Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/yTeKUTRYC5siFm-MhllKT9gYPPs.roa
File: yTeKUTRYC5siFm-MhllKT9gYPPs.roa (raw, json)
Hash identifier: 5yuX3Albf3WcbXDBZCVJU8w+VtsYWAOR5SvshVVd5p8=
Subject key identifier: C9:37:8A:51:34:58:0B:9B:22:16:6F:8C:86:59:4A:4F:D8:18:3C:FB
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 01856BDCA444D51A52CD9A6F68861B03D6E6
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/yTeKUTRYC5siFm-MhllKT9gYPPs.roa
Signing time: Sun 01 Jan 2023 05:45:00 +0000
ROA not before: Sun 01 Jan 2023 05:45:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 77.36.120.0/21 maxlen: 21
185.55.4.0/22 maxlen: 23
176.112.80.0/22 maxlen: 22
176.103.240.0/21 maxlen: 22
178.159.144.0/22 maxlen: 24
176.113.184.0/21 maxlen: 24
93.120.120.0/22 maxlen: 24
81.161.0.0/22 maxlen: 22
185.55.140.0/22 maxlen: 22
185.55.140.0/23 maxlen: 23
185.55.142.0/23 maxlen: 23
64.43.112.0/22 maxlen: 22
31.131.8.0/22 maxlen: 22
176.110.216.0/22 maxlen: 22
176.110.216.0/21 maxlen: 21
64.43.124.0/22 maxlen: 22
176.110.220.0/22 maxlen: 22
176.102.120.0/21 maxlen: 21
176.102.120.0/22 maxlen: 22
176.102.124.0/22 maxlen: 22
193.36.204.0/22 maxlen: 22
176.96.88.0/22 maxlen: 22
109.207.136.0/22 maxlen: 22
176.96.48.0/21 maxlen: 24
176.116.232.0/22 maxlen: 22
91.246.176.0/21 maxlen: 21
176.111.160.0/22 maxlen: 24
93.120.12.0/22 maxlen: 22
46.173.240.0/21 maxlen: 21
93.120.16.0/21 maxlen: 21
178.212.184.0/22 maxlen: 22
178.212.184.0/21 maxlen: 21
178.212.188.0/22 maxlen: 22
91.233.0.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:dc:a4:44:d5:1a:52:cd:9a:6f:68:86:1b:03:d6:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: Jan 1 05:45:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c9378a5134580b9b22166f8c86594a4fd8183cfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:70:27:f0:d2:9a:51:05:27:4a:2e:51:47:06:
3f:a4:50:73:4a:11:62:6a:f0:48:82:14:91:34:67:
71:18:4c:0f:ad:8e:0b:62:9b:a3:5c:91:0e:69:02:
07:3e:ec:b5:65:b6:5d:d9:0a:e9:33:1f:24:01:9a:
9f:29:95:bd:3c:a7:ff:8c:69:42:06:98:cc:6b:56:
d9:8a:de:16:fd:85:6b:dd:fd:89:14:e1:39:26:03:
cb:1c:f1:7a:99:73:9a:0b:60:9c:a4:b5:05:69:a7:
8d:49:b6:74:3e:58:32:50:b6:69:5b:0d:ef:74:9d:
ae:22:ad:81:63:fc:6e:88:ff:a8:67:33:c0:1d:1b:
7d:e8:60:c5:44:64:a0:18:7e:13:c0:f0:71:bc:80:
e9:bc:80:b2:8b:00:53:17:a9:74:9d:df:cf:9b:b7:
03:51:de:25:3c:ad:7b:d9:dc:15:83:a2:be:69:a6:
ec:f3:5c:39:e4:15:e1:23:69:13:69:85:c7:3c:7a:
03:e6:e7:59:6c:c7:7e:84:0e:58:e9:dd:13:0c:d6:
98:86:a1:5a:69:fe:09:da:02:64:d7:0d:3f:1b:90:
88:89:2a:3e:94:4e:2e:38:9c:79:b6:1c:8f:5f:88:
6c:2d:b4:79:fe:53:5e:38:f3:f6:77:66:fe:c4:97:
29:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:37:8A:51:34:58:0B:9B:22:16:6F:8C:86:59:4A:4F:D8:18:3C:FB
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/yTeKUTRYC5siFm-MhllKT9gYPPs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.131.8.0/22
46.173.240.0/21
64.43.112.0/22
64.43.124.0/22
77.36.120.0/21
81.161.0.0/22
91.233.0.0/23
91.246.176.0/21
93.120.12.0-93.120.23.255
93.120.120.0/22
