Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/970XSFCcEGGMdVj0jea-G50JDmA.roa
File: 970XSFCcEGGMdVj0jea-G50JDmA.roa (raw, json)
Hash identifier: d0tKGhA5LguEZkRxk4PkX1YTEeYwER82E9IoZgEzaf8=
Subject key identifier: F7:BD:17:48:50:9C:10:61:8C:75:58:F4:8D:E6:BE:1B:9D:09:0E:60
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 018A8A75CB92978DA06D542324909FD05C71
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/970XSFCcEGGMdVj0jea-G50JDmA.roa
Signing time: Tue 12 Sep 2023 17:34:50 +0000
ROA not before: Tue 12 Sep 2023 17:34:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3257
IP address blocks: 194.50.200.0/23 maxlen: 24
194.50.206.0/23 maxlen: 24
91.242.103.0/24 maxlen: 24
195.138.108.0/24 maxlen: 24
195.138.116.0/24 maxlen: 24
195.138.122.0/23 maxlen: 23
195.138.124.0/22 maxlen: 22
91.242.72.0/23 maxlen: 24
91.242.74.0/23 maxlen: 24
91.242.75.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:8a:75:cb:92:97:8d:a0:6d:54:23:24:90:9f:d0:5c:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Sep 12 17:34:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f7bd1748509c10618c7558f48de6be1b9d090e60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:68:d5:56:99:b5:f0:cb:eb:05:38:94:3c:d8:
aa:c5:fc:e8:af:bf:0a:8f:37:76:f9:d4:c5:38:c2:
90:08:e1:90:0e:ca:95:18:e5:02:01:82:1f:67:01:
f9:eb:a1:7b:b8:a2:27:14:6f:8c:42:db:bb:35:d7:
74:65:8d:81:bf:ec:b1:bf:cd:1d:13:d4:77:33:22:
9f:09:c0:af:1a:e6:ce:63:e9:f7:d2:cf:57:32:8c:
ff:2e:19:49:5a:1d:51:10:b4:71:dc:88:b0:c1:68:
5b:c8:cd:89:3e:94:4d:22:8c:67:70:24:1d:a1:c2:
b1:da:02:f9:46:1a:fa:d8:dc:6d:c5:36:84:f4:9e:
bf:41:b6:91:bc:ce:14:86:d6:0e:72:cd:90:4d:29:
81:88:f4:0e:c7:57:7a:61:0c:35:35:b7:cc:0d:b4:
d6:da:96:16:87:bf:31:6a:dd:9e:d9:9c:a2:3c:d9:
57:9a:df:1c:5b:66:47:3b:90:92:17:f1:a0:07:3d:
78:b3:af:2c:d7:12:44:ac:95:19:7b:13:8a:b4:07:
16:1c:79:62:e7:70:be:6d:86:db:70:c9:9a:c8:08:
a4:f9:b3:6f:8a:4b:0f:df:f3:8e:7e:db:e9:12:92:
36:8a:02:ca:59:23:87:8f:59:97:82:f7:ee:b4:d8:
17:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:BD:17:48:50:9C:10:61:8C:75:58:F4:8D:E6:BE:1B:9D:09:0E:60
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/970XSFCcEGGMdVj0jea-G50JDmA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.72.0/22
91.242.103.0/24
194.50.200.0/23
194.50.206.0/23
195.138.108.0/24
195.138.116.0/24
195.138.122.0-195.138.127.255
Signature Algorithm: sha256WithRSAEncryption
