Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/Arc35FmHkWY2oz9WRZDxK3FUirE.roa
File: Arc35FmHkWY2oz9WRZDxK3FUirE.roa (raw, json)
Hash identifier: keK9pvQBWqfKR1scDgpoLKjQh1rWaKTo4PqX9zWLHOU=
Subject key identifier: 02:B7:37:E4:59:87:91:66:36:A3:3F:56:45:90:F1:2B:71:54:8A:B1
Certificate issuer: /CN=1d828b781b079fb43ddb0ca75dc026e75d7f25e4
Certificate serial: 018571BA0FF8D3CBAE6C39B93ECB168D0DA9
Authority key identifier: 1D:82:8B:78:1B:07:9F:B4:3D:DB:0C:A7:5D:C0:26:E7:5D:7F:25:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HYKLeBsHn7Q92wynXcAm511_JeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/Arc35FmHkWY2oz9WRZDxK3FUirE.roa
Signing time: Mon 02 Jan 2023 09:04:57 +0000
ROA not before: Mon 02 Jan 2023 09:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31370
IP address blocks: 193.27.41.0/24 maxlen: 24
89.249.240.0/20 maxlen: 20
109.72.224.0/20 maxlen: 20
193.39.160.0/22 maxlen: 22
185.215.60.0/22 maxlen: 22
2a0c:dc40::/29 maxlen: 29
2a01:94c0::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:ba:0f:f8:d3:cb:ae:6c:39:b9:3e:cb:16:8d:0d:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d828b781b079fb43ddb0ca75dc026e75d7f25e4
Validity
Not Before: Jan 2 09:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=02b737e45987916636a33f564590f12b71548ab1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:83:f3:71:25:cf:fd:21:76:41:86:53:4d:85:
2a:59:c6:dc:6f:4b:1f:f1:05:19:29:fe:56:67:9e:
ca:7f:97:85:41:e1:75:67:f5:87:19:5b:c5:35:1b:
9d:27:87:1d:8b:aa:36:f9:1c:3a:6b:14:4e:4f:bb:
c2:a1:33:26:44:a4:28:59:25:a6:b2:7a:e4:9a:62:
2d:68:a0:17:88:fa:8e:ee:31:86:fb:5c:ac:f9:80:
cf:f3:f4:22:23:d1:a2:49:d7:9b:86:fd:4d:8d:8e:
56:56:36:35:11:e1:46:27:f4:12:5e:bb:95:e6:12:
2b:21:3e:36:5e:fe:50:e6:2f:5b:af:40:af:0d:fd:
28:eb:a2:f3:fb:b8:2a:fb:a5:e0:a9:98:a0:bd:4b:
79:fb:2a:28:d1:10:a0:77:37:6f:c7:2d:4d:64:af:
90:3b:14:d5:ac:39:32:81:eb:e1:24:48:e3:f0:4d:
b3:07:ab:fc:6c:80:c8:c4:c2:c8:fa:ce:8d:e8:c8:
68:2f:78:f2:1a:29:10:93:27:bc:4f:20:52:c1:99:
82:88:88:55:86:da:70:4b:c4:aa:0d:22:2e:a1:0f:
ba:b5:68:a7:ef:52:e7:57:a5:90:8a:f7:58:a7:0a:
99:a2:44:21:66:33:29:c8:f0:e2:f0:0b:ac:fe:ae:
a0:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:B7:37:E4:59:87:91:66:36:A3:3F:56:45:90:F1:2B:71:54:8A:B1
X509v3 Authority Key Identifier:
keyid:1D:82:8B:78:1B:07:9F:B4:3D:DB:0C:A7:5D:C0:26:E7:5D:7F:25:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYKLeBsHn7Q92wynXcAm511_JeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/Arc35FmHkWY2oz9WRZDxK3FUirE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/HYKLeBsHn7Q92wynXcAm511_JeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.249.240.0/20
109.72.224.0/20
185.215.60.0/22
193.27.41.0/24
