Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/MZ6h5wLRd8JJmDYPIVi0kRZgLnE.roa
File: MZ6h5wLRd8JJmDYPIVi0kRZgLnE.roa (raw, json)
Hash identifier: QbZrLlDMnhch7z0ik57CToCuhOxhxYYHxN4F5dKrb7E=
Subject key identifier: 31:9E:A1:E7:02:D1:77:C2:49:98:36:0F:21:58:B4:91:16:60:2E:71
Certificate issuer: /CN=929352a8d2dd70c91ffcec8e323fe69f1e9a4139
Certificate serial: 0185B9CC3D4561F302364F50316C5254E308
Authority key identifier: 92:93:52:A8:D2:DD:70:C9:1F:FC:EC:8E:32:3F:E6:9F:1E:9A:41:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kpNSqNLdcMkf_OyOMj_mnx6aQTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/MZ6h5wLRd8JJmDYPIVi0kRZgLnE.roa
Signing time: Mon 16 Jan 2023 08:57:27 +0000
ROA not before: Mon 16 Jan 2023 08:57:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6706
IP address blocks: 83.148.0.0/18 maxlen: 18
62.44.0.0/19 maxlen: 19
195.122.192.0/19 maxlen: 19
195.128.192.0/19 maxlen: 19
88.146.0.0/17 maxlen: 17
212.27.192.0/19 maxlen: 19
195.250.128.0/19 maxlen: 19
194.213.224.0/19 maxlen: 19
213.175.32.0/19 maxlen: 19
62.177.64.0/18 maxlen: 18
212.20.96.0/19 maxlen: 19
Validation: Failed, certificate revoked on Mon 16 Jan 2023 09:46:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:b9:cc:3d:45:61:f3:02:36:4f:50:31:6c:52:54:e3:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=929352a8d2dd70c91ffcec8e323fe69f1e9a4139
Validity
Not Before: Jan 16 08:57:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=319ea1e702d177c24998360f2158b49116602e71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:bc:32:4e:15:a9:0f:16:d5:db:c1:e6:91:99:
68:e3:99:d6:94:72:05:66:7d:04:83:29:04:c1:1b:
5b:ff:5e:f9:4f:f9:af:a3:e9:46:97:68:a3:d4:96:
0a:4d:85:db:27:11:38:c6:cd:92:07:a9:d0:50:e4:
de:fd:5d:eb:ad:c5:00:be:74:e7:37:90:c6:79:6b:
d6:0c:f1:10:5f:ac:bf:16:86:3b:13:63:0d:4a:6f:
ae:c1:5c:60:98:86:7a:e1:03:18:bc:76:06:9f:af:
cc:cb:fe:2c:e1:5f:03:25:e7:e6:ce:2d:c3:d9:37:
f8:ef:f9:82:01:00:f7:0c:0c:45:70:3a:c6:d1:c7:
79:2f:4e:96:29:76:81:e1:b5:76:85:bc:e1:f4:ea:
95:99:dd:a9:10:57:9b:2d:e6:84:6a:94:e3:f6:01:
32:15:a4:7c:57:ee:98:ea:71:76:f2:60:3d:a2:b4:
43:f7:d2:f3:bb:ea:5d:3c:7b:f1:99:45:4a:90:f8:
9b:a5:56:04:b1:98:a0:84:a2:5c:30:37:04:6e:9a:
30:9a:49:5f:3a:0e:19:e8:96:63:b8:a6:db:38:cf:
62:54:97:ed:cb:f6:48:c4:67:42:16:e7:c2:64:20:
cb:be:54:d6:4b:c6:58:16:80:82:a3:b0:59:f1:09:
86:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:9E:A1:E7:02:D1:77:C2:49:98:36:0F:21:58:B4:91:16:60:2E:71
X509v3 Authority Key Identifier:
keyid:92:93:52:A8:D2:DD:70:C9:1F:FC:EC:8E:32:3F:E6:9F:1E:9A:41:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpNSqNLdcMkf_OyOMj_mnx6aQTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/MZ6h5wLRd8JJmDYPIVi0kRZgLnE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.44.0.0/19
62.177.64.0/18
