Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/ad4e57-d901-4485-98d2-9196ce446527/1/dYgLsyBeTdNsg-e0JnaJS1wId-c.roa
File: dYgLsyBeTdNsg-e0JnaJS1wId-c.roa (raw, json)
Hash identifier: uKWADSmml1p6ihSGRTWNIJSWRQLBErP719wasi4Z1Zw=
Subject key identifier: 75:88:0B:B3:20:5E:4D:D3:6C:83:E7:B4:26:76:89:4B:5C:08:77:E7
Certificate issuer: /CN=ef3e71b96992da3d91c88dd74ef41f9b95b9485b
Certificate serial: 0187BEC73F751012CFDA71B12B4043829C48
Authority key identifier: EF:3E:71:B9:69:92:DA:3D:91:C8:8D:D7:4E:F4:1F:9B:95:B9:48:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7z5xuWmS2j2RyI3XTvQfm5W5SFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/ad4e57-d901-4485-98d2-9196ce446527/1/dYgLsyBeTdNsg-e0JnaJS1wId-c.roa
Signing time: Wed 26 Apr 2023 18:15:41 +0000
ROA not before: Wed 26 Apr 2023 18:15:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12541
IP address blocks: 213.9.128.0/17 maxlen: 17
213.9.144.0/24 maxlen: 24
213.9.142.0/23 maxlen: 23
213.9.162.0/23 maxlen: 23
212.49.189.0/24 maxlen: 24
213.9.240.0/23 maxlen: 23
213.9.246.0/24 maxlen: 24
213.9.245.0/24 maxlen: 24
213.9.244.0/24 maxlen: 24
213.9.247.0/24 maxlen: 24
213.9.248.0/24 maxlen: 24
213.9.182.0/24 maxlen: 24
213.9.186.0/24 maxlen: 24
213.9.185.0/24 maxlen: 24
213.9.190.0/23 maxlen: 23
213.9.217.0/24 maxlen: 24
212.163.185.0/24 maxlen: 24
212.163.193.0/24 maxlen: 24
212.163.92.0/24 maxlen: 24
212.163.94.0/24 maxlen: 24
212.163.130.0/24 maxlen: 24
212.49.129.0/24 maxlen: 24
212.49.128.0/18 maxlen: 18
212.163.216.0/22 maxlen: 22
212.163.220.0/22 maxlen: 22
212.163.225.0/24 maxlen: 24
212.163.226.0/24 maxlen: 24
212.163.227.0/24 maxlen: 24
212.163.235.0/24 maxlen: 24
185.66.60.0/22 maxlen: 22
185.66.60.0/24 maxlen: 24
185.66.62.0/24 maxlen: 24
185.66.61.0/24 maxlen: 24
212.163.240.0/20 maxlen: 20
212.163.48.0/24 maxlen: 24
212.163.91.0/24 maxlen: 24
212.163.1.0/24 maxlen: 24
212.163.5.0/24 maxlen: 24
212.163.0.0/16 maxlen: 16
212.163.31.0/24 maxlen: 24
92.60.160.0/20 maxlen: 20
92.60.170.0/24 maxlen: 24
92.60.174.0/24 maxlen: 24
92.60.173.0/24 maxlen: 24
2001:ac0:30fd::/48 maxlen: 48
2001:ac0::/32 maxlen: 32
2001:ac0:c0c0::/44 maxlen: 44
2001:ac0:c040::/44 maxlen: 44
2001:ac0:c880::/44 maxlen: 44
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:be:c7:3f:75:10:12:cf:da:71:b1:2b:40:43:82:9c:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef3e71b96992da3d91c88dd74ef41f9b95b9485b
Validity
Not Before: Apr 26 18:15:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=75880bb3205e4dd36c83e7b42676894b5c0877e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:fe:4e:26:de:30:0a:4a:20:a8:9c:9c:99:77:
09:8d:fa:4f:0a:84:94:7a:10:45:c0:03:e8:29:ae:
86:e8:2a:3e:91:05:10:58:50:4e:67:c3:c3:0b:98:
31:a5:b0:9c:9d:8d:5c:e5:60:22:72:15:81:8f:8d:
4a:09:05:be:05:1d:82:5a:15:29:e6:07:1a:dd:55:
75:87:99:32:c3:02:14:6d:0f:e0:6d:14:e4:75:51:
3a:7f:2f:9e:c1:58:5d:6b:02:86:66:7a:9c:b8:5f:
07:c5:84:e6:f4:5e:a5:80:dd:39:ba:d6:8f:19:a3:
14:ef:82:f2:9c:14:83:9e:06:26:bd:1f:d9:75:d4:
ac:eb:9f:c3:08:00:95:a9:e3:68:59:39:b7:3d:66:
66:46:7e:28:be:45:c8:6b:a6:9c:b1:c5:43:e5:f9:
92:bf:62:7e:a8:d7:ac:a3:26:dc:8e:6f:d4:c1:39:
0c:89:6d:1f:64:e2:b1:22:8c:ee:19:7e:79:bd:a2:
7e:3d:f1:f0:32:1e:0a:21:62:23:6f:30:08:0e:7a:
f1:a3:ef:88:7d:9d:54:73:cb:cf:90:f0:62:a2:cb:
13:5a:22:1b:4b:c8:b0:8b:79:13:02:c1:56:25:27:
b5:6b:3b:15:72:d2:b1:69:9b:26:60:c0:47:83:d0:
28:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:88:0B:B3:20:5E:4D:D3:6C:83:E7:B4:26:76:89:4B:5C:08:77:E7
X509v3 Authority Key Identifier:
keyid:EF:3E:71:B9:69:92:DA:3D:91:C8:8D:D7:4E:F4:1F:9B:95:B9:48:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7z5xuWmS2j2RyI3XTvQfm5W5SFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/ad4e57-d901-4485-98d2-9196ce446527/1/dYgLsyBeTdNsg-e0JnaJS1wId-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/ad4e57-d901-4485-98d2-9196ce446527/1/7z5xuWmS2j2RyI3XTvQfm5W5SFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.60.160.0/20
185.66.60.0/22
212.49.128.0/18
212.163.0.0/16
213.9.128.0/17
IPv6:
2001:ac0::/32
Signature Algorithm: sha256WithRSAEncryption
5d:ef:c0:ba:de:69:23:91:87:ab:1a:fd:60:34:27:7e:6a:a2:
5e:e9:2d:25:4e:f3:be:1b:ad:24:a7:8d:8a:e2:f7:bf:3b:13:
d3:06:a4:75:9b:9d:11:82:b3:e4:05:fa:7c:a5:b2:6e:55:60:
28:da:3a:85:8f:20:86:fd:44:8e:8a:6e:47:69:9b:03:9b:29:
1a:ac:dd:b2:db:3b:d6:da:38:82:02:e5:dd:0d:27:ba:7d:7c:
c9:45:94:a1:79:a8:6f:3f:79:c5:0a:7f:1b:2e:15:4a:b6:64:
40:9c:9e:1f:8e:21:9a:20:ca:4a:14:f7:6c:ed:98:c5:d0:2c:
f9:ec:76:2b:25:e1:14:9d:03:93:9b:75:dc:82:7f:27:af:8a:
f2:04:bb:6e:26:54:14:0c:11:f5:81:4a:09:db:9d:a5:70:9d:
90:7c:80:93:1d:b0:06:62:0f:98:74:1c:ae:84:55:f6:e5:80:
8f:ed:7a:50:2a:f5:65:8a:0d:9f:46:73:ba:be:cb:e3:d5:1b:
49:06:35:3c:27:a1:59:9f:4f:ad:5a:67:11:7e:5b:a6:7d:c4:
41:ce:65:c4:fe:c2:61:cf:6e:89:60:ef:54:88:85:35:e3:f3:
c4:70:70:7a:1c:30:53:da:0c:9f:2b:36:3b:e6:d7:1e:44:9c:
ce:b9:78:ed
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgISAYe+xz91EBLP2nGxK0BDgpxIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmM2U3MWI5Njk5MmRhM2Q5MWM4OGRkNzRlZjQxZjliOTVi
OTQ4NWIwHhcNMjMwNDI2MTgxNTQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NTg4MGJiMzIwNWU0ZGQzNmM4M2U3YjQyNjc2ODk0YjVjMDg3N2U3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiv5OJt4wCkogqJycmXcJjfpPCoSU
ehBFwAPoKa6G6Co+kQUQWFBOZ8PDC5gxpbCcnY1c5WAichWBj41KCQW+BR2CWhUp
5gca3VV1h5kywwIUbQ/gbRTkdVE6fy+ewVhdawKGZnqcuF8HxYTm9F6lgN05utaP
GaMU74LynBSDngYmvR/ZddSs65/DCACVqeNoWTm3PWZmRn4ovkXIa6acscVD5fmS
v2J+qNesoybcjm/UwTkMiW0fZOKxIozuGX55vaJ+PfHwMh4KIWIjbzAIDnrxo++I
fZ1Uc8vPkPBiossTWiIbS8iwi3kTAsFWJSe1azsVctKxaZsmYMBHg9AotQIDAQAB
o4ICLzCCAiswHQYDVR0OBBYEFHWIC7MgXk3TbIPntCZ2iUtcCHfnMB8GA1UdIwQY
MBaAFO8+cblpkto9kciN1070H5uVuUhbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3o1eHVXbVMyajJSeUkzWFR2UWZtNVc1U0ZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9hZDRlNTctZDkwMS00NDg1LTk4ZDIt
OTE5NmNlNDQ2NTI3LzEvZFlnTHN5QmVUZE5zZy1lMEpuYUpTMXdJZC1jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS9hZDRlNTctZDkwMS00NDg1LTk4ZDItOTE5NmNlNDQ2NTI3
LzEvN3o1eHVXbVMyajJSeUkzWFR2UWZtNVc1U0ZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAjBAIAATAdAwQEXDygAwQC
uUI8AwQG1DGAAwMA1KMDBAfVCYAwDQQCAAIwBwMFACABCsAwDQYJKoZIhvcNAQEL
BQADggEBAF3vwLreaSORh6sa/WA0J35qol7pLSVO874brSSnjYri9787E9MGpHWb
nRGCs+QF+nylsm5VYCjaOoWPIIb9RI6KbkdpmwObKRqs3bLbO9baOIIC5d0NJ7p9
fMlFlKF5qG8/ecUKfxsuFUq2ZECcnh+OIZogykoU92ztmMXQLPnsdisl4RSdA5Ob
ddyCfyevivIEu24mVBQMEfWBSgnbnaVwnZB8gJMdsAZiD5h0HK6EVfblgI/telAq
9WWKDZ9Gc7q+y+PVG0kGNTwnoVmfT61aZxF+W6Z9xEHOZcT+wmHPbolg71SIhTXj
88RwcHocMFPaDJ8rNjvm1x5EnM65eO0=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:48 2023 by rpki-client on console-fra.rpki-client.org