Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/Jn0_P6a-Ee3ev_5YX-pFfbYgggw.roa
File: Jn0_P6a-Ee3ev_5YX-pFfbYgggw.roa (raw, json)
Hash identifier: vFl7pfybOByqEjByZ+KORqWRA9Y5MRnrK8eBOVYyyXA=
Subject key identifier: 26:7D:3F:3F:A6:BE:11:ED:DE:BF:FE:58:5F:EA:45:7D:B6:20:82:0C
Certificate issuer: /CN=1e14eb1eef66c2d349f3f7d7bafa68e49fbfec9c
Certificate serial: 01856EC1FDC68D274886DE09207E58E3A11B
Authority key identifier: 1E:14:EB:1E:EF:66:C2:D3:49:F3:F7:D7:BA:FA:68:E4:9F:BF:EC:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/Jn0_P6a-Ee3ev_5YX-pFfbYgggw.roa
Signing time: Sun 01 Jan 2023 19:14:44 +0000
ROA not before: Sun 01 Jan 2023 19:14:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210421
IP address blocks: 91.193.167.0/24 maxlen: 24
94.45.129.0/24 maxlen: 24
94.45.136.0/24 maxlen: 24
94.45.139.0/24 maxlen: 24
94.45.142.0/24 maxlen: 24
94.45.146.0/23 maxlen: 24
94.45.148.0/23 maxlen: 24
94.45.152.0/22 maxlen: 24
94.45.156.0/24 maxlen: 24
94.45.156.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:c1:fd:c6:8d:27:48:86:de:09:20:7e:58:e3:a1:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e14eb1eef66c2d349f3f7d7bafa68e49fbfec9c
Validity
Not Before: Jan 1 19:14:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=267d3f3fa6be11eddebffe585fea457db620820c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:87:34:a5:e8:d2:6c:28:89:ca:c0:fe:2b:45:
96:95:7e:6a:4d:ec:af:6c:ef:17:94:78:38:b1:2a:
22:1d:84:00:f4:e3:55:35:ef:ec:5a:11:07:58:a8:
01:1d:77:5f:13:17:69:b3:ce:bb:16:2b:ad:a2:1d:
6a:aa:61:25:f1:87:de:34:b9:cd:79:34:5a:6c:3c:
cd:84:24:6b:b1:36:69:6e:69:e1:ed:9e:47:b2:a1:
cd:78:44:cb:98:5c:52:64:b6:98:3d:d2:c0:c8:c7:
c9:fa:f6:1f:d7:e7:6f:07:ab:3c:dd:35:e1:e0:68:
20:25:20:45:91:15:57:f6:fa:16:7c:c1:b5:42:5b:
62:81:b1:b0:fe:9b:2b:6b:24:73:c6:35:94:87:5e:
fa:7d:f9:20:48:ad:30:65:fa:3a:09:aa:4f:36:8c:
da:af:4d:20:53:c4:61:37:5d:7c:68:e5:e6:36:f3:
80:82:2a:68:a4:e9:97:db:f5:e7:e0:6b:14:31:50:
7d:4f:8b:86:2f:d9:6d:39:cd:ac:69:e8:df:29:aa:
89:5a:8e:e0:35:27:2f:e8:84:3f:11:71:30:f9:24:
3c:5c:73:54:5a:f5:52:91:b0:fa:b1:fa:02:dc:54:
03:d3:8c:20:17:46:b6:b9:52:ae:4a:21:e8:d5:b9:
4d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:7D:3F:3F:A6:BE:11:ED:DE:BF:FE:58:5F:EA:45:7D:B6:20:82:0C
X509v3 Authority Key Identifier:
keyid:1E:14:EB:1E:EF:66:C2:D3:49:F3:F7:D7:BA:FA:68:E4:9F:BF:EC:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/Jn0_P6a-Ee3ev_5YX-pFfbYgggw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.193.167.0/24
94.45.129.0/24
94.45.136.0/24
94.45.139.0/24
94.45.142.0/24
94.45.146.0-94.45.149.255
94.45.152.0-94.45.157.255
Signature Algorithm: sha256WithRSAEncryption
