Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/3rqkgeR6XHT1el9lXJly2qlCj98.roa
File: 3rqkgeR6XHT1el9lXJly2qlCj98.roa (raw, json)
Hash identifier: 83huBRoTnAWSBuF5hqy3BYzXdD8MQqQ7ANkh/fNhI4g=
Subject key identifier: DE:BA:A4:81:E4:7A:5C:74:F5:7A:5F:65:5C:99:72:DA:A9:42:8F:DF
Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial: 018571F0FCB7607DEB2EA978FB9A2230AB27
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/3rqkgeR6XHT1el9lXJly2qlCj98.roa
Signing time: Mon 02 Jan 2023 10:04:56 +0000
ROA not before: Mon 02 Jan 2023 10:04:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199482
IP address blocks: 176.227.155.0/24 maxlen: 24
178.156.122.0/24 maxlen: 24
178.156.126.0/24 maxlen: 24
178.156.34.0/24 maxlen: 24
84.236.157.0/24 maxlen: 24
84.236.158.0/24 maxlen: 24
37.72.12.0/24 maxlen: 24
37.72.16.0/24 maxlen: 24
84.232.39.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:f0:fc:b7:60:7d:eb:2e:a9:78:fb:9a:22:30:ab:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Validity
Not Before: Jan 2 10:04:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=debaa481e47a5c74f57a5f655c9972daa9428fdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d5:63:a1:c4:ee:94:0b:d0:c0:f2:e2:1d:1d:
8e:d5:4b:48:24:a9:93:39:83:23:8b:85:8a:ad:f5:
15:5a:83:ea:40:04:de:47:f3:a0:72:68:d3:eb:53:
99:4c:2f:b3:81:a2:f6:94:08:27:c9:1d:84:c6:f6:
0a:05:11:77:80:70:22:60:ca:7e:1b:c5:11:a7:95:
ed:18:84:a5:5e:4b:ac:81:a7:70:8b:32:12:cf:27:
f4:fe:31:3b:c5:84:9f:63:4b:66:7b:49:fc:cd:39:
28:fe:0c:82:45:28:20:9c:72:dd:74:f0:b3:72:b6:
6f:a3:ed:98:40:2e:9f:90:1e:99:de:df:f7:84:e0:
31:44:66:45:e1:c3:49:43:a3:1f:47:e9:88:63:a6:
cb:30:27:c9:a4:3a:29:08:b9:ea:23:5c:64:a9:69:
7e:23:4d:fa:21:05:49:a5:1d:92:17:1e:14:d3:27:
4f:6a:c0:b4:7d:3b:6a:5b:71:e1:88:06:ca:6b:2c:
a6:31:b6:da:af:b1:f0:cb:cb:0b:51:60:84:40:27:
d5:85:30:98:a2:80:db:40:89:c2:35:76:c8:5c:22:
60:f8:6f:8d:12:0d:7a:36:0d:32:29:6f:97:75:a3:
86:f6:a2:9a:cf:a9:94:9f:e8:cc:4f:15:2c:7e:42:
35:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:BA:A4:81:E4:7A:5C:74:F5:7A:5F:65:5C:99:72:DA:A9:42:8F:DF
X509v3 Authority Key Identifier:
keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/3rqkgeR6XHT1el9lXJly2qlCj98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.72.12.0/24
37.72.16.0/24
84.232.39.0/24
84.236.157.0-84.236.158.255
176.227.155.0/24
178.156.34.0/24
178.156.122.0/24
178.156.126.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:7c:a7:3c:10:1b:19:45:cb:b3:38:c0:2f:a7:b7:ce:5e:08:
90:a5:1b:1a:2c:4f:4f:48:8c:a0:6b:1f:32:26:5c:8e:81:3b:
1f:f7:92:ac:71:8e:37:df:2a:93:e4:28:af:dc:7b:5b:f3:a9:
7d:3d:fa:c6:9e:27:e9:e0:f3:12:dd:a1:b5:16:4a:25:71:15:
40:79:29:38:7b:75:4c:fc:b4:f6:ff:87:9f:28:ab:0b:aa:e6:
5b:d1:b0:37:79:70:40:80:66:22:53:51:e2:4e:c9:ad:4e:f9:
49:18:22:14:1b:23:60:24:e5:b3:27:77:eb:46:74:16:71:2a:
bd:9b:11:59:f6:cd:a4:cf:9e:8c:9f:69:41:3e:95:76:14:33:
a9:5f:77:2a:c4:3c:b4:69:7e:6b:89:20:91:92:b0:5c:ff:dd:
a4:22:1d:5e:0c:d9:58:f0:e6:e4:3b:87:c7:c8:aa:ec:04:2b:
f3:07:e5:2f:0c:82:8a:04:9e:2b:31:c4:06:da:cc:c4:d4:70:
c4:6b:bd:ba:17:a2:55:36:f0:fe:4a:dd:a9:cd:6d:e1:8f:6b:
5d:2c:2f:ea:e8:61:8d:86:1a:ef:ec:c4:7c:1f:70:d3:d9:04:
88:49:c5:18:73:00:a5:0f:91:07:f1:23:c1:f1:42:12:28:43:
91:99:b3:7e
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgISAYVx8Py3YH3rLql4+5oiMKsnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhYWYxN2IwMDE1ZGJiN2NkOTkyZjI2Y2RmZjAxYzRlMjYy
MGI3M2UwHhcNMjMwMTAyMTAwNDU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZWJhYTQ4MWU0N2E1Yzc0ZjU3YTVmNjU1Yzk5NzJkYWE5NDI4ZmRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNVjocTulAvQwPLiHR2O1UtIJKmT
OYMji4WKrfUVWoPqQATeR/OgcmjT61OZTC+zgaL2lAgnyR2ExvYKBRF3gHAiYMp+
G8URp5XtGISlXkusgadwizISzyf0/jE7xYSfY0tme0n8zTko/gyCRSggnHLddPCz
crZvo+2YQC6fkB6Z3t/3hOAxRGZF4cNJQ6MfR+mIY6bLMCfJpDopCLnqI1xkqWl+
I036IQVJpR2SFx4U0ydPasC0fTtqW3HhiAbKayymMbbar7Hwy8sLUWCEQCfVhTCY
ooDbQInCNXbIXCJg+G+NEg16Ng0yKW+XdaOG9qKaz6mUn+jMTxUsfkI1aQIDAQAB
o4ICOzCCAjcwHQYDVR0OBBYEFN66pIHkelx09XpfZVyZctqpQo/fMB8GA1UdIwQY
MBaAFNqvF7ABXbt82ZLybN/wHE4mILc+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAt
Y2YwNmQxOTgzYmExLzEvM3Jxa2dlUjZYSFQxZWw5bFhKbHkycWxDajk4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAtY2YwNmQxOTgzYmEx
LzEvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFEGCCsGAQUFBwEHAQH/BEIwQDA+BAIAATA4AwQAJUgMAwQA
JUgQAwQAVOgnMAwDBABU7J0DBABU7J4DBACw45sDBACynCIDBACynHoDBACynH4w
DQYJKoZIhvcNAQELBQADggEBALR8pzwQGxlFy7M4wC+nt85eCJClGxosT09IjKBr
HzImXI6BOx/3kqxxjjffKpPkKK/ce1vzqX09+saeJ+ng8xLdobUWSiVxFUB5KTh7
dUz8tPb/h58oqwuq5lvRsDd5cECAZiJTUeJOya1O+UkYIhQbI2Ak5bMnd+tGdBZx
Kr2bEVn2zaTPnoyfaUE+lXYUM6lfdyrEPLRpfmuJIJGSsFz/3aQiHV4M2Vjw5uQ7
h8fIquwEK/MH5S8MgooEnisxxAbazMTUcMRrvboXolU28P5K3anNbeGPa10sL+ro
YY2GGu/sxHwfcNPZBIhJxRhzAKUPkQfxI8HxQhIoQ5GZs34=
-----END CERTIFICATE-----
Generated at Wed Dec 20 11:13:05 2023 by rpki-client on console-fra.rpki-client.org