Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/fW8bTVONyVGUO4p88hfsTt7c7oU.roa
File: fW8bTVONyVGUO4p88hfsTt7c7oU.roa (raw, json)
Hash identifier: cWACRO3xYcVnMywWgf/gY39IK11WOLjdNsdYXnwE+RY=
Subject key identifier: 7D:6F:1B:4D:53:8D:C9:51:94:3B:8A:7C:F2:17:EC:4E:DE:DC:EE:85
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 018B1DF87FDA7776D595882BB19299D45B52
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/fW8bTVONyVGUO4p88hfsTt7c7oU.roa
Signing time: Wed 11 Oct 2023 09:01:46 +0000
ROA not before: Wed 11 Oct 2023 09:01:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12716
IP address blocks: 37.63.97.0/24 maxlen: 24
37.63.98.0/24 maxlen: 24
151.251.254.0/24 maxlen: 24
37.63.96.0/24 maxlen: 24
151.251.255.0/24 maxlen: 24
37.63.96.0/22 maxlen: 24
37.63.99.0/24 maxlen: 24
83.97.30.0/24 maxlen: 24
84.252.40.0/23 maxlen: 23
151.251.240.0/24 maxlen: 24
151.251.238.0/24 maxlen: 24
151.251.239.0/24 maxlen: 24
151.251.245.0/24 maxlen: 24
151.251.240.0/20 maxlen: 20
151.251.243.0/24 maxlen: 24
151.251.246.0/24 maxlen: 24
151.251.241.0/24 maxlen: 24
151.251.244.0/24 maxlen: 24
151.251.242.0/24 maxlen: 24
151.251.253.0/24 maxlen: 24
151.251.248.0/24 maxlen: 24
151.251.251.0/24 maxlen: 24
151.251.249.0/24 maxlen: 24
151.251.252.0/24 maxlen: 24
151.251.247.0/24 maxlen: 24
151.251.250.0/24 maxlen: 24
89.215.62.0/23 maxlen: 23
151.251.44.0/22 maxlen: 22
151.251.68.0/22 maxlen: 22
185.224.160.0/23 maxlen: 23
37.63.0.0/20 maxlen: 20
37.63.16.0/22 maxlen: 22
37.63.20.0/22 maxlen: 24
37.63.24.0/22 maxlen: 22
151.251.192.0/22 maxlen: 22
37.63.28.0/22 maxlen: 24
62.204.154.0/23 maxlen: 23
37.63.32.0/22 maxlen: 24
151.251.121.0/24 maxlen: 24
151.251.126.0/23 maxlen: 23
85.118.64.0/22 maxlen: 22
85.118.71.0/24 maxlen: 24
85.118.68.0/23 maxlen: 24
213.226.17.0/24 maxlen: 24
85.118.70.0/24 maxlen: 24
85.118.76.0/22 maxlen: 22
85.118.74.0/24 maxlen: 24
85.118.72.0/23 maxlen: 23
213.226.19.0/24 maxlen: 24
185.151.156.0/22 maxlen: 22
85.118.84.0/24 maxlen: 24
85.118.80.0/22 maxlen: 22
213.226.36.0/24 maxlen: 24
85.118.92.0/24 maxlen: 24
85.118.93.0/24 maxlen: 24
213.226.40.0/24 maxlen: 24
213.226.51.0/24 maxlen: 24
213.226.57.0/24 maxlen: 24
213.226.56.0/24 maxlen: 24
213.226.63.0/24 maxlen: 24
213.226.59.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:1d:f8:7f:da:77:76:d5:95:88:2b:b1:92:99:d4:5b:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Oct 11 09:01:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7d6f1b4d538dc951943b8a7cf217ec4ededcee85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:52:3d:fa:06:2c:10:40:11:64:c1:5f:23:d0:
be:aa:28:0a:c8:e1:dd:4d:87:69:5d:68:17:d1:82:
f1:8a:0c:a4:d5:b4:0f:59:0e:9d:97:5a:d4:4f:64:
d4:f5:24:de:ae:02:c8:06:ac:c5:a7:07:e5:84:29:
86:a2:ce:3c:65:9e:25:43:fe:41:3d:a1:b5:f2:f2:
04:e7:53:00:6e:04:4a:12:c3:31:40:7d:51:a2:12:
fb:c3:0b:e7:38:dc:38:27:95:5c:77:31:83:67:11:
8d:8d:8a:cf:af:a0:4b:93:e1:e6:af:64:21:37:80:
54:48:39:27:ed:7f:28:32:73:34:31:af:f6:13:d4:
f4:79:d5:0f:6f:fe:b1:ee:ee:af:0b:b9:34:dd:6b:
e6:c9:72:2e:ff:4e:fb:89:0e:9b:db:fd:44:a7:dc:
f6:0b:fe:01:4f:9f:ac:70:d9:63:20:67:7e:ec:fc:
83:a9:21:93:97:75:57:cd:2b:73:12:cf:c1:63:9a:
a2:0b:9d:da:66:6c:a0:89:c2:6a:a0:d3:96:b5:01:
4b:28:15:0b:1f:ab:fc:1d:be:e7:bc:48:cb:2d:79:
eb:91:d7:16:70:88:df:a3:90:d5:a1:7a:d4:4f:08:
91:af:e2:9f:63:cb:bb:41:f9:0a:5f:6b:31:59:cc:
4b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:6F:1B:4D:53:8D:C9:51:94:3B:8A:7C:F2:17:EC:4E:DE:DC:EE:85
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/fW8bTVONyVGUO4p88hfsTt7c7oU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.63.0.0-37.63.35.255
37.63.96.0/22
62.204.154.0/23
83.97.30.0/24
84.252.40.0/23
85.118.64.0-85.118.74.255
85.118.76.0-85.118.84.255
85.118.92.0/23
89.215.62.0/23
151.251.44.0/22
151.251.68.0/22
151.251.121.0/24
151.251.126.0/23
151.251.192.0/22
151.251.238.0-151.251.255.255
185.151.156.0/22
185.224.160.0/23
213.226.17.0/24
213.226.19.0/24
213.226.36.0/24
213.226.40.0/24
213.226.51.0/24
213.226.56.0/23
213.226.59.0/24
213.226.63.0/24
Signature Algorithm: sha256WithRSAEncryption
42:58:5e:8b:d1:ae:2f:9c:e9:8f:da:44:14:97:78:11:e9:dd:
17:5e:d9:fb:85:12:59:ef:7f:78:2a:be:ef:a4:6c:04:6f:5e:
d0:93:9e:13:1c:cc:ad:05:60:94:f3:d9:0f:56:eb:5f:37:2e:
45:38:f2:99:57:96:d3:be:1e:71:a9:99:b1:b3:53:b6:57:2a:
ea:5c:19:4d:aa:61:46:81:be:14:2b:58:db:fd:d8:f7:03:4c:
1e:dc:61:a4:25:ff:40:29:d7:f4:f8:5e:3c:a6:94:62:ef:85:
09:71:6e:cb:0c:af:dc:fc:51:66:23:90:6b:5c:c3:4c:cb:b6:
bc:f5:09:54:1b:a5:0a:31:91:d0:cc:f9:09:55:20:e8:a2:73:
6b:af:55:28:c6:a8:70:dc:fd:2e:db:fa:f3:0b:a6:71:54:38:
28:4d:24:61:4a:29:92:76:c3:1d:aa:eb:02:92:f3:cb:55:d9:
2f:97:9d:27:c0:f1:66:a8:7c:c6:2b:dc:84:d4:f9:13:46:47:
9a:c5:14:80:e6:6b:51:60:9a:a6:6e:2e:b6:7f:ec:38:49:42:
51:41:be:b6:74:da:1b:97:1a:31:5f:d6:67:85:07:47:22:71:
ad:11:ee:c4:77:4b:55:a2:e9:e9:3f:a8:e7:bc:f6:af:7d:d8:
38:56:a5:f5
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgISAYsd+H/ad3bVlYgrsZKZ1FtSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NDhjZWRmMTcwMjllZDk4YTEwODExM2M2YzEwOWVjYWNj
ZDgyZWMwHhcNMjMxMDExMDkwMTQ2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZDZmMWI0ZDUzOGRjOTUxOTQzYjhhN2NmMjE3ZWM0ZWRlZGNlZTg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAilI9+gYsEEARZMFfI9C+qigKyOHd
TYdpXWgX0YLxigyk1bQPWQ6dl1rUT2TU9STergLIBqzFpwflhCmGos48ZZ4lQ/5B
PaG18vIE51MAbgRKEsMxQH1RohL7wwvnONw4J5VcdzGDZxGNjYrPr6BLk+Hmr2Qh
N4BUSDkn7X8oMnM0Ma/2E9T0edUPb/6x7u6vC7k03WvmyXIu/077iQ6b2/1Ep9z2
C/4BT5+scNljIGd+7PyDqSGTl3VXzStzEs/BY5qiC53aZmygicJqoNOWtQFLKBUL
H6v8Hb7nvEjLLXnrkdcWcIjfo5DVoXrUTwiRr+KfY8u7QfkKX2sxWcxLyQIDAQAB
o4ICvDCCArgwHQYDVR0OBBYEFH1vG01TjclRlDuKfPIX7E7e3O6FMB8GA1UdIwQY
MBaAFAVIzt8XAp7ZihCBE8bBCeyszYLsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAt
N2ZiYmFlNmY5NDM3LzEvZlc4YlRWT055VkdVTzRwODhoZnNUdDdjN29VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAtN2ZiYmFlNmY5NDM3
LzEvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHRBggrBgEFBQcBBwEB/wSBwTCBvjCBuwQCAAEwgbQwCwMD
ACU/AwQCJT8gAwQCJT9gAwQBPsyaAwQAU2EeAwQBVPwoMAwDBAZVdkADBABVdkow
DAMEAlV2TAMEAFV2VAMEAVV2XAMEAVnXPgMEApf7LAMEApf7RAMEAJf7eQMEAZf7
fgMEApf7wDALAwQBl/vuAwMCl/gDBAK5l5wDBAG54KADBADV4hEDBADV4hMDBADV
4iQDBADV4igDBADV4jMDBAHV4jgDBADV4jsDBADV4j8wDQYJKoZIhvcNAQELBQAD
ggEBAEJYXovRri+c6Y/aRBSXeBHp3Rde2fuFElnvf3gqvu+kbARvXtCTnhMczK0F
YJTz2Q9W6183LkU48plXltO+HnGpmbGzU7ZXKupcGU2qYUaBvhQrWNv92PcDTB7c
YaQl/0Ap1/T4XjymlGLvhQlxbssMr9z8UWYjkGtcw0zLtrz1CVQbpQoxkdDM+QlV
IOiic2uvVSjGqHDc/S7b+vMLpnFUOChNJGFKKZJ2wx2q6wKS88tV2S+XnSfA8Wao
fMYr3ITU+RNGR5rFFIDma1FgmqZuLrZ/7DhJQlFBvrZ02huXGjFf1meFB0cica0R
7sR3S1Wi6ek/qOe89q992DhWpfU=
-----END CERTIFICATE-----
Generated at Thu Oct 12 06:57:54 2023 by rpki-client on console-fra.rpki-client.org