Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/UwZJ3ze75cQpAy2wMEwAW8YnHwU.roa
File: UwZJ3ze75cQpAy2wMEwAW8YnHwU.roa (raw, json)
Hash identifier: ZEqp2e3pcEvFyhzZidGvj5xpoAgVcmIjhfM7XLvbqXg=
Subject key identifier: 53:06:49:DF:37:BB:E5:C4:29:03:2D:B0:30:4C:00:5B:C6:27:1F:05
Certificate issuer: /CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8
Certificate serial: 018FED6EB96771288A008A4247FAEA8D7FA1
Authority key identifier: 69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/UwZJ3ze75cQpAy2wMEwAW8YnHwU.roa
Signing time: Thu 06 Jun 2024 12:03:27 +0000
ROA not before: Thu 06 Jun 2024 12:03:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59711
IP address blocks: 5.149.248.0/23 maxlen: 23
5.149.254.0/23 maxlen: 23
77.83.196.0/24 maxlen: 24
77.83.197.0/24 maxlen: 24
77.83.198.0/24 maxlen: 24
79.141.164.0/23 maxlen: 23
79.141.172.0/24 maxlen: 24
79.141.174.0/23 maxlen: 23
89.150.40.0/24 maxlen: 24
89.150.57.0/24 maxlen: 24
91.193.18.0/24 maxlen: 24
185.40.86.0/24 maxlen: 24
185.80.52.0/23 maxlen: 23
185.80.54.0/23 maxlen: 23
185.81.114.0/23 maxlen: 23
185.81.114.0/24 maxlen: 24
185.81.115.0/24 maxlen: 24
185.104.192.0/24 maxlen: 24
185.104.193.0/24 maxlen: 24
185.104.194.0/24 maxlen: 24
185.117.88.0/23 maxlen: 23
185.117.90.0/23 maxlen: 23
185.123.102.0/24 maxlen: 24
185.174.133.0/24 maxlen: 24
185.174.135.0/24 maxlen: 24
185.235.137.0/24 maxlen: 24
185.235.138.0/24 maxlen: 24
193.42.36.0/24 maxlen: 24
193.42.39.0/24 maxlen: 24
195.95.155.0/24 maxlen: 24
2a01:8640::/48 maxlen: 48
2a01:8640:2::/48 maxlen: 48
2a01:8640:6::/48 maxlen: 48
2a01:8640:9::/48 maxlen: 48
2a01:8640:a::/48 maxlen: 48
2a01:8640:f::/48 maxlen: 48
2a01:8640:11::/48 maxlen: 48
2a01:8640:12::/48 maxlen: 48
2a01:8640:13::/48 maxlen: 48
2a01:8640:14::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 24 Jun 2024 17:33:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:ed:6e:b9:67:71:28:8a:00:8a:42:47:fa:ea:8d:7f:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8
Validity
Not Before: Jun 6 12:03:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=530649df37bbe5c429032db0304c005bc6271f05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:bc:80:85:d5:92:18:39:c0:65:eb:c2:14:8f:
71:41:40:d1:27:f9:65:c6:e0:78:0c:c8:bf:fe:bc:
d5:32:52:bb:22:2e:93:c3:ca:bc:fa:bd:06:c2:86:
a9:56:47:6c:a4:6a:69:1d:99:8f:97:1d:32:27:dd:
55:69:78:55:7a:40:a0:66:d4:1a:b7:b6:11:c9:2f:
61:12:dd:3d:d3:ff:40:27:d7:bf:44:66:89:cb:bd:
57:1d:32:a1:5b:77:19:b8:f7:dd:84:0e:87:9e:75:
ea:c2:d7:de:02:27:f1:72:a6:c0:e8:42:82:70:f0:
f4:70:9c:e0:9b:27:63:c0:68:6b:18:1e:63:36:e3:
6d:29:82:4f:78:83:f1:bd:1e:af:c4:99:f6:5d:ac:
f7:04:f4:45:2e:57:b7:58:c4:c2:aa:df:d9:4f:81:
fd:a4:16:7b:8a:88:49:80:a2:90:d2:78:c7:45:c4:
94:23:8c:d3:71:51:07:c4:f7:bf:61:f4:6f:13:c1:
81:9f:36:a9:e0:c8:f9:32:a5:41:d5:00:16:28:60:
4c:a0:89:dc:3d:fb:54:89:b4:a8:c9:4c:9b:22:1d:
f3:ca:a6:e9:31:1a:bc:b4:ee:d7:b1:60:0b:eb:3f:
1e:1a:fe:2e:43:40:89:f2:64:9a:2f:b0:1d:77:30:
ec:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:06:49:DF:37:BB:E5:C4:29:03:2D:B0:30:4C:00:5B:C6:27:1F:05
X509v3 Authority Key Identifier:
keyid:69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/UwZJ3ze75cQpAy2wMEwAW8YnHwU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.149.248.0/23
5.149.254.0/23
77.83.196.0-77.83.198.255
79.141.164.0/23
79.141.172.0/24