193.39.160.0/22
IPv6:
2a01:94c0::/32
2a0c:dc40::/29
Signature Algorithm: sha256WithRSAEncryption
51:06:bc:11:3d:1e:c8:08:6f:bb:e4:bc:71:83:6e:63:42:6a:
4f:e3:cd:90:69:93:3c:47:b9:b4:ac:18:0b:f5:42:cf:4a:d6:
29:c0:58:90:8d:e2:96:fe:7d:be:25:c5:fa:7b:24:43:f2:db:
57:ac:12:79:a6:3d:29:a7:69:45:03:30:cc:ea:df:a3:10:49:
ec:a7:ca:44:91:7c:a9:32:2e:9e:94:46:eb:44:c3:e0:d6:93:
eb:5e:56:b4:02:56:ee:47:ed:44:09:7b:0a:2a:01:6e:0b:3d:
c5:35:a2:50:b3:08:30:7b:c7:25:24:1d:53:f5:dc:bb:e1:76:
23:74:8f:cb:92:54:8e:1e:52:e4:22:fa:f7:27:e2:fd:ed:c0:
5d:7b:ca:7c:86:c9:fa:b6:57:cf:21:6c:d3:a6:e4:be:6b:ce:
0b:ca:bf:b8:c2:65:7c:57:94:7d:86:35:fc:7e:8c:24:96:1d:
d1:9f:c2:4a:55:fb:7b:14:9e:41:b1:27:97:d5:49:27:bf:e6:
2d:9b:2f:da:4b:43:c3:69:b9:d4:82:16:03:65:69:60:96:fe:
f8:94:c4:be:dc:3d:e9:7b:38:2f:45:02:db:06:1b:49:a2:ec:
c9:f3:75:69:22:b4:25:9c:29:cb:f8:fb:30:3e:54:69:f8:0f:
38:3a:83:c1
-----BEGIN CERTIFICATE-----
MIIFKzCCBBOgAwIBAgISAYVxug/408uubDm5PssWjQ2pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkODI4Yjc4MWIwNzlmYjQzZGRiMGNhNzVkYzAyNmU3NWQ3
ZjI1ZTQwHhcNMjMwMTAyMDkwNDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMmI3MzdlNDU5ODc5MTY2MzZhMzNmNTY0NTkwZjEyYjcxNTQ4YWIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2oPzcSXP/SF2QYZTTYUqWcbcb0sf
8QUZKf5WZ57Kf5eFQeF1Z/WHGVvFNRudJ4cdi6o2+Rw6axROT7vCoTMmRKQoWSWm
snrkmmItaKAXiPqO7jGG+1ys+YDP8/QiI9GiSdebhv1NjY5WVjY1EeFGJ/QSXruV
5hIrIT42Xv5Q5i9br0CvDf0o66Lz+7gq+6XgqZigvUt5+yoo0RCgdzdvxy1NZK+Q
OxTVrDkygevhJEjj8E2zB6v8bIDIxMLI+s6N6MhoL3jyGikQkye8TyBSwZmCiIhV
htpwS8SqDSIuoQ+6tWin71LnV6WQivdYpwqZokQhZjMpyPDi8Aus/q6gmwIDAQAB
o4ICNzCCAjMwHQYDVR0OBBYEFAK3N+RZh5FmNqM/VkWQ8StxVIqxMB8GA1UdIwQY
MBaAFB2Ci3gbB5+0PdsMp13AJuddfyXkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFlLTGVCc0huN1E5Mnd5blhjQW01MTFfSmVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83ZTcxOWQtNzVhZS00ZmQxLWIxNDUt
ZjA2Y2VkNTIxMTJhLzEvQXJjMzVGbUhrV1kyb3o5V1JaRHhLM0ZVaXJFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS83ZTcxOWQtNzVhZS00ZmQxLWIxNDUtZjA2Y2VkNTIxMTJh
LzEvSFlLTGVCc0huN1E5Mnd5blhjQW01MTFfSmVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME0GCCsGAQUFBwEHAQH/BD4wPDAkBAIAATAeAwQEWfnwAwQE
bUjgAwQCudc8AwQAwRspAwQCwSegMBQEAgACMA4DBQAqAZTAAwUDKgzcQDANBgkq
hkiG9w0BAQsFAAOCAQEAUQa8ET0eyAhvu+S8cYNuY0JqT+PNkGmTPEe5tKwYC/VC
z0rWKcBYkI3ilv59viXF+nskQ/LbV6wSeaY9KadpRQMwzOrfoxBJ7KfKRJF8qTIu
npRG60TD4NaT615WtAJW7kftRAl7CioBbgs9xTWiULMIMHvHJSQdU/Xcu+F2I3SP
y5JUjh5S5CL69yfi/e3AXXvKfIbJ+rZXzyFs06bkvmvOC8q/uMJlfFeUfYY1/H6M
JJYd0Z/CSlX7exSeQbEnl9VJJ7/mLZsv2ktDw2m51IIWA2VpYJb++JTEvtw96Xs4
L0UC2wYbSaLsyfN1aSK0JZwpy/j7MD5UafgPODqDwQ==
-----END CERTIFICATE-----
Generated at Tue Jan 2 06:31:51 2024 by rpki-client on console-ams.rpki-client.org