Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/ud9bNEbAjGC_mGJGQ0wnIyjKuBI.roa
File: ud9bNEbAjGC_mGJGQ0wnIyjKuBI.roa (raw, json)
Hash identifier: b8/0UbjagEcYzlM/v+8rjLAlVpIxlNKZOdwez9lAz3M=
Subject key identifier: B9:DF:5B:34:46:C0:8C:60:BF:98:62:46:43:4C:27:23:28:CA:B8:12
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 01871A9B235CE77891BE16FA54AB17567B06
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/ud9bNEbAjGC_mGJGQ0wnIyjKuBI.roa
Signing time: Sat 25 Mar 2023 21:09:47 +0000
ROA not before: Sat 25 Mar 2023 21:09:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 22773
IP address blocks: 193.142.36.0/22 maxlen: 24
194.180.232.0/23 maxlen: 24
91.132.124.0/23 maxlen: 24
212.87.216.0/24 maxlen: 24
212.87.218.0/23 maxlen: 24
194.180.236.0/23 maxlen: 24
45.133.112.0/22 maxlen: 24
45.147.8.0/22 maxlen: 24
45.136.24.0/22 maxlen: 24
45.147.232.0/22 maxlen: 24
93.177.94.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:1a:9b:23:5c:e7:78:91:be:16:fa:54:ab:17:56:7b:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: Mar 25 21:09:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b9df5b3446c08c60bf986246434c272328cab812
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:80:63:df:66:b9:b8:ae:ae:f7:02:de:c3:ad:
f3:35:3c:02:1d:0b:86:ed:8e:e3:f1:d5:7b:26:1a:
5e:5d:c5:62:c0:21:fa:eb:7e:68:43:5f:3e:ec:6c:
cd:40:99:8c:5c:97:79:31:cf:55:ba:ba:c9:b6:6a:
f7:f9:06:83:b8:fd:76:bb:72:a7:08:0e:42:b3:9c:
63:32:63:ff:bd:75:95:bf:79:42:33:5f:c3:2a:b0:
5f:e9:b8:6d:c8:16:01:cf:74:8e:4d:68:60:9e:c8:
a7:7a:3c:3c:82:eb:bb:d2:12:3c:a5:16:6b:bf:ce:
41:73:12:34:af:ed:b0:91:18:d0:bb:86:89:a8:d9:
e9:2d:6e:0a:05:f5:36:da:90:37:00:df:91:da:20:
d9:ae:07:d4:01:7e:29:cd:17:51:09:9f:c9:31:61:
31:fe:9a:a6:7b:84:f3:bb:68:e6:db:ce:31:85:89:
f1:cd:8e:d9:a9:b0:50:19:6f:3e:c6:e1:b6:b5:00:
3e:c4:99:dd:c3:80:74:c6:dd:6e:1a:89:03:d2:83:
38:c0:a0:c0:bd:6b:dd:e2:3a:78:99:dd:82:a0:59:
4f:d9:ba:ae:50:40:be:90:5c:06:5e:bf:3f:ba:d9:
47:9c:70:2a:dc:59:5d:18:39:e0:e7:86:12:4c:ec:
a7:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:DF:5B:34:46:C0:8C:60:BF:98:62:46:43:4C:27:23:28:CA:B8:12
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/ud9bNEbAjGC_mGJGQ0wnIyjKuBI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.112.0/22
45.136.24.0/22
45.147.8.0/22
45.147.232.0/22
91.132.124.0/23
93.177.94.0/23
193.142.36.0/22
194.180.232.0/23
194.180.236.0/23
212.87.216.0/24
212.87.218.0/23
Signature Algorithm: sha256WithRSAEncryption
25:a7:a8:a1:f4:35:3d:5a:b2:4c:86:d2:b7:44:5c:7c:85:8a:
3c:81:b1:4b:e8:b9:f1:18:7a:09:9e:3b:57:ea:be:36:05:1a:
b8:da:5d:23:b0:b7:ca:db:6d:fd:32:d0:3e:a7:ae:0a:2a:df:
27:03:88:4e:1a:ee:38:72:bc:7b:d0:52:8e:21:8a:49:58:d4:
f8:ea:07:6c:f7:ba:84:89:07:34:e1:bc:35:dc:28:cf:47:c2:
e5:f4:24:3b:6a:74:10:f1:44:66:a8:93:12:2c:d9:7c:b9:b3:
d5:44:5c:40:7c:bd:52:7b:e1:24:81:a2:af:65:9a:ad:08:7c:
6b:c4:6b:3a:ae:69:f4:19:31:5a:24:52:4d:72:ec:08:bd:93:
df:bc:00:e6:63:02:2f:a4:48:38:14:78:86:c6:44:e8:3a:d2:
a9:f4:46:cf:54:ca:e8:e4:a3:3d:7e:38:d5:c8:f1:f5:bd:b2:
ae:20:37:1b:75:98:28:9c:ef:43:64:5a:52:15:b8:7b:57:17:
07:0d:5b:76:1b:d5:d2:e7:75:a7:10:49:da:7f:03:cf:cc:da:
aa:07:8e:bd:f6:1d:d0:3f:2d:37:89:2a:9e:bf:20:b6:4b:31:
3a:81:4c:69:2b:10:ef:00:ca:96:b4:8f:ec:02:43:ed:17:7c:
bd:93:7c:ff
-----BEGIN CERTIFICATE-----
MIIFOTCCBCGgAwIBAgISAYcamyNc53iRvhb6VKsXVnsGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyYzJiODM0ZmJjOTFhZjBlYzZiMWQzNGZkNjQwNTRkMjI2
OWExZmQwHhcNMjMwMzI1MjEwOTQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOWRmNWIzNDQ2YzA4YzYwYmY5ODYyNDY0MzRjMjcyMzI4Y2FiODEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlIBj32a5uK6u9wLew63zNTwCHQuG
7Y7j8dV7JhpeXcViwCH6635oQ18+7GzNQJmMXJd5Mc9VurrJtmr3+QaDuP12u3Kn
CA5Cs5xjMmP/vXWVv3lCM1/DKrBf6bhtyBYBz3SOTWhgnsinejw8guu70hI8pRZr
v85BcxI0r+2wkRjQu4aJqNnpLW4KBfU22pA3AN+R2iDZrgfUAX4pzRdRCZ/JMWEx
/pqme4Tzu2jm284xhYnxzY7ZqbBQGW8+xuG2tQA+xJndw4B0xt1uGokD0oM4wKDA
vWvd4jp4md2CoFlP2bquUEC+kFwGXr8/utlHnHAq3FldGDng54YSTOynOwIDAQAB
o4ICRTCCAkEwHQYDVR0OBBYEFLnfWzRGwIxgv5hiRkNMJyMoyrgSMB8GA1UdIwQY
MBaAFOLCuDT7yRrw7GsdNP1kBU0iaaH9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHNLNE5QdkpHdkRzYXgwMF9XUUZUU0pwb2YwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8zZjI0OWItZTgzNi00MWI0LTlhM2Et
OTk0ODA2ZjA4MWYwLzEvdWQ5Yk5FYkFqR0NfbUdKR1Ewd25JeWpLdUJJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC8zZjI0OWItZTgzNi00MWI0LTlhM2EtOTk0ODA2ZjA4MWYw
LzEvNHNLNE5QdkpHdkRzYXgwMF9XUUZUU0pwb2YwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQCLYVwAwQC
LYgYAwQCLZMIAwQCLZPoAwQBW4R8AwQBXbFeAwQCwY4kAwQBwrToAwQBwrTsAwQA
1FfYAwQB1FfaMA0GCSqGSIb3DQEBCwUAA4IBAQAlp6ih9DU9WrJMhtK3RFx8hYo8
gbFL6LnxGHoJnjtX6r42BRq42l0jsLfK2239MtA+p64KKt8nA4hOGu44crx70FKO
IYpJWNT46gds97qEiQc04bw13CjPR8Ll9CQ7anQQ8URmqJMSLNl8ubPVRFxAfL1S
e+EkgaKvZZqtCHxrxGs6rmn0GTFaJFJNcuwIvZPfvADmYwIvpEg4FHiGxkToOtKp
9EbPVMro5KM9fjjVyPH1vbKuIDcbdZgonO9DZFpSFbh7VxcHDVt2G9XS53WnEEna
fwPPzNqqB4699h3QPy03iSqevyC2SzE6gUxpKxDvAMqWtI/sAkPtF3y9k3z/
-----END CERTIFICATE-----
Generated at Tue Jan 2 04:22:25 2024 by rpki-client on console-fra.rpki-client.org