79.141.174.0/23
89.150.40.0/24
89.150.57.0/24
91.193.18.0/24
185.40.86.0/24
185.80.52.0/22
185.81.114.0/23
185.104.192.0-185.104.194.255
185.117.88.0/22
185.123.102.0/24
185.174.133.0/24
185.174.135.0/24
185.235.137.0-185.235.138.255
193.42.36.0/24
193.42.39.0/24
195.95.155.0/24
IPv6:
2a01:8640::/48
2a01:8640:2::/48
2a01:8640:6::/48
2a01:8640:9::-2a01:8640:a:ffff:ffff:ffff:ffff:ffff
2a01:8640:f::/48
2a01:8640:11::-2a01:8640:14:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
5d:01:c3:b1:d1:5a:18:8d:9c:33:53:91:45:e2:00:18:49:28:
f5:4d:5c:79:45:90:4b:3e:11:54:b9:0e:6b:21:7f:82:19:67:
e6:93:24:ae:7c:10:b2:0a:33:64:f0:a3:7b:40:f0:63:c6:75:
49:86:fc:2a:96:35:13:6c:53:34:0f:59:5d:50:ae:51:97:0b:
56:7e:d3:cf:84:ef:3c:af:f3:a3:37:39:77:f6:fa:dd:90:3e:
31:bf:5a:bb:39:2e:7c:74:a0:7a:a4:94:11:e9:f7:35:72:de:
e8:fd:41:f0:f3:5c:0e:04:11:a2:7d:00:aa:87:3f:db:12:a3:
47:9d:44:b9:34:2c:83:b8:bc:07:0f:a7:3a:ba:36:49:39:0d:
7b:79:ee:ac:6e:ea:b7:38:0d:23:58:01:ff:10:a3:c7:80:50:
61:73:b9:f5:67:e4:22:75:5f:62:88:ff:f9:41:64:df:4d:54:
fb:62:b1:43:74:6d:2b:f7:01:e9:bd:bb:d7:01:dc:7e:b5:de:
71:0e:eb:f4:f4:7a:24:13:46:1f:4b:d4:58:4f:42:df:f2:b6:
3b:3f:fe:32:3e:7a:b6:d6:fb:15:3f:0e:c1:5e:8a:1c:10:44:
fa:0d:0e:a0:ab:81:94:33:17:fb:dd:1d:fd:45:38:f2:c2:14:
14:45:22:32
-----BEGIN CERTIFICATE-----
MIIF5zCCBM+gAwIBAgISAY/tbrlncSiKAIpCR/rqjX+hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5MTI0MmMzM2JjMmUyZTllNDU4NTBhMGZjNjRhYjJjNzUw
NmE0YjgwHhcNMjQwNjA2MTIwMzI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MzA2NDlkZjM3YmJlNWM0MjkwMzJkYjAzMDRjMDA1YmM2MjcxZjA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0byAhdWSGDnAZevCFI9xQUDRJ/ll
xuB4DMi//rzVMlK7Ii6Tw8q8+r0GwoapVkdspGppHZmPlx0yJ91VaXhVekCgZtQa
t7YRyS9hEt090/9AJ9e/RGaJy71XHTKhW3cZuPfdhA6HnnXqwtfeAifxcqbA6EKC
cPD0cJzgmydjwGhrGB5jNuNtKYJPeIPxvR6vxJn2Xaz3BPRFLle3WMTCqt/ZT4H9
pBZ7iohJgKKQ0njHRcSUI4zTcVEHxPe/YfRvE8GBnzap4Mj5MqVB1QAWKGBMoInc
PftUibSoyUybIh3zyqbpMRq8tO7XsWAL6z8eGv4uQ0CJ8mSaL7AddzDsqwIDAQAB
o4IC8zCCAu8wHQYDVR0OBBYEFFMGSd83u+XEKQMtsDBMAFvGJx8FMB8GA1UdIwQY
MBaAFGkSQsM7wuLp5FhQoPxkqyx1BqS4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVJKQ3d6dkM0dW5rV0ZDZ19HU3JMSFVHcExnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy82MzU2YjktYzQ5Zi00YjRkLThlMjkt
MzYyZmZlOGVlMjcwLzEvVXdaSjN6ZTc1Y1FwQXkyd01Fd0FXOFluSHdVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy82MzU2YjktYzQ5Zi00YjRkLThlMjktMzYyZmZlOGVlMjcw
LzEvYVJKQ3d6dkM0dW5rV0ZDZ19HU3JMSFVHcExnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBBwYIKwYBBQUHAQcBAf8EgfcwgfQwgZ0EAgABMIGWAwQB
BZX4AwQBBZX+MAwDBAJNU8QDBABNU8YDBAFPjaQDBABPjawDBAFPja4DBABZligD
BABZljkDBABbwRIDBAC5KFYDBAK5UDQDBAG5UXIwDAMEBrlowAMEALlowgMEArl1
WAMEALl7ZgMEALmuhQMEALmuhzAMAwQAueuJAwQAueuKAwQAwSokAwQAwSonAwQA
w1+bMFIEAgACMEwDBwAqAYZAAAADBwAqAYZAAAIDBwAqAYZAAAYwEgMHACoBhkAA
CQMHACoBhkAACgMHACoBhkAADzASAwcAKgGGQAARAwcAKgGGQAAUMA0GCSqGSIb3
DQEBCwUAA4IBAQBdAcOx0VoYjZwzU5FF4gAYSSj1TVx5RZBLPhFUuQ5rIX+CGWfm
kySufBCyCjNk8KN7QPBjxnVJhvwqljUTbFM0D1ldUK5RlwtWftPPhO88r/OjNzl3
9vrdkD4xv1q7OS58dKB6pJQR6fc1ct7o/UHw81wOBBGifQCqhz/bEqNHnUS5NCyD
uLwHD6c6ujZJOQ17ee6sbuq3OA0jWAH/EKPHgFBhc7n1Z+QidV9iiP/5QWTfTVT7
YrFDdG0r9wHpvbvXAdx+td5xDuv09HokE0YfS9RYT0Lf8rY7P/4yPnq21vsVPw7B
XoocEET6DQ6gq4GUMxf73R39RTjywhQURSIy
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:43:44 2025 by rpki-client