Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/mZCJqKF7eSxZQvj34Wb4q2aEblQ.roa
File: mZCJqKF7eSxZQvj34Wb4q2aEblQ.roa (raw, json)
Hash identifier: oJkhYuACCqT6Z89TfWgjTihyMI/mrY3JIAQYTNh1uhY=
Subject key identifier: 99:90:89:A8:A1:7B:79:2C:59:42:F8:F7:E1:66:F8:AB:66:84:6E:54
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 0185710C3DAF54CF72B6E672DC6314481138
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/mZCJqKF7eSxZQvj34Wb4q2aEblQ.roa
Signing time: Mon 02 Jan 2023 05:55:05 +0000
ROA not before: Mon 02 Jan 2023 05:55:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209641
IP address blocks: 185.5.248.0/23 maxlen: 23
185.5.248.0/22 maxlen: 22
185.87.48.0/22 maxlen: 22
185.87.48.0/24 maxlen: 24
185.117.152.0/22 maxlen: 22
139.28.220.0/24 maxlen: 24
45.89.66.0/24 maxlen: 24
91.217.80.0/24 maxlen: 24
95.214.10.0/24 maxlen: 24
95.214.11.0/24 maxlen: 24
95.214.9.0/24 maxlen: 24
195.66.87.0/24 maxlen: 24
94.142.136.0/21 maxlen: 21
94.142.138.0/24 maxlen: 24
185.105.119.0/24 maxlen: 24
94.142.139.0/24 maxlen: 24
94.142.143.0/24 maxlen: 24
94.142.141.0/24 maxlen: 24
94.142.140.0/24 maxlen: 24
94.142.142.0/24 maxlen: 24
185.125.216.0/22 maxlen: 22
185.105.118.0/24 maxlen: 24
185.105.116.0/24 maxlen: 24
185.105.117.0/24 maxlen: 24
185.58.205.0/24 maxlen: 24
185.58.206.0/24 maxlen: 24
185.58.204.0/24 maxlen: 24
185.58.204.0/22 maxlen: 22
185.58.207.0/24 maxlen: 24
185.125.231.0/24 maxlen: 24
185.125.229.0/24 maxlen: 24
185.125.228.0/22 maxlen: 22
185.125.230.0/24 maxlen: 24
185.125.228.0/24 maxlen: 24
194.67.192.0/19 maxlen: 19
194.67.196.0/22 maxlen: 22
194.67.194.0/23 maxlen: 23
194.67.193.0/24 maxlen: 24
193.124.176.0/21 maxlen: 21
193.124.176.0/20 maxlen: 20
193.124.184.0/21 maxlen: 21
45.128.176.0/24 maxlen: 24
45.128.178.0/24 maxlen: 24
45.128.176.0/22 maxlen: 22
45.128.177.0/24 maxlen: 24
45.128.179.0/24 maxlen: 24
195.47.250.0/24 maxlen: 24
194.67.203.0/24 maxlen: 24
194.67.202.0/24 maxlen: 24
194.67.200.0/23 maxlen: 23
194.67.204.0/22 maxlen: 22
194.67.208.0/20 maxlen: 20
2a0a:9300:d1::/48 maxlen: 48
2a0a:9300::/48 maxlen: 48
2a0a:9301:1::/48 maxlen: 48
2a0a:9301::/48 maxlen: 48
2a0a:9300:d2::/48 maxlen: 48
2a0a:9301:2::/48 maxlen: 48
2a0a:9300:2::/48 maxlen: 48
2a0a:9302::/32 maxlen: 32
2a0a:9300:d0::/48 maxlen: 48
