Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/78plkSYQI8xWhn39un9wot9N87U.roa
File: 78plkSYQI8xWhn39un9wot9N87U.roa (raw, json)
Hash identifier: 2m999QFd7g8nlJ2PElhA9OMV6bRh/fW8b6+tOiMJbVc=
Subject key identifier: EF:CA:65:91:26:10:23:CC:56:86:7D:FD:BA:7F:70:A2:DF:4D:F3:B5
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01888F4E4A182EC635D857CF5D193C1EFCC1
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/78plkSYQI8xWhn39un9wot9N87U.roa
Signing time: Tue 06 Jun 2023 06:04:12 +0000
ROA not before: Tue 06 Jun 2023 06:04:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211760
IP address blocks: 171.22.28.0/24 maxlen: 24
95.214.26.0/24 maxlen: 24
95.214.25.0/24 maxlen: 24
185.216.70.0/24 maxlen: 24
194.169.175.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:8f:4e:4a:18:2e:c6:35:d8:57:cf:5d:19:3c:1e:fc:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jun 6 06:04:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=efca6591261023cc56867dfdba7f70a2df4df3b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:96:2e:d4:31:ea:d2:d2:ee:fe:64:77:0f:4d:
5b:d5:4e:6f:d8:35:97:8a:0e:7c:27:9d:54:09:af:
98:d8:fe:b4:ed:2b:ce:bb:01:ff:c0:86:47:2c:d9:
f0:fd:63:70:2b:e3:3f:4a:77:fd:5f:f9:e0:15:1a:
91:d2:68:b2:a8:22:97:08:93:23:2a:f1:5a:59:5f:
ee:2d:28:5d:bd:27:a8:38:c1:39:c0:f5:20:12:a2:
04:96:b0:74:6b:d5:a1:a5:1f:0e:1c:0e:f4:f8:5f:
54:c1:0f:5a:4f:6a:da:6d:9b:42:9c:b3:cd:c4:3d:
9a:a9:da:8e:85:8b:97:ce:0e:c6:68:07:1b:e4:10:
4b:d7:89:f0:6b:16:d4:f4:aa:85:c5:8b:dd:88:2d:
1c:45:b5:52:b7:26:a1:63:dc:c7:ce:79:a4:5b:57:
e3:9e:fa:d8:3a:c2:9f:95:79:b3:4a:4b:9a:67:d9:
22:9d:13:34:4f:c6:fd:22:63:c8:68:cb:3d:93:2b:
95:9c:88:f6:1d:36:08:2d:c7:d3:a7:10:49:08:5d:
1f:0c:f6:d4:46:16:0b:e0:0b:f6:91:83:84:2d:57:
5a:01:2f:1f:bf:6a:01:96:eb:62:f8:1d:54:95:ac:
76:76:2b:44:ab:d2:1a:2c:5b:a3:97:82:6b:39:e0:
46:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:CA:65:91:26:10:23:CC:56:86:7D:FD:BA:7F:70:A2:DF:4D:F3:B5
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/78plkSYQI8xWhn39un9wot9N87U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.25.0-95.214.26.255
171.22.28.0/24
185.216.70.0/24
194.169.175.0/24
Signature Algorithm: sha256WithRSAEncryption
63:b0:5a:de:a9:64:bb:47:3d:56:8b:0b:eb:f3:6b:db:1d:6c:
79:25:32:03:b4:ec:37:55:e0:5c:0b:27:d6:df:af:04:09:c6:
e6:f4:41:b9:de:98:37:23:c3:c6:81:9c:40:93:fe:96:8d:c7:
ae:86:df:aa:ab:4b:2a:4d:24:b7:ee:62:df:67:1c:65:64:a9:
28:be:8b:b0:15:a6:56:cc:70:d0:df:05:11:23:7b:b5:e8:ad:
b0:82:8d:41:36:71:37:70:c9:19:ce:08:9e:14:9d:5d:a5:00:
72:55:83:a1:74:d4:b4:53:ff:8e:9d:28:f4:4c:0d:2f:f1:c2:
11:8a:29:22:9a:96:55:74:10:0c:00:d0:8c:a1:08:e0:01:28:
e2:ae:dc:fc:d0:7b:77:86:3d:5b:7f:0d:7c:1c:c7:0f:4a:93:
ed:ce:de:f8:05:77:96:df:63:87:31:53:bd:68:a7:87:71:82:
15:57:54:c5:f1:88:12:5c:b2:bc:51:3a:dc:2c:e0:60:a1:ce:
f1:e6:c9:3d:da:3e:74:ef:c2:b6:f9:67:ea:77:e4:89:77:31:
e9:e1:1d:16:7b:f9:0b:ce:ab:03:e6:1c:fd:9c:e1:97:15:a6:
81:00:01:3d:2a:59:8a:c1:b8:cb:d2:ba:6d:ef:81:50:44:f8:
99:5b:79:42
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAYiPTkoYLsY12FfPXRk8HvzBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjMwNjA2MDYwNDEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZmNhNjU5MTI2MTAyM2NjNTY4NjdkZmRiYTdmNzBhMmRmNGRmM2I1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZYu1DHq0tLu/mR3D01b1U5v2DWX
ig58J51UCa+Y2P607SvOuwH/wIZHLNnw/WNwK+M/Snf9X/ngFRqR0miyqCKXCJMj
KvFaWV/uLShdvSeoOME5wPUgEqIElrB0a9WhpR8OHA70+F9UwQ9aT2rabZtCnLPN
xD2aqdqOhYuXzg7GaAcb5BBL14nwaxbU9KqFxYvdiC0cRbVStyahY9zHznmkW1fj
nvrYOsKflXmzSkuaZ9kinRM0T8b9ImPIaMs9kyuVnIj2HTYILcfTpxBJCF0fDPbU
RhYL4Av2kYOELVdaAS8fv2oBluti+B1Ulax2ditEq9IaLFujl4JrOeBGewIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFO/KZZEmECPMVoZ9/bp/cKLfTfO1MB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvNzhwbGtTWVFJOHhXaG4zOXVuOXdvdDlOODdVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgMAwDBABf1hkD
BABf1hoDBACrFhwDBAC52EYDBADCqa8wDQYJKoZIhvcNAQELBQADggEBAGOwWt6p
ZLtHPVaLC+vza9sdbHklMgO07DdV4FwLJ9bfrwQJxub0QbnemDcjw8aBnECT/paN
x66G36qrSypNJLfuYt9nHGVkqSi+i7AVplbMcNDfBREje7XorbCCjUE2cTdwyRnO
CJ4UnV2lAHJVg6F01LRT/46dKPRMDS/xwhGKKSKallV0EAwA0IyhCOABKOKu3PzQ
e3eGPVt/DXwcxw9Kk+3O3vgFd5bfY4cxU71op4dxghVXVMXxiBJcsrxROtws4GCh
zvHmyT3aPnTvwrb5Z+p35Il3MenhHRZ7+QvOqwPmHP2c4ZcVpoEAAT0qWYrBuMvS
um3vgVBE+JlbeUI=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:32 2023 by rpki-client on console-ams.rpki-client.org