Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/xBZFfTNBKl1H-cDOQ3tBp7YDU_g.roa
File: xBZFfTNBKl1H-cDOQ3tBp7YDU_g.roa (raw, json)
Hash identifier: LLrQH+ujrAlnwq5h64xakcKVPXriM9hka20VkNj0+xg=
Subject key identifier: C4:16:45:7D:33:41:2A:5D:47:F9:C0:CE:43:7B:41:A7:B6:03:53:F8
Certificate issuer: /CN=8db34774b01979284fd9e754fea68fa3c61783d0
Certificate serial: 018962D67D9CDC9EB6617C079083BC1363D4
Authority key identifier: 8D:B3:47:74:B0:19:79:28:4F:D9:E7:54:FE:A6:8F:A3:C6:17:83:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/xBZFfTNBKl1H-cDOQ3tBp7YDU_g.roa
Signing time: Mon 17 Jul 2023 07:52:51 +0000
ROA not before: Mon 17 Jul 2023 07:52:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202505
IP address blocks: 89.43.78.0/24 maxlen: 24
86.104.14.0/24 maxlen: 24
193.31.118.0/24 maxlen: 24
193.31.117.0/24 maxlen: 24
193.31.119.0/24 maxlen: 24
185.81.152.0/24 maxlen: 24
185.81.153.0/24 maxlen: 24
213.226.118.0/24 maxlen: 24
213.226.117.0/24 maxlen: 24
185.81.155.0/24 maxlen: 24
185.81.154.0/24 maxlen: 24
176.98.42.0/24 maxlen: 24
176.98.43.0/24 maxlen: 24
2a06:f7c5::/32 maxlen: 32
2a05:88c5::/32 maxlen: 32
2a10:7f46::/32 maxlen: 32
2a10:7f45::/32 maxlen: 32
2a10:3302::/32 maxlen: 32
2a05:88c4::/32 maxlen: 32
2a06:f7c4::/32 maxlen: 32
2a10:3301::/32 maxlen: 32
2a10:7f44::/32 maxlen: 32
2a10:7f47::/32 maxlen: 32
2a06:f7c7::/32 maxlen: 32
2a05:88c7::/32 maxlen: 32
2a10:3303::/32 maxlen: 32
2a10:3300::/32 maxlen: 32
2a11:d102::/32 maxlen: 32
2a11:d101::/32 maxlen: 32
2a10:3304::/32 maxlen: 32
2a10:3307::/32 maxlen: 32
2a10:7f40::/32 maxlen: 32
2a06:f7c3::/32 maxlen: 32
2a05:88c6::/32 maxlen: 32
2a10:7fc5::/32 maxlen: 32
2a10:7f43::/32 maxlen: 32
2a06:f7c0::/32 maxlen: 32
2a05:88c0::/32 maxlen: 32
2a05:88c3::/32 maxlen: 32
2a06:f7c6::/32 maxlen: 32
2a11:d105::/32 maxlen: 32
2a10:7fc2::/32 maxlen: 32
2a11:d104::/32 maxlen: 32
2a10:7fc1::/32 maxlen: 32
2a11:d107::/32 maxlen: 32
2a10:7fc4::/32 maxlen: 32
2a10:7fc0::/32 maxlen: 32
2a10:7fc3::/32 maxlen: 32
2a10:3306::/32 maxlen: 32
2a05:88c1::/32 maxlen: 32
2a10:3305::/32 maxlen: 32
2a06:f7c1::/32 maxlen: 32
2a10:7f42::/32 maxlen: 32
2a10:7fc6::/32 maxlen: 32
2a10:7f41::/32 maxlen: 32
2a10:7fc7::/32 maxlen: 32
2a06:f7c2::/32 maxlen: 32
2a05:88c2::/32 maxlen: 32
