Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/qa1OS40UIVa5GOQz-lCuhVXSHZo.roa
File: qa1OS40UIVa5GOQz-lCuhVXSHZo.roa (raw, json)
Hash identifier: u/nLB4EjjMCtcpc9BDDB9KOoT6BB5UJdcz5bhY+hgO4=
Subject key identifier: A9:AD:4E:4B:8D:14:21:56:B9:18:E4:33:FA:50:AE:85:55:D2:1D:9A
Certificate issuer: /CN=fc4d06978969a8bdab6d6359062d7781e03449ca
Certificate serial: 0189C0076A56B8D934F3F7379BB3D12EEAE2
Authority key identifier: FC:4D:06:97:89:69:A8:BD:AB:6D:63:59:06:2D:77:81:E0:34:49:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_E0Gl4lpqL2rbWNZBi13geA0Sco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/qa1OS40UIVa5GOQz-lCuhVXSHZo.roa
Signing time: Fri 04 Aug 2023 10:10:58 +0000
ROA not before: Fri 04 Aug 2023 10:10:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21412
IP address blocks: 185.198.32.0/22 maxlen: 22
77.87.8.0/21 maxlen: 21
185.26.132.0/22 maxlen: 22
80.240.0.0/20 maxlen: 20
178.250.32.0/21 maxlen: 21
37.157.144.0/21 maxlen: 21
178.16.32.0/20 maxlen: 20
5.20.0.0/21 maxlen: 32
5.20.8.0/21 maxlen: 21
5.20.16.0/20 maxlen: 20
5.20.32.0/19 maxlen: 19
212.52.32.0/19 maxlen: 19
217.77.16.0/20 maxlen: 24
217.77.16.0/21 maxlen: 24
217.77.24.0/21 maxlen: 24
87.247.64.0/18 maxlen: 18
5.20.112.0/21 maxlen: 21
5.20.120.0/21 maxlen: 21
5.20.128.0/19 maxlen: 19
87.239.112.0/21 maxlen: 21
31.209.64.0/20 maxlen: 20
5.20.64.0/19 maxlen: 19
185.54.12.0/22 maxlen: 22
5.20.96.0/21 maxlen: 21
5.20.104.0/21 maxlen: 21
46.251.32.0/19 maxlen: 19
5.20.224.0/21 maxlen: 21
5.20.232.0/21 maxlen: 21
91.187.160.0/19 maxlen: 19
5.20.240.0/20 maxlen: 20
212.117.0.0/19 maxlen: 19
79.133.224.0/19 maxlen: 19
5.20.160.0/19 maxlen: 19
81.29.16.0/20 maxlen: 20
217.17.80.0/20 maxlen: 20
80.243.16.0/20 maxlen: 20
5.20.192.0/19 maxlen: 19
77.221.64.0/19 maxlen: 19
2a00:7600::/32 maxlen: 32
2a04:eb00::/29 maxlen: 29
2a01:a1c0::/32 maxlen: 32
2a04:ce00::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:c0:07:6a:56:b8:d9:34:f3:f7:37:9b:b3:d1:2e:ea:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc4d06978969a8bdab6d6359062d7781e03449ca
Validity
Not Before: Aug 4 10:10:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a9ad4e4b8d142156b918e433fa50ae8555d21d9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:94:d3:e9:58:69:ac:20:28:a2:05:a4:28:18:
9c:2d:cd:70:36:97:26:5a:6e:25:23:f0:ff:b4:8a:
c8:14:d4:bc:ad:85:cb:40:ee:97:35:3e:7f:be:f6:
bd:5f:a2:aa:01:85:a6:eb:04:f5:f2:f0:6f:03:5d:
07:ef:ef:a2:c4:87:64:07:76:0f:78:b1:2f:09:0b:
4e:d8:23:c1:92:ce:a9:e3:82:3f:b6:f9:d6:e0:92:
59:00:d9:ac:0d:30:66:60:01:99:93:29:c4:b1:d8:
58:33:c1:28:b4:ab:02:41:36:34:b4:13:63:2b:65:
b8:f3:a7:87:e0:27:a1:64:c0:e4:e3:76:c7:7b:d7:
95:1d:d0:22:1e:4d:75:91:e5:b0:2b:f3:20:b1:fa:
cb:07:71:21:a1:4a:c9:48:a3:03:2d:cd:f9:90:1f:
f1:2f:b7:2c:76:66:d4:63:a1:ce:9a:60:75:20:7d:
98:18:ea:39:4d:a4:c5:bd:71:84:09:de:c1:7e:74:
76:d5:36:88:54:8d:77:a2:10:bc:0b:40:cf:8e:ed:
10:c3:6b:1d:15:2d:1e:32:fc:b7:00:d4:ff:73:74:
92:3e:22:0c:32:de:1b:dd:85:bb:75:c7:26:a0:96:
0c:88:16:1c:d3:db:d0:83:47:c2:14:f3:b2:1b:8d:
84:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:AD:4E:4B:8D:14:21:56:B9:18:E4:33:FA:50:AE:85:55:D2:1D:9A
X509v3 Authority Key Identifier:
keyid:FC:4D:06:97:89:69:A8:BD:AB:6D:63:59:06:2D:77:81:E0:34:49:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_E0Gl4lpqL2rbWNZBi13geA0Sco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/qa1OS40UIVa5GOQz-lCuhVXSHZo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/_E0Gl4lpqL2rbWNZBi13geA0Sco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.20.0.0/16
