:fe:
13:e6:b2:dd:24:4c:a2:3e:98:70:62:d0:9f:ce:dd:
2e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:CB:2C:79:5F:9E:7B:3B:F4:72:F7:E8:05:CF:48:5E:7D:E5:73:61
X509v3 Authority Key Identifier:
keyid:97:3B:EC:33:AE:73:8C:98:95:88:19:C6:C1:3B:B3:35:EE:34:AB:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lzvsM65zjJiViBnGwTuzNe40q0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/uMsseV-eezv0cvfoBc9IXn3lc2E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.200.0/23
5.183.60.0/22
85.209.4.0/22
88.218.148.0/22
147.78.224.0/22
IPv6:
2a09:ac80::/29
Signature Algorithm: sha256WithRSAEncryption
24:42:5d:8f:67:6e:1b:de:e2:6a:9e:3d:65:d8:36:12:5c:0a:
a2:68:f8:b4:31:e7:c2:4b:fe:84:c3:00:24:fd:c8:83:dd:00:
46:f0:c5:98:6d:7e:6f:91:a4:7a:66:c5:91:76:44:d7:d8:c7:
67:35:35:2c:c8:3f:8c:8a:fb:00:d1:53:76:f7:b1:cb:10:aa:
9c:05:52:2c:5d:9a:74:79:43:68:90:68:13:3f:2a:c5:78:45:
4f:22:05:81:38:6a:82:48:9c:33:d2:55:42:07:a7:6d:c9:c7:
94:e9:f0:8a:ea:9d:34:16:d0:aa:08:8e:d6:57:4b:1d:60:7d:
fc:21:88:b9:c6:69:66:21:67:94:5d:37:d7:8f:b4:c7:7a:e2:
2d:d6:03:32:2a:d7:5c:9f:bd:03:ee:85:02:9f:d9:1e:93:22:
93:f0:9d:b3:10:85:c3:88:6a:4f:0b:c1:fb:42:7e:3b:c4:dc:
22:fe:fe:37:16:5a:50:01:b4:50:fa:0b:8a:cf:51:26:e4:ed:
d6:8b:b0:71:ff:58:3c:c1:84:e1:c4:53:ad:f7:9e:5d:a4:1d:
96:1d:f3:c0:02:0b:89:73:ea:e9:7f:3b:bc:43:e4:cc:df:25:
03:8a:55:56:a1:4c:56:41:30:a3:40:bb:d8:17:8d:5a:a9:b8:
2b:fb:f3:ff
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgISAYXPZwOqrleCvoHo4egWAp/xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3M2JlYzMzYWU3MzhjOTg5NTg4MTljNmMxM2JiMzM1ZWUz
NGFiNGMwHhcNMjMwMTIwMTMzODMyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOGNiMmM3OTVmOWU3YjNiZjQ3MmY3ZTgwNWNmNDg1ZTdkZTU3MzYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7jv1pTVAoqBApNXJGLC9wNmLi8+
nA11DbQ3zRt7/NG3QtHHLNNrS/0JUgt0QdGXFd+5JLz5AVCf7hB1o/0qhinCqvIb
r1FYqcPFPQTMEt7Q7avnVGDejtfWwhGQ4ZyWYM0++EImFNKlctOBRkNsCmzvA+aX
ktG8XUL8EA0K9QJNDC9ifbHLQhaP3hqE8l191bvzN6K0dqIsDuIkH/yFzskD2rC5
rN3gimm4D9gdO91mcmkbRp1DmdRyYh9FPzCtSCwD5lfJENGvF9O+frDa3ljZxf0K
CJyOlde/H4SKJF3hvJliy4xHUlzW2bd7Xf4T5rLdJEyiPphwYtCfzt0uzQIDAQAB
o4ICMDCCAiwwHQYDVR0OBBYEFLjLLHlfnns79HL36AXPSF595XNhMB8GA1UdIwQY
MBaAFJc77DOuc4yYlYgZxsE7szXuNKtMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHp2c002NXpqSmlWaUJuR3dUdXpOZTQwcTB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8yZjQ2MDUtMzU2YS00YWY2LWIxNWQt
YzQyZjlhYmYxNDc3LzEvdU1zc2VWLWVlenYwY3Zmb0JjOUlYbjNsYzJFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS8yZjQ2MDUtMzU2YS00YWY2LWIxNWQtYzQyZjlhYmYxNDc3
LzEvbHp2c002NXpqSmlWaUJuR3dUdXpOZTQwcTB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQBAjvIAwQC
Bbc8AwQCVdEEAwQCWNqUAwQCk07gMA0EAgACMAcDBQMqCayAMA0GCSqGSIb3DQEB
CwUAA4IBAQAkQl2PZ24b3uJqnj1l2DYSXAqiaPi0MefCS/6EwwAk/ciD3QBG8MWY
bX5vkaR6ZsWRdkTX2MdnNTUsyD+MivsA0VN297HLEKqcBVIsXZp0eUNokGgTPyrF
eEVPIgWBOGqCSJwz0lVCB6dtyceU6fCK6p00FtCqCI7WV0sdYH38IYi5xmlmIWeU
XTfXj7THeuIt1gMyKtdcn70D7oUCn9kekyKT8J2zEIXDiGpPC8H7Qn47xNwi/v43
FlpQAbRQ+guKz1Em5O3Wi7Bx/1g8wYThxFOt955dpB2WHfPAAguJc+rpfzu8Q+TM
3yUDilVWoUxWQTCjQLvYF41aqbgr+/P/
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:04 2024 by rpki-client on console-fra.rpki-client.org