Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/UT7ginGj9waGeVNVvfkKqbnQ1Kc.roa
File: UT7ginGj9waGeVNVvfkKqbnQ1Kc.roa (raw, json)
Hash identifier: uc+qDcvZ0knD63au4DgQhbV++/mkMzQFddXtYdbEblA=
Subject key identifier: 51:3E:E0:8A:71:A3:F7:06:86:79:53:55:BD:F9:0A:A9:B9:D0:D4:A7
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 01856F02438FDFA2C5BC886A7E7E39CB1E5C
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/UT7ginGj9waGeVNVvfkKqbnQ1Kc.roa
Signing time: Sun 01 Jan 2023 20:24:57 +0000
ROA not before: Sun 01 Jan 2023 20:24:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47814
IP address blocks: 80.81.44.0/24 maxlen: 24
80.81.46.0/23 maxlen: 23
83.223.139.0/24 maxlen: 24
46.19.204.251/32 maxlen: 32
46.19.205.0/24 maxlen: 24
46.19.206.0/24 maxlen: 24
83.223.149.0/24 maxlen: 24
94.101.238.0/24 maxlen: 24
185.176.116.0/22 maxlen: 22
94.101.233.206/32 maxlen: 32
2001:1bf8::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:02:43:8f:df:a2:c5:bc:88:6a:7e:7e:39:cb:1e:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Jan 1 20:24:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=513ee08a71a3f70686795355bdf90aa9b9d0d4a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:96:64:d8:43:de:e6:3a:ff:80:70:e8:50:e4:
03:55:14:0f:38:cd:82:9a:3c:ba:1b:c8:21:7a:1a:
e3:5f:cf:0b:47:f0:74:6c:63:89:03:74:4b:60:d8:
11:4e:1b:23:38:d8:4e:84:be:66:66:4b:f7:ba:20:
91:93:bb:24:43:c4:f1:0d:84:a1:0a:73:14:2e:6e:
a4:c1:43:41:04:1e:25:7f:14:e8:9d:1f:96:ab:18:
22:29:23:60:b7:34:66:ef:38:a3:67:da:69:be:dc:
2e:a1:d1:33:9d:1c:cc:ca:66:ca:c6:07:70:95:7f:
88:74:b2:6c:cd:58:8f:80:37:88:12:ee:50:4f:58:
f7:ef:82:49:5e:69:5e:7a:43:5a:6d:68:62:40:82:
80:18:ed:47:a6:3a:d6:0c:00:c4:b8:6c:89:b0:11:
f8:12:87:6a:94:52:d6:72:f6:9b:dc:d3:70:54:0b:
41:fb:0d:44:d6:86:a9:bf:9b:95:e4:16:07:ff:f0:
36:d3:23:75:ad:f4:df:93:cb:1a:69:e3:84:3b:9a:
67:be:fc:83:75:81:7a:a5:20:c7:41:2b:4d:fb:ec:
a4:91:1f:06:6c:d4:7b:71:ac:cf:93:b5:c1:2c:8d:
c1:f5:6b:2c:ec:ff:ed:8f:a6:20:82:2d:98:50:f2:
d3:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:3E:E0:8A:71:A3:F7:06:86:79:53:55:BD:F9:0A:A9:B9:D0:D4:A7
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/UT7ginGj9waGeVNVvfkKqbnQ1Kc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.19.204.251/32
46.19.205.0-46.19.206.255
80.81.44.0/24
80.81.46.0/23
83.223.139.0/24
83.223.149.0/24
94.101.233.206/32
94.101.238.0/24
185.176.116.0/22
IPv6:
2001:1bf8::/29
Signature Algorithm: sha256WithRSAEncryption