2a0a:9302:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 19 Jan 2023 14:56:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:0c:3d:af:54:cf:72:b6:e6:72:dc:63:14:48:11:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 2 05:55:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=999089a8a17b792c5942f8f7e166f8ab66846e54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:dc:5a:9f:df:42:0e:ad:85:ac:1e:9b:b5:81:
ca:71:11:8f:5f:20:bc:c9:34:00:02:eb:aa:41:bf:
61:cf:48:55:33:31:98:8e:39:5a:15:b6:70:7d:a9:
da:0b:67:b8:91:e8:f5:fe:87:3f:37:02:29:ac:01:
40:c5:f1:6a:5c:e6:98:e5:d5:2a:65:b4:15:cc:fa:
e3:c0:8b:7b:4d:23:d3:ac:26:b0:1a:65:30:aa:df:
12:fb:43:f6:76:77:38:69:72:85:85:16:e3:c6:9a:
49:bf:99:e7:ab:52:88:f6:d9:9f:17:bd:57:ca:54:
e5:4b:6d:e7:64:98:61:30:81:46:f7:77:39:10:8c:
d5:c6:f3:4d:d3:88:0c:4d:e6:08:4b:af:5f:9a:16:
2d:43:93:04:72:ad:6e:8a:4b:ea:1e:d2:41:a4:24:
f1:8c:c4:1e:44:c0:b1:0c:f8:1c:04:d9:af:d7:9e:
a4:f7:41:0a:8f:6e:32:6a:5a:f2:41:73:38:98:45:
e1:d3:4f:7a:53:73:25:75:2c:18:54:c4:01:72:c0:
bb:3c:e5:15:02:3e:0a:d5:e9:98:d4:3f:f8:de:36:
ad:8f:0d:bb:a3:a7:7c:95:ca:0e:5f:69:20:84:a3:
2c:a0:c9:62:7e:f2:ea:e5:8b:82:f9:7e:c4:a6:8c:
9a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:90:89:A8:A1:7B:79:2C:59:42:F8:F7:E1:66:F8:AB:66:84:6E:54
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/mZCJqKF7eSxZQvj34Wb4q2aEblQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.66.0/24
45.128.176.0/22
91.217.80.0/24
94.142.136.0/21
95.214.9.0-95.214.11.255
139.28.220.0/24
185.5.248.0/22
185.58.204.0/22
185.87.48.0/22
185.105.116.0/22
185.117.152.0/22
185.125.216.0/22
185.125.228.0/22
193.124.176.0/20
194.67.192.0/19
195.47.250.0/24
195.66.87.0/24
IPv6:
2a0a:9300::/48
2a0a:9300:2::/48
2a0a:9300:d0::-2a0a:9300:d2:ffff:ffff:ffff:ffff:ffff
2a0a:9301::-2a0a:9301:2:ffff:ffff:ffff:ffff:ffff
2a0a:9302::/32
Signature Algorithm: sha256WithRSAEncryption
a6:f9:88:9f:a5:3f:65:1b:3a:ad:0e:03:a9:52:f6:63:27:78:
4b:71:f8:4f:e2:e6:3a:c4:02:69:71:c6:43:0c:da:ef:6c:89:
71:b0:1d:1f:da:a3:12:84:c6:3e:84:82:76:3e:8e:37:82:aa:
5a:87:a5:fc:57:d3:c7:fd:da:1a:85:a9:ef:6d:95:3e:90:03:
87:a4:65:b5:87:c6:f3:43:93:ea:95:77:4b:16:52:0e:e1:f4:
47:ff:8b:2d:1a:c1:f5:ec:de:69:97:74:1e:5b:71:c8:84:d8:
47:07:9c:26:79:69:66:10:c6:67:66:0d:32:0e:a3:da:f8:74:
98:5b:ac:20:92:78:b4:9a:73:32:44:af:c9:52:4e:48:60:c9:
27:e0:bf:8e:b2:4d:7b:30:c8:6b:6f:3a:19:73:7d:77:95:ec:
4f:5b:04:ac:02:04:7e:1f:d3:56:a2:55:3c:96:ed:b2:7c:76:
9a:c0:0a:3e:4e:0e:07:ef:03:ca:a4:76:3a:35:d6:7f:4c:80:
ca:45:dc:23:b4:0c:34:ce:60:e7:57:f0:2c:00:8c:80:b9:3f:
2a:db:8b:f6:64:c5:4b:07:36:af:23:93:8c:62:76:d0:21:b8:
4f:02:08:58:67:9d:a1:44:5a:06:9b:ad:f3:3b:03:ae:5b:3a:
b7:7d:f4:b3
-----BEGIN CERTIFICATE-----
MIIFrzCCBJegAwIBAgISAYVxDD2vVM9ytuZy3GMUSBE4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0Zjk2MzQ1ZDNmMjJlZGIzOTVkMjQ3ZjdiODZkMmQ3M2U0
YTAwOTEwHhcNMjMwMTAyMDU1NTA1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OTkwODlhOGExN2I3OTJjNTk0MmY4ZjdlMTY2ZjhhYjY2ODQ2ZTU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNxan99CDq2FrB6btYHKcRGPXyC8
yTQAAuuqQb9hz0hVMzGYjjlaFbZwfanaC2e4kej1/oc/NwIprAFAxfFqXOaY5dUq
ZbQVzPrjwIt7TSPTrCawGmUwqt8S+0P2dnc4aXKFhRbjxppJv5nnq1KI9tmfF71X
ylTlS23nZJhhMIFG93c5EIzVxvNN04gMTeYIS69fmhYtQ5MEcq1uikvqHtJBpCTx
jMQeRMCxDPgcBNmv156k90EKj24yalryQXM4mEXh0096U3MldSwYVMQBcsC7POUV
Aj4K1emY1D/43jatjw27o6d8lcoOX2kghKMsoMlifvLq5YuC+X7EpoyaUQIDAQAB
o4ICuzCCArcwHQYDVR0OBBYEFJmQiaihe3ksWUL49+Fm+KtmhG5UMB8GA1UdIwQY
MBaAFLT5Y0XT8i7bOV0kf3uG0tc+SgCRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFBsalJkUHlMdHM1WFNSX2U0YlMxejVLQUpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS84ZTEyMWQtNzNiMy00MzhhLTgzYzQt
NmZjMzQzZDc3Y2QyLzEvbVpDSnFLRjdlU3haUXZqMzRXYjRxMmFFYmxRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS84ZTEyMWQtNzNiMy00MzhhLTgzYzQtNmZjMzQzZDc3Y2Qy
LzEvdFBsalJkUHlMdHM1WFNSX2U0YlMxejVLQUpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHQBggrBgEFBQcBBwEB/wSBwDCBvTB0BAIAATBuAwQALVlC
AwQCLYCwAwQAW9lQAwQDXo6IMAwDBABf1gkDBAJf1ggDBACLHNwDBAK5BfgDBAK5
OswDBAK5VzADBAK5aXQDBAK5dZgDBAK5fdgDBAK5feQDBATBfLADBAXCQ8ADBADD
L/oDBADDQlcwRQQCAAIwPwMHACoKkwAAAAMHACoKkwAAAjASAwcEKgqTAADQAwcA
KgqTAADSMBADBQAqCpMBAwcAKgqTAQACAwUAKgqTAjANBgkqhkiG9w0BAQsFAAOC
AQEApvmIn6U/ZRs6rQ4DqVL2Yyd4S3H4T+LmOsQCaXHGQwza72yJcbAdH9qjEoTG
PoSCdj6ON4KqWoel/FfTx/3aGoWp722VPpADh6RltYfG80OT6pV3SxZSDuH0R/+L
LRrB9ezeaZd0HltxyITYRwecJnlpZhDGZ2YNMg6j2vh0mFusIJJ4tJpzMkSvyVJO
SGDJJ+C/jrJNezDIa286GXN9d5XsT1sErAIEfh/TVqJVPJbtsnx2msAKPk4OB+8D
yqR2OjXWf0yAykXcI7QMNM5g51fwLACMgLk/KtuL9mTFSwc2ryOTjGJ20CG4TwII
WGedoURaBput8zsDrls6t330sw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:11 2024 by rpki-client on console-ams.rpki-client.org