31.209.64.0/20
37.157.144.0/21
46.251.32.0/19
77.87.8.0/21
77.221.64.0/19
79.133.224.0/19
80.240.0.0/20
80.243.16.0/20
81.29.16.0/20
87.239.112.0/21
87.247.64.0/18
91.187.160.0/19
178.16.32.0/20
178.250.32.0/21
185.26.132.0/22
185.54.12.0/22
185.198.32.0/22
212.52.32.0/19
212.117.0.0/19
217.17.80.0/20
217.77.16.0/20
IPv6:
2a00:7600::/32
2a01:a1c0::/32
2a04:ce00::/29
2a04:eb00::/29
Signature Algorithm: sha256WithRSAEncryption
47:30:81:31:3d:49:17:25:54:39:8a:f8:28:0d:69:16:01:80:
ca:e3:c1:91:00:37:7c:0b:51:00:f3:12:df:61:02:c9:a2:5d:
a1:64:bd:40:09:b4:78:15:68:1a:7a:8d:10:fb:a7:5e:36:98:
e9:25:8e:18:87:cf:13:ad:5f:18:ad:a4:c2:56:3b:91:0b:b1:
30:bd:93:92:0f:ab:f4:b0:1a:28:41:dd:02:08:e4:74:d2:88:
31:95:57:09:a6:c1:82:e4:a9:96:03:0e:d7:ba:9a:ab:37:f7:
27:17:90:79:4e:5a:9a:ea:09:f6:9b:ae:01:81:ce:47:88:26:
68:b9:39:98:f8:39:5d:c4:47:a6:eb:2b:0a:2a:ff:f0:9f:ac:
d2:f6:e1:ff:8d:45:eb:46:65:e0:10:8f:f4:3b:34:ae:d9:78:
a0:cb:11:5b:91:bf:8c:1f:48:0f:66:20:ea:09:d6:ec:c0:e8:
43:26:2f:45:44:16:5a:47:c2:e3:76:a0:57:c0:fd:b3:ad:e2:
b3:65:f7:d2:36:0b:05:0c:9b:4d:30:33:61:02:70:e9:ab:71:
02:3e:45:b4:42:31:5f:cb:8e:17:73:51:2e:26:f0:f9:8c:3a:
dd:6f:32:e8:e3:de:b0:ed:44:6d:29:cc:3a:79:26:c8:fc:88:
d0:72:98:e6
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAYnAB2pWuNk08/c3m7PRLuriMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjNGQwNjk3ODk2OWE4YmRhYjZkNjM1OTA2MmQ3NzgxZTAz
NDQ5Y2EwHhcNMjMwODA0MTAxMDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOWFkNGU0YjhkMTQyMTU2YjkxOGU0MzNmYTUwYWU4NTU1ZDIxZDlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopTT6VhprCAoogWkKBicLc1wNpcm
Wm4lI/D/tIrIFNS8rYXLQO6XNT5/vva9X6KqAYWm6wT18vBvA10H7++ixIdkB3YP
eLEvCQtO2CPBks6p44I/tvnW4JJZANmsDTBmYAGZkynEsdhYM8EotKsCQTY0tBNj
K2W486eH4CehZMDk43bHe9eVHdAiHk11keWwK/MgsfrLB3EhoUrJSKMDLc35kB/x
L7csdmbUY6HOmmB1IH2YGOo5TaTFvXGECd7BfnR21TaIVI13ohC8C0DPju0Qw2sd
FS0eMvy3ANT/c3SSPiIMMt4b3YW7dccmoJYMiBYc09vQg0fCFPOyG42EWwIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFKmtTkuNFCFWuRjkM/pQroVV0h2aMB8GA1UdIwQY
MBaAFPxNBpeJaai9q21jWQYtd4HgNEnKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0UwR2w0bHBxTDJyYldOWkJpMTNnZUEwU2NvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8wODJjMzEtZjRlZi00YWNiLTkwZjEt
ZGEwM2JmN2EyZWMyLzEvcWExT1M0MFVJVmE1R09Rei1sQ3VoVlhTSFpvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC8wODJjMzEtZjRlZi00YWNiLTkwZjEtZGEwM2JmN2EyZWMy
LzEvX0UwR2w0bHBxTDJyYldOWkJpMTNnZUEwU2NvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHEBggrBgEFBQcBBwEB/wSBtDCBsTCBigQCAAEwgYMDAwAF
FAMEBB/RQAMEAyWdkAMEBS77IAMEA01XCAMEBU3dQAMEBU+F4AMEBFDwAAMEBFDz
EAMEBFEdEAMEA1fvcAMEBlf3QAMEBVu7oAMEBLIQIAMEA7L6IAMEArkahAMEArk2
DAMEArnGIAMEBdQ0IAMEBdR1AAMEBNkRUAMEBNlNEDAiBAIAAjAcAwUAKgB2AAMF
ACoBocADBQMqBM4AAwUDKgTrADANBgkqhkiG9w0BAQsFAAOCAQEARzCBMT1JFyVU
OYr4KA1pFgGAyuPBkQA3fAtRAPMS32ECyaJdoWS9QAm0eBVoGnqNEPunXjaY6SWO
GIfPE61fGK2kwlY7kQuxML2Tkg+r9LAaKEHdAgjkdNKIMZVXCabBguSplgMO17qa
qzf3JxeQeU5amuoJ9puuAYHOR4gmaLk5mPg5XcRHpusrCir/8J+s0vbh/41F60Zl
4BCP9Ds0rtl4oMsRW5G/jB9ID2Yg6gnW7MDoQyYvRUQWWkfC43agV8D9s63is2X3
0jYLBQybTTAzYQJw6atxAj5FtEIxX8uOF3NRLibw+Yw63W8y6OPesO1EbSnMOnkm
yPyI0HKY5g==
-----END CERTIFICATE-----
Generated at Fri Aug 4 12:38:39 2023 by rpki-client on console-ams.rpki-client.org