Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/anXNXOivW83KOLc1lUwrX2DK83A.roa
File: anXNXOivW83KOLc1lUwrX2DK83A.roa (raw, json)
Hash identifier: bAalCx5haXpCpa3hQxGglROLanmuFhK+wuEk5jav+5g=
Subject key identifier: 6A:75:CD:5C:E8:AF:5B:CD:CA:38:B7:35:95:4C:2B:5F:60:CA:F3:70
Certificate issuer: /CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Certificate serial: 01887CCB82638856B46A7F9C3E42446A6FB0
Authority key identifier: 05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/anXNXOivW83KOLc1lUwrX2DK83A.roa
Signing time: Fri 02 Jun 2023 15:48:11 +0000
ROA not before: Fri 02 Jun 2023 15:48:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9123
IP address blocks: 195.80.50.0/24 maxlen: 24
195.80.51.0/24 maxlen: 24
85.92.110.0/24 maxlen: 24
45.8.96.0/24 maxlen: 24
45.8.97.0/24 maxlen: 24
37.220.80.0/24 maxlen: 24
94.198.217.0/24 maxlen: 24
94.198.218.0/24 maxlen: 24
94.198.219.0/24 maxlen: 24
94.198.216.0/24 maxlen: 24
81.200.144.0/24 maxlen: 24
81.200.145.0/24 maxlen: 24
81.200.150.0/24 maxlen: 24
81.200.151.0/24 maxlen: 24
81.200.152.0/24 maxlen: 24
81.200.146.0/24 maxlen: 24
81.200.147.0/24 maxlen: 24
81.200.148.0/24 maxlen: 24
81.200.149.0/24 maxlen: 24
81.200.153.0/24 maxlen: 24
46.19.64.0/24 maxlen: 24
46.19.67.0/24 maxlen: 24
46.19.65.0/24 maxlen: 24
46.19.66.0/24 maxlen: 24
45.89.190.0/24 maxlen: 24
92.118.114.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:7c:cb:82:63:88:56:b4:6a:7f:9c:3e:42:44:6a:6f:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Validity
Not Before: Jun 2 15:48:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6a75cd5ce8af5bcdca38b735954c2b5f60caf370
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1a:2b:b6:52:38:33:75:df:f7:d4:db:0e:15:
15:d1:37:6a:9a:db:73:02:c8:97:c4:f6:2b:cc:f5:
7c:2d:a9:8f:6e:91:70:eb:9c:c5:ce:a7:b3:d8:3e:
bd:f0:94:07:9b:40:b9:49:f5:cb:3b:ff:3e:25:8a:
39:4b:c8:30:8a:56:86:18:ca:86:bb:c6:ad:98:82:
df:0a:39:3e:51:ad:86:8c:d9:51:6a:1f:75:fb:82:
ec:1b:e2:fa:84:81:93:b8:7e:77:98:17:e4:ee:bb:
5a:fe:7d:57:79:2f:3b:33:2f:9b:95:44:47:d7:5f:
fd:85:cd:88:c7:58:2c:9f:60:82:11:2c:eb:0d:84:
f2:5a:e8:57:18:45:f4:1a:54:64:3c:9d:63:89:f7:
5c:8d:68:fe:3e:40:7c:9c:8a:fc:82:cb:13:71:5b:
52:e4:05:9a:84:6f:9e:08:b6:06:5d:7c:4e:d5:a8:
36:77:d1:2f:e2:2a:31:8a:b8:cb:7c:b6:6e:7d:d6:
3a:d0:e0:ff:b9:33:e2:13:e5:65:82:a0:ca:b0:cb:
9c:78:4b:44:e0:eb:ce:7d:4a:2a:8b:8a:fa:43:df:
83:00:55:16:fa:af:86:03:bf:17:6c:4c:81:d8:5f:
c1:81:a7:34:14:3e:96:82:98:74:a6:1f:3e:61:fa:
2c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:75:CD:5C:E8:AF:5B:CD:CA:38:B7:35:95:4C:2B:5F:60:CA:F3:70
X509v3 Authority Key Identifier:
keyid:05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/anXNXOivW83KOLc1lUwrX2DK83A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.220.80.0/24
45.8.96.0/23
