Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/3394e3-736e-4879-b8db-89aaea36285e/1/rvM3J2RVZOT1ghhEswTyA3jFzlw.roa
File: rvM3J2RVZOT1ghhEswTyA3jFzlw.roa (raw, json)
Hash identifier: iS9I+erpipbaBBuZhgAkzZPsXW1ueInkgEMiqw7DN64=
Subject key identifier: AE:F3:37:27:64:55:64:E4:F5:82:18:44:B3:04:F2:03:78:C5:CE:5C
Certificate issuer: /CN=e85b83c87c4a3d8315025379f72987520bb5d046
Certificate serial: 0186EAF9D59EBBB4F682C1058C92A588B4AF
Authority key identifier: E8:5B:83:C8:7C:4A:3D:83:15:02:53:79:F7:29:87:52:0B:B5:D0:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6FuDyHxKPYMVAlN59ymHUgu10EY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/3394e3-736e-4879-b8db-89aaea36285e/1/rvM3J2RVZOT1ghhEswTyA3jFzlw.roa
Signing time: Thu 16 Mar 2023 15:11:27 +0000
ROA not before: Thu 16 Mar 2023 15:11:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210906
IP address blocks: 185.47.92.0/22 maxlen: 22
188.64.176.0/21 maxlen: 21
185.7.236.0/22 maxlen: 24
185.211.96.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ea:f9:d5:9e:bb:b4:f6:82:c1:05:8c:92:a5:88:b4:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e85b83c87c4a3d8315025379f72987520bb5d046
Validity
Not Before: Mar 16 15:11:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aef33727645564e4f5821844b304f20378c5ce5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:87:40:86:99:6d:a9:9e:ff:c5:91:1f:9b:6e:
57:29:ee:33:70:bd:ed:0d:6c:ad:2d:ee:98:a6:43:
6a:0c:16:3e:55:e8:ba:24:d5:61:d4:a7:e4:0b:3a:
dd:2d:e8:e4:d6:23:e1:bc:ee:05:bd:d5:cd:6e:77:
d4:e8:5a:ea:dd:62:7f:0c:2d:f6:fb:3f:1a:c3:22:
8e:88:bf:b9:a5:76:86:c4:1d:e2:81:37:5a:11:af:
6a:c1:12:34:00:1f:7e:35:b7:1c:af:be:d1:12:be:
0e:e4:14:ac:56:2a:f3:45:f7:25:77:41:6e:68:22:
ac:26:cd:78:2a:be:a8:33:5c:e2:f2:87:11:b2:8c:
71:2c:0d:17:d1:60:f6:36:05:7a:77:7a:1a:4b:b6:
f2:6c:18:2a:d7:7f:cb:ab:b7:62:a3:7c:5f:39:ad:
85:cb:ba:03:57:65:cc:0e:43:6e:c0:92:e3:82:98:
d4:f7:e3:ed:eb:f1:be:da:33:8e:c5:93:46:fe:62:
45:4b:ab:bb:85:56:27:7d:61:a8:a7:0f:4e:b1:13:
6a:be:4c:40:31:31:52:e3:78:67:9f:4a:36:a3:4e:
21:01:76:1e:c5:4c:70:b0:50:65:35:20:4a:d6:0f:
45:f7:00:64:58:49:7c:82:83:83:00:52:ca:cc:26:
d0:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:F3:37:27:64:55:64:E4:F5:82:18:44:B3:04:F2:03:78:C5:CE:5C
X509v3 Authority Key Identifier:
keyid:E8:5B:83:C8:7C:4A:3D:83:15:02:53:79:F7:29:87:52:0B:B5:D0:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6FuDyHxKPYMVAlN59ymHUgu10EY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3394e3-736e-4879-b8db-89aaea36285e/1/rvM3J2RVZOT1ghhEswTyA3jFzlw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3394e3-736e-4879-b8db-89aaea36285e/1/6FuDyHxKPYMVAlN59ymHUgu10EY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.7.236.0/22
