Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/89abb8-636d-4084-81a0-c63adb6ee5d9/1/M5xFBSy_Xuy62Rg8TuFyrhOgHyc.roa
File: M5xFBSy_Xuy62Rg8TuFyrhOgHyc.roa (raw, json)
Hash identifier: WKZ+QOeC4mS2pe6z5Fr5gq2JLcXaKl4a8HD0xV7Isqg=
Subject key identifier: 33:9C:45:05:2C:BF:5E:EC:BA:D9:18:3C:4E:E1:72:AE:13:A0:1F:27
Certificate issuer: /CN=9bea3a3a4a3606c7396f15f501ac5c641785750c
Certificate serial: 0186382583DF36F83899535CABBDE4A396E6
Authority key identifier: 9B:EA:3A:3A:4A:36:06:C7:39:6F:15:F5:01:AC:5C:64:17:85:75:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m-o6Oko2Bsc5bxX1AaxcZBeFdQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/89abb8-636d-4084-81a0-c63adb6ee5d9/1/M5xFBSy_Xuy62Rg8TuFyrhOgHyc.roa
Signing time: Thu 09 Feb 2023 21:47:08 +0000
ROA not before: Thu 09 Feb 2023 21:47:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197524
IP address blocks: 5.22.240.0/21 maxlen: 21
88.133.0.0/17 maxlen: 17
88.133.0.0/19 maxlen: 19
185.9.64.0/22 maxlen: 22
88.133.128.0/20 maxlen: 20
109.199.160.0/19 maxlen: 19
88.133.156.0/22 maxlen: 22
88.133.64.0/19 maxlen: 19
2a01:a980::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:38:25:83:df:36:f8:38:99:53:5c:ab:bd:e4:a3:96:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bea3a3a4a3606c7396f15f501ac5c641785750c
Validity
Not Before: Feb 9 21:47:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=339c45052cbf5eecbad9183c4ee172ae13a01f27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:27:a9:d7:33:34:6f:2b:6f:21:8c:22:63:d0:
96:33:8b:6e:10:9c:8b:7e:04:3c:bc:ba:44:f4:89:
4b:4e:1c:ef:4a:75:c6:95:2d:1f:88:74:f6:11:a9:
cb:81:6b:f3:d1:f9:95:6f:74:30:d4:f5:6f:4f:3a:
17:63:98:27:01:a7:8a:1a:06:af:14:e2:0e:b0:a0:
b3:c4:e8:23:5e:d6:fe:50:70:bf:87:d2:dc:e2:d0:
d2:3c:9e:1c:a9:89:d8:a0:82:99:96:39:30:e6:a5:
df:fd:29:b4:ed:f3:c8:a6:5e:ed:c8:3a:ef:90:97:
0c:34:71:5b:61:9f:c2:7b:89:0a:1c:cf:84:96:97:
31:90:dd:f6:f1:b2:59:d1:bb:a0:80:92:15:26:b5:
b8:e2:cc:fd:58:4c:d8:89:1d:23:40:53:0e:03:45:
4c:a0:be:f6:6a:4d:dd:9b:43:40:53:34:e4:16:26:
d5:8a:53:2f:08:1c:8b:8f:45:6b:73:14:e0:32:9d:
38:4b:ec:cb:0a:ec:1a:a5:fa:2c:bc:7b:92:31:0d:
9c:35:91:a5:e4:77:8a:12:01:9a:ae:c9:d2:fa:f2:
64:1e:59:9a:69:e4:79:cb:9e:a8:80:8e:56:44:f8:
00:c9:f1:e9:bb:25:d1:12:22:a2:30:21:70:74:2f:
53:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:9C:45:05:2C:BF:5E:EC:BA:D9:18:3C:4E:E1:72:AE:13:A0:1F:27
X509v3 Authority Key Identifier:
keyid:9B:EA:3A:3A:4A:36:06:C7:39:6F:15:F5:01:AC:5C:64:17:85:75:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-o6Oko2Bsc5bxX1AaxcZBeFdQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/89abb8-636d-4084-81a0-c63adb6ee5d9/1/M5xFBSy_Xuy62Rg8TuFyrhOgHyc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/89abb8-636d-4084-81a0-c63adb6ee5d9/1/m-o6Oko2Bsc5bxX1AaxcZBeFdQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.22.240.0/21
88.133.0.0-88.133.143.255
88.133.156.0/22
109.199.160.0/19
185.9.64.0/22
IPv6:
2a01:a980::/29
Signature Algorithm: sha256WithRSAEncryption
8a:a1:80:9c:28:7f:84:81:95:05:72:c7:20:da:b8:87:89:c8:
2c:b9:b8:7f:05:6c:d5:c1:52:93:69:90:c2:39:14:3a:ec:5c:
64:50:f5:8a:64:d8:11:f1:55:89:af:4b:df:0c:92:4a:66:4e:
b5:00:a5:54:08:c5:dd:5c:b4:84:90:4d:47:03:1b:5f:41:da:
a5:5b:a1:9a:6f:03:c8:3f:73:34:4d:5f:34:34:c1:7d:74:7e:
11:fe:6a:28:c7:34:91:e2:87:63:6c:da:28:79:a6:d0:0e:2b:
6b:74:50:0a:8a:b9:79:32:30:70:e0:d9:1f:5a:f8:81:39:e4:
2e:6f:9d:4d:5b:f7:ce:5e:7d:fe:c2:0e:f7:02:2c:42:d2:cd:
df:e4:ec:de:95:9a:cd:bd:f8:1b:7f:45:2a:be:26:4d:9b:a2:
96:0e:4a:65:8b:38:7a:72:0e:90:68:96:80:13:b3:97:df:3c:
04:cb:61:e2:6c:ff:fd:a4:49:48:a1:68:d8:a7:22:68:71:38:
4f:30:1b:94:7d:0e:d2:9b:55:99:c1:fd:9e:2b:c1:52:ac:04:
e9:49:02:ba:28:8b:ae:4c:8f:33:b6:b9:69:ea:90:6e:a0:c1:
f2:14:77:f6:fe:f9:18:a9:a0:38:c2:bd:c4:86:ad:81:dc:00:
46:4a:a0:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:00 2024 by rpki-client on console-fra.rpki-client.org