Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/mL5vTS7q2DGTfFyQTX-AdDIU4b0.roa
File: mL5vTS7q2DGTfFyQTX-AdDIU4b0.roa (raw, json)
Hash identifier: x5MxQAWcM4CXHjxDmyqsTIFkHVyaG1V1Y6u7Zsupd/k=
Subject key identifier: 98:BE:6F:4D:2E:EA:D8:31:93:7C:5C:90:4D:7F:80:74:32:14:E1:BD
Certificate issuer: /CN=bfd09a87743817c56f8088007a5746eb69ff2e30
Certificate serial: 01856F2FD665DBC3CCB1696696F7D85F3015
Authority key identifier: BF:D0:9A:87:74:38:17:C5:6F:80:88:00:7A:57:46:EB:69:FF:2E:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v9Cah3Q4F8VvgIgAeldG62n_LjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/mL5vTS7q2DGTfFyQTX-AdDIU4b0.roa
Signing time: Sun 01 Jan 2023 21:14:44 +0000
ROA not before: Sun 01 Jan 2023 21:14:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30722
IP address blocks: 185.82.224.0/22 maxlen: 22
2a05:9540::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:29:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:2f:d6:65:db:c3:cc:b1:69:66:96:f7:d8:5f:30:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfd09a87743817c56f8088007a5746eb69ff2e30
Validity
Not Before: Jan 1 21:14:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=98be6f4d2eead831937c5c904d7f80743214e1bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1a:63:9b:8a:c5:0a:9b:ab:3f:d6:17:85:af:
77:43:fb:d4:36:e4:93:70:a3:e4:35:64:15:8e:a7:
7e:f6:a2:8e:ec:99:37:3a:99:46:97:3e:01:ff:18:
b6:0f:db:57:17:64:8c:f9:f6:8e:35:6b:dd:b1:de:
c1:0f:44:a3:df:7a:e3:30:4e:30:f1:8b:d9:d6:ac:
73:e1:03:1f:5a:4c:b2:a0:a9:4e:23:0e:ff:28:55:
0d:66:43:b0:cb:b4:88:fe:b4:b0:ee:7e:49:40:8e:
8c:7a:9a:01:41:ba:36:f2:c5:6c:fc:e3:9b:ae:ce:
04:5a:76:c4:2f:a5:e0:92:05:3b:b9:12:dd:06:33:
68:bc:26:71:ea:7b:a9:03:a8:c0:97:b8:b1:e3:0d:
0d:fd:a9:b7:51:e0:1e:ac:96:ea:b7:fa:c4:75:a8:
60:92:e4:05:5f:90:97:d2:53:e9:31:7e:7c:05:9b:
3d:13:0c:b6:1b:b1:95:15:c1:04:7c:a4:a7:a8:f7:
91:7f:d2:49:de:21:16:d0:d4:d4:03:24:1d:83:c9:
ce:96:20:18:ed:68:aa:b5:f7:69:a3:bc:72:00:42:
03:b6:80:ed:ee:57:42:bd:cb:e1:e7:b5:61:d4:8a:
e6:64:b4:a8:b0:b4:0b:f0:db:dc:86:a1:0b:d5:52:
ad:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:BE:6F:4D:2E:EA:D8:31:93:7C:5C:90:4D:7F:80:74:32:14:E1:BD
X509v3 Authority Key Identifier:
keyid:BF:D0:9A:87:74:38:17:C5:6F:80:88:00:7A:57:46:EB:69:FF:2E:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9Cah3Q4F8VvgIgAeldG62n_LjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/mL5vTS7q2DGTfFyQTX-AdDIU4b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/v9Cah3Q4F8VvgIgAeldG62n_LjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.82.224.0/22
IPv6:
2a05:9540::/29
