Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/fe7dfc-1264-4c94-9bcc-96333489e855/1/EnaS7EH0NYxgDdaswOjYR8UqZAU.roa
File: EnaS7EH0NYxgDdaswOjYR8UqZAU.roa (raw, json)
Hash identifier: mcxR48qRFGr4DwO56SfdRbkfdmfsprDvqjN2oe47LvQ=
Subject key identifier: 12:76:92:EC:41:F4:35:8C:60:0D:D6:AC:C0:E8:D8:47:C5:2A:64:05
Certificate issuer: /CN=1c28b07c157a5dc613c9264daf89e7c860e33e63
Certificate serial: 018871D829FBB9E735422F470FBF5D7999DF
Authority key identifier: 1C:28:B0:7C:15:7A:5D:C6:13:C9:26:4D:AF:89:E7:C8:60:E3:3E:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCiwfBV6XcYTySZNr4nnyGDjPmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/fe7dfc-1264-4c94-9bcc-96333489e855/1/EnaS7EH0NYxgDdaswOjYR8UqZAU.roa
Signing time: Wed 31 May 2023 12:46:11 +0000
ROA not before: Wed 31 May 2023 12:46:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39273
IP address blocks: 78.110.79.0/24 maxlen: 24
81.22.30.0/24 maxlen: 24
81.22.31.0/24 maxlen: 24
81.22.28.0/24 maxlen: 24
81.22.29.0/24 maxlen: 24
81.22.27.0/24 maxlen: 24
81.22.25.0/24 maxlen: 24
81.22.26.0/24 maxlen: 24
77.92.165.0/24 maxlen: 24
77.92.166.0/24 maxlen: 24
77.92.163.0/24 maxlen: 24
77.92.164.0/24 maxlen: 24
77.92.161.0/24 maxlen: 24
77.92.162.0/24 maxlen: 24
77.92.160.0/19 maxlen: 19
77.92.160.0/24 maxlen: 24
77.92.172.0/24 maxlen: 24
77.92.170.0/24 maxlen: 24
77.92.171.0/24 maxlen: 24
77.92.168.0/24 maxlen: 24
77.92.169.0/24 maxlen: 24
77.92.167.0/24 maxlen: 24
77.92.173.0/24 maxlen: 24
77.92.179.0/24 maxlen: 24
77.92.177.0/24 maxlen: 24
77.92.178.0/24 maxlen: 24
77.92.175.0/24 maxlen: 24
77.92.176.0/24 maxlen: 24
77.92.174.0/24 maxlen: 24
77.92.186.0/24 maxlen: 24
77.92.184.0/24 maxlen: 24
77.92.185.0/24 maxlen: 24
77.92.182.0/24 maxlen: 24
77.92.183.0/24 maxlen: 24
77.92.181.0/24 maxlen: 24
77.92.180.0/24 maxlen: 24
77.92.191.0/24 maxlen: 24
77.92.189.0/24 maxlen: 24
77.92.190.0/24 maxlen: 24
77.92.188.0/24 maxlen: 24
77.92.187.0/24 maxlen: 24
81.22.16.0/20 maxlen: 20
81.22.16.0/24 maxlen: 24
81.22.17.0/24 maxlen: 24
81.22.23.0/24 maxlen: 24
81.22.24.0/24 maxlen: 24
81.22.21.0/24 maxlen: 24
81.22.22.0/24 maxlen: 24
81.22.20.0/24 maxlen: 24
81.22.18.0/24 maxlen: 24
81.22.19.0/24 maxlen: 24
78.110.64.0/24 maxlen: 24
78.110.64.0/20 maxlen: 20
78.110.70.0/24 maxlen: 24
78.110.71.0/24 maxlen: 24
78.110.68.0/24 maxlen: 24
78.110.69.0/24 maxlen: 24
78.110.67.0/24 maxlen: 24
78.110.65.0/24 maxlen: 24
78.110.66.0/24 maxlen: 24
78.110.74.0/24 maxlen: 24
78.110.77.0/24 maxlen: 24
77.83.91.0/24 maxlen: 24
78.110.78.0/24 maxlen: 24
78.110.75.0/24 maxlen: 24
