Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/43gBGl-ubAn5soyzwea10Ks63Ds.roa
File: 43gBGl-ubAn5soyzwea10Ks63Ds.roa (raw, json)
Hash identifier: OHvXKgt4Gr7LR/PjMtC8gJMFJQdtclAh1o5+tmBa69E=
Subject key identifier: E3:78:01:1A:5F:AE:6C:09:F9:B2:8C:B3:C1:E6:B5:D0:AB:3A:DC:3B
Certificate issuer: /CN=b155daddb871b9d6a53cd6b47f776250837f7774
Certificate serial: 0186DE84DB469867EBB1BE2CE39BBC8C1A16
Authority key identifier: B1:55:DA:DD:B8:71:B9:D6:A5:3C:D6:B4:7F:77:62:50:83:7F:77:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVXa3bhxudalPNa0f3diUIN_d3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/43gBGl-ubAn5soyzwea10Ks63Ds.roa
Signing time: Tue 14 Mar 2023 05:08:13 +0000
ROA not before: Tue 14 Mar 2023 05:08:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9145
IP address blocks: 92.252.0.0/17 maxlen: 17
212.95.96.0/19 maxlen: 19
212.6.64.0/18 maxlen: 24
85.16.0.0/16 maxlen: 16
95.33.0.0/16 maxlen: 16
85.8.64.0/18 maxlen: 18
213.252.128.0/18 maxlen: 24
37.138.0.0/16 maxlen: 16
82.149.160.0/19 maxlen: 19
90.153.0.0/17 maxlen: 17
89.166.128.0/17 maxlen: 17
213.168.192.0/19 maxlen: 19
80.66.0.0/19 maxlen: 24
62.89.160.0/19 maxlen: 24
213.183.160.0/19 maxlen: 19
91.96.0.0/15 maxlen: 15
31.150.0.0/16 maxlen: 16
80.228.0.0/16 maxlen: 24
87.245.0.0/18 maxlen: 18
89.233.64.0/19 maxlen: 19
31.184.0.0/18 maxlen: 18
91.248.0.0/15 maxlen: 15
213.182.96.0/19 maxlen: 19
31.187.112.0/20 maxlen: 20
213.170.160.0/19 maxlen: 19
178.142.0.0/16 maxlen: 16
188.118.128.0/18 maxlen: 18
2a02:8200::/27 maxlen: 27
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:de:84:db:46:98:67:eb:b1:be:2c:e3:9b:bc:8c:1a:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155daddb871b9d6a53cd6b47f776250837f7774
Validity
Not Before: Mar 14 05:08:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e378011a5fae6c09f9b28cb3c1e6b5d0ab3adc3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:7b:60:95:89:68:42:ed:4a:94:7f:e5:f8:0a:
57:43:b5:db:50:8b:d3:ad:68:c5:5c:b4:10:fe:00:
1b:90:c5:06:79:a4:94:ac:ba:58:72:6e:75:32:4a:
75:17:34:2c:58:86:c4:77:97:b1:71:f3:e5:24:17:
95:2c:7b:8b:bb:8e:8c:37:f7:a9:f1:31:cb:4a:ef:
ab:47:4d:fa:62:c8:cb:4c:07:38:a1:e4:32:6b:32:
78:57:43:53:8f:d2:76:d9:01:a2:92:18:a1:a0:fa:
db:35:84:96:74:71:81:9d:8d:24:9f:4a:01:79:7c:
0a:51:63:cc:77:68:fd:83:93:41:59:bb:05:d4:ff:
0a:97:d2:c0:8b:85:ee:71:37:19:4c:61:59:b9:f6:
a6:4a:5d:f0:8f:97:cc:33:32:a0:6b:46:82:d3:fa:
e1:c0:78:76:74:9a:9c:e0:2a:a5:0c:c7:7b:87:a8:
61:95:d1:dc:01:c1:b7:c1:a9:7d:4e:93:3c:19:2e:
f7:00:bb:e4:d9:e8:5c:d5:15:b9:0c:fc:d5:fa:3b:
5e:6a:b6:8d:09:63:8a:45:fa:8d:f7:f7:ec:dc:71:
fd:e2:d0:8c:9f:68:32:ad:34:3b:cf:9a:f3:36:cf:
68:0c:94:fe:7b:21:26:9f:65:29:f7:81:87:93:c1:
9d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:78:01:1A:5F:AE:6C:09:F9:B2:8C:B3:C1:E6:B5:D0:AB:3A:DC:3B
X509v3 Authority Key Identifier:
keyid:B1:55:DA:DD:B8:71:B9:D6:A5:3C:D6:B4:7F:77:62:50:83:7F:77:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVXa3bhxudalPNa0f3diUIN_d3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/43gBGl-ubAn5soyzwea10Ks63Ds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.150.0.0/16
31.184.0.0/18
31.187.112.0/20
37.138.0.0/16
