Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/cVbo39XgTqWjsXDpWUWCeCZ0vsc.roa
File: cVbo39XgTqWjsXDpWUWCeCZ0vsc.roa (raw, json)
Hash identifier: l9yhXPxEgzZ9cC7Q0r5xFuyBfhmTXTysDg+WDzXnIt4=
Subject key identifier: 71:56:E8:DF:D5:E0:4E:A5:A3:B1:70:E9:59:45:82:78:26:74:BE:C7
Certificate issuer: /CN=67b5b02dc401666ee045ab90cc88817fe09d706a
Certificate serial: 0187073C5644BCA250DC3BD3E9AFAD9402B7
Authority key identifier: 67:B5:B0:2D:C4:01:66:6E:E0:45:AB:90:CC:88:81:7F:E0:9D:70:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/cVbo39XgTqWjsXDpWUWCeCZ0vsc.roa
Signing time: Wed 22 Mar 2023 02:53:27 +0000
ROA not before: Wed 22 Mar 2023 02:53:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 54994
IP address blocks: 163.171.64.0/24 maxlen: 24
163.171.67.0/24 maxlen: 24
163.171.70.0/24 maxlen: 24
163.171.71.0/24 maxlen: 24
163.171.87.0/24 maxlen: 24
163.171.207.0/24 maxlen: 24
163.171.222.0/24 maxlen: 24
163.171.231.0/24 maxlen: 24
163.171.252.0/24 maxlen: 24
163.171.166.0/24 maxlen: 24
93.188.135.0/24 maxlen: 24
163.171.177.0/24 maxlen: 24
163.171.182.0/24 maxlen: 24
163.171.188.0/24 maxlen: 24
148.253.231.0/24 maxlen: 24
148.253.232.0/24 maxlen: 24
148.253.233.0/24 maxlen: 24
148.253.237.0/24 maxlen: 24
148.253.234.0/24 maxlen: 24
148.253.235.0/24 maxlen: 24
148.253.246.0/24 maxlen: 24
148.253.34.0/24 maxlen: 24
2a01:53c0:ffc6::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 27 Mar 2023 10:03:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:07:3c:56:44:bc:a2:50:dc:3b:d3:e9:af:ad:94:02:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67b5b02dc401666ee045ab90cc88817fe09d706a
Validity
Not Before: Mar 22 02:53:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7156e8dfd5e04ea5a3b170e9594582782674bec7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:14:17:2b:ae:67:d2:90:44:20:a3:68:70:2d:
9d:15:4f:0d:e1:16:c9:39:37:a1:e8:51:ff:d3:4c:
21:7e:71:ee:91:63:a0:b9:3b:fa:f5:86:5b:6c:c5:
e0:82:68:80:eb:2b:4a:76:9e:66:0e:f4:82:97:c3:
d0:b3:53:83:3d:01:7c:48:8c:70:fe:10:4b:bb:19:
dd:30:80:81:d1:d3:77:12:4a:59:92:6c:50:e4:12:
84:6f:fc:f7:e9:4c:ea:66:6c:28:96:91:bd:bb:6c:
5f:4c:79:30:a6:07:e4:36:23:ce:23:e7:e4:27:67:
3f:94:3a:63:d6:b8:c3:7d:ca:66:5f:de:86:dc:15:
9e:61:30:d4:1f:fc:9d:66:85:92:b2:00:b1:d5:c5:
c6:88:7a:ca:b2:5f:92:bf:33:8f:e0:0c:7b:c5:a9:
d8:b3:ac:a4:81:7f:6a:20:63:90:11:02:d9:52:ff:
36:25:67:3c:32:4b:27:e5:c4:86:e2:da:fb:68:f4:
66:08:69:c2:f0:db:b0:61:cd:20:2e:31:4b:0e:5d:
82:95:93:72:fc:aa:11:73:df:14:d8:aa:c7:be:bc:
e8:ae:0c:0c:1c:29:99:81:18:97:39:ca:3a:64:09:
b5:34:54:ca:95:9a:65:3c:7c:4a:7a:56:10:3b:ec:
a4:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:56:E8:DF:D5:E0:4E:A5:A3:B1:70:E9:59:45:82:78:26:74:BE:C7
X509v3 Authority Key Identifier:
keyid:67:B5:B0:2D:C4:01:66:6E:E0:45:AB:90:CC:88:81:7F:E0:9D:70:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/cVbo39XgTqWjsXDpWUWCeCZ0vsc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.188.135.0/24
148.253.34.0/24
148.253.231.0-148.253.235.255
148.253.237.0/24
