Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/a7YGgdCmpqbxqVwt7xoM5PVsfRM.roa
File: a7YGgdCmpqbxqVwt7xoM5PVsfRM.roa (raw, json)
Hash identifier: 5G8CQItNaXtz92ldyXm4v2uYeSqA2o3o2xTXd6SRekc=
Subject key identifier: 6B:B6:06:81:D0:A6:A6:A6:F1:A9:5C:2D:EF:1A:0C:E4:F5:6C:7D:13
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 01856FF97564D326AA09261ECCDA0958BF06
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/a7YGgdCmpqbxqVwt7xoM5PVsfRM.roa
Signing time: Mon 02 Jan 2023 00:54:57 +0000
ROA not before: Mon 02 Jan 2023 00:54:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48917
IP address blocks: 92.247.160.0/22 maxlen: 22
78.83.129.0/24 maxlen: 24
78.83.132.0/24 maxlen: 24
78.83.130.0/24 maxlen: 24
78.83.128.0/24 maxlen: 24
78.83.131.0/24 maxlen: 24
78.83.134.0/24 maxlen: 24
78.83.135.0/24 maxlen: 24
78.83.133.0/24 maxlen: 24
88.203.156.0/24 maxlen: 24
62.204.158.0/24 maxlen: 24
92.247.73.0/24 maxlen: 24
92.247.76.0/24 maxlen: 24
92.247.74.0/24 maxlen: 24
92.247.75.0/24 maxlen: 24
92.247.72.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f9:75:64:d3:26:aa:09:26:1e:cc:da:09:58:bf:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Jan 2 00:54:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6bb60681d0a6a6a6f1a95c2def1a0ce4f56c7d13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c2:de:14:11:07:b0:6f:c3:07:b2:ff:8c:44:
c3:74:1d:6d:ae:96:a2:9b:8e:a0:f1:98:cb:09:1d:
d0:4f:dc:b4:98:39:c3:d0:58:88:fa:84:a4:7a:e6:
e5:fc:c3:69:bf:c8:61:a1:9b:ca:4b:4b:e3:fa:8a:
c1:be:79:42:2c:da:c2:2d:6f:06:34:8a:f1:8c:61:
0a:a3:4b:94:17:69:2e:81:e7:8e:21:30:31:48:30:
ea:7e:c6:b8:ec:eb:09:0b:f2:01:0d:cd:54:72:f5:
b1:91:0c:fc:04:ab:7b:98:2c:45:42:b5:e8:68:6c:
66:a5:a3:0e:6a:67:52:5b:db:3b:58:c2:b0:40:94:
15:ba:e7:bb:30:a3:9d:ba:7b:5e:7f:d8:c6:2a:d7:
b2:39:8a:d3:f4:7a:4a:da:eb:aa:68:d4:fd:0d:d4:
9d:89:58:be:98:12:4d:9c:d6:92:96:4b:d6:26:2a:
ba:25:b0:cd:2d:2c:1f:47:c3:e9:fa:ca:3e:96:77:
1d:f1:0a:67:80:83:af:0f:50:09:1a:e9:46:08:a3:
ba:69:af:03:e9:78:fe:88:75:53:b1:00:6a:d5:62:
89:c5:1b:5b:1c:17:9e:1e:02:55:dc:7b:61:15:bb:
4e:67:86:ad:f5:b5:79:3a:96:86:95:88:d5:9c:13:
76:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:B6:06:81:D0:A6:A6:A6:F1:A9:5C:2D:EF:1A:0C:E4:F5:6C:7D:13
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/a7YGgdCmpqbxqVwt7xoM5PVsfRM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.204.158.0/24
78.83.128.0/21
88.203.156.0/24
92.247.72.0-92.247.76.255
92.247.160.0/22
