Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/BUE1aHClw7Bn4BCosGg9cRnD5hA.roa
File: BUE1aHClw7Bn4BCosGg9cRnD5hA.roa (raw, json)
Hash identifier: icErtoUp5CH5Vt2xfwdt+So8nwwdKadCJ4HrBdExqkY=
Subject key identifier: 05:41:35:68:70:A5:C3:B0:67:E0:10:A8:B0:68:3D:71:19:C3:E6:10
Certificate issuer: /CN=f5c371f3a34abf1957d1895df8063f4d6207ec02
Certificate serial: 01878E0A70134DB5FE28772F7B2E747B373B
Authority key identifier: F5:C3:71:F3:A3:4A:BF:19:57:D1:89:5D:F8:06:3F:4D:62:07:EC:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9cNx86NKvxlX0Yld-AY_TWIH7AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/BUE1aHClw7Bn4BCosGg9cRnD5hA.roa
Signing time: Mon 17 Apr 2023 07:07:41 +0000
ROA not before: Mon 17 Apr 2023 07:07:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202468
IP address blocks: 185.231.180.0/22 maxlen: 22
185.228.238.0/24 maxlen: 24
185.228.239.0/24 maxlen: 24
185.228.236.0/24 maxlen: 24
185.228.236.0/22 maxlen: 22
185.228.237.0/24 maxlen: 24
185.97.116.0/22 maxlen: 24
185.220.224.0/24 maxlen: 24
185.220.224.0/22 maxlen: 22
185.220.225.0/24 maxlen: 24
185.220.226.0/24 maxlen: 24
37.32.4.0/22 maxlen: 22
37.32.0.0/22 maxlen: 22
37.32.0.0/19 maxlen: 24
37.32.8.0/22 maxlen: 22
37.32.17.0/24 maxlen: 24
37.32.16.0/24 maxlen: 24
37.32.12.0/22 maxlen: 22
37.32.24.0/22 maxlen: 22
193.176.240.0/22 maxlen: 24
37.32.20.0/22 maxlen: 22
37.32.18.0/24 maxlen: 24
37.32.19.0/24 maxlen: 24
37.32.28.0/22 maxlen: 24
193.176.242.0/23 maxlen: 23
185.143.232.0/22 maxlen: 24
37.152.176.0/20 maxlen: 24
37.152.184.0/24 maxlen: 24
185.206.92.0/22 maxlen: 24
188.121.124.0/23 maxlen: 23
188.121.120.0/21 maxlen: 24
185.239.104.0/22 maxlen: 24
185.239.104.0/24 maxlen: 24
185.239.105.0/24 maxlen: 24
188.121.127.0/24 maxlen: 24
185.239.106.0/23 maxlen: 23
188.121.96.0/19 maxlen: 24
188.121.104.0/22 maxlen: 22
188.121.108.0/22 maxlen: 22
94.101.176.0/20 maxlen: 24
94.101.184.0/21 maxlen: 24
94.101.180.0/23 maxlen: 23
94.101.180.0/24 maxlen: 24
94.101.182.0/24 maxlen: 24
185.226.116.0/22 maxlen: 24
2a0c:a7c0:3::/48 maxlen: 48
2a0c:a7c0::/48 maxlen: 48
2a0c:a7c0:1::/48 maxlen: 48
2a07:3900::/29 maxlen: 29
2a0c:a7c0:2::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:8e:0a:70:13:4d:b5:fe:28:77:2f:7b:2e:74:7b:37:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5c371f3a34abf1957d1895df8063f4d6207ec02
Validity
Not Before: Apr 17 07:07:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0541356870a5c3b067e010a8b0683d7119c3e610
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:67:f1:3b:96:c2:91:0a:34:0a:bd:4b:54:f1:
b1:ff:95:51:a1:fd:24:e2:e5:c5:6b:87:59:ef:e4:
1c:26:95:7b:f7:68:c4:df:d8:31:49:f9:d8:f8:04:
b6:fe:fe:b2:58:75:32:a2:66:e2:0e:0a:b7:1b:19:
b1:5d:fb:f3:3a:3b:10:22:5c:65:1b:97:c7:22:81:
c9:26:34:45:8a:bc:ac:3d:98:a7:01:12:35:3b:d9:
ae:ab:3c:28:8c:7e:39:4a:41:d8:11:64:d4:45:93:
ee:7d:3a:d3:5b:4e:4a:93:bb:d1:a4:fb:e1:ae:96:
50:56:8c:b8:14:e9:6f:45:7b:83:ba:93:fe:75:8e:
15:58:ef:be:d8:bb:ef:c6:33:2b:4c:52:8b:63:ee:
7b:37:e3:63:31:27:5f:d5:08:84:87:bf:b9:85:09:
7b:04:24:6f:73:07:0c:05:ba:ed:5b:f5:d5:f7:19:
b4:aa:0d:72:db:28:5d:8c:c5:a9:83:cb:33:50:4e:
55:d1:60:7d:d4:c7:eb:ef:d4:b4:7b:36:e9:e7:d9:
5d:0e:24:b9:b4:1b:8d:ab:1b:7f:bd:d2:e7:98:0d:
ea:0c:c2:33:f4:35:82:76:bc:93:68:57:2c:97:e7:
bc:d9:dd:d9:29:f5:e2:1e:5f:81:83:49:ad:36:4d:
43:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:41:35:68:70:A5:C3:B0:67:E0:10:A8:B0:68:3D:71:19:C3:E6:10
