Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/iAJTAEpEe5C6egp4cTEsLmocqKY.roa
File: iAJTAEpEe5C6egp4cTEsLmocqKY.roa (raw, json)
Hash identifier: mU4xamEJhtjU/I/GM35OH4CJ4XPO5b2SJvz3mDA7vIA=
Subject key identifier: 88:02:53:00:4A:44:7B:90:BA:7A:0A:78:71:31:2C:2E:6A:1C:A8:A6
Certificate issuer: /CN=21c394c9b3a36b69f9ee5f8936a2f51b95eaceb4
Certificate serial: 018C8C23AFF6F0D7D29744924639D6BBCF94
Authority key identifier: 21:C3:94:C9:B3:A3:6B:69:F9:EE:5F:89:36:A2:F5:1B:95:EA:CE:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IcOUybOja2n57l-JNqL1G5XqzrQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/iAJTAEpEe5C6egp4cTEsLmocqKY.roa
Signing time: Thu 21 Dec 2023 11:29:58 +0000
ROA not before: Thu 21 Dec 2023 11:29:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51569
IP address blocks: 83.139.202.0/23 maxlen: 24
83.139.212.0/22 maxlen: 24
83.139.216.0/22 maxlen: 24
85.31.160.0/21 maxlen: 24
83.139.220.0/23 maxlen: 24
83.139.224.0/20 maxlen: 24
83.139.244.0/23 maxlen: 24
83.139.242.0/23 maxlen: 24
45.132.208.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:8c:23:af:f6:f0:d7:d2:97:44:92:46:39:d6:bb:cf:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21c394c9b3a36b69f9ee5f8936a2f51b95eaceb4
Validity
Not Before: Dec 21 11:29:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=880253004a447b90ba7a0a7871312c2e6a1ca8a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:86:cc:48:e3:59:58:3f:c3:cb:6b:0c:18:97:
a7:91:a3:04:f6:f5:c6:10:c2:76:eb:04:e3:a6:4e:
37:68:13:4f:67:c7:89:59:1c:69:81:c5:63:1c:77:
21:4b:72:da:83:5c:ff:f0:30:ed:48:33:8c:da:a1:
82:36:c8:ff:92:a4:fe:8b:c5:cd:9b:95:60:34:6c:
83:80:2f:9c:63:2e:9e:bb:17:f4:25:f2:f1:2c:25:
1c:f8:0e:d9:c5:f9:13:8b:33:94:49:3d:ba:2f:44:
f1:d8:0b:88:b1:c6:34:e0:10:45:06:ac:9a:d2:b6:
ef:81:56:3c:09:e0:1f:8e:40:bb:c3:f6:f2:30:cc:
33:3d:93:ef:c1:98:0b:32:ff:46:ef:aa:61:b1:80:
bc:e9:23:2c:9d:d5:a1:50:99:52:ed:5d:99:68:a0:
d4:72:24:2a:0d:15:e3:0d:42:51:95:f0:01:14:c5:
7f:b7:35:f3:49:7e:99:da:5c:51:3a:d0:76:79:44:
3f:5d:1e:b9:99:74:77:26:15:30:48:dc:c9:05:6a:
21:db:87:69:85:2c:ff:6f:b4:8b:fe:5a:c7:7d:52:
5e:bc:b6:d4:ba:eb:0b:a6:5c:2e:79:dc:9f:4a:56:
f8:21:0a:d8:dc:0e:73:c2:1d:ec:18:00:e2:ea:51:
1a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:02:53:00:4A:44:7B:90:BA:7A:0A:78:71:31:2C:2E:6A:1C:A8:A6
X509v3 Authority Key Identifier:
keyid:21:C3:94:C9:B3:A3:6B:69:F9:EE:5F:89:36:A2:F5:1B:95:EA:CE:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IcOUybOja2n57l-JNqL1G5XqzrQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/iAJTAEpEe5C6egp4cTEsLmocqKY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.208.0/22
83.139.202.0/23
83.139.212.0-83.139.221.255
83.139.224.0/20