78.110.72.0/24 maxlen: 24
78.110.73.0/24 maxlen: 24
77.83.89.0/24 maxlen: 24
78.110.76.0/24 maxlen: 24
77.83.90.0/24 maxlen: 24
77.83.88.0/24 maxlen: 24
77.83.88.0/22 maxlen: 22
87.236.50.0/24 maxlen: 24
87.236.48.0/21 maxlen: 21
87.236.51.0/24 maxlen: 24
87.236.48.0/24 maxlen: 24
87.236.49.0/24 maxlen: 24
185.33.178.0/24 maxlen: 24
185.33.179.0/24 maxlen: 24
185.33.177.0/24 maxlen: 24
185.33.176.0/24 maxlen: 24
87.236.54.0/24 maxlen: 24
87.236.52.0/24 maxlen: 24
87.236.53.0/24 maxlen: 24
87.236.55.0/24 maxlen: 24
2a04:8ac0::/29 maxlen: 29
2a00:6600::/29 maxlen: 29
2a00:6600::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:71:d8:29:fb:b9:e7:35:42:2f:47:0f:bf:5d:79:99:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c28b07c157a5dc613c9264daf89e7c860e33e63
Validity
Not Before: May 31 12:46:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=127692ec41f4358c600dd6acc0e8d847c52a6405
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:5d:c7:e2:eb:5f:33:65:c8:29:24:1e:53:db:
dd:26:6c:36:a5:2c:a6:ba:f1:60:00:30:d4:56:62:
25:f6:ef:df:ee:fe:bf:f5:9f:45:1c:1d:07:e7:a4:
0b:43:32:75:d6:01:e5:f1:cc:1e:1c:3a:e3:3e:68:
fd:d0:4a:38:b1:32:72:f9:9f:cc:db:c6:cb:cd:59:
2a:e6:4d:67:e4:4a:1d:97:e3:69:ea:4c:23:d7:3d:
f6:10:3c:47:02:f0:ad:0c:ca:14:58:f2:38:e5:83:
c8:56:5f:ee:5c:af:58:8c:de:f6:4d:47:7c:26:0a:
12:71:70:34:c1:41:a9:ec:8f:ca:b3:4a:7b:28:a2:
62:51:e8:6d:f0:30:d9:82:f1:67:6a:23:17:0e:5a:
53:e2:25:95:3f:52:01:80:25:57:c7:4f:6a:7c:7a:
36:10:71:e6:25:9b:18:b5:38:a2:27:fb:ae:ae:c2:
f6:53:d4:6c:5a:f7:54:be:57:22:d6:e1:15:c6:5b:
ca:ef:99:cf:f3:57:c5:a4:97:ad:7a:a7:1a:3c:3a:
02:1f:a2:2f:90:9e:2f:be:24:5a:7a:49:6d:dd:38:
51:3d:a4:01:49:8d:23:f1:7a:73:65:e9:f6:03:9b:
6b:fb:85:27:87:0e:c9:19:51:59:4c:b0:8e:c9:2e:
fd:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:76:92:EC:41:F4:35:8C:60:0D:D6:AC:C0:E8:D8:47:C5:2A:64:05
X509v3 Authority Key Identifier:
keyid:1C:28:B0:7C:15:7A:5D:C6:13:C9:26:4D:AF:89:E7:C8:60:E3:3E:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCiwfBV6XcYTySZNr4nnyGDjPmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fe7dfc-1264-4c94-9bcc-96333489e855/1/EnaS7EH0NYxgDdaswOjYR8UqZAU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fe7dfc-1264-4c94-9bcc-96333489e855/1/HCiwfBV6XcYTySZNr4nnyGDjPmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.88.0/22
77.92.160.0/19
78.110.64.0/20
81.22.16.0/20
87.236.48.0/21
185.33.176.0/22
IPv6:
2a00:6600::/29
2a04:8ac0::/29
Signature Algorithm: sha256WithRSAEncryption
d9:c8:aa:ec:dc:24:82:49:e2:e4:f6:b8:72:ce:b0:05:94:59:
b9:9a:8a:d3:ac:ae:45:3b:85:53:ae:1b:2b:7a:d4:7c:49:53:
ca:b9:fa:a9:c6:04:b0:a6:5b:68:60:bb:91:9c:93:a9:43:3b:
67:01:28:0b:29:96:84:5e:c4:b7:b5:3a:dc:ac:77:1e:aa:a2:
44:a0:e3:ca:6d:0e:c0:75:f7:e7:43:d3:68:10:0e:cf:68:e7:
98:e1:46:16:ee:03:5b:fa:86:36:d9:01:c5:73:c7:a2:d2:c4:
71:ad:e8:cc:17:ed:99:43:b4:28:07:37:20:43:8d:8b:9d:a9:
b5:44:ac:88:80:ab:e2:a6:84:23:92:6c:9a:60:ad:14:f8:60:
19:3c:e1:7e:7d:9f:93:24:cd:5d:95:9e:64:8c:6d:89:d0:5c:
51:c1:e1:35:04:73:d9:c9:6c:6d:35:88:a9:d5:21:3f:d6:4b:
31:ce:11:21:08:59:aa:12:86:05:56:2c:f8:5e:ef:95:2b:7b:
d8:82:12:6e:64:1f:90:0d:5f:0b:35:39:a8:f4:79:dd:12:65:
ff:fa:b4:9d:18:b9:55:69:6d:89:30:90:6f:a3:c5:6b:5b:d3:
2b:16:30:2f:d4:87:4c:9a:5c:0a:9b:34:32:2b:3a:ac:99:46:
78:6a:c5:ee
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgISAYhx2Cn7uec1Qi9HD79deZnfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjMjhiMDdjMTU3YTVkYzYxM2M5MjY0ZGFmODllN2M4NjBl
MzNlNjMwHhcNMjMwNTMxMTI0NjExWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMjc2OTJlYzQxZjQzNThjNjAwZGQ2YWNjMGU4ZDg0N2M1MmE2NDA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl13H4utfM2XIKSQeU9vdJmw2pSym
uvFgADDUVmIl9u/f7v6/9Z9FHB0H56QLQzJ11gHl8cweHDrjPmj90Eo4sTJy+Z/M
28bLzVkq5k1n5Eodl+Np6kwj1z32EDxHAvCtDMoUWPI45YPIVl/uXK9YjN72TUd8
JgoScXA0wUGp7I/Ks0p7KKJiUeht8DDZgvFnaiMXDlpT4iWVP1IBgCVXx09qfHo2
EHHmJZsYtTiiJ/uursL2U9RsWvdUvlci1uEVxlvK75nP81fFpJeteqcaPDoCH6Iv
kJ4vviRaeklt3ThRPaQBSY0j8XpzZen2A5tr+4Unhw7JGVFZTLCOyS79wQIDAQAB
o4ICPTCCAjkwHQYDVR0OBBYEFBJ2kuxB9DWMYA3WrMDo2EfFKmQFMB8GA1UdIwQY
MBaAFBwosHwVel3GE8kmTa+J58hg4z5jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSENpd2ZCVjZYY1lUeVNaTnI0bm55R0RqUG1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9mZTdkZmMtMTI2NC00Yzk0LTliY2Mt
OTYzMzM0ODllODU1LzEvRW5hUzdFSDBOWXhnRGRhc3dPallSOFVxWkFVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9mZTdkZmMtMTI2NC00Yzk0LTliY2MtOTYzMzM0ODllODU1
LzEvSENpd2ZCVjZYY1lUeVNaTnI0bm55R0RqUG1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFMGCCsGAQUFBwEHAQH/BEQwQjAqBAIAATAkAwQCTVNYAwQF
TVygAwQETm5AAwQEURYQAwQDV+wwAwQCuSGwMBQEAgACMA4DBQMqAGYAAwUDKgSK
wDANBgkqhkiG9w0BAQsFAAOCAQEA2ciq7Nwkgkni5Pa4cs6wBZRZuZqK06yuRTuF
U64bK3rUfElTyrn6qcYEsKZbaGC7kZyTqUM7ZwEoCymWhF7Et7U63Kx3HqqiRKDj
ym0OwHX350PTaBAOz2jnmOFGFu4DW/qGNtkBxXPHotLEca3ozBftmUO0KAc3IEON
i52ptUSsiICr4qaEI5JsmmCtFPhgGTzhfn2fkyTNXZWeZIxtidBcUcHhNQRz2cls
bTWIqdUhP9ZLMc4RIQhZqhKGBVYs+F7vlSt72IISbmQfkA1fCzU5qPR53RJl//q0
nRi5VWltiTCQb6PFa1vTKxYwL9SHTJpcCps0Mis6rJlGeGrF7g==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:20 2023 by rpki-client on console-fra.rpki-client.org