Signature Algorithm: sha256WithRSAEncryption
74:d1:17:37:bb:f2:47:0f:97:3c:f4:b0:b5:32:97:98:ee:ac:
f2:3a:99:c7:e7:45:b8:60:dc:a2:37:8e:4d:22:0f:fb:d5:0b:
5d:c0:bd:51:b0:e3:21:38:00:f0:e5:a8:35:09:c6:1d:a2:dd:
ef:8e:ce:b3:4f:4c:98:82:13:b2:3d:df:4e:d5:8d:8a:b1:74:
fc:80:8b:eb:06:08:05:ea:0d:7a:8f:46:50:63:20:d5:ba:bf:
90:73:ea:5e:67:9a:9e:36:22:8e:1d:4f:d9:c3:76:77:d7:9b:
ea:7a:3a:0a:b9:fc:da:75:3b:65:e8:d9:ed:7a:87:05:b5:19:
04:6b:af:45:b1:e3:da:22:d1:6c:d8:44:e3:15:a7:29:59:d1:
c6:de:e0:0b:6a:31:fe:a3:dd:bc:69:bc:d9:6e:2d:f5:5a:f6:
96:e0:68:9a:48:20:8f:e1:33:05:96:da:e2:8f:67:7c:92:65:
26:02:fd:fc:12:ca:08:84:f4:d3:cf:55:fc:c0:8c:05:56:0d:
87:0b:45:8e:f3:cc:4d:e0:ed:d0:6a:52:c0:9a:3c:0f:69:2b:
a2:35:f9:c0:eb:d0:4f:d1:61:ef:92:85:5b:44:c3:c1:ac:6b:
5f:61:ae:88:2c:0e:06:2c:8c:20:70:ed:57:57:63:f5:25:88:
2a:0b:b2:49
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAYVv+XVk0yaqCSYezNoJWL8GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NDhjZWRmMTcwMjllZDk4YTEwODExM2M2YzEwOWVjYWNj
ZDgyZWMwHhcNMjMwMTAyMDA1NDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YmI2MDY4MWQwYTZhNmE2ZjFhOTVjMmRlZjFhMGNlNGY1NmM3ZDEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApsLeFBEHsG/DB7L/jETDdB1trpai
m46g8ZjLCR3QT9y0mDnD0FiI+oSkeubl/MNpv8hhoZvKS0vj+orBvnlCLNrCLW8G
NIrxjGEKo0uUF2kugeeOITAxSDDqfsa47OsJC/IBDc1UcvWxkQz8BKt7mCxFQrXo
aGxmpaMOamdSW9s7WMKwQJQVuue7MKOduntef9jGKteyOYrT9HpK2uuqaNT9DdSd
iVi+mBJNnNaSlkvWJiq6JbDNLSwfR8Pp+so+lncd8QpngIOvD1AJGulGCKO6aa8D
6Xj+iHVTsQBq1WKJxRtbHBeeHgJV3HthFbtOZ4at9bV5OpaGlYjVnBN2OQIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFGu2BoHQpqam8alcLe8aDOT1bH0TMB8GA1UdIwQY
MBaAFAVIzt8XAp7ZihCBE8bBCeyszYLsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAt
N2ZiYmFlNmY5NDM3LzEvYTdZR2dkQ21wcWJ4cVZ3dDd4b001UFZzZlJNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAtN2ZiYmFlNmY5NDM3
LzEvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQAPsyeAwQD
TlOAAwQAWMucMAwDBANc90gDBABc90wDBAJc96AwDQYJKoZIhvcNAQELBQADggEB
AHTRFze78kcPlzz0sLUyl5jurPI6mcfnRbhg3KI3jk0iD/vVC13AvVGw4yE4APDl
qDUJxh2i3e+OzrNPTJiCE7I9307VjYqxdPyAi+sGCAXqDXqPRlBjINW6v5Bz6l5n
mp42Io4dT9nDdnfXm+p6Ogq5/Np1O2Xo2e16hwW1GQRrr0Wx49oi0WzYROMVpylZ
0cbe4AtqMf6j3bxpvNluLfVa9pbgaJpIII/hMwWW2uKPZ3ySZSYC/fwSygiE9NPP
VfzAjAVWDYcLRY7zzE3g7dBqUsCaPA9pK6I1+cDr0E/RYe+ShVtEw8Gsa19hrogs
DgYsjCBw7VdXY/UliCoLskk=
-----END CERTIFICATE-----
Generated at Mon Jan 1 21:18:44 2024 by rpki-client on console-ams.rpki-client.org