Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/cfoDnLv9lyzMqsigATRxSujokvM.roa
File: cfoDnLv9lyzMqsigATRxSujokvM.roa (raw, json)
Hash identifier: 1XuBqJhbBdOuSGqDVMuZ5WmIqvL6se7o0boYjmy0+0A=
Subject key identifier: 71:FA:03:9C:BB:FD:97:2C:CC:AA:C8:A0:01:34:71:4A:E8:E8:92:F3
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0189C022E2CF9485434EDD8FD25DA3DC34D7
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/cfoDnLv9lyzMqsigATRxSujokvM.roa
Signing time: Fri 04 Aug 2023 10:40:59 +0000
ROA not before: Fri 04 Aug 2023 10:40:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50225
IP address blocks: 83.143.112.0/24 maxlen: 24
91.92.21.0/24 maxlen: 24
85.217.145.0/24 maxlen: 24
83.143.113.0/24 maxlen: 24
185.222.163.0/24 maxlen: 24
178.215.237.0/24 maxlen: 24
93.123.85.0/24 maxlen: 24
45.128.99.0/24 maxlen: 24
87.121.69.0/24 maxlen: 24
193.42.34.0/24 maxlen: 24
94.156.176.0/24 maxlen: 24
193.47.63.0/24 maxlen: 24
193.47.60.0/24 maxlen: 24
194.48.249.0/24 maxlen: 24
45.84.90.0/24 maxlen: 24
194.48.251.0/24 maxlen: 24
85.209.132.0/24 maxlen: 24
79.110.50.0/24 maxlen: 24
176.125.252.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:c0:22:e2:cf:94:85:43:4e:dd:8f:d2:5d:a3:dc:34:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 4 10:40:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=71fa039cbbfd972cccaac8a00134714ae8e892f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:34:ab:da:41:47:07:a1:db:7c:17:bc:59:d5:
ef:53:72:1b:71:81:e9:c4:1f:d3:dd:fc:a5:ae:a9:
03:46:f7:e1:05:33:3b:14:ff:d9:8d:3e:ab:47:72:
e7:00:4d:d2:97:60:05:b7:9a:65:5f:1a:33:de:c3:
3b:59:45:a8:d7:93:06:c3:70:13:57:8a:84:35:26:
13:65:f3:33:52:75:5f:4f:d2:36:f6:67:8c:d8:81:
71:c2:d1:d2:12:08:49:f1:6d:fb:34:26:70:86:d1:
6d:38:ca:9b:cf:ad:b5:c3:d9:b6:2e:82:fc:68:fc:
dd:ca:d0:f8:2a:30:e6:65:a5:32:43:06:02:3f:f7:
92:0a:ef:53:f2:a6:dc:1a:ad:5f:c0:e2:3a:65:2f:
0e:49:0f:ce:05:14:f6:70:a1:33:60:2d:e7:1f:f6:
3b:8f:ea:34:17:5b:47:86:da:1a:1c:af:6d:7f:c1:
6b:09:cc:26:9b:d0:ec:f3:3b:33:75:e1:4f:b0:13:
64:44:b0:75:2e:90:df:aa:78:de:7f:10:76:e9:d3:
ac:e6:9f:29:bb:cb:49:ff:08:a0:d2:eb:3f:fa:a1:
15:41:88:b8:97:d6:38:03:d6:ac:a9:4c:8d:d4:d7:
e1:9f:20:c0:78:0e:9e:91:c7:a8:54:68:62:48:3c:
a8:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:FA:03:9C:BB:FD:97:2C:CC:AA:C8:A0:01:34:71:4A:E8:E8:92:F3
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/cfoDnLv9lyzMqsigATRxSujokvM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.90.0/24
45.128.99.0/24
79.110.50.0/24
83.143.112.0/23
85.209.132.0/24
85.217.145.0/24
