Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/uGMmmr1WZnQWhplKxVAnNW2j0BE.roa
File: uGMmmr1WZnQWhplKxVAnNW2j0BE.roa (raw, json)
Hash identifier: Jz+pn2KUJqi1wDMfE+GPSnqqrYJoCh9xI1wgbEcOevw=
Subject key identifier: B8:63:26:9A:BD:56:66:74:16:86:99:4A:C5:50:27:35:6D:A3:D0:11
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018930347199670AC60C3D9C50178C0CA933
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/uGMmmr1WZnQWhplKxVAnNW2j0BE.roa
Signing time: Fri 07 Jul 2023 11:54:50 +0000
ROA not before: Fri 07 Jul 2023 11:54:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207459
IP address blocks: 91.92.24.0/24 maxlen: 24
91.92.24.0/23 maxlen: 23
91.92.25.0/24 maxlen: 24
193.149.29.0/24 maxlen: 24
193.149.30.0/24 maxlen: 24
193.149.28.0/22 maxlen: 22
193.149.31.0/24 maxlen: 24
193.149.28.0/24 maxlen: 24
171.22.19.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
194.180.50.0/24 maxlen: 24
87.121.59.0/24 maxlen: 24
93.123.116.0/24 maxlen: 24
94.154.163.0/24 maxlen: 24
176.125.255.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:30:34:71:99:67:0a:c6:0c:3d:9c:50:17:8c:0c:a9:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 7 11:54:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b863269abd5666741686994ac55027356da3d011
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b8:4d:50:20:0e:9e:fd:d2:34:11:f1:fd:9f:
12:59:ae:53:7c:04:99:f2:18:1e:7f:06:78:40:60:
7c:eb:d5:80:34:71:fa:2f:5a:29:9f:fb:65:44:28:
e1:26:f7:f1:a0:99:9e:d0:95:7f:cd:89:78:3a:04:
8a:6a:2b:6c:b0:07:be:f2:30:ae:db:d4:f4:ff:55:
2c:f1:9d:19:b5:49:f6:98:ef:81:4a:22:73:31:fa:
e3:6e:cc:d9:f7:ac:dd:14:12:07:81:da:57:16:18:
b8:71:c1:73:98:4d:aa:dc:28:1f:1f:4f:fb:63:00:
0e:ca:c4:fc:a9:9a:f0:2e:31:c3:28:e3:ef:c0:9e:
f0:a5:ec:55:d1:38:7e:4f:7c:1f:ba:80:cc:86:31:
ac:7d:24:2f:98:9f:36:f6:7b:d4:7f:9a:b8:bb:c2:
a3:0d:fd:97:2e:d1:5b:a6:54:32:14:79:6f:08:3c:
35:50:34:a2:25:ed:e1:60:31:99:7d:b7:f0:1c:ee:
2b:2c:dd:65:eb:9c:69:86:ce:ca:41:e3:3d:e5:f9:
5c:d7:a0:df:18:c0:bc:83:4f:4d:e0:51:de:ab:b3:
f3:bc:a7:e7:3e:4c:16:d0:2d:01:b7:be:e1:df:10:
3b:3d:d8:16:c5:ae:73:fb:34:a2:8f:75:c2:72:48:
4e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:63:26:9A:BD:56:66:74:16:86:99:4A:C5:50:27:35:6D:A3:D0:11
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/uGMmmr1WZnQWhplKxVAnNW2j0BE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.87.0/24