2a11:d106::/32 maxlen: 32
2a11:d100::/32 maxlen: 32
2a11:d103::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:62:d6:7d:9c:dc:9e:b6:61:7c:07:90:83:bc:13:63:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8db34774b01979284fd9e754fea68fa3c61783d0
Validity
Not Before: Jul 17 07:52:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c416457d33412a5d47f9c0ce437b41a7b60353f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:1e:ea:f3:03:7c:5d:ba:97:e4:54:b5:e4:7b:
69:e4:8d:a8:c8:67:4e:09:02:aa:37:66:31:9c:3f:
27:29:16:71:96:e5:e7:96:59:4d:86:e6:b6:30:51:
e9:9f:83:d6:19:44:33:5b:8f:f8:24:70:89:f7:83:
00:bf:64:05:a7:84:37:68:68:7d:a7:9a:4c:8e:35:
3b:2e:59:20:58:47:91:38:82:28:4a:eb:d8:20:fd:
5d:8c:21:42:14:6b:e3:47:9b:87:07:57:94:da:cf:
55:67:5f:b4:de:2b:1d:e6:ec:52:ff:00:cd:85:20:
0c:34:16:61:44:68:91:d8:67:77:30:83:fb:ee:86:
42:3d:52:0e:cc:27:96:18:13:cd:90:ca:16:82:51:
4f:b8:9a:3e:4e:9c:65:30:d4:ce:9c:03:4a:10:de:
e3:b6:ae:2e:2a:19:ed:5e:0f:7c:69:f2:49:a9:cf:
ab:ca:54:a2:89:2b:e0:5c:d1:d7:7a:fd:01:6d:49:
69:fa:23:1e:bc:98:89:bd:ab:df:31:84:37:dd:aa:
9b:1e:db:04:4d:24:de:95:1a:b4:1c:41:24:00:c1:
bc:3e:17:c4:91:eb:0d:b6:2e:71:0a:09:65:ba:78:
7d:f8:dd:3f:69:b1:15:47:d3:5d:2b:cc:55:b9:b9:
ac:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:16:45:7D:33:41:2A:5D:47:F9:C0:CE:43:7B:41:A7:B6:03:53:F8
X509v3 Authority Key Identifier:
keyid:8D:B3:47:74:B0:19:79:28:4F:D9:E7:54:FE:A6:8F:A3:C6:17:83:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/xBZFfTNBKl1H-cDOQ3tBp7YDU_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.104.14.0/24
89.43.78.0/24
176.98.42.0/23
185.81.152.0/22
193.31.117.0-193.31.119.255
213.226.117.0-213.226.118.255
IPv6:
2a05:88c0::/29
2a06:f7c0::/29
2a10:3300::/29
2a10:7f40::/29
2a10:7fc0::/29
2a11:d100::/29
Signature Algorithm: sha256WithRSAEncryption
11:60:e0:4e:2c:57:e6:0a:12:11:c0:72:28:6b:36:a7:5a:0f:
25:4d:89:40:cd:7f:60:93:ed:a6:c8:cd:47:68:ff:17:bb:68:
66:c6:a7:e6:5d:13:f4:8e:9e:8f:14:7c:ad:b4:44:54:66:0a:
57:c0:76:99:9b:3f:38:3a:e3:1e:bc:b6:ab:7f:62:58:50:0a:
c1:73:dc:78:6b:90:b7:98:f9:a0:3e:ed:5e:d3:a7:46:41:4e:
68:48:02:2a:05:d3:ec:dd:f0:ca:48:82:20:b0:dc:a8:2c:09:
ac:08:6d:53:2a:1c:02:42:91:60:ed:3c:2c:0b:06:6a:81:ce:
d7:4f:3c:62:59:65:34:34:82:64:c7:ff:19:ed:d5:16:87:a2:
2b:25:eb:7f:87:be:16:10:98:f1:d8:94:8a:fb:e1:32:81:84:
6d:05:9f:0a:c9:32:1a:fd:43:b8:9f:4d:6a:26:89:69:32:68:
ee:e8:56:c7:0a:23:ae:97:00:e2:ab:d2:b7:58:74:45:30:5e:
0e:c0:05:fd:d1:3a:79:07:ee:12:a7:82:96:4c:0c:6f:27:5e:
49:06:7d:76:4a:25:c3:cf:40:e9:81:0c:95:a2:05:83:73:b3:
2a:02:8b:ea:2c:e5:4c:92:e4:5c:b2:41:66:e0:4a:75:49:63:
79:dd:17:8f
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgISAYli1n2c3J62YXwHkIO8E2PUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkYjM0Nzc0YjAxOTc5Mjg0ZmQ5ZTc1NGZlYTY4ZmEzYzYx
NzgzZDAwHhcNMjMwNzE3MDc1MjUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNDE2NDU3ZDMzNDEyYTVkNDdmOWMwY2U0MzdiNDFhN2I2MDM1M2Y4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgh7q8wN8XbqX5FS15Htp5I2oyGdO
CQKqN2YxnD8nKRZxluXnlllNhua2MFHpn4PWGUQzW4/4JHCJ94MAv2QFp4Q3aGh9
p5pMjjU7LlkgWEeROIIoSuvYIP1djCFCFGvjR5uHB1eU2s9VZ1+03isd5uxS/wDN
hSAMNBZhRGiR2Gd3MIP77oZCPVIOzCeWGBPNkMoWglFPuJo+TpxlMNTOnANKEN7j
tq4uKhntXg98afJJqc+rylSiiSvgXNHXev0BbUlp+iMevJiJvavfMYQ33aqbHtsE
TSTelRq0HEEkAMG8PhfEkesNti5xCgllunh9+N0/abEVR9NdK8xVubmsWwIDAQAB
o4ICaTCCAmUwHQYDVR0OBBYEFMQWRX0zQSpdR/nAzkN7Qae2A1P4MB8GA1UdIwQY
MBaAFI2zR3SwGXkoT9nnVP6mj6PGF4PQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamJOSGRMQVplU2hQMmVkVV9xYVBvOFlYZzlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy83MGE4ZjEtZDhlYi00MmI1LWJkZGIt
NjI2NTUyMWY2ZGY3LzEveEJaRmZUTkJLbDFILWNET1EzdEJwN1lEVV9nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy83MGE4ZjEtZDhlYi00MmI1LWJkZGItNjI2NTUyMWY2ZGY3
LzEvamJOSGRMQVplU2hQMmVkVV9xYVBvOFlYZzlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMH8GCCsGAQUFBwEHAQH/BHAwbjA6BAIAATA0AwQAVmgOAwQA
WStOAwQBsGIqAwQCuVGYMAwDBADBH3UDBAPBH3AwDAMEANXidQMEANXidjAwBAIA
AjAqAwUDKgWIwAMFAyoG98ADBQMqEDMAAwUDKhB/QAMFAyoQf8ADBQMqEdEAMA0G
CSqGSIb3DQEBCwUAA4IBAQARYOBOLFfmChIRwHIoazanWg8lTYlAzX9gk+2myM1H
aP8Xu2hmxqfmXRP0jp6PFHyttERUZgpXwHaZmz84OuMevLarf2JYUArBc9x4a5C3
mPmgPu1e06dGQU5oSAIqBdPs3fDKSIIgsNyoLAmsCG1TKhwCQpFg7TwsCwZqgc7X
TzxiWWU0NIJkx/8Z7dUWh6IrJet/h74WEJjx2JSK++EygYRtBZ8KyTIa/UO4n01q
JolpMmju6FbHCiOulwDiq9K3WHRFMF4OwAX90Tp5B+4Sp4KWTAxvJ15JBn12SiXD
z0DpgQyVogWDc7MqAovqLOVMkuRcskFm4Ep1SWN53ReP
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:38 2023 by rpki-client on console-fra.rpki-client.org