Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/oFmlPkUSXulAp5IV2nzzzs8aDkA.roa
File: oFmlPkUSXulAp5IV2nzzzs8aDkA.roa (raw, json)
Hash identifier: +VzLSuUsvIPd0ruy+8XxR6HtSVwpRIT7V4nx2F63CwE=
Subject key identifier: A0:59:A5:3E:45:12:5E:E9:40:A7:92:15:DA:7C:F3:CE:CF:1A:0E:40
Certificate issuer: /CN=099a1f2dbf7b7a84ae57b8d67426b7e4e420fab5
Certificate serial: 0188E2A7546C5A9D2024D5466848C63CBE06
Authority key identifier: 09:9A:1F:2D:BF:7B:7A:84:AE:57:B8:D6:74:26:B7:E4:E4:20:FA:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZofLb97eoSuV7jWdCa35OQg-rU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/oFmlPkUSXulAp5IV2nzzzs8aDkA.roa
Signing time: Thu 22 Jun 2023 10:29:56 +0000
ROA not before: Thu 22 Jun 2023 10:29:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202053
IP address blocks: 95.111.208.0/22 maxlen: 22
2a04:3546::/32 maxlen: 32
2a04:3544:8000::/34 maxlen: 34
2a04:3544::/32 maxlen: 32
2a04:3542::/32 maxlen: 32
2a04:3542:8000::/34 maxlen: 34
2a04:3540::/32 maxlen: 32
2a04:3543::/32 maxlen: 32
2a04:3545::/32 maxlen: 32
2a04:3541::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 26 Jun 2023 09:50:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:e2:a7:54:6c:5a:9d:20:24:d5:46:68:48:c6:3c:be:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=099a1f2dbf7b7a84ae57b8d67426b7e4e420fab5
Validity
Not Before: Jun 22 10:29:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a059a53e45125ee940a79215da7cf3cecf1a0e40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:0d:d8:b2:1b:3b:58:05:9b:4f:14:54:1e:b1:
fc:8f:71:8d:a6:38:66:56:ef:05:d7:ac:07:55:58:
6c:65:32:5e:2f:65:5f:f8:51:3b:97:33:59:a9:86:
bc:6d:e0:a9:00:1d:6f:7f:94:2c:24:05:37:b8:07:
b1:53:be:92:54:94:f7:16:be:80:f9:2b:f1:86:08:
75:4f:23:20:67:e5:fa:b1:b0:f2:89:26:96:50:c1:
b1:d9:9e:bc:c4:ce:6b:98:0e:28:c4:20:b4:78:96:
d3:20:c6:15:d7:8c:77:77:4f:36:f4:57:56:4e:c8:
bf:64:3c:1c:7a:f2:c7:ac:ab:a5:02:95:2c:9f:bf:
15:fb:ee:a8:e3:13:97:60:ee:26:69:f3:f4:ed:d1:
92:5f:db:e0:ce:8d:4e:67:4d:75:1b:fe:de:0f:36:
59:4e:39:0b:e3:df:2d:3a:93:64:81:16:2f:7f:7f:
5d:5f:c0:21:2e:73:e6:01:bc:97:b5:f3:ce:c4:23:
4e:8b:56:fc:5e:4e:00:57:07:5f:b5:e1:bb:f9:c6:
ee:9d:03:83:a2:2d:b4:7a:7a:02:1e:b8:bf:30:96:
be:1a:a2:2d:e6:ed:77:83:dc:25:b4:e3:71:8b:09:
40:ab:21:e5:33:3d:8d:8d:57:d9:5b:b1:36:de:e1:
3b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:59:A5:3E:45:12:5E:E9:40:A7:92:15:DA:7C:F3:CE:CF:1A:0E:40
X509v3 Authority Key Identifier:
keyid:09:9A:1F:2D:BF:7B:7A:84:AE:57:B8:D6:74:26:B7:E4:E4:20:FA:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZofLb97eoSuV7jWdCa35OQg-rU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/oFmlPkUSXulAp5IV2nzzzs8aDkA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.111.208.0/22