X509v3 Authority Key Identifier:
keyid:F5:C3:71:F3:A3:4A:BF:19:57:D1:89:5D:F8:06:3F:4D:62:07:EC:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9cNx86NKvxlX0Yld-AY_TWIH7AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/BUE1aHClw7Bn4BCosGg9cRnD5hA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/9cNx86NKvxlX0Yld-AY_TWIH7AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.32.0.0/19
37.152.176.0/20
94.101.176.0/20
185.97.116.0/22
185.143.232.0/22
185.206.92.0/22
185.220.224.0/22
185.226.116.0/22
185.228.236.0/22
185.231.180.0/22
185.239.104.0/22
188.121.96.0/19
193.176.240.0/22
IPv6:
2a07:3900::/29
2a0c:a7c0::/46
Signature Algorithm: sha256WithRSAEncryption
89:8a:0f:77:13:8c:52:e9:5a:b6:ef:9a:0d:10:e5:95:b5:8a:
39:fe:25:d7:4c:c1:f1:1f:34:09:b6:69:95:69:0a:09:50:66:
e3:6e:ea:ee:a5:d5:e8:b9:88:60:c5:be:ac:60:3a:f1:0d:c0:
e2:c4:b8:d9:9d:8f:b4:b9:47:b8:b6:c5:16:ac:0b:a2:1a:f8:
72:d6:61:25:ec:bd:77:96:9f:d9:3e:4d:9c:b0:f7:c7:af:bc:
35:2d:68:c1:3a:6e:b8:9c:30:16:18:b6:a9:19:4b:cf:c9:2f:
94:7f:ea:84:81:d9:fb:6c:76:fe:64:33:66:f7:ae:44:7d:6e:
96:bf:e6:34:74:85:e5:6b:8c:1c:51:36:70:8d:e3:7f:e8:e4:
61:15:19:ec:4e:0d:4a:aa:ef:55:9c:8f:78:65:51:b2:33:23:
9b:0f:e7:04:f7:30:92:39:88:ad:33:bc:18:ab:c2:60:6c:2e:
ef:af:c5:ea:6a:10:cb:02:78:a9:d2:31:23:33:28:c2:83:77:
6c:bf:42:fc:c6:80:48:b6:db:9b:9e:a0:0f:dd:2e:d2:8a:39:
eb:8b:7d:89:6e:6c:17:96:ca:6f:96:de:fe:ba:93:11:6d:20:
28:e6:ac:43:92:c2:6c:9b:40:fd:12:f5:5e:9b:1e:77:a8:a5:
49:92:27:69
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgISAYeOCnATTbX+KHcvey50ezc7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1YzM3MWYzYTM0YWJmMTk1N2QxODk1ZGY4MDYzZjRkNjIw
N2VjMDIwHhcNMjMwNDE3MDcwNzQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNTQxMzU2ODcwYTVjM2IwNjdlMDEwYThiMDY4M2Q3MTE5YzNlNjEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGfxO5bCkQo0Cr1LVPGx/5VRof0k
4uXFa4dZ7+QcJpV792jE39gxSfnY+AS2/v6yWHUyombiDgq3GxmxXfvzOjsQIlxl
G5fHIoHJJjRFirysPZinARI1O9muqzwojH45SkHYEWTURZPufTrTW05Kk7vRpPvh
rpZQVoy4FOlvRXuDupP+dY4VWO++2LvvxjMrTFKLY+57N+NjMSdf1QiEh7+5hQl7
BCRvcwcMBbrtW/XV9xm0qg1y2yhdjMWpg8szUE5V0WB91Mfr79S0ezbp59ldDiS5
tBuNqxt/vdLnmA3qDMIz9DWCdryTaFcsl+e82d3ZKfXiHl+Bg0mtNk1DJwIDAQAB
o4ICaTCCAmUwHQYDVR0OBBYEFAVBNWhwpcOwZ+AQqLBoPXEZw+YQMB8GA1UdIwQY
MBaAFPXDcfOjSr8ZV9GJXfgGP01iB+wCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWNOeDg2Tkt2eGxYMFlsZC1BWV9UV0lIN0FJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS81YjBjZDktZTI3OS00NmFhLTgxZGEt
MWJiMTdhOGIyNmZlLzEvQlVFMWFIQ2x3N0JuNEJDb3NHZzljUm5ENWhBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS81YjBjZDktZTI3OS00NmFhLTgxZGEtMWJiMTdhOGIyNmZl
LzEvOWNOeDg2Tkt2eGxYMFlsZC1BWV9UV0lIN0FJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMH8GCCsGAQUFBwEHAQH/BHAwbjBUBAIAATBOAwQFJSAAAwQE
JZiwAwQEXmWwAwQCuWF0AwQCuY/oAwQCuc5cAwQCudzgAwQCueJ0AwQCueTsAwQC
uee0AwQCue9oAwQFvHlgAwQCwbDwMBYEAgACMBADBQMqBzkAAwcCKgynwAAAMA0G
CSqGSIb3DQEBCwUAA4IBAQCJig93E4xS6Vq275oNEOWVtYo5/iXXTMHxHzQJtmmV
aQoJUGbjburupdXouYhgxb6sYDrxDcDixLjZnY+0uUe4tsUWrAuiGvhy1mEl7L13
lp/ZPk2csPfHr7w1LWjBOm64nDAWGLapGUvPyS+Uf+qEgdn7bHb+ZDNm965EfW6W
v+Y0dIXla4wcUTZwjeN/6ORhFRnsTg1Kqu9VnI94ZVGyMyObD+cE9zCSOYitM7wY
q8JgbC7vr8XqahDLAnip0jEjMyjCg3dsv0L8xoBIttubnqAP3S7Sijnri32JbmwX
lspvlt7+upMRbSAo5qxDksJsm0D9EvVemx53qKVJkidp
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:32 2023 by rpki-client on console-fra.rpki-client.org