Signature Algorithm: sha256WithRSAEncryption
8f:eb:52:51:f3:67:fa:cf:c1:47:1f:24:c6:2c:8e:64:f1:67:
d0:3a:b8:10:90:9d:2e:22:52:66:14:1f:e8:0e:c2:6d:46:05:
6b:1b:30:36:3c:6f:b2:28:cb:4f:8d:74:f6:e7:ae:33:b5:77:
b4:45:d0:4d:40:93:09:7f:fa:6d:24:81:b6:e5:bb:42:f6:97:
40:b6:3c:dc:fe:a1:16:0c:82:43:98:c6:6b:8d:af:a5:32:5a:
c0:6a:f6:d1:63:51:c1:ab:72:d8:9a:b0:fa:80:e4:0c:e9:b4:
c7:88:2e:1c:4e:a0:78:82:ee:83:6f:bf:53:d9:4c:0a:1f:3e:
10:a3:a2:51:71:51:08:cc:7e:36:10:24:01:c1:aa:bb:33:ac:
a6:3e:4c:df:26:0e:f3:06:5f:1e:eb:98:60:2d:d9:9d:8b:0d:
7b:5b:5b:a5:89:49:fc:d8:c1:5c:4c:e7:34:2f:cb:0a:d6:4b:
d4:dd:0f:3b:2a:cf:71:ba:94:02:f7:e2:ae:e2:ab:da:70:d5:
61:83:69:f8:b7:d1:c4:f4:93:ab:7d:96:97:d2:6f:2f:2f:b4:
39:f5:e1:b7:09:9a:88:dc:f3:7d:b1:db:09:4d:3d:c4:f2:48:
5c:6f:23:00:48:bb:10:bd:be:de:f4:b1:30:00:ec:2a:72:8c:
97:02:d9:54
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVvL9Zl28PMsWlmlvfYXzAVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmZDA5YTg3NzQzODE3YzU2ZjgwODgwMDdhNTc0NmViNjlm
ZjJlMzAwHhcNMjMwMTAxMjExNDQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OGJlNmY0ZDJlZWFkODMxOTM3YzVjOTA0ZDdmODA3NDMyMTRlMWJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBpjm4rFCpurP9YXha93Q/vUNuST
cKPkNWQVjqd+9qKO7Jk3OplGlz4B/xi2D9tXF2SM+faONWvdsd7BD0Sj33rjME4w
8YvZ1qxz4QMfWkyyoKlOIw7/KFUNZkOwy7SI/rSw7n5JQI6MepoBQbo28sVs/OOb
rs4EWnbEL6XgkgU7uRLdBjNovCZx6nupA6jAl7ix4w0N/am3UeAerJbqt/rEdahg
kuQFX5CX0lPpMX58BZs9Ewy2G7GVFcEEfKSnqPeRf9JJ3iEW0NTUAyQdg8nOliAY
7Wiqtfdpo7xyAEIDtoDt7ldCvcvh57Vh1IrmZLSosLQL8NvchqEL1VKttwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFJi+b00u6tgxk3xckE1/gHQyFOG9MB8GA1UdIwQY
MBaAFL/Qmod0OBfFb4CIAHpXRutp/y4wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjlDYWgzUTRGOFZ2Z0lnQWVsZEc2Mm5fTGpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi8wOTI1NzAtNTEyYS00NGZhLWE0ZmUt
ZGJjYThjMzFlYmM4LzEvbUw1dlRTN3EyREdUZkZ5UVRYLUFkRElVNGIwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi8wOTI1NzAtNTEyYS00NGZhLWE0ZmUtZGJjYThjMzFlYmM4
LzEvdjlDYWgzUTRGOFZ2Z0lnQWVsZEc2Mm5fTGpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuVLgMA0E
AgACMAcDBQMqBZVAMA0GCSqGSIb3DQEBCwUAA4IBAQCP61JR82f6z8FHHyTGLI5k
8WfQOrgQkJ0uIlJmFB/oDsJtRgVrGzA2PG+yKMtPjXT2564ztXe0RdBNQJMJf/pt
JIG25btC9pdAtjzc/qEWDIJDmMZrja+lMlrAavbRY1HBq3LYmrD6gOQM6bTHiC4c
TqB4gu6Db79T2UwKHz4Qo6JRcVEIzH42ECQBwaq7M6ymPkzfJg7zBl8e65hgLdmd
iw17W1uliUn82MFcTOc0L8sK1kvU3Q87Ks9xupQC9+Ku4qvacNVhg2n4t9HE9JOr
fZaX0m8vL7Q59eG3CZqI3PN9sdsJTT3E8khcbyMASLsQvb7e9LEwAOwqcoyXAtlU
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:55 2024 by rpki-client on console-fra.rpki-client.org