45.89.190.0/24
46.19.64.0/22
81.200.144.0-81.200.153.255
85.92.110.0/24
92.118.114.0/24
94.198.216.0/22
195.80.50.0/23
Signature Algorithm: sha256WithRSAEncryption
08:45:f3:4d:f0:f6:f3:cf:3b:bf:a1:6f:08:ca:5b:72:dc:90:
61:bf:1f:8f:47:2f:58:50:7a:db:b2:c7:dc:25:1f:5d:0e:b0:
80:ec:5b:ad:06:be:da:87:43:f2:27:98:4e:41:ea:16:32:21:
8b:90:0b:5c:2a:86:9c:f9:97:40:63:2e:2d:19:15:4a:a7:8b:
4c:d1:64:83:57:13:68:ae:eb:18:93:ed:30:e3:34:27:75:eb:
42:22:6e:cb:4b:32:d5:5b:78:8e:f0:16:84:01:08:49:c7:c9:
f0:bf:79:8f:83:ff:c8:ae:e1:7b:20:53:5e:3a:2c:7e:20:38:
da:a2:74:a1:96:df:47:38:8e:d8:ab:42:2f:a1:da:44:6d:e9:
2b:f1:57:b0:85:ca:45:17:4d:68:8a:6a:0f:c5:05:8b:c3:a3:
7a:22:c6:dd:03:f1:9f:f6:5c:c4:d1:8b:ca:35:0e:b8:8a:5a:
ac:8e:9e:4f:06:d8:6e:69:65:b7:a1:1b:e3:8e:b0:50:49:e4:
8b:f4:30:56:a0:4c:5e:a2:d6:33:d2:e8:d3:38:a7:73:50:c6:
f4:c9:4f:20:88:6e:ce:7a:a1:1c:7b:bd:f1:5a:a3:14:45:9a:
b5:df:00:a8:41:a0:f2:9e:0a:4a:74:03:af:37:28:8a:d5:95:
ed:bf:42:62
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgISAYh8y4JjiFa0an+cPkJEam+wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1YjFkMTNjMmUyNmUxMjc4NjI0NmE1ZWM0YzViZWE2OTg2
NGIyMGYwHhcNMjMwNjAyMTU0ODExWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YTc1Y2Q1Y2U4YWY1YmNkY2EzOGI3MzU5NTRjMmI1ZjYwY2FmMzcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRortlI4M3Xf99TbDhUV0Tdqmttz
AsiXxPYrzPV8LamPbpFw65zFzqez2D698JQHm0C5SfXLO/8+JYo5S8gwilaGGMqG
u8atmILfCjk+Ua2GjNlRah91+4LsG+L6hIGTuH53mBfk7rta/n1XeS87My+blURH
11/9hc2Ix1gsn2CCESzrDYTyWuhXGEX0GlRkPJ1jifdcjWj+PkB8nIr8gssTcVtS
5AWahG+eCLYGXXxO1ag2d9Ev4ioxirjLfLZufdY60OD/uTPiE+VlgqDKsMuceEtE
4OvOfUoqi4r6Q9+DAFUW+q+GA78XbEyB2F/Bgac0FD6Wgph0ph8+Yfos8QIDAQAB
o4ICQTCCAj0wHQYDVR0OBBYEFGp1zVzor1vNyji3NZVMK19gyvNwMB8GA1UdIwQY
MBaAFAWx0TwuJuEnhiRqXsTFvqaYZLIPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmJIUlBDNG00U2VHSkdwZXhNVy1wcGhrc2c4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9jNjEwOTItNzM0YS00ZWVmLTlkNjct
NDkwNTI0M2JjODI4LzEvYW5YTlhPaXZXODNLT0xjMWxVd3JYMkRLODNBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC9jNjEwOTItNzM0YS00ZWVmLTlkNjctNDkwNTI0M2JjODI4
LzEvQmJIUlBDNG00U2VHSkdwZXhNVy1wcGhrc2c4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFcGCCsGAQUFBwEHAQH/BEgwRjBEBAIAATA+AwQAJdxQAwQB
LQhgAwQALVm+AwQCLhNAMAwDBARRyJADBAFRyJgDBABVXG4DBABcdnIDBAJextgD
BAHDUDIwDQYJKoZIhvcNAQELBQADggEBAAhF803w9vPPO7+hbwjKW3LckGG/H49H
L1hQetuyx9wlH10OsIDsW60GvtqHQ/InmE5B6hYyIYuQC1wqhpz5l0BjLi0ZFUqn
i0zRZINXE2iu6xiT7TDjNCd160IibstLMtVbeI7wFoQBCEnHyfC/eY+D/8iu4Xsg
U146LH4gONqidKGW30c4jtirQi+h2kRt6SvxV7CFykUXTWiKag/FBYvDo3oixt0D
8Z/2XMTRi8o1DriKWqyOnk8G2G5pZbehG+OOsFBJ5Iv0MFagTF6i1jPS6NM4p3NQ
xvTJTyCIbs56oRx7vfFaoxRFmrXfAKhBoPKeCkp0A683KIrVle2/QmI=
-----END CERTIFICATE-----
Generated at Thu Jul 20 10:35:03 2023 by rpki-client on console-ams.rpki-client.org