Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/lImY63kgXlCtC-_oGmvwnKQtDko.roa
File: lImY63kgXlCtC-_oGmvwnKQtDko.roa (raw, json)
Hash identifier: mXTfA6Afj5vjZfgLQw0KXhplTfhNlDaUeFvqWkvXJ1Y=
Subject key identifier: 94:89:98:EB:79:20:5E:50:AD:0B:EF:E8:1A:6B:F0:9C:A4:2D:0E:4A
Certificate issuer: /CN=64fa66fb84a781a0584fd0d1c2df39bda4760519
Certificate serial: 01870D06F9D5C5F2A32DF02654E43363D53E
Authority key identifier: 64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/lImY63kgXlCtC-_oGmvwnKQtDko.roa
Signing time: Thu 23 Mar 2023 05:52:53 +0000
ROA not before: Thu 23 Mar 2023 05:52:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 393427
IP address blocks: 93.113.148.0/24 maxlen: 24
93.113.149.0/24 maxlen: 24
93.113.150.0/24 maxlen: 24
93.113.151.0/24 maxlen: 24
37.156.174.0/24 maxlen: 24
188.208.16.0/24 maxlen: 24
89.43.35.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:0d:06:f9:d5:c5:f2:a3:2d:f0:26:54:e4:33:63:d5:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64fa66fb84a781a0584fd0d1c2df39bda4760519
Validity
Not Before: Mar 23 05:52:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=948998eb79205e50ad0befe81a6bf09ca42d0e4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:9a:b5:fa:f2:20:88:3e:1c:52:a2:02:fc:61:
51:08:d3:fc:4e:d3:75:ef:1b:68:d5:ea:10:cd:35:
69:2f:c5:7c:82:8d:10:00:83:f3:cf:d1:0b:e6:0e:
34:0a:87:c5:c1:b9:d4:bd:49:e7:b0:cf:3c:a6:84:
53:b3:27:4b:6e:36:11:8c:da:15:50:47:f9:04:d9:
c2:6f:8d:c9:f3:0e:ac:e8:30:a6:d1:94:5c:7c:7d:
e1:b4:a1:a3:c8:ec:ae:03:62:50:bd:08:23:dd:af:
a4:f9:05:2e:41:a9:53:1c:c9:74:5a:81:e5:fd:40:
f6:27:49:17:94:f7:fe:6c:9c:a3:22:58:cb:60:a0:
88:1e:2d:1e:89:66:a9:75:f9:1f:ce:11:61:12:4b:
96:55:77:17:8c:28:3a:b6:be:9e:2f:57:93:96:bf:
4b:a9:3e:bc:e8:d9:7a:d7:32:ea:a0:37:26:1d:59:
3c:2d:ad:a5:9b:d0:8a:19:58:c0:c0:f1:65:f7:02:
a2:23:a1:5d:21:5c:28:2f:d6:92:7e:85:21:d3:55:
4f:55:2d:80:29:96:bd:5a:27:0f:86:72:59:af:de:
55:0c:4a:f4:27:89:9e:b2:f0:2b:54:50:0e:f2:f4:
99:51:2f:95:a5:5c:b9:3b:1d:15:3c:28:0a:3d:23:
7f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:89:98:EB:79:20:5E:50:AD:0B:EF:E8:1A:6B:F0:9C:A4:2D:0E:4A
X509v3 Authority Key Identifier:
keyid:64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/lImY63kgXlCtC-_oGmvwnKQtDko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.156.174.0/24
89.43.35.0/24
93.113.148.0/22
188.208.16.0/24
Signature Algorithm: sha256WithRSAEncryption
63:73:cd:87:9c:66:0a:50:e6:46:11:fd:8f:1f:fb:f9:c1:85:
1d:18:99:b6:cc:35:62:d6:50:08:30:37:77:67:7e:80:d4:c2:
43:10:a9:58:3a:25:d3:dc:7e:a4:6f:fa:e4:fd:48:84:fa:c4:
9c:1a:be:44:42:19:8e:5f:85:df:2a:ac:0c:ad:83:af:fb:ad:
3d:85:44:82:23:57:80:a6:0d:26:a0:c8:1b:a7:d8:4c:9d:67:
09:d3:b2:74:83:90:06:57:d0:67:1d:54:c9:f4:09:19:94:b2:
6f:91:3c:f7:36:db:45:b8:c7:7d:62:f6:86:4f:a9:d4:e2:de:
0c:de:8d:f7:85:61:40:a4:14:8a:65:e7:84:17:e3:35:d2:3b:
3c:1b:2d:e9:25:f2:a0:59:c7:08:2f:81:8b:68:32:c3:cf:50:
b6:70:17:36:e6:f2:62:6e:f2:09:bc:1a:f7:a1:ba:4a:22:82:
d9:86:c0:c8:ad:80:dc:9f:b8:3e:67:78:11:3e:41:62:12:0b:
0b:ba:3b:0e:45:ee:a7:6d:cd:9e:58:84:56:af:e2:40:d9:5a:
9d:00:bb:5c:0b:df:39:af:03:29:21:09:78:74:ff:1c:a8:4f:
db:fe:ea:e8:d0:e9:5d:f4:5f:f0:bd:a8:40:44:ef:8e:2e:38:
28:23:7b:77
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYcNBvnVxfKjLfAmVOQzY9U+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0ZmE2NmZiODRhNzgxYTA1ODRmZDBkMWMyZGYzOWJkYTQ3
NjA1MTkwHhcNMjMwMzIzMDU1MjUzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NDg5OThlYjc5MjA1ZTUwYWQwYmVmZTgxYTZiZjA5Y2E0MmQwZTRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZq1+vIgiD4cUqIC/GFRCNP8TtN1
7xto1eoQzTVpL8V8go0QAIPzz9EL5g40CofFwbnUvUnnsM88poRTsydLbjYRjNoV
UEf5BNnCb43J8w6s6DCm0ZRcfH3htKGjyOyuA2JQvQgj3a+k+QUuQalTHMl0WoHl
/UD2J0kXlPf+bJyjIljLYKCIHi0eiWapdfkfzhFhEkuWVXcXjCg6tr6eL1eTlr9L
qT686Nl61zLqoDcmHVk8La2lm9CKGVjAwPFl9wKiI6FdIVwoL9aSfoUh01VPVS2A
KZa9WicPhnJZr95VDEr0J4mesvArVFAO8vSZUS+VpVy5Ox0VPCgKPSN/SQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFJSJmOt5IF5QrQvv6Bpr8JykLQ5KMB8GA1UdIwQY
MBaAFGT6ZvuEp4GgWE/Q0cLfOb2kdgUZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlBwbS00U25nYUJZVDlEUnd0ODV2YVIyQlJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi82NjNiNGQtYjgwZS00OTQ2LTg0YzQt
NzQwOGViOGJjNTg2LzEvbEltWTYza2dYbEN0Qy1fb0dtdnduS1F0RGtvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi82NjNiNGQtYjgwZS00OTQ2LTg0YzQtNzQwOGViOGJjNTg2
LzEvWlBwbS00U25nYUJZVDlEUnd0ODV2YVIyQlJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAJZyuAwQA
WSsjAwQCXXGUAwQAvNAQMA0GCSqGSIb3DQEBCwUAA4IBAQBjc82HnGYKUOZGEf2P
H/v5wYUdGJm2zDVi1lAIMDd3Z36A1MJDEKlYOiXT3H6kb/rk/UiE+sScGr5EQhmO
X4XfKqwMrYOv+609hUSCI1eApg0moMgbp9hMnWcJ07J0g5AGV9BnHVTJ9AkZlLJv
kTz3NttFuMd9YvaGT6nU4t4M3o33hWFApBSKZeeEF+M10js8Gy3pJfKgWccIL4GL
aDLDz1C2cBc25vJibvIJvBr3obpKIoLZhsDIrYDcn7g+Z3gRPkFiEgsLujsORe6n
bc2eWIRWr+JA2VqdALtcC985rwMpIQl4dP8cqE/b/uro0Old9F/wvahARO+OLjgo
I3t3
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:02 2023 by rpki-client on console-fra.rpki-client.org