Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/2fea18-fb62-4b95-9feb-9cf811e9fa7a/1/HSv_SUnl_IBozOuKBsWc-hjIi7U.roa
File: HSv_SUnl_IBozOuKBsWc-hjIi7U.roa (raw, json)
Hash identifier: Byl4Xf6fWTC0L4+6z1qLlbMTXPOrHZMIghH/c218NO8=
Subject key identifier: 1D:2B:FF:49:49:E5:FC:80:68:CC:EB:8A:06:C5:9C:FA:18:C8:8B:B5
Certificate issuer: /CN=59919584033c3911a009bdde3183f6c60b2afcca
Certificate serial: 0187BCAFA8C430BF4C295D87D611794B29ED
Authority key identifier: 59:91:95:84:03:3C:39:11:A0:09:BD:DE:31:83:F6:C6:0B:2A:FC:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WZGVhAM8ORGgCb3eMYP2xgsq_Mo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/2fea18-fb62-4b95-9feb-9cf811e9fa7a/1/HSv_SUnl_IBozOuKBsWc-hjIi7U.roa
Signing time: Wed 26 Apr 2023 08:30:41 +0000
ROA not before: Wed 26 Apr 2023 08:30:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31115
IP address blocks: 213.225.234.0/23 maxlen: 24
62.97.32.0/19 maxlen: 24
194.150.162.0/23 maxlen: 24
94.126.56.0/21 maxlen: 24
195.134.176.0/21 maxlen: 24
91.187.192.0/19 maxlen: 24
185.11.192.0/22 maxlen: 24
130.255.144.0/21 maxlen: 24
5.172.64.0/19 maxlen: 24
31.171.136.0/21 maxlen: 24
178.19.144.0/20 maxlen: 24
2a01:9840::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:bc:af:a8:c4:30:bf:4c:29:5d:87:d6:11:79:4b:29:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59919584033c3911a009bdde3183f6c60b2afcca
Validity
Not Before: Apr 26 08:30:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1d2bff4949e5fc8068cceb8a06c59cfa18c88bb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:0e:88:40:26:a3:2b:06:0c:46:7a:41:70:1b:
4f:fc:31:6c:13:20:db:1e:47:25:26:9f:c9:7e:2b:
4a:84:94:30:c1:22:44:fc:14:45:1d:9a:ba:8b:e3:
52:f3:6b:22:a2:9f:69:d6:60:01:9b:f3:ca:e7:07:
78:3d:53:ec:cf:d7:e6:1c:46:9c:b8:4d:57:79:ce:
7c:c9:d2:64:60:3d:ce:33:d2:8c:1f:90:d0:26:fd:
d9:67:9d:a0:eb:87:33:21:74:33:e0:e1:53:58:f8:
d1:cf:22:41:57:81:9b:f1:66:4d:33:c3:67:f2:3d:
2c:19:1f:6d:fd:d5:15:9b:0e:2f:df:9b:29:74:8a:
82:dd:90:b6:82:38:c8:1a:76:e7:8a:c7:13:67:b6:
37:a0:3b:a5:fe:3a:5b:68:b2:45:21:d0:2b:da:78:
cb:d1:1e:7d:58:09:21:f5:71:be:c9:92:87:8e:d8:
3b:99:66:0b:ac:bb:c6:c9:91:e5:45:87:8c:4c:5e:
44:ca:89:c6:9f:d0:6e:96:0b:00:8f:82:df:48:97:
51:68:34:c8:4e:ab:7c:4e:64:64:5f:ad:dc:22:c0:
dc:f3:f5:06:3c:ad:d3:e4:09:28:06:3e:50:e5:55:
99:cc:7a:2c:85:08:87:1c:8d:9b:52:50:d7:a0:3f:
30:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:2B:FF:49:49:E5:FC:80:68:CC:EB:8A:06:C5:9C:FA:18:C8:8B:B5
X509v3 Authority Key Identifier:
keyid:59:91:95:84:03:3C:39:11:A0:09:BD:DE:31:83:F6:C6:0B:2A:FC:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WZGVhAM8ORGgCb3eMYP2xgsq_Mo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2fea18-fb62-4b95-9feb-9cf811e9fa7a/1/HSv_SUnl_IBozOuKBsWc-hjIi7U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2fea18-fb62-4b95-9feb-9cf811e9fa7a/1/WZGVhAM8ORGgCb3eMYP2xgsq_Mo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.172.64.0/19