83.139.242.0-83.139.245.255
85.31.160.0/21
Signature Algorithm: sha256WithRSAEncryption
28:6e:44:25:cc:2c:18:7a:fb:5c:71:9c:3d:90:ee:b2:a0:e3:
ac:33:a2:89:a1:d1:0b:14:47:e0:1c:aa:98:61:89:b2:d3:c1:
55:87:67:12:c3:56:0b:f6:51:3d:9e:5f:c8:09:4c:00:bf:89:
17:62:b1:07:b0:e2:69:28:25:9b:0d:f4:b6:3a:76:8c:5f:de:
19:78:c1:4f:94:c7:ee:6a:59:15:0a:cb:29:a0:29:ec:1a:d0:
bb:40:94:a2:8c:63:69:1c:1b:dd:c0:a0:99:ad:d5:8d:47:03:
7f:3f:9a:70:b8:cf:30:7c:64:c9:28:c4:7b:8d:6f:77:72:1d:
2f:c1:0a:60:3f:c9:d5:88:3e:aa:45:bd:51:e9:29:2d:60:95:
04:fd:9e:e2:1c:97:41:b0:20:c6:4f:bc:44:6a:77:14:66:c9:
75:17:56:08:ca:45:97:e1:8a:e3:63:a3:a8:3c:2f:5c:13:b1:
6a:96:44:b0:d5:d1:23:ce:74:7c:69:9d:ca:2e:9e:b3:52:7d:
9d:b3:bc:f1:53:11:86:14:78:92:94:25:d4:df:3b:69:6b:66:
30:4c:d0:0f:d5:de:1e:d8:38:fa:13:fc:a9:8e:37:1d:c5:73:
8f:b8:a0:50:8a:4e:6a:2f:d5:07:1d:4c:46:05:8d:b5:c4:dd:
4e:3c:b0:2b
-----BEGIN CERTIFICATE-----
MIIFKzCCBBOgAwIBAgISAYyMI6/28NfSl0SSRjnWu8+UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxYzM5NGM5YjNhMzZiNjlmOWVlNWY4OTM2YTJmNTFiOTVl
YWNlYjQwHhcNMjMxMjIxMTEyOTU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ODAyNTMwMDRhNDQ3YjkwYmE3YTBhNzg3MTMxMmMyZTZhMWNhOGE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4bMSONZWD/Dy2sMGJenkaME9vXG
EMJ26wTjpk43aBNPZ8eJWRxpgcVjHHchS3Lag1z/8DDtSDOM2qGCNsj/kqT+i8XN
m5VgNGyDgC+cYy6euxf0JfLxLCUc+A7ZxfkTizOUST26L0Tx2AuIscY04BBFBqya
0rbvgVY8CeAfjkC7w/byMMwzPZPvwZgLMv9G76phsYC86SMsndWhUJlS7V2ZaKDU
ciQqDRXjDUJRlfABFMV/tzXzSX6Z2lxROtB2eUQ/XR65mXR3JhUwSNzJBWoh24dp
hSz/b7SL/lrHfVJevLbUuusLplwuedyfSlb4IQrY3A5zwh3sGADi6lEafwIDAQAB
o4ICNzCCAjMwHQYDVR0OBBYEFIgCUwBKRHuQunoKeHExLC5qHKimMB8GA1UdIwQY
MBaAFCHDlMmzo2tp+e5fiTai9RuV6s60MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWNPVXliT2phMm41N2wtSk5xTDFHNVhxenJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC82MWZhY2MtNjY5Zi00NDU2LTk2M2Yt
MWU0MzZkY2I4NWM1LzEvaUFKVEFFcEVlNUM2ZWdwNGNURXNMbW9jcUtZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC82MWZhY2MtNjY5Zi00NDU2LTk2M2YtMWU0MzZkY2I4NWM1
LzEvSWNPVXliT2phMm41N2wtSk5xTDFHNVhxenJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME0GCCsGAQUFBwEHAQH/BD4wPDA6BAIAATA0AwQCLYTQAwQB
U4vKMAwDBAJTi9QDBAFTi9wDBARTi+AwDAMEAVOL8gMEAVOL9AMEA1UfoDANBgkq
hkiG9w0BAQsFAAOCAQEAKG5EJcwsGHr7XHGcPZDusqDjrDOiiaHRCxRH4ByqmGGJ
stPBVYdnEsNWC/ZRPZ5fyAlMAL+JF2KxB7DiaSglmw30tjp2jF/eGXjBT5TH7mpZ
FQrLKaAp7BrQu0CUooxjaRwb3cCgma3VjUcDfz+acLjPMHxkySjEe41vd3IdL8EK
YD/J1Yg+qkW9UekpLWCVBP2e4hyXQbAgxk+8RGp3FGbJdRdWCMpFl+GK42OjqDwv
XBOxapZEsNXRI850fGmdyi6es1J9nbO88VMRhhR4kpQl1N87aWtmMEzQD9XeHtg4
+hP8qY43HcVzj7igUIpOai/VBx1MRgWNtcTdTjywKw==
-----END CERTIFICATE-----
Generated at Mon Jan 1 19:15:54 2024 by rpki-client on console-ams.rpki-client.org