Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/5tpSEn6CbTvGVgK6sd_xXeOnktM.roa
File: 5tpSEn6CbTvGVgK6sd_xXeOnktM.roa (raw, json)
Hash identifier: +A6g3VGbokFL/mXEZy0qdFhfU84q9uYD4ddiPZppKqU=
Subject key identifier: E6:DA:52:12:7E:82:6D:3B:C6:56:02:BA:B1:DF:F1:5D:E3:A7:92:D3
Certificate issuer: /CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Certificate serial: 0189EDBAF16B89D12C58B61D3E10081CEA3F
Authority key identifier: 92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/5tpSEn6CbTvGVgK6sd_xXeOnktM.roa
Signing time: Sun 13 Aug 2023 07:09:58 +0000
ROA not before: Sun 13 Aug 2023 07:09:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207990
IP address blocks: 194.53.70.0/24 maxlen: 32
45.156.224.0/22 maxlen: 32
194.124.240.0/24 maxlen: 32
194.124.239.0/24 maxlen: 32
185.242.217.0/24 maxlen: 32
194.124.248.0/24 maxlen: 32
194.124.247.0/24 maxlen: 32
193.228.58.0/23 maxlen: 32
188.119.154.0/24 maxlen: 32
92.118.208.0/22 maxlen: 32
45.66.176.0/22 maxlen: 32
45.154.192.0/22 maxlen: 32
193.254.27.0/24 maxlen: 32
193.254.28.0/24 maxlen: 32
45.82.96.0/22 maxlen: 32
45.84.228.0/22 maxlen: 32
139.28.120.0/22 maxlen: 32
185.36.254.0/24 maxlen: 32
185.223.248.0/22 maxlen: 32
45.10.236.0/22 maxlen: 32
185.188.62.0/24 maxlen: 32
63.141.36.0/23 maxlen: 32
194.0.133.0/24 maxlen: 32
194.0.136.0/24 maxlen: 32
Validation: Failed, certificate revoked on Mon 14 Aug 2023 06:52:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ed:ba:f1:6b:89:d1:2c:58:b6:1d:3e:10:08:1c:ea:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Validity
Not Before: Aug 13 07:09:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e6da52127e826d3bc65602bab1dff15de3a792d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:06:3f:c0:be:91:b2:89:cd:bc:0a:37:e8:3b:
e2:d7:da:16:d0:d4:b2:c7:27:46:08:84:1a:9b:ef:
60:c6:1c:9b:cb:d3:41:4b:24:56:1d:d0:cb:51:36:
ed:ad:97:c8:f7:85:bf:6d:d7:62:1d:be:30:d6:53:
2e:62:e5:63:0b:26:51:8a:04:46:1d:2b:34:41:9d:
dd:22:ab:6a:95:df:88:34:40:f0:0d:14:f5:60:10:
61:a4:33:cb:94:95:31:c6:d3:e5:55:89:6d:e7:bb:
11:fa:75:dd:05:a2:29:d9:f1:30:55:58:35:48:11:
c3:47:67:bc:5e:3d:d9:c7:58:cf:ff:38:6a:8f:39:
ba:85:f5:d5:75:4a:e5:fa:12:25:81:d5:a9:b6:d0:
64:80:ca:25:69:12:b5:ed:22:8a:f2:5b:e1:70:ca:
da:80:66:9d:03:21:1d:a8:02:3a:a4:d1:de:96:48:
a1:37:6d:3b:5f:97:0a:d8:11:a3:42:cf:0d:1b:ad:
04:e1:34:35:eb:2a:2f:62:d4:c7:28:88:39:31:7c:
0c:f7:18:37:e6:7c:0c:75:75:9a:6a:72:9c:07:a0:
7f:3c:20:d7:13:17:c1:3e:60:55:d0:61:e7:da:bb:
e4:2e:52:51:3c:56:a3:cb:dc:66:86:07:aa:0a:da:
2a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:DA:52:12:7E:82:6D:3B:C6:56:02:BA:B1:DF:F1:5D:E3:A7:92:D3
X509v3 Authority Key Identifier:
keyid:92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/5tpSEn6CbTvGVgK6sd_xXeOnktM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.236.0/22
45.66.176.0/22
45.82.96.0/22
45.84.228.0/22
45.154.192.0/22
45.156.224.0/22
63.141.36.0/23
92.118.208.0/22
139.28.120.0/22
185.36.254.0/24
185.188.62.0/24
