Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/81ijRPE8EwmLvFO2D8lVqjy0uYY.roa
File: 81ijRPE8EwmLvFO2D8lVqjy0uYY.roa (raw, json)
Hash identifier: ymb779CDdVvX2YWr5IL7bUA7kEaCk05VPTcfoWCYAW0=
Subject key identifier: F3:58:A3:44:F1:3C:13:09:8B:BC:53:B6:0F:C9:55:AA:3C:B4:B9:86
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 0189AB586F025750D2E681F7DA9C3CAA1905
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/81ijRPE8EwmLvFO2D8lVqjy0uYY.roa
Signing time: Mon 31 Jul 2023 09:47:26 +0000
ROA not before: Mon 31 Jul 2023 09:47:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 53356
IP address blocks: 194.64.164.0/22 maxlen: 22
194.64.168.0/22 maxlen: 22
194.233.32.0/22 maxlen: 22
194.233.40.0/22 maxlen: 22
194.195.204.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ab:58:6f:02:57:50:d2:e6:81:f7:da:9c:3c:aa:19:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Jul 31 09:47:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f358a344f13c13098bbc53b60fc955aa3cb4b986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1c:bf:49:42:a9:75:36:d2:f3:ea:81:b0:7c:
ad:01:59:1c:2d:0e:aa:da:2d:54:9e:e0:df:22:44:
da:bc:6a:50:bf:5f:f5:03:3a:3b:42:54:b3:76:dd:
d4:3c:ec:75:a5:c3:b0:a7:2a:30:dd:a2:05:28:91:
c6:ea:54:1a:0f:19:19:0c:02:4f:bb:62:9e:bc:f7:
38:82:27:45:3d:47:55:55:d9:f2:3b:84:2d:0e:e6:
d4:49:99:c8:f9:e2:0b:7d:3f:07:92:a2:3b:3b:dd:
3f:d3:63:a2:6d:26:fb:2d:0e:41:ce:1a:3a:9e:d9:
b0:6c:25:d7:51:a6:79:d6:2b:3c:00:05:fa:70:e8:
8a:d0:fd:92:0a:05:4e:00:49:2a:47:37:60:ef:2e:
a7:ae:6f:39:3d:79:37:1d:2c:22:2a:e4:52:01:5d:
a9:bd:8e:ca:cd:f6:8a:d3:54:be:9d:17:93:f2:5b:
41:82:6c:73:b0:aa:2d:e4:b9:ae:e9:c5:e7:aa:bb:
5d:8e:fe:d5:ca:27:75:26:c9:39:9f:51:64:74:68:
a6:86:7c:e5:d2:8f:db:70:ba:aa:83:8e:b5:6c:35:
62:87:de:e9:51:51:81:3e:77:ae:1d:8b:da:55:d3:
12:ff:d7:49:90:3b:71:70:b8:81:02:cf:e6:50:bf:
d3:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:58:A3:44:F1:3C:13:09:8B:BC:53:B6:0F:C9:55:AA:3C:B4:B9:86
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/81ijRPE8EwmLvFO2D8lVqjy0uYY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.64.164.0-194.64.171.255
194.195.204.0/22
194.233.32.0/22
194.233.40.0/22
Signature Algorithm: sha256WithRSAEncryption
24:45:cf:6f:a3:31:c2:27:12:33:4b:18:04:df:de:ad:c8:5f:
5c:6f:4e:ed:55:d1:de:fe:03:f0:8e:53:e6:85:9a:7b:9a:2b:
d6:ff:07:bb:4a:1d:a5:b7:ec:c9:a6:e3:fb:10:a7:a7:f1:d2:
14:96:3e:dd:73:b1:d4:18:47:61:5c:69:e8:b1:c3:40:3c:13:
9f:da:f9:14:b5:4c:73:4a:61:05:2d:93:b3:ce:33:6d:8a:c3:
86:2c:b3:73:91:a5:3d:e5:5d:eb:18:4a:15:df:09:79:bf:d6:
4e:b2:56:37:37:e1:3a:87:e7:21:97:c0:13:d5:a1:57:df:6f:
ed:33:2c:a2:74:da:fb:ec:01:ba:1a:c3:ef:25:59:0e:78:70:
d0:f9:c7:e3:36:57:18:15:cf:91:70:33:60:4e:45:ec:f4:6e:
87:a2:35:a9:e3:2e:77:24:8a:96:5f:db:19:0d:b4:c4:db:2a:
0b:ae:5a:33:3d:0f:d7:7e:9c:cb:04:b4:cd:3c:8a:a7:76:6b:
72:bf:34:ee:33:5c:ff:ee:e9:e7:b8:2b:b0:b2:48:2b:f6:3c:
2d:1c:93:64:82:1e:59:0e:60:71:e5:a7:d6:24:72:aa:da:3c:
68:ee:33:ad:35:09:6f:41:3c:e5:40:a7:a2:dc:f5:08:1c:52:
a9:a2:a0:41
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAYmrWG8CV1DS5oH32pw8qhkFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3NDcwMTc1NjRjNzExYmNiZDU3NjgwYTBkZmQwMGYyYTVk
MDk5ZGIwHhcNMjMwNzMxMDk0NzI2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMzU4YTM0NGYxM2MxMzA5OGJiYzUzYjYwZmM5NTVhYTNjYjRiOTg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRy/SUKpdTbS8+qBsHytAVkcLQ6q
2i1UnuDfIkTavGpQv1/1Azo7QlSzdt3UPOx1pcOwpyow3aIFKJHG6lQaDxkZDAJP
u2KevPc4gidFPUdVVdnyO4QtDubUSZnI+eILfT8HkqI7O90/02OibSb7LQ5Bzho6
ntmwbCXXUaZ51is8AAX6cOiK0P2SCgVOAEkqRzdg7y6nrm85PXk3HSwiKuRSAV2p
vY7KzfaK01S+nReT8ltBgmxzsKot5Lmu6cXnqrtdjv7Vyid1Jsk5n1FkdGimhnzl
0o/bcLqqg461bDVih97pUVGBPneuHYvaVdMS/9dJkDtxcLiBAs/mUL/TBwIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFPNYo0TxPBMJi7xTtg/JVao8tLmGMB8GA1UdIwQY
MBaAFNdHAXVkxxG8vVdoCg39APKl0JnbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTBjQmRXVEhFYnk5VjJnS0RmMEE4cVhRbWRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9iYTIzNjItMGNjNS00OWJkLWE1MjIt
NGYwZThjZTExYTdkLzEvODFpalJQRThFd21MdkZPMkQ4bFZxankwdVlZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9iYTIzNjItMGNjNS00OWJkLWE1MjItNGYwZThjZTExYTdk
LzEvMTBjQmRXVEhFYnk5VjJnS0RmMEE4cVhRbWRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgMAwDBALCQKQD
BALCQKgDBALCw8wDBALC6SADBALC6SgwDQYJKoZIhvcNAQELBQADggEBACRFz2+j
McInEjNLGATf3q3IX1xvTu1V0d7+A/COU+aFmnuaK9b/B7tKHaW37Mmm4/sQp6fx
0hSWPt1zsdQYR2Fcaeixw0A8E5/a+RS1THNKYQUtk7POM22Kw4Yss3ORpT3lXesY
ShXfCXm/1k6yVjc34TqH5yGXwBPVoVffb+0zLKJ02vvsAboaw+8lWQ54cND5x+M2
VxgVz5FwM2BORez0boeiNanjLnckipZf2xkNtMTbKguuWjM9D9d+nMsEtM08iqd2
a3K/NO4zXP/u6ee4K7CySCv2PC0ck2SCHlkOYHHlp9YkcqraPGjuM601CW9BPOVA
p6Lc9QgcUqmioEE=
-----END CERTIFICATE-----
Generated at Mon Jul 31 10:45:53 2023 by rpki-client on console-fra.rpki-client.org