Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/k8nqD3ucOh7-MCHtB01pJzonMhI.roa
File: k8nqD3ucOh7-MCHtB01pJzonMhI.roa (raw, json)
Hash identifier: ibBb+SC4Z6pE2n5fU9MQ1J5863wsfvQJ7KzYQv2QaP4=
Subject key identifier: 93:C9:EA:0F:7B:9C:3A:1E:FE:30:21:ED:07:4D:69:27:3A:27:32:12
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 018BCE81D870834196280192BBE8B55063B8
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/k8nqD3ucOh7-MCHtB01pJzonMhI.roa
Signing time: Tue 14 Nov 2023 15:44:57 +0000
ROA not before: Tue 14 Nov 2023 15:44:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29119
IP address blocks: 193.39.216.0/22 maxlen: 24
185.44.28.0/22 maxlen: 24
45.146.224.0/22 maxlen: 24
185.248.208.0/22 maxlen: 24
5.182.72.0/22 maxlen: 24
185.151.176.0/22 maxlen: 24
185.230.0.0/22 maxlen: 24
185.150.80.0/22 maxlen: 24
141.98.36.0/22 maxlen: 24
185.198.108.0/22 maxlen: 24
141.98.52.0/22 maxlen: 24
185.114.64.0/22 maxlen: 24
45.136.32.0/22 maxlen: 24
185.123.136.0/22 maxlen: 24
185.126.232.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ce:81:d8:70:83:41:96:28:01:92:bb:e8:b5:50:63:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Nov 14 15:44:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=93c9ea0f7b9c3a1efe3021ed074d69273a273212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:54:4a:f9:54:3b:af:40:46:49:22:ab:41:8e:
70:19:a1:e7:d6:34:17:c0:94:82:9b:1b:96:f2:9c:
5a:8b:0a:fb:84:48:f5:7c:ed:df:69:06:82:d4:24:
20:90:28:88:c2:30:6b:02:f1:c6:da:61:01:40:ff:
cb:52:00:68:22:2e:50:f7:25:05:23:79:77:18:9e:
1d:f0:68:93:50:b2:b2:eb:53:61:ed:83:78:a8:d2:
ca:eb:16:dd:a0:b1:70:ac:99:9f:5c:c0:14:b1:70:
95:99:02:df:c1:98:b0:b1:1e:71:25:02:a5:03:36:
7a:61:23:34:ac:a3:5b:d6:90:2f:7e:7e:a7:ba:7c:
c0:33:a2:26:16:a0:86:ea:11:dd:5c:c0:9d:f4:b4:
16:dd:ff:32:d0:b5:27:b9:48:14:74:8c:a6:40:97:
10:f1:24:c9:c8:08:a5:cd:e3:df:3a:3b:ae:85:b9:
ab:01:8a:a2:e2:80:9b:39:0e:f4:83:b5:2d:5a:3f:
80:06:59:3f:d3:65:e8:eb:ba:cd:58:9f:27:2f:ac:
40:91:bf:3c:0a:5e:5a:6c:04:58:6d:f1:83:2a:bf:
02:fc:69:00:d4:af:ca:d8:d7:a9:49:76:45:22:05:
33:9e:7c:82:23:c3:f9:4e:fa:fa:8f:3f:61:3d:5d:
ec:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:C9:EA:0F:7B:9C:3A:1E:FE:30:21:ED:07:4D:69:27:3A:27:32:12
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/k8nqD3ucOh7-MCHtB01pJzonMhI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.72.0/22
45.136.32.0/22
45.146.224.0/22
141.98.36.0/22
141.98.52.0/22
185.44.28.0/22
185.114.64.0/22
185.123.136.0/22
185.126.232.0/22
185.150.80.0/22
185.151.176.0/22
185.198.108.0/22
185.230.0.0/22
