Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/cCSOQZ3CahzKjCk34V1DNdUkxWo.roa
File: cCSOQZ3CahzKjCk34V1DNdUkxWo.roa (raw, json)
Hash identifier: fwL5a9T51BBF8MT9lwUHXe5tNnMCpFf8me5USQwVJtQ=
Subject key identifier: 70:24:8E:41:9D:C2:6A:1C:CA:8C:29:37:E1:5D:43:35:D5:24:C5:6A
Certificate issuer: /CN=23e3d92bfe16619ca500c03267effa9aa7ca0c47
Certificate serial: 018572280D79BA8F5A72CECC4F6BDB3C8E67
Authority key identifier: 23:E3:D9:2B:FE:16:61:9C:A5:00:C0:32:67:EF:FA:9A:A7:CA:0C:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/cCSOQZ3CahzKjCk34V1DNdUkxWo.roa
Signing time: Mon 02 Jan 2023 11:05:05 +0000
ROA not before: Mon 02 Jan 2023 11:05:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39143
IP address blocks: 89.188.162.0/24 maxlen: 24
185.211.240.0/22 maxlen: 23
185.211.241.0/24 maxlen: 24
2a03:8641::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:28:0d:79:ba:8f:5a:72:ce:cc:4f:6b:db:3c:8e:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23e3d92bfe16619ca500c03267effa9aa7ca0c47
Validity
Not Before: Jan 2 11:05:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=70248e419dc26a1cca8c2937e15d4335d524c56a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5b:e8:8f:17:29:66:66:35:ae:3d:26:4d:a0:
24:db:db:c5:3b:53:d4:b9:ce:88:14:8b:38:5f:ed:
dd:13:69:1c:bc:18:d5:db:de:64:28:c6:d1:08:6c:
ee:f7:3b:75:23:31:09:2f:0e:fc:ff:50:f9:81:4d:
96:54:e1:7e:c1:a3:1f:e3:74:c3:3a:ff:82:73:48:
2b:38:60:7c:89:74:b5:47:68:aa:c8:be:3b:15:06:
ff:a1:fe:d0:11:67:84:20:6f:bf:87:99:61:00:7e:
5a:b2:ce:63:4c:ec:54:6f:ce:43:a5:b1:32:d6:81:
b9:5d:a6:85:60:9f:6b:ef:e1:7a:91:50:c2:44:ad:
74:47:a7:eb:0f:13:ee:40:32:77:a6:a4:c3:87:c6:
e5:10:5b:47:78:6f:bd:f6:ea:a5:bb:72:cd:e9:a1:
08:94:e1:91:34:32:59:00:36:b5:7c:09:a7:fe:91:
ce:25:26:1e:78:f1:e8:23:e1:21:a2:0c:07:e1:be:
fa:5b:89:69:7d:3c:d8:29:10:b6:2a:1f:49:d6:71:
75:e6:6f:91:1d:2c:8f:1a:98:30:b9:09:fa:8e:5e:
51:10:17:82:aa:c0:9d:97:af:4e:a4:01:83:f1:0b:
1a:11:f1:fd:63:3d:c3:98:59:e1:d6:00:e9:b4:f8:
a4:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:24:8E:41:9D:C2:6A:1C:CA:8C:29:37:E1:5D:43:35:D5:24:C5:6A
X509v3 Authority Key Identifier:
keyid:23:E3:D9:2B:FE:16:61:9C:A5:00:C0:32:67:EF:FA:9A:A7:CA:0C:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/cCSOQZ3CahzKjCk34V1DNdUkxWo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.188.162.0/24
185.211.240.0/22
IPv6:
2a03:8641::/32
Signature Algorithm: sha256WithRSAEncryption
9f:4b:67:5b:12:fa:e8:fe:bd:41:bd:06:97:ac:56:c2:03:bf:
38:58:b8:ad:f1:f4:e5:7d:09:46:a5:61:1a:a0:78:bc:2a:ff:
4d:21:6d:aa:5d:e2:30:0f:fa:e7:53:40:a9:67:53:dc:e2:ed:
e9:53:22:08:32:f9:4e:c8:29:8c:4d:96:d5:10:2e:6f:00:c2:
2b:1a:47:6d:08:4b:8a:03:5b:94:12:c8:d0:df:af:7b:fd:a0:
67:ce:46:a2:c3:73:c6:19:e3:d9:6f:49:4c:c5:7c:3a:96:36:
03:45:8b:c0:a1:59:29:ea:60:6d:de:f1:8a:25:16:71:81:ee:
d8:10:fa:3c:08:a1:71:9f:45:4d:0e:07:f8:b9:e7:69:31:40:
3f:e0:e1:72:96:9f:c9:5e:66:fc:a0:98:f3:85:16:00:81:95:
53:dc:e8:2a:07:96:df:bf:16:eb:f3:d5:76:3d:4d:50:be:67:
23:60:83:78:44:ab:97:7a:bb:2e:3c:e1:86:84:09:fc:4c:23:
d4:1e:e4:9a:0c:bd:29:73:b9:35:c1:ec:2d:3e:d2:d3:f8:49:
1d:be:96:7b:41:32:79:48:bb:36:83:ee:25:8b:42:2a:1a:15:
8f:01:1d:f4:ab:f4:a3:8f:e1:bc:fe:ed:5a:6b:60:30:8e:d1:
79:44:21:34
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYVyKA15uo9acs7MT2vbPI5nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzZTNkOTJiZmUxNjYxOWNhNTAwYzAzMjY3ZWZmYTlhYTdj
YTBjNDcwHhcNMjMwMTAyMTEwNTA1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MDI0OGU0MTlkYzI2YTFjY2E4YzI5MzdlMTVkNDMzNWQ1MjRjNTZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxlvojxcpZmY1rj0mTaAk29vFO1PU
uc6IFIs4X+3dE2kcvBjV295kKMbRCGzu9zt1IzEJLw78/1D5gU2WVOF+waMf43TD
Ov+Cc0grOGB8iXS1R2iqyL47FQb/of7QEWeEIG+/h5lhAH5ass5jTOxUb85DpbEy
1oG5XaaFYJ9r7+F6kVDCRK10R6frDxPuQDJ3pqTDh8blEFtHeG+99uqlu3LN6aEI
lOGRNDJZADa1fAmn/pHOJSYeePHoI+EhogwH4b76W4lpfTzYKRC2Kh9J1nF15m+R
HSyPGpgwuQn6jl5REBeCqsCdl69OpAGD8QsaEfH9Yz3DmFnh1gDptPikWQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFHAkjkGdwmocyowpN+FdQzXVJMVqMB8GA1UdIwQY
MBaAFCPj2Sv+FmGcpQDAMmfv+pqnygxHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSS1QWktfNFdZWnlsQU1BeVotXzZtcWZLREVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC85YzJjOTAtYzdkNC00OGI3LTliYWYt
ZjFiZjBjMzNhOTA4LzEvY0NTT1FaM0NhaHpLakNrMzRWMUROZFVreFdvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC85YzJjOTAtYzdkNC00OGI3LTliYWYtZjFiZjBjMzNhOTA4
LzEvSS1QWktfNFdZWnlsQU1BeVotXzZtcWZLREVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAWbyiAwQC
udPwMA0EAgACMAcDBQAqA4ZBMA0GCSqGSIb3DQEBCwUAA4IBAQCfS2dbEvro/r1B
vQaXrFbCA784WLit8fTlfQlGpWEaoHi8Kv9NIW2qXeIwD/rnU0CpZ1Pc4u3pUyII
MvlOyCmMTZbVEC5vAMIrGkdtCEuKA1uUEsjQ3697/aBnzkaiw3PGGePZb0lMxXw6
ljYDRYvAoVkp6mBt3vGKJRZxge7YEPo8CKFxn0VNDgf4uedpMUA/4OFylp/JXmb8
oJjzhRYAgZVT3OgqB5bfvxbr89V2PU1QvmcjYIN4RKuXersuPOGGhAn8TCPUHuSa
DL0pc7k1wewtPtLT+EkdvpZ7QTJ5SLs2g+4li0IqGhWPAR30q/Sjj+G8/u1aa2Aw
jtF5RCE0
-----END CERTIFICATE-----
Generated at Mon Jan 1 17:25:26 2024 by rpki-client on console-fra.rpki-client.org