90:e4:85:d2:c0:14:54:50:ef:96:5f:a0:72:72:af:38:ab:b2:
b5:00:b9:22:1f:9b:5e:7d:96:78:81:ff:bf:39:de:70:c4:48:
62:3e:1f:e4:26:dc:d4:ea:46:97:9e:f3:5a:f7:f5:73:c7:82:
43:54:cb:6d:e4:07:9d:b2:f6:c3:56:eb:c6:13:25:21:7b:b6:
55:3c:41:34:5c:60:eb:17:a4:f1:3d:e5:6b:03:9a:97:ef:96:
67:d3:71:ed:f2:82:ca:57:9c:f5:f9:95:73:de:df:2a:9d:cd:
51:11:35:f0:bc:a8:36:9a:67:de:bd:15:ce:31:f1:e0:3f:c0:
3c:35:8e:60:4c:bf:c2:bd:86:bd:b3:09:8d:29:ff:b8:c5:99:
01:fd:27:95:61:2b:61:a9:26:44:be:f2:3a:40:60:2a:7b:f5:
73:78:f3:f1:9d:be:fc:1c:89:59:f3:73:36:3f:6e:85:74:06:
0e:47:fe:dd:9a:98:c4:6a:e6:1d:d2:7d:67:87:7e:41:f9:dd:
bd:90:61:44:31:ee:ce:3a:83:53:97:32:54:c7:bb:c8:36:e9:
5f:3b:3e:c2:66:8f:4b:66:5f:2c:da:e7:45:57:10:07:10:ea:
bc:bc:d4:3f:71:33:d9:d8:d3:04:64:f6:78:a4:dd:dc:2f:73:
0c:45:16:f9
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgISAYqKdcuSl42gbVQjJJCf0FxxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiYWIzMDY4Mzg1OWVjN2UwMjA2ZmU5MjY1MzYzZThlMzk3
MWE5YTgwHhcNMjMwOTEyMTczNDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmN2JkMTc0ODUwOWMxMDYxOGM3NTU4ZjQ4ZGU2YmUxYjlkMDkwZTYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2jVVpm18MvrBTiUPNiqxfzor78K
jzd2+dTFOMKQCOGQDsqVGOUCAYIfZwH566F7uKInFG+MQtu7Ndd0ZY2Bv+yxv80d
E9R3MyKfCcCvGubOY+n30s9XMoz/LhlJWh1RELRx3IiwwWhbyM2JPpRNIoxncCQd
ocKx2gL5Rhr62NxtxTaE9J6/QbaRvM4UhtYOcs2QTSmBiPQOx1d6YQw1NbfMDbTW
2pYWh78xat2e2ZyiPNlXmt8cW2ZHO5CSF/GgBz14s68s1xJErJUZexOKtAcWHHli
53C+bYbbcMmayAik+bNviksP3/OOftvpEpI2igLKWSOHj1mXgvfutNgXjwIDAQAB
o4ICNTCCAjEwHQYDVR0OBBYEFPe9F0hQnBBhjHVY9I3mvhudCQ5gMB8GA1UdIwQY
MBaAFIurMGg4Wex+Agb+kmU2Po45camoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQt
M2FjOWU1NmMzMDg5LzEvOTcwWFNGQ2NFR0dNZFZqMGplYS1HNTBKRG1BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQtM2FjOWU1NmMzMDg5
LzEvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEsGCCsGAQUFBwEHAQH/BDwwOjA4BAIAATAyAwQCW/JIAwQA
W/JnAwQBwjLIAwQBwjLOAwQAw4psAwQAw4p0MAwDBAHDinoDBAfDigAwDQYJKoZI
hvcNAQELBQADggEBAJDkhdLAFFRQ75ZfoHJyrzirsrUAuSIfm159lniB/7853nDE
SGI+H+Qm3NTqRpee81r39XPHgkNUy23kB52y9sNW68YTJSF7tlU8QTRcYOsXpPE9
5WsDmpfvlmfTce3ygspXnPX5lXPe3yqdzVERNfC8qDaaZ969Fc4x8eA/wDw1jmBM
v8K9hr2zCY0p/7jFmQH9J5VhK2GpJkS+8jpAYCp79XN48/GdvvwciVnzczY/boV0
Bg5H/t2amMRq5h3SfWeHfkH53b2QYUQx7s46g1OXMlTHu8g26V87PsJmj0tmXyza
50VXEAcQ6ry81D9xM9nY0wRk9nik3dwvcwxFFvk=
-----END CERTIFICATE-----
Generated at Thu Oct 5 06:45:11 2023 by rpki-client on console-fra.rpki-client.org