Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/7wetxrcZr9EYQiH1Yjw7baR31qs.roa
File: 7wetxrcZr9EYQiH1Yjw7baR31qs.roa (raw, json)
Hash identifier: wDCrj4a1jRR2383w80Z7QLvkmrcsTpmx8MiDo+9TKGk=
Subject key identifier: EF:07:AD:C6:B7:19:AF:D1:18:42:21:F5:62:3C:3B:6D:A4:77:D6:AB
Certificate issuer: /CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Certificate serial: 018B85B1FC3060FAB7C40DEFE35AE8AA3AF7
Authority key identifier: B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/7wetxrcZr9EYQiH1Yjw7baR31qs.roa
Signing time: Tue 31 Oct 2023 12:25:15 +0000
ROA not before: Tue 31 Oct 2023 12:25:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199775
IP address blocks: 45.94.32.0/22 maxlen: 24
194.126.152.0/22 maxlen: 24
185.95.108.0/22 maxlen: 24
185.6.152.0/22 maxlen: 24
185.182.52.0/22 maxlen: 24
185.242.218.0/24 maxlen: 24
185.65.164.0/22 maxlen: 24
185.208.240.0/22 maxlen: 22
185.168.132.0/23 maxlen: 24
185.168.135.0/24 maxlen: 24
46.36.192.0/21 maxlen: 24
185.168.134.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:85:b1:fc:30:60:fa:b7:c4:0d:ef:e3:5a:e8:aa:3a:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Validity
Not Before: Oct 31 12:25:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ef07adc6b719afd1184221f5623c3b6da477d6ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ed:45:a6:64:91:21:d5:38:46:6a:ed:b3:1b:
26:2b:f3:6c:b8:e0:d5:22:ba:33:0d:95:cb:87:48:
3d:5e:ba:67:fe:8c:63:c9:7c:63:a1:9a:d0:c5:66:
d7:90:78:b3:73:de:1b:af:58:31:0a:2f:fc:7a:28:
b9:b4:35:59:aa:5b:fd:08:82:9e:6e:a5:a1:41:be:
21:30:d7:c0:ae:37:b4:8b:c5:96:4c:66:bd:d9:b6:
2a:de:75:09:2f:d6:7e:48:00:d2:5a:6d:4b:da:9d:
b3:c5:93:44:94:77:9d:c0:db:7a:a3:e8:ff:53:e9:
76:5c:f8:96:a4:ef:6e:33:79:d1:b0:4b:72:79:52:
92:47:68:9f:8e:55:38:3c:2f:38:97:b2:7a:0e:d9:
47:52:c7:98:a0:2b:c7:27:09:18:9f:bb:40:18:3d:
d6:a9:af:f6:b4:ce:97:e6:a3:ce:bf:f1:ef:a2:81:
b2:96:43:9b:72:fa:5a:ee:23:07:0f:4c:34:14:64:
08:30:81:53:52:c3:0a:1f:3a:ec:30:e5:e6:fc:21:
da:5d:3d:07:2f:c8:19:8a:9b:da:e9:82:f5:96:93:
f1:bf:cc:fd:29:50:92:ca:dc:9a:bf:a2:0d:3e:17:
62:35:39:02:b0:05:35:2c:22:1d:b5:91:e8:4e:fc:
68:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:07:AD:C6:B7:19:AF:D1:18:42:21:F5:62:3C:3B:6D:A4:77:D6:AB
X509v3 Authority Key Identifier:
keyid:B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/7wetxrcZr9EYQiH1Yjw7baR31qs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.32.0/22
46.36.192.0/21
185.6.152.0/22
185.65.164.0/22
185.95.108.0/22
185.168.132.0/22
185.182.52.0/22
185.208.240.0/22
185.242.218.0/24
194.126.152.0/22
Signature Algorithm: sha256WithRSAEncryption