185.223.248.0/22
185.242.217.0/24
188.119.154.0/24
193.228.58.0/23
193.254.27.0-193.254.28.255
194.0.133.0/24
194.0.136.0/24
194.53.70.0/24
194.124.239.0-194.124.240.255
194.124.247.0-194.124.248.255
Signature Algorithm: sha256WithRSAEncryption
44:a0:f3:8a:9f:76:62:d5:8f:f8:a9:9c:0b:a3:34:2c:e7:28:
db:27:b9:0d:28:46:98:98:9c:1f:2b:57:3f:36:7a:cb:f2:a6:
85:28:18:2f:6c:e1:0a:e7:31:16:61:51:1f:5c:6b:31:85:22:
dc:98:6e:0a:61:f9:dc:ac:61:67:9e:75:ce:8b:fe:11:be:65:
a1:3a:48:d1:4f:98:7d:e7:ab:26:8c:46:1b:cd:83:1e:5d:b4:
a5:14:54:fd:95:f6:07:5e:08:e5:ae:58:fd:03:6e:10:83:aa:
48:83:e8:9c:2f:66:c8:06:f9:28:78:fb:4d:1e:db:ea:4c:db:
c8:be:3a:5b:5e:42:88:a0:1d:aa:4f:15:ca:8a:bb:6c:29:38:
ce:ad:b7:f6:01:dd:16:eb:36:f1:7f:fc:c3:94:64:01:19:06:
bc:8c:55:36:e7:e5:10:65:99:ea:65:75:73:74:3d:d4:c3:61:
1d:53:5c:b2:85:9a:77:08:58:ec:b7:6c:4d:27:60:d7:31:f6:
f0:e1:8d:97:41:72:c9:d7:4e:4e:4d:54:23:6e:a2:44:ad:a7:
16:89:f7:77:7b:b0:16:16:68:87:37:47:37:6c:d9:c8:b8:8a:
4c:a2:f8:46:b6:57:7b:81:c5:4d:4f:11:20:42:74:79:4b:18:
ee:04:91:1e
-----BEGIN CERTIFICATE-----
MIIFkjCCBHqgAwIBAgISAYntuvFridEsWLYdPhAIHOo/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyMjIwOGI0N2I2YTg2NGQ5ZDFmZjMzZTA2YWE4MWQxMzgx
OWE3NGUwHhcNMjMwODEzMDcwOTU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNmRhNTIxMjdlODI2ZDNiYzY1NjAyYmFiMWRmZjE1ZGUzYTc5MmQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgY/wL6RsonNvAo36Dvi19oW0NSy
xydGCIQam+9gxhyby9NBSyRWHdDLUTbtrZfI94W/bddiHb4w1lMuYuVjCyZRigRG
HSs0QZ3dIqtqld+INEDwDRT1YBBhpDPLlJUxxtPlVYlt57sR+nXdBaIp2fEwVVg1
SBHDR2e8Xj3Zx1jP/zhqjzm6hfXVdUrl+hIlgdWpttBkgMolaRK17SKK8lvhcMra
gGadAyEdqAI6pNHelkihN207X5cK2BGjQs8NG60E4TQ16yovYtTHKIg5MXwM9xg3
5nwMdXWaanKcB6B/PCDXExfBPmBV0GHn2rvkLlJRPFajy9xmhgeqCtoqtwIDAQAB
o4ICnjCCApowHQYDVR0OBBYEFObaUhJ+gm07xlYCurHf8V3jp5LTMB8GA1UdIwQY
MBaAFJIiCLR7aoZNnR/zPgaqgdE4GadOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2lJSXRIdHFoazJkSF9NLUJxcUIwVGdacDA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS82OTkwZTktYzNjMC00NzhhLTk5OTct
OTViMDhlMzY2MGNmLzEvNXRwU0VuNkNiVHZHVmdLNnNkX3hYZU9ua3RNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS82OTkwZTktYzNjMC00NzhhLTk5OTctOTViMDhlMzY2MGNm
LzEva2lJSXRIdHFoazJkSF9NLUJxcUIwVGdacDA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGzBggrBgEFBQcBBwEB/wSBozCBoDCBnQQCAAEwgZYDBAIt
CuwDBAItQrADBAItUmADBAItVOQDBAItmsADBAItnOADBAE/jSQDBAJcdtADBAKL
HHgDBAC5JP4DBAC5vD4DBAK53/gDBAC58tkDBAC8d5oDBAHB5DowDAMEAMH+GwME
AMH+HAMEAMIAhQMEAMIAiAMEAMI1RjAMAwQAwnzvAwQAwnzwMAwDBADCfPcDBADC
fPgwDQYJKoZIhvcNAQELBQADggEBAESg84qfdmLVj/ipnAujNCznKNsnuQ0oRpiY
nB8rVz82esvypoUoGC9s4QrnMRZhUR9cazGFItyYbgph+dysYWeedc6L/hG+ZaE6
SNFPmH3nqyaMRhvNgx5dtKUUVP2V9gdeCOWuWP0DbhCDqkiD6JwvZsgG+Sh4+00e
2+pM28i+OlteQoigHapPFcqKu2wpOM6tt/YB3RbrNvF//MOUZAEZBryMVTbn5RBl
mepldXN0PdTDYR1TXLKFmncIWOy3bE0nYNcx9vDhjZdBcsnXTk5NVCNuokStpxaJ
93d7sBYWaIc3Rzds2ci4ikyi+Ea2V3uBxU1PESBCdHlLGO4EkR4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:47 2024 by rpki-client on console-ams.rpki-client.org