Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/rJkvu5htifwky4cNgTJDYm0flGk.roa
File: rJkvu5htifwky4cNgTJDYm0flGk.roa (raw, json)
Hash identifier: r7ZgFsXZi5GD3K7JtHtTc0JzHu14KB8VgztaYsMHmdo=
Subject key identifier: AC:99:2F:BB:98:6D:89:FC:24:CB:87:0D:81:32:43:62:6D:1F:94:69
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01889F8BB70EED779F4A751E76275EA16191
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/rJkvu5htifwky4cNgTJDYm0flGk.roa
Signing time: Fri 09 Jun 2023 09:45:13 +0000
ROA not before: Fri 09 Jun 2023 09:45:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50225
IP address blocks: 85.209.132.0/24 maxlen: 24
83.143.112.0/24 maxlen: 24
83.143.113.0/24 maxlen: 24
185.222.163.0/24 maxlen: 24
87.121.69.0/24 maxlen: 24
193.42.34.0/24 maxlen: 24
193.47.63.0/24 maxlen: 24
176.125.252.0/24 maxlen: 24
193.47.60.0/24 maxlen: 24
194.48.251.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:9f:8b:b7:0e:ed:77:9f:4a:75:1e:76:27:5e:a1:61:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jun 9 09:45:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ac992fbb986d89fc24cb870d813243626d1f9469
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:1d:98:34:59:14:41:28:99:c9:b7:03:59:c9:
65:b3:23:32:76:78:b0:19:c4:16:fe:1a:01:b7:ec:
c8:60:4a:72:69:6d:2b:78:7b:ff:4e:d4:23:0e:1b:
c1:80:77:f5:6b:03:03:e7:05:73:31:b5:e3:67:37:
03:b5:71:0a:aa:c0:d0:71:a7:8a:42:44:32:d3:c7:
6f:18:94:00:4a:15:4e:fa:33:52:d5:bf:7b:6f:43:
ac:42:cf:be:5c:47:68:84:1b:04:b9:35:e0:cc:45:
16:54:2d:12:aa:1f:f5:1b:e3:05:fc:d1:79:9c:41:
37:90:ab:9b:2d:b8:28:2f:40:46:6f:f7:fe:07:06:
58:ca:04:f6:1a:96:06:79:2c:1d:87:74:c4:28:99:
28:a5:c2:3e:f7:c5:f5:02:72:ca:e6:23:35:7b:77:
8f:df:70:e0:32:a3:79:0a:82:27:7a:4f:c4:8f:44:
16:27:a3:7d:68:d0:06:3e:00:ec:5d:9d:01:6b:6d:
f8:ba:42:24:8c:a8:a3:b7:37:cb:81:da:d3:d1:7a:
ce:34:e8:e3:c5:34:c1:d7:83:9d:03:1b:bb:bb:93:
3e:8e:b9:a0:cc:2b:86:59:d0:40:a7:1b:4f:53:55:
c5:68:fc:40:d6:11:25:37:a1:ed:86:75:85:db:05:
30:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:99:2F:BB:98:6D:89:FC:24:CB:87:0D:81:32:43:62:6D:1F:94:69
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/rJkvu5htifwky4cNgTJDYm0flGk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.143.112.0/23
85.209.132.0/24
87.121.69.0/24
176.125.252.0/24
185.222.163.0/24
193.42.34.0/24
193.47.60.0/24
193.47.63.0/24
194.48.251.0/24
Signature Algorithm: sha256WithRSAEncryption
29:f5:15:fe:ff:f1:12:3a:e2:77:a4:3c:b9:86:93:62:4a:44:
d9:cc:6d:bd:b5:f8:31:28:f6:41:7a:95:02:c2:76:d0:d6:9f:
04:ff:c2:c7:19:2d:bd:99:ea:c3:97:e4:78:68:a9:b8:e1:ef:
4e:a1:f1:01:22:2a:56:88:61:1a:cf:fe:c8:30:87:7d:f6:57:
6b:6b:ef:37:a6:83:03:e5:4c:f7:e1:12:b1:57:63:bf:ef:3c:
f4:33:82:ac:dc:04:0e:9c:48:0a:8a:bd:18:42:5b:b6:63:83:
b7:b4:7b:66:42:e6:92:24:5c:3c:d8:76:d1:85:73:6d:20:c9:
12:1f:b2:1b:bb:d2:98:25:9b:00:6c:bd:0b:8e:c7:a8:66:3b:
01:09:d5:a8:85:de:20:9b:26:ce:2f:50:0c:ae:77:dd:b0:8c:
f1:76:eb:96:72:72:dd:4c:1e:0d:c7:eb:0c:3e:28:34:51:8b:
b7:22:83:10:03:9f:b5:4e:33:7b:e5:14:be:33:58:67:5d:f6:
6d:98:36:d7:3a:ff:14:c9:ee:c3:45:03:86:1b:8f:67:3b:9a:
d1:c4:62:d5:6c:0c:62:c6:95:04:47:fa:51:d2:ac:a9:64:40:
96:97:fd:f7:d0:35:93:c0:da:f7:fa:30:13:14:97:51:29:53:
d0:40:f5:e0
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgISAYifi7cO7XefSnUedideoWGRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjMwNjA5MDk0NTEzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYzk5MmZiYjk4NmQ4OWZjMjRjYjg3MGQ4MTMyNDM2MjZkMWY5NDY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9R2YNFkUQSiZybcDWcllsyMydniw
GcQW/hoBt+zIYEpyaW0reHv/TtQjDhvBgHf1awMD5wVzMbXjZzcDtXEKqsDQcaeK
QkQy08dvGJQAShVO+jNS1b97b0OsQs++XEdohBsEuTXgzEUWVC0Sqh/1G+MF/NF5
nEE3kKubLbgoL0BGb/f+BwZYygT2GpYGeSwdh3TEKJkopcI+98X1AnLK5iM1e3eP
33DgMqN5CoInek/Ej0QWJ6N9aNAGPgDsXZ0Ba234ukIkjKijtzfLgdrT0XrONOjj
xTTB14OdAxu7u5M+jrmgzCuGWdBApxtPU1XFaPxA1hElN6HthnWF2wUwAwIDAQAB
o4ICOTCCAjUwHQYDVR0OBBYEFKyZL7uYbYn8JMuHDYEyQ2JtH5RpMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvckprdnU1aHRpZndreTRjTmdUSkRZbTBmbEdrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQBU49wAwQA
VdGEAwQAV3lFAwQAsH38AwQAud6jAwQAwSoiAwQAwS88AwQAwS8/AwQAwjD7MA0G
CSqGSIb3DQEBCwUAA4IBAQAp9RX+//ESOuJ3pDy5hpNiSkTZzG29tfgxKPZBepUC
wnbQ1p8E/8LHGS29merDl+R4aKm44e9OofEBIipWiGEaz/7IMId99ldra+83poMD
5Uz34RKxV2O/7zz0M4Ks3AQOnEgKir0YQlu2Y4O3tHtmQuaSJFw82HbRhXNtIMkS
H7Ibu9KYJZsAbL0LjseoZjsBCdWohd4gmybOL1AMrnfdsIzxduuWcnLdTB4Nx+sM
Pig0UYu3IoMQA5+1TjN75RS+M1hnXfZtmDbXOv8Uye7DRQOGG49nO5rRxGLVbAxi
xpUER/pR0qypZECWl/330DWTwNr3+jATFJdRKVPQQPXg
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:42 2023 by rpki-client on console-ams.rpki-client.org