2c:a4:61:82:c7:7d:5a:79:5d:01:4b:ed:ab:c2:e3:9d:8e:da:
d9:c6:67:af:83:71:1a:82:76:15:d9:83:49:34:ad:31:12:1c:
05:76:9b:2b:ea:cc:9c:a3:83:d0:c1:ce:13:77:d4:11:f1:c9:
c0:74:85:8b:c0:e4:aa:41:b7:70:2f:fa:01:ba:06:46:a0:c4:
59:cb:13:1e:f4:2e:73:46:07:c8:d8:e8:e2:42:55:1e:8f:94:
35:13:4c:3e:65:e9:f6:62:80:72:eb:a7:58:e9:8c:c6:de:ce:
b0:52:8a:fb:34:f0:c2:f1:08:a5:bf:b7:ab:1d:b6:b1:a0:c0:
82:9e:a4:6c:e8:b4:84:0f:3b:b5:26:47:93:db:40:09:5a:64:
06:c4:37:ec:37:c6:45:e2:06:ff:e6:68:c4:83:0c:09:11:79:
b2:a5:a2:d8:3a:40:cc:52:d1:92:95:c0:a4:56:c6:6a:4f:d6:
ce:7f:10:0a:36:57:10:4c:4a:c9:1f:66:0c:16:e8:c5:2a:f3:
7d:75:3c:74:c8:bd:69:b3:24:22:0f:3e:29:a5:56:92:97:fa:
f2:dc:ee:b0:08:40:db:fc:f4:16:74:45:f2:80:4b:1d:92:e0:
01:2e:5f:a5:ea:1b:ec:88:59:0c:0f:fb:47:46:16:63:83:98:
11:69:51:36
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgISAYVvAkOP36LFvIhqfn45yx5cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiMDk1MmM4YmE4ZGFkYjFkMzRkZTZjNmE5Mzg2NGE2MDlm
YzQxZWMwHhcNMjMwMTAxMjAyNDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MTNlZTA4YTcxYTNmNzA2ODY3OTUzNTViZGY5MGFhOWI5ZDBkNGE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpZk2EPe5jr/gHDoUOQDVRQPOM2C
mjy6G8ghehrjX88LR/B0bGOJA3RLYNgRThsjONhOhL5mZkv3uiCRk7skQ8TxDYSh
CnMULm6kwUNBBB4lfxTonR+WqxgiKSNgtzRm7zijZ9ppvtwuodEznRzMymbKxgdw
lX+IdLJszViPgDeIEu5QT1j374JJXmleekNabWhiQIKAGO1HpjrWDADEuGyJsBH4
EodqlFLWcvab3NNwVAtB+w1E1oapv5uV5BYH//A20yN1rfTfk8saaeOEO5pnvvyD
dYF6pSDHQStN++ykkR8GbNR7cazPk7XBLI3B9Wss7P/tj6Yggi2YUPLTdwIDAQAB
o4ICUjCCAk4wHQYDVR0OBBYEFFE+4Ipxo/cGhnlTVb35Cqm50NSnMB8GA1UdIwQY
MBaAFKsJUsi6ja2x003mxqk4ZKYJ/EHsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAt
NTU1NGQ2ZTE2ODZmLzEvVVQ3Z2luR2o5d2FHZVZOVnZma0txYm5RMUtjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAtNTU1NGQ2ZTE2ODZm
LzEvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGgGCCsGAQUFBwEHAQH/BFkwVzBGBAIAATBAAwUALhPM+zAM
AwQALhPNAwQALhPOAwQAUFEsAwQBUFEuAwQAU9+LAwQAU9+VAwUAXmXpzgMEAF5l
7gMEArmwdDANBAIAAjAHAwUDIAEb+DANBgkqhkiG9w0BAQsFAAOCAQEALKRhgsd9
WnldAUvtq8LjnY7a2cZnr4NxGoJ2FdmDSTStMRIcBXabK+rMnKOD0MHOE3fUEfHJ
wHSFi8DkqkG3cC/6AboGRqDEWcsTHvQuc0YHyNjo4kJVHo+UNRNMPmXp9mKAcuun
WOmMxt7OsFKK+zTwwvEIpb+3qx22saDAgp6kbOi0hA87tSZHk9tACVpkBsQ37DfG
ReIG/+ZoxIMMCRF5sqWi2DpAzFLRkpXApFbGak/Wzn8QCjZXEExKyR9mDBboxSrz
fXU8dMi9abMkIg8+KaVWkpf68tzusAhA2/z0FnRF8oBLHZLgAS5fpeob7IhZDA/7
R0YWY4OYEWlRNg==
-----END CERTIFICATE-----
Generated at Tue Jan 2 06:49:38 2024 by rpki-client on console-fra.rpki-client.org