Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/vMy_PHuDW3-w6HIP-Aw2BykVdSE.roa
File: vMy_PHuDW3-w6HIP-Aw2BykVdSE.roa (raw, json)
Hash identifier: bPTfj1Hq8Encghd4jcGknDu+mvzm7FXq59Pjf/4dNJc=
Subject key identifier: BC:CC:BF:3C:7B:83:5B:7F:B0:E8:72:0F:F8:0C:36:07:29:15:75:21
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 0188957D11118B94779B20B0435439F35BCC
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/vMy_PHuDW3-w6HIP-Aw2BykVdSE.roa
Signing time: Wed 07 Jun 2023 10:53:01 +0000
ROA not before: Wed 07 Jun 2023 10:53:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12716
IP address blocks: 37.63.97.0/24 maxlen: 24
37.63.98.0/24 maxlen: 24
151.251.254.0/24 maxlen: 24
37.63.96.0/24 maxlen: 24
151.251.255.0/24 maxlen: 24
37.63.96.0/22 maxlen: 24
37.63.99.0/24 maxlen: 24
83.97.30.0/24 maxlen: 24
84.252.40.0/23 maxlen: 23
151.251.240.0/24 maxlen: 24
151.251.238.0/24 maxlen: 24
151.251.239.0/24 maxlen: 24
151.251.245.0/24 maxlen: 24
151.251.240.0/20 maxlen: 20
151.251.243.0/24 maxlen: 24
151.251.246.0/24 maxlen: 24
151.251.241.0/24 maxlen: 24
151.251.244.0/24 maxlen: 24
151.251.242.0/24 maxlen: 24
151.251.253.0/24 maxlen: 24
151.251.248.0/24 maxlen: 24
151.251.251.0/24 maxlen: 24
151.251.249.0/24 maxlen: 24
151.251.252.0/24 maxlen: 24
151.251.247.0/24 maxlen: 24
151.251.250.0/24 maxlen: 24
89.215.62.0/23 maxlen: 23
151.251.44.0/22 maxlen: 22
151.251.68.0/22 maxlen: 22
185.224.160.0/23 maxlen: 23
37.63.0.0/20 maxlen: 20
37.63.16.0/22 maxlen: 22
37.63.20.0/22 maxlen: 24
37.63.24.0/22 maxlen: 22
37.63.28.0/22 maxlen: 24
62.204.154.0/23 maxlen: 23
37.63.32.0/22 maxlen: 24
151.251.121.0/24 maxlen: 24
151.251.126.0/23 maxlen: 23
85.118.64.0/22 maxlen: 22
85.118.71.0/24 maxlen: 24
85.118.68.0/23 maxlen: 24
213.226.17.0/24 maxlen: 24
85.118.70.0/24 maxlen: 24
85.118.76.0/22 maxlen: 22
85.118.74.0/24 maxlen: 24
85.118.72.0/23 maxlen: 23
213.226.19.0/24 maxlen: 24
185.151.156.0/22 maxlen: 22
85.118.84.0/24 maxlen: 24
85.118.80.0/22 maxlen: 22
213.226.36.0/24 maxlen: 24
85.118.92.0/24 maxlen: 24
85.118.93.0/24 maxlen: 24
213.226.40.0/24 maxlen: 24
213.226.51.0/24 maxlen: 24
213.226.57.0/24 maxlen: 24
213.226.56.0/24 maxlen: 24
213.226.63.0/24 maxlen: 24
213.226.59.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:95:7d:11:11:8b:94:77:9b:20:b0:43:54:39:f3:5b:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Jun 7 10:53:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bcccbf3c7b835b7fb0e8720ff80c360729157521
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ed:ae:6b:b1:97:95:54:50:98:cb:31:04:80:
4f:2d:6f:6b:e5:e0:59:04:16:13:35:f3:5c:1f:4b:
cf:df:68:af:9f:92:d7:8a:82:06:4d:52:af:9d:a2:
03:9e:32:90:21:c0:11:61:34:25:1d:75:af:16:3d:
9f:15:f2:e5:13:02:e5:6d:44:43:9e:e3:3e:dd:4d:
52:b7:94:e0:9b:d6:bb:24:fa:9e:8d:d3:0e:2a:6f:
1b:d3:0f:25:9b:bf:49:cf:68:5f:f1:3b:cb:7e:f7:
ee:d5:ca:9d:da:c4:1a:8c:4b:34:f3:76:1f:79:2a:
36:ee:61:58:21:2b:d9:cf:82:5f:42:64:8f:65:e8:
87:98:ce:ce:eb:42:43:9c:30:13:99:0e:c6:a7:1f:
af:5f:a3:21:3b:e0:91:6f:98:42:eb:2a:4a:37:25:
2c:f5:2d:89:d7:e1:92:86:60:73:a6:15:fc:43:8e:
6b:ad:c5:9e:97:4d:6b:88:60:0b:ce:e8:7c:53:b5:
7c:3e:41:21:d7:6e:7e:f8:49:5a:07:a1:46:77:b5:
ce:a0:73:5c:30:01:15:77:59:9e:0d:3b:ba:2b:b9:
ad:38:89:fd:ec:dd:fe:0c:42:ed:79:17:03:df:d5:
84:6a:c7:08:3e:c6:61:2b:ed:77:c2:b4:03:08:67:
cb:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:CC:BF:3C:7B:83:5B:7F:B0:E8:72:0F:F8:0C:36:07:29:15:75:21
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/vMy_PHuDW3-w6HIP-Aw2BykVdSE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.63.0.0-37.63.35.255
37.63.96.0/22
62.204.154.0/23
83.97.30.0/24
84.252.40.0/23
85.118.64.0-85.118.74.255
85.118.76.0-85.118.84.255
85.118.92.0/23
89.215.62.0/23
151.251.44.0/22
151.251.68.0/22
151.251.121.0/24
151.251.126.0/23
151.251.238.0-151.251.255.255
185.151.156.0/22
185.224.160.0/23
213.226.17.0/24
213.226.19.0/24
213.226.36.0/24
213.226.40.0/24
213.226.51.0/24
213.226.56.0/23
213.226.59.0/24
213.226.63.0/24
Signature Algorithm: sha256WithRSAEncryption
47:2f:7a:0a:60:ed:ea:89:87:0e:0c:f8:52:45:94:4c:4d:9d:
07:34:32:c7:cb:b8:74:02:dc:b8:5b:31:9e:07:e1:ab:6b:7e:
7a:fc:33:7c:77:36:8e:93:6e:f8:d2:fa:5b:b1:41:43:37:63:
c5:5e:b7:80:7c:c8:37:05:7a:47:89:03:01:d2:4c:25:ff:70:
7f:e4:2e:09:96:3f:92:ac:05:13:25:a4:d1:fe:e6:9c:35:50:
58:7b:87:d4:76:dc:d9:9f:6d:cf:d0:61:2b:3c:e0:7e:eb:cd:
63:f3:47:cf:b9:d1:62:26:40:f6:ea:d2:f5:bf:a2:94:11:f2:
a2:d1:0f:10:9b:04:46:bf:2d:1b:96:d0:c6:9e:ed:59:3b:19:
0c:58:ae:03:2b:a1:c8:15:36:5e:54:df:ad:03:2f:0b:e7:d1:
7a:c0:f8:6e:c7:9c:5e:c9:02:e8:d6:d7:b2:16:9b:58:45:3b:
3a:a8:d5:03:79:68:d2:35:41:15:5e:f9:73:06:98:46:fd:c0:
a6:1f:e6:66:5b:54:e6:a9:b2:e9:12:f0:ab:0f:7f:9d:b7:c5:
fa:99:a9:90:6e:cf:3c:88:10:d2:ae:0f:fb:1f:71:ae:97:e0:
33:0e:01:69:48:66:4b:c1:d4:df:4b:59:e2:ff:62:7f:fc:fb:
84:07:fa:91
-----BEGIN CERTIFICATE-----
MIIFqjCCBJKgAwIBAgISAYiVfRERi5R3myCwQ1Q581vMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NDhjZWRmMTcwMjllZDk4YTEwODExM2M2YzEwOWVjYWNj
ZDgyZWMwHhcNMjMwNjA3MTA1MzAxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiY2NjYmYzYzdiODM1YjdmYjBlODcyMGZmODBjMzYwNzI5MTU3NTIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApe2ua7GXlVRQmMsxBIBPLW9r5eBZ
BBYTNfNcH0vP32ivn5LXioIGTVKvnaIDnjKQIcARYTQlHXWvFj2fFfLlEwLlbURD
nuM+3U1St5Tgm9a7JPqejdMOKm8b0w8lm79Jz2hf8TvLfvfu1cqd2sQajEs083Yf
eSo27mFYISvZz4JfQmSPZeiHmM7O60JDnDATmQ7Gpx+vX6MhO+CRb5hC6ypKNyUs
9S2J1+GShmBzphX8Q45rrcWel01riGALzuh8U7V8PkEh125++ElaB6FGd7XOoHNc
MAEVd1meDTu6K7mtOIn97N3+DELteRcD39WEascIPsZhK+13wrQDCGfLmQIDAQAB
o4ICtjCCArIwHQYDVR0OBBYEFLzMvzx7g1t/sOhyD/gMNgcpFXUhMB8GA1UdIwQY
MBaAFAVIzt8XAp7ZihCBE8bBCeyszYLsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAt
N2ZiYmFlNmY5NDM3LzEvdk15X1BIdURXMy13NkhJUC1BdzJCeWtWZFNFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAtN2ZiYmFlNmY5NDM3
LzEvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHLBggrBgEFBQcBBwEB/wSBuzCBuDCBtQQCAAEwga4wCwMD
ACU/AwQCJT8gAwQCJT9gAwQBPsyaAwQAU2EeAwQBVPwoMAwDBAZVdkADBABVdkow
DAMEAlV2TAMEAFV2VAMEAVV2XAMEAVnXPgMEApf7LAMEApf7RAMEAJf7eQMEAZf7
fjALAwQBl/vuAwMCl/gDBAK5l5wDBAG54KADBADV4hEDBADV4hMDBADV4iQDBADV
4igDBADV4jMDBAHV4jgDBADV4jsDBADV4j8wDQYJKoZIhvcNAQELBQADggEBAEcv
egpg7eqJhw4M+FJFlExNnQc0MsfLuHQC3LhbMZ4H4atrfnr8M3x3No6TbvjS+lux
QUM3Y8Vet4B8yDcFekeJAwHSTCX/cH/kLgmWP5KsBRMlpNH+5pw1UFh7h9R23Nmf
bc/QYSs84H7rzWPzR8+50WImQPbq0vW/opQR8qLRDxCbBEa/LRuW0Mae7Vk7GQxY
rgMrocgVNl5U360DLwvn0XrA+G7HnF7JAujW17IWm1hFOzqo1QN5aNI1QRVe+XMG
mEb9wKYf5mZbVOapsukS8KsPf523xfqZqZBuzzyIENKuD/sfca6X4DMOAWlIZkvB
1N9LWeL/Yn/8+4QH+pE=
-----END CERTIFICATE-----
Generated at Wed Oct 11 09:46:21 2023 by rpki-client on console-ams.rpki-client.org