185.248.208.0/22
193.39.216.0/22
Signature Algorithm: sha256WithRSAEncryption
74:50:83:3c:66:e7:b1:75:41:29:16:6d:a9:62:1d:5b:74:11:
6c:0d:d2:df:1d:a9:14:af:db:da:f6:a5:29:78:05:21:5e:69:
84:4b:9b:99:37:cc:ee:7a:4e:f2:4f:3a:03:1b:aa:cd:04:fe:
74:ad:57:22:53:80:60:4d:1d:2d:0f:a4:0d:89:70:d5:b4:6e:
39:9c:a7:66:36:48:65:30:26:15:6d:45:80:d4:43:6e:c8:cf:
62:79:31:bb:12:fe:6e:a4:38:1b:e9:58:f6:c5:ea:a9:10:0c:
ce:28:0e:ec:03:2d:f5:ef:c5:45:f2:05:8d:02:2f:2e:63:0b:
7a:99:59:3c:44:c5:e3:29:9d:22:3b:2c:ae:05:c8:50:e5:ff:
c8:31:76:ae:b0:49:6f:fb:28:f5:30:95:ad:82:7e:15:c0:5e:
6b:06:60:9c:c8:bc:2c:08:dd:80:36:30:31:7f:60:fa:ae:72:
33:35:06:61:55:1c:c4:36:03:b9:ca:f2:af:df:5b:c3:c8:2a:
f2:ce:54:c4:56:cd:d3:88:3f:44:b4:a4:cd:47:d1:8a:7d:2d:
a6:9e:6b:26:34:9a:9e:93:78:af:fd:df:6e:20:46:0c:3a:40:
25:53:f5:66:db:ef:2a:99:a0:ce:87:1b:3b:15:c6:a9:b0:7e:
de:94:5c:8f
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgISAYvOgdhwg0GWKAGSu+i1UGO4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0NzVmYjA5MzRjZjZhNThkY2NlZjExMDg3NWRiZTVlM2U4
YjZiNzUwHhcNMjMxMTE0MTU0NDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5M2M5ZWEwZjdiOWMzYTFlZmUzMDIxZWQwNzRkNjkyNzNhMjczMjEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVRK+VQ7r0BGSSKrQY5wGaHn1jQX
wJSCmxuW8pxaiwr7hEj1fO3faQaC1CQgkCiIwjBrAvHG2mEBQP/LUgBoIi5Q9yUF
I3l3GJ4d8GiTULKy61Nh7YN4qNLK6xbdoLFwrJmfXMAUsXCVmQLfwZiwsR5xJQKl
AzZ6YSM0rKNb1pAvfn6nunzAM6ImFqCG6hHdXMCd9LQW3f8y0LUnuUgUdIymQJcQ
8STJyAilzePfOjuuhbmrAYqi4oCbOQ70g7UtWj+ABlk/02Xo67rNWJ8nL6xAkb88
Cl5abARYbfGDKr8C/GkA1K/K2NepSXZFIgUznnyCI8P5Tvr6jz9hPV3s/wIDAQAB
o4ICXTCCAlkwHQYDVR0OBBYEFJPJ6g97nDoe/jAh7QdNaSc6JzISMB8GA1UdIwQY
MBaAFNR1+wk0z2pY3M7xEIddvl4+i2t1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYt
Yzc5MTRhYjY0MjczLzEvazhucUQzdWNPaDctTUNIdEIwMXBKem9uTWhJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYtYzc5MTRhYjY0Mjcz
LzEvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHMGCCsGAQUFBwEHAQH/BGQwYjBgBAIAATBaAwQCBbZIAwQC
LYggAwQCLZLgAwQCjWIkAwQCjWI0AwQCuSwcAwQCuXJAAwQCuXuIAwQCuX7oAwQC
uZZQAwQCuZewAwQCucZsAwQCueYAAwQCufjQAwQCwSfYMA0GCSqGSIb3DQEBCwUA
A4IBAQB0UIM8ZuexdUEpFm2pYh1bdBFsDdLfHakUr9va9qUpeAUhXmmES5uZN8zu
ek7yTzoDG6rNBP50rVciU4BgTR0tD6QNiXDVtG45nKdmNkhlMCYVbUWA1ENuyM9i
eTG7Ev5upDgb6Vj2xeqpEAzOKA7sAy3178VF8gWNAi8uYwt6mVk8RMXjKZ0iOyyu
BchQ5f/IMXausElv+yj1MJWtgn4VwF5rBmCcyLwsCN2ANjAxf2D6rnIzNQZhVRzE
NgO5yvKv31vDyCryzlTEVs3TiD9EtKTNR9GKfS2mnmsmNJqek3iv/d9uIEYMOkAl
U/Vm2+8qmaDOhxs7FcapsH7elFyP
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:51 2024 by rpki-client on console-ams.rpki-client.org