1e:c5:76:65:c3:0d:cf:fc:1d:33:e7:ec:db:4b:6e:cc:d3:ee:
5d:8a:23:a7:7d:27:d8:2d:c1:1b:25:76:fc:40:4e:7f:64:f5:
a9:ed:df:00:8c:17:d2:d0:c4:f9:5a:a1:87:0d:36:f7:a5:8b:
fb:5e:fe:c9:04:41:de:c4:6f:38:5a:41:7e:38:f8:8e:6c:e8:
47:58:e3:db:bd:0a:80:cd:1f:39:19:ae:32:bd:7f:3d:a3:1b:
f3:b1:f1:d6:69:6f:29:bc:a7:e1:b7:2c:5f:1f:67:6f:a4:32:
9b:25:ad:24:6e:8d:b6:f5:f3:37:db:1f:68:57:4d:6a:9d:ba:
79:35:f1:65:d4:d4:82:f0:5a:1f:ca:e0:f3:f0:0d:10:b7:ca:
bc:14:50:8b:9b:2b:d0:5e:7c:23:f1:26:d9:4c:cc:22:62:09:
50:2f:ba:b4:55:1f:57:fb:eb:43:60:19:a4:6e:8b:6e:d7:82:
86:09:a0:d9:1e:f0:a0:6f:00:48:0d:33:2b:66:31:fd:37:13:
c9:45:65:bc:97:f2:5f:5a:ef:2f:24:a0:21:33:08:40:c6:2a:
6b:99:d6:21:3f:bc:52:96:c8:ba:b7:c5:2d:60:d1:6a:fc:8f:
db:2e:83:c3:eb:7b:1f:28:5d:32:8c:08:4b:2e:f5:69:4a:cf:
42:4f:8a:92
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgISAYuFsfwwYPq3xA3v41roqjr3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3NWEwNTY2ZDBiNjNhMWY4NjJkODM0NThlNGYyZWE2ZmQ4
ZjdkMjEwHhcNMjMxMDMxMTIyNTE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZjA3YWRjNmI3MTlhZmQxMTg0MjIxZjU2MjNjM2I2ZGE0NzdkNmFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+1FpmSRIdU4RmrtsxsmK/NsuODV
IrozDZXLh0g9Xrpn/oxjyXxjoZrQxWbXkHizc94br1gxCi/8eii5tDVZqlv9CIKe
bqWhQb4hMNfArje0i8WWTGa92bYq3nUJL9Z+SADSWm1L2p2zxZNElHedwNt6o+j/
U+l2XPiWpO9uM3nRsEtyeVKSR2ifjlU4PC84l7J6DtlHUseYoCvHJwkYn7tAGD3W
qa/2tM6X5qPOv/HvooGylkObcvpa7iMHD0w0FGQIMIFTUsMKHzrsMOXm/CHaXT0H
L8gZipva6YL1lpPxv8z9KVCSytyav6INPhdiNTkCsAU1LCIdtZHoTvxoQQIDAQAB
o4ICPzCCAjswHQYDVR0OBBYEFO8Hrca3Ga/RGEIh9WI8O22kd9arMB8GA1UdIwQY
MBaAFLdaBWbQtjofhi2DRY5PLqb9j30hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDFvRlp0QzJPaC1HTFlORmprOHVwdjJQZlNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi8xMDM1NzAtMWNmNi00MmFjLTgxZDQt
ODNmNjAxYzNmYjU5LzEvN3dldHhyY1pyOUVZUWlIMVlqdzdiYVIzMXFzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi8xMDM1NzAtMWNmNi00MmFjLTgxZDQtODNmNjAxYzNmYjU5
LzEvdDFvRlp0QzJPaC1HTFlORmprOHVwdjJQZlNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8AwQCLV4gAwQD
LiTAAwQCuQaYAwQCuUGkAwQCuV9sAwQCuaiEAwQCubY0AwQCudDwAwQAufLaAwQC
wn6YMA0GCSqGSIb3DQEBCwUAA4IBAQAexXZlww3P/B0z5+zbS27M0+5diiOnfSfY
LcEbJXb8QE5/ZPWp7d8AjBfS0MT5WqGHDTb3pYv7Xv7JBEHexG84WkF+OPiObOhH
WOPbvQqAzR85Ga4yvX89oxvzsfHWaW8pvKfhtyxfH2dvpDKbJa0kbo229fM32x9o
V01qnbp5NfFl1NSC8FofyuDz8A0Qt8q8FFCLmyvQXnwj8SbZTMwiYglQL7q0VR9X
++tDYBmkbotu14KGCaDZHvCgbwBIDTMrZjH9NxPJRWW8l/JfWu8vJKAhMwhAxipr
mdYhP7xSlsi6t8UtYNFq/I/bLoPD63sfKF0yjAhLLvVpSs9CT4qS
-----END CERTIFICATE-----
Generated at Mon Jan 1 09:30:15 2024 by rpki-client on console-ams.rpki-client.org