185.47.92.0/22
185.211.96.0/22
188.64.176.0/21
Signature Algorithm: sha256WithRSAEncryption
72:50:34:bd:24:a9:7d:ce:74:3c:5c:99:ba:a4:09:0e:93:17:
d9:c9:a9:03:c3:8b:6a:87:f5:12:29:4c:26:0c:7d:f0:44:3e:
ba:a2:c5:38:c6:cc:28:2b:cb:12:f0:33:44:5c:c5:f1:f6:a0:
95:10:ef:82:4d:41:8e:64:01:fb:32:e1:65:7b:26:41:64:97:
ae:94:30:f0:a7:1f:d4:c0:c4:60:bf:dd:a6:5f:09:a9:6a:2f:
32:6c:76:81:7c:e0:fe:6d:91:91:4f:5d:ce:f7:fc:35:3a:dd:
9f:e1:ab:cc:19:41:5f:43:09:ce:33:e3:9d:dc:79:5b:6f:4f:
39:5c:c2:de:11:17:0a:f6:44:e4:c0:69:f1:6e:98:36:4f:4b:
7b:79:94:2b:c6:1e:b4:4e:24:e0:4a:33:03:1c:7b:2e:7c:40:
29:6a:2c:32:f3:4b:0d:84:61:d5:dd:2a:d2:52:45:62:40:06:
41:5f:9b:64:8e:e9:27:65:f4:4b:37:eb:b4:45:a5:46:78:d3:
23:0d:e0:fa:ce:1e:68:d4:71:74:2f:57:f5:6e:65:7d:9f:02:
56:e8:6a:fe:e0:92:f2:c6:6f:7a:16:c1:cf:8e:a3:a0:b5:d9:
4c:d4:86:36:f3:6b:8b:1d:5b:a4:de:47:73:b3:00:69:28:78:
64:d1:96:5c
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYbq+dWeu7T2gsEFjJKliLSvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4NWI4M2M4N2M0YTNkODMxNTAyNTM3OWY3Mjk4NzUyMGJi
NWQwNDYwHhcNMjMwMzE2MTUxMTI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZWYzMzcyNzY0NTU2NGU0ZjU4MjE4NDRiMzA0ZjIwMzc4YzVjZTVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYdAhpltqZ7/xZEfm25XKe4zcL3t
DWytLe6YpkNqDBY+Vei6JNVh1KfkCzrdLejk1iPhvO4FvdXNbnfU6Frq3WJ/DC32
+z8awyKOiL+5pXaGxB3igTdaEa9qwRI0AB9+Nbccr77REr4O5BSsVirzRfcld0Fu
aCKsJs14Kr6oM1zi8ocRsoxxLA0X0WD2NgV6d3oaS7bybBgq13/Lq7dio3xfOa2F
y7oDV2XMDkNuwJLjgpjU9+Pt6/G+2jOOxZNG/mJFS6u7hVYnfWGopw9OsRNqvkxA
MTFS43hnn0o2o04hAXYexUxwsFBlNSBK1g9F9wBkWEl8goODAFLKzCbQtwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFK7zNydkVWTk9YIYRLME8gN4xc5cMB8GA1UdIwQY
MBaAFOhbg8h8Sj2DFQJTefcph1ILtdBGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkZ1RHlIeEtQWU1WQWxONTl5bUhVZ3UxMEVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8zMzk0ZTMtNzM2ZS00ODc5LWI4ZGIt
ODlhYWVhMzYyODVlLzEvcnZNM0oyUlZaT1QxZ2hoRXN3VHlBM2pGemx3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC8zMzk0ZTMtNzM2ZS00ODc5LWI4ZGItODlhYWVhMzYyODVl
LzEvNkZ1RHlIeEtQWU1WQWxONTl5bUhVZ3UxMEVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCuQfsAwQC
uS9cAwQCudNgAwQDvECwMA0GCSqGSIb3DQEBCwUAA4IBAQByUDS9JKl9znQ8XJm6
pAkOkxfZyakDw4tqh/USKUwmDH3wRD66osU4xswoK8sS8DNEXMXx9qCVEO+CTUGO
ZAH7MuFleyZBZJeulDDwpx/UwMRgv92mXwmpai8ybHaBfOD+bZGRT13O9/w1Ot2f
4avMGUFfQwnOM+Od3Hlbb085XMLeERcK9kTkwGnxbpg2T0t7eZQrxh60TiTgSjMD
HHsufEApaiwy80sNhGHV3SrSUkViQAZBX5tkjuknZfRLN+u0RaVGeNMjDeD6zh5o
1HF0L1f1bmV9nwJW6Gr+4JLyxm96FsHPjqOgtdlM1IY282uLHVuk3kdzswBpKHhk
0ZZc
-----END CERTIFICATE-----
Generated at Wed Aug 30 09:21:01 2023 by rpki-client on console-ams.rpki-client.org