109.207.136.0/22
176.96.48.0/21
176.96.88.0/22
176.102.120.0/21
176.103.240.0/21
176.110.216.0/21
176.111.160.0/22
176.112.80.0/22
176.113.184.0/21
176.116.232.0/22
178.159.144.0/22
178.212.184.0/21
185.55.4.0/22
185.55.140.0/22
193.36.204.0/22
Signature Algorithm: sha256WithRSAEncryption
97:af:09:26:8f:bd:f7:04:7e:a4:a4:84:98:75:cc:00:b0:ab:
cd:d0:0d:f3:cc:3d:d9:6f:cb:fe:4d:31:8f:c9:c3:8a:45:fd:
b8:1a:57:42:45:c8:fd:67:c1:c9:cd:3d:e2:83:31:99:bd:0f:
3b:7b:90:35:23:9d:98:e5:ab:3d:73:5a:85:b6:6f:ee:28:de:
d9:83:06:a1:78:75:df:06:ef:06:48:2a:71:25:e4:8a:82:ac:
bc:91:25:af:73:a5:ce:cc:48:ce:09:c5:5e:a8:fb:f5:64:be:
c9:02:c2:39:7a:25:d5:f2:13:ed:6a:c5:d1:1b:14:d8:91:6d:
2c:29:ac:fe:b2:b1:0c:c0:14:eb:ae:b1:44:11:99:05:d6:92:
7c:9a:82:b8:4a:21:69:1a:5e:06:29:44:ff:2e:eb:9c:2c:72:
5b:cf:80:ce:85:03:3b:b2:9e:e2:4f:b2:f0:2a:29:03:73:de:
8b:ad:6b:90:7e:57:10:4b:91:7d:fe:fd:62:35:fb:91:44:71:
20:0f:5b:cf:30:ec:4a:2b:5e:f0:c9:28:c9:de:35:86:3b:ff:
8e:4e:93:3e:4e:f4:c9:11:67:b4:21:78:68:78:ca:fc:52:59:
e2:ac:70:ef:65:c7:19:78:73:f6:30:78:8e:10:98:1e:1c:bd:
c7:54:5f:3e
-----BEGIN CERTIFICATE-----
MIIFmjCCBIKgAwIBAgISAYVr3KRE1RpSzZpvaIYbA9bmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0OWNiYmQ1YzJjZjQxOTVjYzZlYzdmMjFmNjA3NTgxYTAy
MjRkYWEwHhcNMjMwMTAxMDU0NTAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOTM3OGE1MTM0NTgwYjliMjIxNjZmOGM4NjU5NGE0ZmQ4MTgzY2ZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnAn8NKaUQUnSi5RRwY/pFBzShFi
avBIghSRNGdxGEwPrY4LYpujXJEOaQIHPuy1ZbZd2QrpMx8kAZqfKZW9PKf/jGlC
BpjMa1bZit4W/YVr3f2JFOE5JgPLHPF6mXOaC2CcpLUFaaeNSbZ0PlgyULZpWw3v
dJ2uIq2BY/xuiP+oZzPAHRt96GDFRGSgGH4TwPBxvIDpvICyiwBTF6l0nd/Pm7cD
Ud4lPK172dwVg6K+aabs81w55BXhI2kTaYXHPHoD5udZbMd+hA5Y6d0TDNaYhqFa
af4J2gJk1w0/G5CIiSo+lE4uOJx5thyPX4hsLbR5/lNeOPP2d2b+xJcpDQIDAQAB
o4ICpjCCAqIwHQYDVR0OBBYEFMk3ilE0WAubIhZvjIZZSk/YGDz7MB8GA1UdIwQY
MBaAFDScu9XCz0GVzG7H8h9gdYGgIk2qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkp5NzFjTFBRWlhNYnNmeUgyQjFnYUFpVGFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUt
ZGMwNmRkODA1OTYwLzEveVRlS1VUUllDNXNpRm0tTWhsbEtUOWdZUFBzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUtZGMwNmRkODA1OTYw
LzEvTkp5NzFjTFBRWlhNYnNmeUgyQjFnYUFpVGFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIG7BggrBgEFBQcBBwEB/wSBqzCBqDCBpQQCAAEwgZ4DBAIf
gwgDBAMurfADBAJAK3ADBAJAK3wDBANNJHgDBAJRoQADBAFb6QADBANb9rAwDAME
Al14DAMEA114EAMEAl14eAMEAm3PiAMEA7BgMAMEArBgWAMEA7BmeAMEA7Bn8AME
A7Bu2AMEArBvoAMEArBwUAMEA7BxuAMEArB06AMEArKfkAMEA7LUuAMEArk3BAME
Ark3jAMEAsEkzDANBgkqhkiG9w0BAQsFAAOCAQEAl68JJo+99wR+pKSEmHXMALCr
zdAN88w92W/L/k0xj8nDikX9uBpXQkXI/WfByc094oMxmb0PO3uQNSOdmOWrPXNa
hbZv7ije2YMGoXh13wbvBkgqcSXkioKsvJElr3OlzsxIzgnFXqj79WS+yQLCOXol
1fIT7WrF0RsU2JFtLCms/rKxDMAU666xRBGZBdaSfJqCuEohaRpeBilE/y7rnCxy
W8+AzoUDO7Ke4k+y8CopA3Pei61rkH5XEEuRff79YjX7kURxIA9bzzDsSite8Mko
yd41hjv/jk6TPk70yRFntCF4aHjK/FJZ4qxw72XHGXhz9jB4jhCYHhy9x1RfPg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:42 2023 by rpki-client on console-ams.rpki-client.org