148.253.246.0/24
163.171.64.0/24
163.171.67.0/24
163.171.70.0/23
163.171.87.0/24
163.171.166.0/24
163.171.177.0/24
163.171.182.0/24
163.171.188.0/24
163.171.207.0/24
163.171.222.0/24
163.171.231.0/24
163.171.252.0/24
IPv6:
2a01:53c0:ffc6::/48
Signature Algorithm: sha256WithRSAEncryption
15:c7:3c:d3:17:f9:71:06:be:55:81:b2:7e:82:94:80:25:13:
cb:e5:b7:c8:d6:eb:23:bf:35:d5:8f:da:f1:6e:c0:8a:98:f6:
11:b8:54:b3:4a:48:a0:ae:b4:66:57:19:af:7d:1e:7c:a0:d0:
e6:cc:82:5c:91:49:2c:16:33:0d:24:95:4e:ed:c3:c1:d9:2a:
4e:16:37:7b:6e:9c:05:b8:2b:2a:c8:55:56:f7:c5:40:8b:68:
64:9f:e3:3e:87:64:39:ff:1f:74:7c:76:8d:3c:f8:a2:3c:dc:
16:92:b1:8b:36:50:9c:1f:28:4e:3f:49:26:dd:27:89:f8:9d:
26:10:fd:17:ef:ce:a5:69:5a:c2:83:24:e7:f7:3a:02:cd:09:
ef:01:49:bb:98:5d:8c:1a:ae:bd:39:24:44:31:3d:4a:07:09:
5e:71:9a:ee:ca:94:64:96:d7:ba:9d:7f:2e:dc:a5:3b:ca:5e:
9e:24:9b:ad:ff:2a:82:52:29:ef:21:36:66:47:95:ad:21:64:
b8:73:24:40:f8:a8:3b:d0:16:35:c6:53:79:3e:97:53:45:06:
f1:09:13:6b:9a:1d:1e:9f:1a:83:73:ee:9c:ad:5e:7e:ea:3d:
e4:0c:ed:d3:35:8a:f7:be:b2:82:9c:b6:82:ce:df:c9:e3:ad:
ba:01:62:cf
-----BEGIN CERTIFICATE-----
MIIFeTCCBGGgAwIBAgISAYcHPFZEvKJQ3DvT6a+tlAK3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3YjViMDJkYzQwMTY2NmVlMDQ1YWI5MGNjODg4MTdmZTA5
ZDcwNmEwHhcNMjMwMzIyMDI1MzI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MTU2ZThkZmQ1ZTA0ZWE1YTNiMTcwZTk1OTQ1ODI3ODI2NzRiZWM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBQXK65n0pBEIKNocC2dFU8N4RbJ
OTeh6FH/00whfnHukWOguTv69YZbbMXggmiA6ytKdp5mDvSCl8PQs1ODPQF8SIxw
/hBLuxndMICB0dN3EkpZkmxQ5BKEb/z36UzqZmwolpG9u2xfTHkwpgfkNiPOI+fk
J2c/lDpj1rjDfcpmX96G3BWeYTDUH/ydZoWSsgCx1cXGiHrKsl+SvzOP4Ax7xanY
s6ykgX9qIGOQEQLZUv82JWc8Mksn5cSG4tr7aPRmCGnC8NuwYc0gLjFLDl2ClZNy
/KoRc98U2KrHvrzorgwMHCmZgRiXOco6ZAm1NFTKlZplPHxKelYQO+ykmQIDAQAB
o4IChTCCAoEwHQYDVR0OBBYEFHFW6N/V4E6lo7Fw6VlFgngmdL7HMB8GA1UdIwQY
MBaAFGe1sC3EAWZu4EWrkMyIgX/gnXBqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjdXd0xjUUJabTdnUmF1UXpJaUJmLUNkY0dvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82NGEzZGUtODEyYS00YWNlLTgxNGQt
YjVkODg4YWRmZDM3LzEvY1ZibzM5WGdUcVdqc1hEcFdVV0NlQ1owdnNjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC82NGEzZGUtODEyYS00YWNlLTgxNGQtYjVkODg4YWRmZDM3
LzEvWjdXd0xjUUJabTdnUmF1UXpJaUJmLUNkY0dvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGaBggrBgEFBQcBBwEB/wSBijCBhzB0BAIAATBuAwQAXbyH
AwQAlP0iMAwDBACU/ecDBAKU/egDBACU/e0DBACU/fYDBACjq0ADBACjq0MDBAGj
q0YDBACjq1cDBACjq6YDBACjq7EDBACjq7YDBACjq7wDBACjq88DBACjq94DBACj
q+cDBACjq/wwDwQCAAIwCQMHACoBU8D/xjANBgkqhkiG9w0BAQsFAAOCAQEAFcc8
0xf5cQa+VYGyfoKUgCUTy+W3yNbrI7811Y/a8W7Aipj2EbhUs0pIoK60ZlcZr30e
fKDQ5syCXJFJLBYzDSSVTu3DwdkqThY3e26cBbgrKshVVvfFQItoZJ/jPodkOf8f
dHx2jTz4ojzcFpKxizZQnB8oTj9JJt0nifidJhD9F+/OpWlawoMk5/c6As0J7wFJ
u5hdjBquvTkkRDE9SgcJXnGa7sqUZJbXup1/LtylO8peniSbrf8qglIp7yE2ZkeV
rSFkuHMkQPioO9AWNcZTeT6XU0UG8QkTa5odHp8ag3PunK1efuo95Azt0zWK976y
gpy2gs7fyeOtugFizw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:49 2024 by rpki-client on console-fra.rpki-client.org