83.148.0.0/18
88.146.0.0/17
194.213.224.0/19
195.122.192.0/19
195.128.192.0/19
195.250.128.0/19
212.20.96.0/19
212.27.192.0/19
213.175.32.0/19
Signature Algorithm: sha256WithRSAEncryption
0e:ff:fa:f2:35:42:5b:83:32:16:c3:ed:fb:dc:f7:ce:94:4e:
33:d7:f8:78:4e:6e:2d:73:e0:4c:c9:c4:00:15:dc:6b:08:61:
7e:60:f3:68:64:3c:d8:94:95:1e:0c:7e:23:6b:79:7c:fa:2c:
0c:b6:7b:09:d6:4f:12:d8:62:42:1c:2c:5c:41:a5:40:45:0b:
85:fe:34:8f:c4:03:77:11:98:1e:da:be:b7:c1:01:19:11:50:
70:79:51:d3:b4:cc:25:ff:48:64:0b:47:96:81:f7:71:cc:56:
20:f6:d0:eb:22:00:b6:60:f5:d9:00:4c:b1:f3:ed:f6:0f:ba:
f5:38:1a:9b:15:02:30:6e:04:a1:d6:16:51:ea:6e:b3:fb:aa:
fd:3d:da:b3:89:bf:45:78:29:35:8a:a0:08:bf:b4:04:d2:74:
19:7c:1d:79:a8:4c:2c:ef:57:bd:54:9a:64:c9:1b:fc:59:c7:
db:9d:de:fb:54:48:67:57:f4:91:8c:7f:75:57:e9:bd:22:4c:
d5:fe:fd:70:60:dc:4b:ce:bd:7c:c9:a6:64:c6:0b:93:50:9a:
5d:f5:93:9f:1c:4d:b6:2a:f6:59:47:4a:5c:70:7a:10:eb:56:
d8:67:b6:d8:2a:47:b9:c2:54:5e:27:14:6e:c7:cb:ca:49:01:
ff:cf:19:0d
-----BEGIN CERTIFICATE-----
MIIFOTCCBCGgAwIBAgISAYW5zD1FYfMCNk9QMWxSVOMIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyOTM1MmE4ZDJkZDcwYzkxZmZjZWM4ZTMyM2ZlNjlmMWU5
YTQxMzkwHhcNMjMwMTE2MDg1NzI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMTllYTFlNzAyZDE3N2MyNDk5ODM2MGYyMTU4YjQ5MTE2NjAyZTcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7wyThWpDxbV28HmkZlo45nWlHIF
Zn0EgykEwRtb/175T/mvo+lGl2ij1JYKTYXbJxE4xs2SB6nQUOTe/V3rrcUAvnTn
N5DGeWvWDPEQX6y/FoY7E2MNSm+uwVxgmIZ64QMYvHYGn6/My/4s4V8DJefmzi3D
2Tf47/mCAQD3DAxFcDrG0cd5L06WKXaB4bV2hbzh9OqVmd2pEFebLeaEapTj9gEy
FaR8V+6Y6nF28mA9orRD99Lzu+pdPHvxmUVKkPibpVYEsZighKJcMDcEbpowmklf
Og4Z6JZjuKbbOM9iVJfty/ZIxGdCFufCZCDLvlTWS8ZYFoCCo7BZ8QmGWQIDAQAB
o4ICRTCCAkEwHQYDVR0OBBYEFDGeoecC0XfCSZg2DyFYtJEWYC5xMB8GA1UdIwQY
MBaAFJKTUqjS3XDJH/zsjjI/5p8emkE5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3BOU3FOTGRjTWtmX095T01qX21ueDZhUVRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi83YjZlZGMtYWQyMy00ZDczLWFiNTYt
MGExYTM1ODk3ZjEwLzEvTVo2aDV3TFJkOEpKbURZUElWaTBrUlpnTG5FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi83YjZlZGMtYWQyMy00ZDczLWFiNTYtMGExYTM1ODk3ZjEw
LzEva3BOU3FOTGRjTWtmX095T01qX21ueDZhUVRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQFPiwAAwQG
PrFAAwQGU5QAAwQHWJIAAwQFwtXgAwQFw3rAAwQFw4DAAwQFw/qAAwQF1BRgAwQF
1BvAAwQF1a8gMA0GCSqGSIb3DQEBCwUAA4IBAQAO//ryNUJbgzIWw+373PfOlE4z
1/h4Tm4tc+BMycQAFdxrCGF+YPNoZDzYlJUeDH4ja3l8+iwMtnsJ1k8S2GJCHCxc
QaVARQuF/jSPxAN3EZge2r63wQEZEVBweVHTtMwl/0hkC0eWgfdxzFYg9tDrIgC2
YPXZAEyx8+32D7r1OBqbFQIwbgSh1hZR6m6z+6r9Pdqzib9FeCk1iqAIv7QE0nQZ
fB15qEws71e9VJpkyRv8Wcfbnd77VEhnV/SRjH91V+m9IkzV/v1wYNxLzr18yaZk
xguTUJpd9ZOfHE22KvZZR0pccHoQ61bYZ7bYKke5wlReJxRux8vKSQH/zxkN
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:29 2024 by rpki-client on console-fra.rpki-client.org