31.171.136.0/21
62.97.32.0/19
91.187.192.0/19
94.126.56.0/21
130.255.144.0/21
178.19.144.0/20
185.11.192.0/22
194.150.162.0/23
195.134.176.0/21
213.225.234.0/23
IPv6:
2a01:9840::/32
Signature Algorithm: sha256WithRSAEncryption
ba:0a:5c:94:ed:23:46:19:64:ba:10:b6:d3:34:a6:56:18:41:
33:6a:c0:1c:ce:6d:5e:d8:97:ba:70:a4:29:9d:cb:99:4e:f3:
ea:1d:04:ce:08:66:cf:db:ef:9e:73:c1:81:89:05:3d:3e:bf:
35:5b:17:d8:74:87:1f:e0:8e:db:c5:3e:40:f6:f6:b7:2f:23:
1b:fc:fc:c1:04:29:2f:b1:cf:a6:32:f4:b2:e3:6f:5d:5f:63:
d1:99:c0:cc:b7:05:a5:a3:9b:6a:3a:30:fb:cf:a3:13:48:8b:
0d:35:56:e2:6f:c5:0a:eb:ca:4b:aa:5e:e9:9b:83:72:bc:ef:
33:bd:c8:42:8f:bc:31:db:7b:e9:d2:e2:99:f4:4f:08:22:86:
de:bd:ad:46:5b:d0:cb:77:a4:4a:7d:39:b6:7f:37:3b:b5:f2:
98:fd:18:93:17:12:9e:ca:b3:9f:ed:b0:0f:9a:6b:11:d2:b4:
0c:50:7e:da:db:4e:87:3b:8f:30:a3:a1:cd:2f:81:21:b9:0a:
37:45:95:e1:5e:18:e4:1d:71:00:52:b8:fb:48:5b:58:f9:19:
b6:42:04:30:6b:87:c4:f0:83:8d:3d:c8:b2:94:d8:f7:d1:e5:
55:31:48:68:f3:8f:74:42:56:0d:df:3f:02:67:6b:63:1b:a1:
45:5c:f6:7e
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgISAYe8r6jEML9MKV2H1hF5SyntMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5OTE5NTg0MDMzYzM5MTFhMDA5YmRkZTMxODNmNmM2MGIy
YWZjY2EwHhcNMjMwNDI2MDgzMDQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZDJiZmY0OTQ5ZTVmYzgwNjhjY2ViOGEwNmM1OWNmYTE4Yzg4YmI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmw6IQCajKwYMRnpBcBtP/DFsEyDb
HkclJp/JfitKhJQwwSJE/BRFHZq6i+NS82siop9p1mABm/PK5wd4PVPsz9fmHEac
uE1Xec58ydJkYD3OM9KMH5DQJv3ZZ52g64czIXQz4OFTWPjRzyJBV4Gb8WZNM8Nn
8j0sGR9t/dUVmw4v35spdIqC3ZC2gjjIGnbniscTZ7Y3oDul/jpbaLJFIdAr2njL
0R59WAkh9XG+yZKHjtg7mWYLrLvGyZHlRYeMTF5EyonGn9BulgsAj4LfSJdRaDTI
Tqt8TmRkX63cIsDc8/UGPK3T5AkoBj5Q5VWZzHoshQiHHI2bUlDXoD8wEQIDAQAB
o4ICVDCCAlAwHQYDVR0OBBYEFB0r/0lJ5fyAaMzrigbFnPoYyIu1MB8GA1UdIwQY
MBaAFFmRlYQDPDkRoAm93jGD9sYLKvzKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1pHVmhBTThPUkdnQ2IzZU1ZUDJ4Z3NxX01vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8yZmVhMTgtZmI2Mi00Yjk1LTlmZWIt
OWNmODExZTlmYTdhLzEvSFN2X1NVbmxfSUJvek91S0JzV2MtaGpJaTdVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi8yZmVhMTgtZmI2Mi00Yjk1LTlmZWItOWNmODExZTlmYTdh
LzEvV1pHVmhBTThPUkdnQ2IzZU1ZUDJ4Z3NxX01vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGoGCCsGAQUFBwEHAQH/BFswWTBIBAIAATBCAwQFBaxAAwQD
H6uIAwQFPmEgAwQFW7vAAwQDXn44AwQDgv+QAwQEshOQAwQCuQvAAwQBwpaiAwQD
w4awAwQB1eHqMA0EAgACMAcDBQAqAZhAMA0GCSqGSIb3DQEBCwUAA4IBAQC6ClyU
7SNGGWS6ELbTNKZWGEEzasAczm1e2Je6cKQpncuZTvPqHQTOCGbP2++ec8GBiQU9
Pr81WxfYdIcf4I7bxT5A9va3LyMb/PzBBCkvsc+mMvSy429dX2PRmcDMtwWlo5tq
OjD7z6MTSIsNNVbib8UK68pLql7pm4NyvO8zvchCj7wx23vp0uKZ9E8IIobeva1G
W9DLd6RKfTm2fzc7tfKY/RiTFxKeyrOf7bAPmmsR0rQMUH7a206HO48wo6HNL4Eh
uQo3RZXhXhjkHXEAUrj7SFtY+Rm2QgQwa4fE8IONPciylNj30eVVMUho8490QlYN
3z8CZ2tjG6FFXPZ+
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:40 2024 by rpki-client on console-fra.rpki-client.org