87.121.69.0/24
91.92.21.0/24
93.123.85.0/24
94.156.176.0/24
176.125.252.0/24
178.215.237.0/24
185.222.163.0/24
193.42.34.0/24
193.47.60.0/24
193.47.63.0/24
194.48.249.0/24
194.48.251.0/24
Signature Algorithm: sha256WithRSAEncryption
63:3b:8a:0e:6b:d2:fa:a3:6c:fc:4f:db:7f:57:b6:b7:e2:db:
94:4a:c3:97:e5:60:8b:40:31:1d:de:c0:e8:ee:a3:34:2a:d9:
ac:be:8e:ba:3d:f2:05:6e:49:4e:f8:aa:d4:b9:16:be:e8:cd:
dc:25:f1:23:29:6b:b1:e2:cc:9c:92:f1:1b:77:88:45:91:78:
e2:28:78:d6:32:08:11:1a:a8:dc:3e:b0:33:73:65:43:82:41:
77:dd:78:a4:db:78:4e:9c:8e:90:32:31:43:41:48:73:23:3a:
e8:b8:86:3c:d0:0e:37:65:ac:4b:8b:c2:a9:6e:f8:d9:78:11:
c0:7c:aa:41:77:17:bf:a2:0f:c7:34:6f:85:9f:9e:96:58:91:
aa:61:8e:21:39:71:41:09:b5:11:ff:bb:31:49:5a:b3:dc:ab:
d8:13:d2:d9:a5:8f:f1:77:92:46:6e:ee:57:5e:38:23:fd:db:
28:a5:83:d8:d3:a4:4c:54:6b:93:99:99:a0:82:91:f8:6a:7c:
a8:f5:5f:e9:45:86:7a:fa:68:e2:4b:b5:70:0e:3b:96:8f:2c:
7c:4a:7a:fa:1f:12:df:a6:77:22:4f:18:a2:f1:29:5b:46:7d:
d0:df:89:06:16:57:4b:24:89:2c:41:0d:b4:08:76:a2:0d:2c:
09:ad:ec:cc
-----BEGIN CERTIFICATE-----
MIIFZDCCBEygAwIBAgISAYnAIuLPlIVDTt2P0l2j3DTXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjMwODA0MTA0MDU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MWZhMDM5Y2JiZmQ5NzJjY2NhYWM4YTAwMTM0NzE0YWU4ZTg5MmYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljSr2kFHB6HbfBe8WdXvU3IbcYHp
xB/T3fylrqkDRvfhBTM7FP/ZjT6rR3LnAE3Sl2AFt5plXxoz3sM7WUWo15MGw3AT
V4qENSYTZfMzUnVfT9I29meM2IFxwtHSEghJ8W37NCZwhtFtOMqbz621w9m2LoL8
aPzdytD4KjDmZaUyQwYCP/eSCu9T8qbcGq1fwOI6ZS8OSQ/OBRT2cKEzYC3nH/Y7
j+o0F1tHhtoaHK9tf8FrCcwmm9Ds8zszdeFPsBNkRLB1LpDfqnjefxB26dOs5p8p
u8tJ/wig0us/+qEVQYi4l9Y4A9asqUyN1NfhnyDAeA6ekceoVGhiSDyovQIDAQAB
o4ICcDCCAmwwHQYDVR0OBBYEFHH6A5y7/ZcszKrIoAE0cUro6JLzMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvY2ZvRG5MdjlseXpNcXNpZ0FUUnhTdWpva3ZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGFBggrBgEFBQcBBwEB/wR2MHQwcgQCAAEwbAMEAC1UWgME
AC2AYwMEAE9uMgMEAVOPcAMEAFXRhAMEAFXZkQMEAFd5RQMEAFtcFQMEAF17VQME
AF6csAMEALB9/AMEALLX7QMEALneowMEAMEqIgMEAMEvPAMEAMEvPwMEAMIw+QME
AMIw+zANBgkqhkiG9w0BAQsFAAOCAQEAYzuKDmvS+qNs/E/bf1e2t+LblErDl+Vg
i0AxHd7A6O6jNCrZrL6Ouj3yBW5JTviq1LkWvujN3CXxIylrseLMnJLxG3eIRZF4
4ih41jIIERqo3D6wM3NlQ4JBd914pNt4TpyOkDIxQ0FIcyM66LiGPNAON2WsS4vC
qW742XgRwHyqQXcXv6IPxzRvhZ+elliRqmGOITlxQQm1Ef+7MUlas9yr2BPS2aWP
8XeSRm7uV144I/3bKKWD2NOkTFRrk5mZoIKR+Gp8qPVf6UWGevpo4ku1cA47lo8s
fEp6+h8S36Z3Ik8YovEpW0Z90N+JBhZXSySJLEENtAh2og0sCa3szA==
-----END CERTIFICATE-----
Generated at Wed Aug 9 12:23:07 2023 by rpki-client on console-ams.rpki-client.org