62.89.160.0/19
80.66.0.0/19
80.228.0.0/16
82.149.160.0/19
85.8.64.0/18
85.16.0.0/16
87.245.0.0/18
89.166.128.0/17
89.233.64.0/19
90.153.0.0/17
91.96.0.0/15
91.248.0.0/15
92.252.0.0/17
95.33.0.0/16
178.142.0.0/16
188.118.128.0/18
212.6.64.0/18
212.95.96.0/19
213.168.192.0/19
213.170.160.0/19
213.182.96.0/19
213.183.160.0/19
213.252.128.0/18
IPv6:
2a02:8200::/27
Signature Algorithm: sha256WithRSAEncryption
3c:d5:0e:2d:ec:27:92:b3:0f:58:6f:e6:cb:39:c1:5a:d8:cf:
a2:7c:a2:ef:b4:c0:54:68:dd:a3:14:f5:ea:1f:73:b3:aa:f6:
eb:03:87:75:64:12:61:fa:d4:4b:ad:7b:5b:b6:fa:2e:39:cb:
b0:eb:f5:f2:3f:7b:c1:d2:79:f8:ee:c0:4a:30:98:22:a0:a3:
03:db:71:31:5d:8f:22:27:84:c7:d0:d6:09:7d:15:a5:82:c2:
91:a1:b2:43:91:af:03:83:26:77:23:3f:bf:00:aa:9d:29:47:
55:ec:b1:91:0b:af:ac:f8:0e:30:92:69:fb:cf:a9:61:de:12:
8a:e3:00:25:99:b5:3d:ba:7e:80:e4:95:60:c6:14:fe:34:ec:
6c:4c:2e:b4:f5:8a:b2:f6:8b:60:34:e5:71:9c:2d:19:74:9e:
18:bd:67:02:e2:2f:fb:91:dd:23:8c:f7:6a:34:06:40:8e:6e:
52:e9:c5:f5:27:14:d5:16:e6:17:e8:3c:e0:76:b6:62:d9:ee:
7a:90:d3:e5:f2:a4:cd:16:99:9b:b6:d4:a5:91:ad:66:e7:75:
ed:4e:de:8a:b9:fe:ec:f7:75:50:64:97:7f:13:5d:de:76:41:
1d:1f:1a:b5:8a:26:71:87:f5:b6:60:96:a0:fe:0c:a7:07:32:
b3:19:26:8e
-----BEGIN CERTIFICATE-----
MIIFpTCCBI2gAwIBAgISAYbehNtGmGfrsb4s45u8jBoWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxNTVkYWRkYjg3MWI5ZDZhNTNjZDZiNDdmNzc2MjUwODM3
Zjc3NzQwHhcNMjMwMzE0MDUwODEzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMzc4MDExYTVmYWU2YzA5ZjliMjhjYjNjMWU2YjVkMGFiM2FkYzNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3tglYloQu1KlH/l+ApXQ7XbUIvT
rWjFXLQQ/gAbkMUGeaSUrLpYcm51Mkp1FzQsWIbEd5excfPlJBeVLHuLu46MN/ep
8THLSu+rR036YsjLTAc4oeQyazJ4V0NTj9J22QGikhihoPrbNYSWdHGBnY0kn0oB
eXwKUWPMd2j9g5NBWbsF1P8Kl9LAi4XucTcZTGFZufamSl3wj5fMMzKga0aC0/rh
wHh2dJqc4CqlDMd7h6hhldHcAcG3wal9TpM8GS73ALvk2ehc1RW5DPzV+jtearaN
CWOKRfqN9/fs3HH94tCMn2gyrTQ7z5rzNs9oDJT+eyEmn2Up94GHk8Gd7QIDAQAB
o4ICsTCCAq0wHQYDVR0OBBYEFON4ARpfrmwJ+bKMs8HmtdCrOtw7MB8GA1UdIwQY
MBaAFLFV2t24cbnWpTzWtH93YlCDf3d0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1ZYYTNiaHh1ZGFsUE5hMGYzZGlVSU5fZDNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS84ZmQ2ZTctNDk2Zi00N2NmLTgwZmIt
NTQ2OGIyY2YwYTc3LzEvNDNnQkdsLXViQW41c295endlYTEwS3M2M0RzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS84ZmQ2ZTctNDk2Zi00N2NmLTgwZmItNTQ2OGIyY2YwYTc3
LzEvc1ZYYTNiaHh1ZGFsUE5hMGYzZGlVSU5fZDNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHGBggrBgEFBQcBBwEB/wSBtjCBszCBoQQCAAEwgZoDAwAf
lgMEBh+4AAMEBB+7cAMDACWKAwQFPlmgAwQFUEIAAwMAUOQDBAVSlaADBAZVCEAD
AwBVEAMEBlf1AAMEB1mmgAMEBVnpQAMEB1qZAAMDAVtgAwMBW/gDBAdc/AADAwBf
IQMDALKOAwQGvHaAAwQG1AZAAwQF1F9gAwQF1ajAAwQF1aqgAwQF1bZgAwQF1beg
AwQG1fyAMA0EAgACMAcDBQUqAoIAMA0GCSqGSIb3DQEBCwUAA4IBAQA81Q4t7CeS
sw9Yb+bLOcFa2M+ifKLvtMBUaN2jFPXqH3OzqvbrA4d1ZBJh+tRLrXtbtvouOcuw
6/XyP3vB0nn47sBKMJgioKMD23ExXY8iJ4TH0NYJfRWlgsKRobJDka8DgyZ3Iz+/
AKqdKUdV7LGRC6+s+A4wkmn7z6lh3hKK4wAlmbU9un6A5JVgxhT+NOxsTC609Yqy
9otgNOVxnC0ZdJ4YvWcC4i/7kd0jjPdqNAZAjm5S6cX1JxTVFuYX6DzgdrZi2e56
kNPl8qTNFpmbttSlka1m53XtTt6Kuf7s93VQZJd/E13edkEdHxq1iiZxh/W2YJag
/gynBzKzGSaO
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:48 2023 by rpki-client on console-fra.rpki-client.org