IPv6:
2a04:3540::-2a04:3546:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
73:4c:7f:d3:ce:92:bb:06:c7:99:4d:79:4e:50:52:78:17:db:
0f:ba:b3:bd:e0:16:0e:53:6e:66:3c:bd:23:96:51:f2:b2:b5:
c5:2f:59:d8:aa:27:f0:48:60:17:43:8b:75:cc:25:37:8f:b6:
7d:df:98:b9:8d:5c:6a:f7:3b:bf:0d:13:74:ec:32:32:a0:5c:
a9:ea:04:17:a0:b2:b6:b3:75:50:ed:ce:0a:2d:97:8e:46:fa:
77:8a:e2:4d:fc:3c:2d:88:c4:8b:9c:53:6e:97:d1:b7:ae:d3:
13:01:f0:ad:ca:30:3c:38:7b:69:c4:37:3f:e7:b9:f8:3a:25:
e7:6c:4c:38:8d:e9:e9:95:36:2b:95:ce:00:38:f1:59:7b:55:
6e:a8:e1:74:f2:3d:66:c1:7f:1d:1a:97:d8:5c:8d:ab:67:da:
58:5f:a6:77:d2:50:10:38:55:b3:52:94:0b:3c:b9:db:15:91:
76:bd:b0:72:c3:e2:84:0c:9a:a9:c6:f2:8b:1c:bc:dd:a5:29:
bf:65:79:1f:ba:43:69:87:a7:1b:c2:c4:56:7f:f2:12:7f:9f:
e8:23:6e:95:4b:56:aa:1d:f7:01:cd:51:fa:b2:b5:63:38:98:
a6:8c:56:16:10:8b:20:02:0d:00:0c:02:d4:80:ae:9b:30:37:
d6:bd:88:7b
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYjip1RsWp0gJNVGaEjGPL4GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5OWExZjJkYmY3YjdhODRhZTU3YjhkNjc0MjZiN2U0ZTQy
MGZhYjUwHhcNMjMwNjIyMTAyOTU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMDU5YTUzZTQ1MTI1ZWU5NDBhNzkyMTVkYTdjZjNjZWNmMWEwZTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5w3Yshs7WAWbTxRUHrH8j3GNpjhm
Vu8F16wHVVhsZTJeL2Vf+FE7lzNZqYa8beCpAB1vf5QsJAU3uAexU76SVJT3Fr6A
+Svxhgh1TyMgZ+X6sbDyiSaWUMGx2Z68xM5rmA4oxCC0eJbTIMYV14x3d0829FdW
Tsi/ZDwcevLHrKulApUsn78V++6o4xOXYO4mafP07dGSX9vgzo1OZ011G/7eDzZZ
TjkL498tOpNkgRYvf39dX8AhLnPmAbyXtfPOxCNOi1b8Xk4AVwdfteG7+cbunQOD
oi20enoCHri/MJa+GqIt5u13g9wltONxiwlAqyHlMz2NjVfZW7E23uE73wIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFKBZpT5FEl7pQKeSFdp8887PGg5AMB8GA1UdIwQY
MBaAFAmaHy2/e3qErle41nQmt+TkIPq1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1pvZkxiOTdlb1N1VjdqV2RDYTM1T1FnLXJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9kNDJhYmItMzM0Mi00ODg3LWFmNDAt
OWNkNjhmMjIxZTIxLzEvb0ZtbFBrVVNYdWxBcDVJVjJuenp6czhhRGtBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS9kNDJhYmItMzM0Mi00ODg3LWFmNDAtOWNkNjhmMjIxZTIx
LzEvQ1pvZkxiOTdlb1N1VjdqV2RDYTM1T1FnLXJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAMBAIAATAGAwQCX2/QMBYE
AgACMBAwDgMFBioENUADBQAqBDVGMA0GCSqGSIb3DQEBCwUAA4IBAQBzTH/TzpK7
BseZTXlOUFJ4F9sPurO94BYOU25mPL0jllHysrXFL1nYqifwSGAXQ4t1zCU3j7Z9
35i5jVxq9zu/DRN07DIyoFyp6gQXoLK2s3VQ7c4KLZeORvp3iuJN/DwtiMSLnFNu
l9G3rtMTAfCtyjA8OHtpxDc/57n4OiXnbEw4jenplTYrlc4AOPFZe1VuqOF08j1m
wX8dGpfYXI2rZ9pYX6Z30lAQOFWzUpQLPLnbFZF2vbByw+KEDJqpxvKLHLzdpSm/
ZXkfukNph6cbwsRWf/ISf5/oI26VS1aqHfcBzVH6srVjOJimjFYWEIsgAg0ADALU
gK6bMDfWvYh7
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:52 2024 by rpki-client on console-ams.rpki-client.org