87.121.59.0/24
91.92.24.0/23
93.123.116.0/24
94.154.163.0/24
171.22.19.0/24
176.125.255.0/24
193.149.28.0/22
194.180.50.0/24
Signature Algorithm: sha256WithRSAEncryption
74:fb:68:9f:d8:5a:02:91:d8:26:d9:a8:35:86:c5:82:6b:62:
03:f6:3f:4a:da:49:9c:cb:89:01:7b:79:2f:63:8d:80:6c:d3:
fc:64:34:69:fb:36:d6:b9:9e:b5:ee:55:5d:50:08:c9:79:ef:
1c:ae:09:ab:e2:d6:5a:d5:5e:f3:d1:11:ef:ce:16:0b:0a:14:
fd:23:aa:89:97:db:41:58:95:30:51:d1:e0:82:39:ca:0d:65:
44:43:2c:bc:76:55:27:29:f0:61:93:52:a6:c7:4a:4d:77:a3:
59:35:fa:ed:19:6b:df:a2:52:29:0e:9f:9e:70:02:5b:24:22:
b2:59:6e:a7:e6:c7:87:33:81:89:70:71:54:da:be:ba:1d:51:
4d:fe:d8:db:4a:0b:8f:84:e3:23:49:73:a7:0d:4b:ce:68:e7:
71:3c:11:45:e1:13:35:be:a2:20:2b:2c:7a:ca:2c:38:b9:df:
f6:cb:a2:9a:16:1d:47:3d:e7:51:50:67:02:6b:5c:25:d0:fb:
58:84:5f:ad:7a:19:28:49:05:b2:25:28:15:22:0f:99:66:e4:
b4:b7:a4:b1:31:23:05:78:cf:cd:b8:8e:b7:77:13:cf:a8:aa:
fc:50:0f:a9:83:9d:a5:76:83:e5:f5:1d:3c:7c:e6:00:df:6a:
8e:18:08:7c
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgISAYkwNHGZZwrGDD2cUBeMDKkzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjMwNzA3MTE1NDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiODYzMjY5YWJkNTY2Njc0MTY4Njk5NGFjNTUwMjczNTZkYTNkMDExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbhNUCAOnv3SNBHx/Z8SWa5TfASZ
8hgefwZ4QGB869WANHH6L1opn/tlRCjhJvfxoJme0JV/zYl4OgSKaitssAe+8jCu
29T0/1Us8Z0ZtUn2mO+BSiJzMfrjbszZ96zdFBIHgdpXFhi4ccFzmE2q3CgfH0/7
YwAOysT8qZrwLjHDKOPvwJ7wpexV0Th+T3wfuoDMhjGsfSQvmJ829nvUf5q4u8Kj
Df2XLtFbplQyFHlvCDw1UDSiJe3hYDGZfbfwHO4rLN1l65xphs7KQeM95flc16Df
GMC8g09N4FHeq7PzvKfnPkwW0C0Bt77h3xA7PdgWxa5z+zSij3XCckhOhQIDAQAB
o4ICOTCCAjUwHQYDVR0OBBYEFLhjJpq9VmZ0FoaZSsVQJzVto9ARMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvdUdNbW1yMVdablFXaHBsS3hWQW5OVzJqMEJFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQAV3hXAwQA
V3k7AwQBW1wYAwQAXXt0AwQAXpqjAwQAqxYTAwQAsH3/AwQCwZUcAwQAwrQyMA0G
CSqGSIb3DQEBCwUAA4IBAQB0+2if2FoCkdgm2ag1hsWCa2ID9j9K2kmcy4kBe3kv
Y42AbNP8ZDRp+zbWuZ617lVdUAjJee8crgmr4tZa1V7z0RHvzhYLChT9I6qJl9tB
WJUwUdHggjnKDWVEQyy8dlUnKfBhk1Kmx0pNd6NZNfrtGWvfolIpDp+ecAJbJCKy
WW6n5seHM4GJcHFU2r66HVFN/tjbSguPhOMjSXOnDUvOaOdxPBFF4RM1vqIgKyx6
yiw4ud/2y6KaFh1HPedRUGcCa1wl0PtYhF+tehkoSQWyJSgVIg+ZZuS0t6SxMSMF
eM/NuI63dxPPqKr8UA+pg52ldoPl9R08fOYA32qOGAh8
-----END CERTIFICATE-----
Generated at Tue Aug 29 07:59:27 2023 by rpki-client on console-ams.rpki-client.org