6b:bb:b1:cc:96:c4:de:23:98:23:6d:32:76:29:d2:55:21:c0:
9e:f9:3f:26:48:f9:9b:58:91:4b:51:0b:a8:90:b4:de:ee:fc:
31:47:8e:e3:56:12:c5:41:a5:8f:e8:21:8d:06:85:2b:60:24:
60:d5:5b:9d:fd:f3:b5:18:1d:36:c1:e0:6d:02:25:bd:60:62:
ee:d6:89:b9:e8:a5:8b:a2:e5:ca:a0:1e:03:2c:a2:5c:51:40:
b8:dc:82:4e:0d:3f:94:79:5c:e0:30:ce:c0:b5:81:cb:44:5d:
ec:e7:6a:64:eb:86:e5:9f:63:fd:f3:5b:7b:1c:79:55:b9:19:
76:f1:b3:a2:19:d3:09:e8:d6:cc:2b:d3:f9:38:2c:f7:d0:a4:
3c:22:16:e5:85:9b:28:9c:ad:7f:82:46:cf:2c:69:2a:19:1f:
15:a9:a6:e4:f5:3d:4e:90:51:10:f0:24:20:f2:35:52:cb:f1:
cf:96:80:df:02:7a:32:92:cb:38:3a:6e:11:e7:11:c3:5c:de:
d7:a9:1f:ca:2f:73:dd:d3:d0:52:24:45:3d:4f:98:b1:e9:ec:
23:7d:94:a7:8a:e8:25:c0:0b:f8:eb:1f:e3:89:43:44:2a:a6:
96:ae:87:e3:e5:1d:9d:74:6e:f4:f2:9a:b1:e3:6f:f5:ac:bb:
7d:f4:c7:5b
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgISAYVuwf3GjSdIht4JIH5Y46EbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlMTRlYjFlZWY2NmMyZDM0OWYzZjdkN2JhZmE2OGU0OWZi
ZmVjOWMwHhcNMjMwMTAxMTkxNDQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNjdkM2YzZmE2YmUxMWVkZGViZmZlNTg1ZmVhNDU3ZGI2MjA4MjBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYc0pejSbCiJysD+K0WWlX5qTeyv
bO8XlHg4sSoiHYQA9ONVNe/sWhEHWKgBHXdfExdps867Fiutoh1qqmEl8YfeNLnN
eTRabDzNhCRrsTZpbmnh7Z5HsqHNeETLmFxSZLaYPdLAyMfJ+vYf1+dvB6s83TXh
4GggJSBFkRVX9voWfMG1QltigbGw/psrayRzxjWUh176ffkgSK0wZfo6CapPNoza
r00gU8RhN118aOXmNvOAgipopOmX2/Xn4GsUMVB9T4uGL9ltOc2saejfKaqJWo7g
NScv6IQ/EXEw+SQ8XHNUWvVSkbD6sfoC3FQD04wgF0a2uVKuSiHo1blN+wIDAQAB
o4ICPTCCAjkwHQYDVR0OBBYEFCZ9Pz+mvhHt3r/+WF/qRX22IIIMMB8GA1UdIwQY
MBaAFB4U6x7vZsLTSfP317r6aOSfv+ycMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGhUckh1OW13dE5KOF9mWHV2cG81Si1fN0p3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy8zMzNhYjEtYWY5Yi00MzRjLThkMTMt
OWNhOThmNDk1MGNmLzEvSm4wX1A2YS1FZTNldl81WVgtcEZmYllnZ2d3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy8zMzNhYjEtYWY5Yi00MzRjLThkMTMtOWNhOThmNDk1MGNm
LzEvSGhUckh1OW13dE5KOF9mWHV2cG81Si1fN0p3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFMGCCsGAQUFBwEHAQH/BEQwQjBABAIAATA6AwQAW8GnAwQA
Xi2BAwQAXi2IAwQAXi2LAwQAXi2OMAwDBAFeLZIDBAFeLZQwDAMEA14tmAMEAV4t
nDANBgkqhkiG9w0BAQsFAAOCAQEAa7uxzJbE3iOYI20ydinSVSHAnvk/Jkj5m1iR
S1ELqJC03u78MUeO41YSxUGlj+ghjQaFK2AkYNVbnf3ztRgdNsHgbQIlvWBi7taJ
ueili6LlyqAeAyyiXFFAuNyCTg0/lHlc4DDOwLWBy0Rd7OdqZOuG5Z9j/fNbexx5
VbkZdvGzohnTCejWzCvT+Tgs99CkPCIW5YWbKJytf4JGzyxpKhkfFamm5PU9TpBR
EPAkIPI1Usvxz5aA3wJ6MpLLODpuEecRw1ze16kfyi9z3dPQUiRFPU+YsensI32U
p4roJcAL+Osf44lDRCqmlq6H4+UdnXRu9PKaseNv9ay7ffTHWw==
-----END CERTIFICATE-----
Generated at Mon Jan 1 02:53:42 2024 by rpki-client on console-ams.rpki-client.org