Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/umGsV91C4aPkpOnidbmj1xBIi8A.roa
File: umGsV91C4aPkpOnidbmj1xBIi8A.roa (raw, json)
Hash identifier: KzmS+6LpDKgsRArswiKNdKXQMDsA8e83xB2E5b1Wlzg=
Subject key identifier: BA:61:AC:57:DD:42:E1:A3:E4:A4:E9:E2:75:B9:A3:D7:10:48:8B:C0
Certificate issuer: /CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Certificate serial: 01857067231D1FA606CC8DE183F672D6DFAB
Authority key identifier: 89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/umGsV91C4aPkpOnidbmj1xBIi8A.roa
Signing time: Mon 02 Jan 2023 02:54:45 +0000
ROA not before: Mon 02 Jan 2023 02:54:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47645
IP address blocks: 94.137.64.0/21 maxlen: 21
94.137.80.0/22 maxlen: 22
94.137.84.0/22 maxlen: 22
94.137.88.0/24 maxlen: 24
2a05:c440::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:67:23:1d:1f:a6:06:cc:8d:e1:83:f6:72:d6:df:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Validity
Not Before: Jan 2 02:54:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ba61ac57dd42e1a3e4a4e9e275b9a3d710488bc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:76:ae:85:e7:3e:30:ac:0e:fd:e0:88:0c:a1:
4c:f3:12:84:d1:16:65:25:26:25:af:db:20:7a:c3:
bf:68:fb:a7:e6:78:af:c2:23:f1:82:2b:e2:3c:d3:
b1:15:3b:7f:6d:0b:18:d6:bc:97:63:b7:ef:a8:fd:
fd:4c:f5:65:5a:b6:d9:cd:07:b7:b4:3d:dd:06:0c:
5f:23:11:a7:f3:28:8d:41:a5:2a:ad:4d:fd:be:65:
c4:62:64:fc:d4:17:c6:9d:52:c0:c9:39:1f:5f:a7:
c8:a8:5c:ce:65:94:47:a8:73:78:8a:b3:0d:d2:8e:
be:49:31:82:bd:a6:fd:fb:97:5e:64:98:45:0a:ac:
29:33:ef:20:57:78:6d:ba:0e:ec:8f:48:69:82:e1:
08:1e:1f:9d:e8:0b:74:1f:3d:39:38:56:c7:21:c4:
0e:0a:96:cf:f6:0d:ed:ac:7f:94:1b:39:01:ad:af:
23:ba:54:cb:de:87:b4:cb:ee:db:02:78:8c:36:b4:
b1:50:d0:dd:3c:c1:d6:d5:54:a9:7a:32:67:8c:21:
3e:d5:1e:37:50:68:19:12:59:03:9b:97:63:c1:c0:
26:a7:cd:3a:63:e2:7a:33:6d:78:83:05:32:71:22:
52:18:59:1e:ec:9e:49:39:c2:ea:95:4d:2b:3c:55:
3a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:61:AC:57:DD:42:E1:A3:E4:A4:E9:E2:75:B9:A3:D7:10:48:8B:C0
X509v3 Authority Key Identifier:
keyid:89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/umGsV91C4aPkpOnidbmj1xBIi8A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.137.64.0/21
94.137.80.0-94.137.88.255
IPv6:
2a05:c440::/48
Signature Algorithm: sha256WithRSAEncryption
42:16:32:bc:a1:59:5e:12:15:75:bb:ca:67:9a:3b:ad:42:fc:
b1:38:51:82:e5:87:41:37:e5:47:82:26:33:0b:50:61:e5:37:
54:d5:3c:c2:54:f1:1e:23:15:05:b7:5b:07:65:52:22:d1:9f:
45:36:00:b1:dd:71:d0:9e:a7:ff:eb:50:9a:32:9d:14:1b:26:
58:d8:0c:ac:e7:9c:01:73:e4:51:2c:7d:68:37:e0:e5:a8:53:
76:49:19:f2:a8:6c:89:86:c8:69:31:4d:a7:bc:44:4e:5a:df:
82:91:58:9c:3a:f1:08:7b:0b:68:55:47:55:0c:8e:a2:f6:a8:
0d:43:ba:e5:88:16:40:55:38:55:e3:a3:78:59:08:ba:3e:09:
33:52:61:d4:9e:e2:23:57:f7:8c:ba:f1:04:e1:42:95:11:59:
fc:69:e9:d9:f9:b2:67:c5:53:64:a8:2f:c9:b7:b1:ba:ca:69:
dc:54:eb:c0:57:2c:20:95:c3:97:a1:65:8a:3f:07:77:c9:b1:
07:90:4e:cc:8e:88:a6:d8:f3:c0:2b:30:17:e2:64:9d:47:6a:
6e:e3:1b:26:db:73:8f:74:c8:59:87:6b:4a:c1:54:e1:1b:40:
4b:20:8c:b6:06:93:61:50:a6:29:c0:4e:81:e7:e1:67:8a:37:
1d:a1:9a:92
-----BEGIN CERTIFICATE-----
MIIFHDCCBASgAwIBAgISAYVwZyMdH6YGzI3hg/Zy1t+rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5YWMwYWNiZmRiN2EyNzRlZjM2YzE2ZjU4NjBhZGEyYTI0
NzA2OTcwHhcNMjMwMTAyMDI1NDQ1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYTYxYWM1N2RkNDJlMWEzZTRhNGU5ZTI3NWI5YTNkNzEwNDg4YmMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAinauhec+MKwO/eCIDKFM8xKE0RZl
JSYlr9sgesO/aPun5nivwiPxgiviPNOxFTt/bQsY1ryXY7fvqP39TPVlWrbZzQe3
tD3dBgxfIxGn8yiNQaUqrU39vmXEYmT81BfGnVLAyTkfX6fIqFzOZZRHqHN4irMN
0o6+STGCvab9+5deZJhFCqwpM+8gV3htug7sj0hpguEIHh+d6At0Hz05OFbHIcQO
CpbP9g3trH+UGzkBra8julTL3oe0y+7bAniMNrSxUNDdPMHW1VSpejJnjCE+1R43
UGgZElkDm5djwcAmp806Y+J6M214gwUycSJSGFke7J5JOcLqlU0rPFU62QIDAQAB
o4ICKDCCAiQwHQYDVR0OBBYEFLphrFfdQuGj5KTp4nW5o9cQSIvAMB8GA1UdIwQY
MBaAFImsCsv9t6J07zbBb1hgraKiRwaXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWF3S3lfMjNvblR2TnNGdldHQ3RvcUpIQnBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS85M2E3NjgtMjY3Ny00OGQ2LTkxNGMt
ZDRkYmY3MDY2ZmQzLzEvdW1Hc1Y5MUM0YVBrcE9uaWRibWoxeEJJaThBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS85M2E3NjgtMjY3Ny00OGQ2LTkxNGMtZDRkYmY3MDY2ZmQz
LzEvaWF3S3lfMjNvblR2TnNGdldHQ3RvcUpIQnBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD4GCCsGAQUFBwEHAQH/BC8wLTAaBAIAATAUAwQDXolAMAwD
BAReiVADBABeiVgwDwQCAAIwCQMHACoFxEAAADANBgkqhkiG9w0BAQsFAAOCAQEA
QhYyvKFZXhIVdbvKZ5o7rUL8sThRguWHQTflR4ImMwtQYeU3VNU8wlTxHiMVBbdb
B2VSItGfRTYAsd1x0J6n/+tQmjKdFBsmWNgMrOecAXPkUSx9aDfg5ahTdkkZ8qhs
iYbIaTFNp7xETlrfgpFYnDrxCHsLaFVHVQyOovaoDUO65YgWQFU4VeOjeFkIuj4J
M1Jh1J7iI1f3jLrxBOFClRFZ/Gnp2fmyZ8VTZKgvybexuspp3FTrwFcsIJXDl6Fl
ij8Hd8mxB5BOzI6IptjzwCswF+JknUdqbuMbJttzj3TIWYdrSsFU4RtASyCMtgaT
YVCmKcBOgefhZ4o3HaGakg==
-----END CERTIFICATE-----
Generated at Tue Jan 2 01:49:33 2024 by rpki-client on console-fra.rpki-client.org