Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/7CjJVHrWAWzLjxv-Pp-QEJ6UXc4.roa
File: 7CjJVHrWAWzLjxv-Pp-QEJ6UXc4.roa (raw, json)
Hash identifier: vXRsgVVW5KSzRTyaHpg38rq/XdZTxwWuPgLZfQx2Dn8=
Subject key identifier: EC:28:C9:54:7A:D6:01:6C:CB:8F:1B:FE:3E:9F:90:10:9E:94:5D:CE
Certificate issuer: /CN=b05442c4ffe9c1d761e7c569360ead042438f903
Certificate serial: 01856E2FB863966645F4808D7C852D0E4D0B
Authority key identifier: B0:54:42:C4:FF:E9:C1:D7:61:E7:C5:69:36:0E:AD:04:24:38:F9:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sFRCxP_pwddh58VpNg6tBCQ4-QM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/7CjJVHrWAWzLjxv-Pp-QEJ6UXc4.roa
Signing time: Sun 01 Jan 2023 16:34:59 +0000
ROA not before: Sun 01 Jan 2023 16:34:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 33808
IP address blocks: 217.170.188.0/22 maxlen: 22
89.31.0.0/21 maxlen: 21
193.110.68.0/22 maxlen: 22
79.171.88.0/21 maxlen: 21
134.101.125.0/24 maxlen: 24
217.170.176.0/21 maxlen: 21
217.170.184.0/22 maxlen: 22
2a00:17f0::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:2f:b8:63:96:66:45:f4:80:8d:7c:85:2d:0e:4d:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b05442c4ffe9c1d761e7c569360ead042438f903
Validity
Not Before: Jan 1 16:34:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ec28c9547ad6016ccb8f1bfe3e9f90109e945dce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:71:9b:a2:0e:47:d9:15:7c:3b:d5:f1:59:e1:
49:7c:b7:9c:a5:87:98:fa:5a:60:65:48:fe:15:cc:
2e:12:5f:ac:dc:13:4c:9c:69:1c:07:e2:a4:3e:d2:
4e:1b:79:26:71:13:5a:a3:c5:e5:b2:b4:3b:58:3d:
a2:42:2f:c1:36:0c:90:09:9f:ef:8c:ed:43:94:99:
86:39:e5:3c:f5:11:65:44:38:17:74:a0:a6:09:84:
65:cc:ba:a3:ec:0b:b9:c0:2e:2a:c5:cf:ec:3e:00:
3a:dc:7d:50:ad:d7:60:70:4d:5a:fc:8f:b8:bf:e4:
fc:4b:c5:65:ee:36:bc:d6:80:b7:97:da:ac:2c:dc:
16:d9:80:4e:31:49:d7:a9:14:db:74:89:7e:4f:07:
86:03:f8:d1:06:46:5d:11:6b:28:bc:2b:8b:6c:e4:
3e:45:30:60:7d:de:23:f9:98:71:1c:04:42:75:aa:
07:2d:61:a3:e2:47:fe:b8:95:f2:ea:7e:50:39:1c:
4c:c8:db:4b:1c:06:a4:19:e0:af:47:34:f8:fe:54:
73:e9:13:f7:6c:2c:7a:34:e3:4e:25:fe:06:7b:4a:
61:40:7b:c9:71:1f:3f:67:1b:9a:ba:3d:dd:c5:ac:
2a:ed:60:13:ca:0a:45:19:06:13:5f:8b:42:f6:7c:
4c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:28:C9:54:7A:D6:01:6C:CB:8F:1B:FE:3E:9F:90:10:9E:94:5D:CE
X509v3 Authority Key Identifier:
keyid:B0:54:42:C4:FF:E9:C1:D7:61:E7:C5:69:36:0E:AD:04:24:38:F9:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sFRCxP_pwddh58VpNg6tBCQ4-QM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/7CjJVHrWAWzLjxv-Pp-QEJ6UXc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.171.88.0/21
89.31.0.0/21
134.101.125.0/24
193.110.68.0/22
217.170.176.0/20
IPv6:
2a00:17f0::/32
Signature Algorithm: sha256WithRSAEncryption
0e:1f:11:c9:f5:13:ae:45:1f:37:5f:9a:ad:20:12:04:19:0a:
76:6e:53:c4:ab:b2:47:6c:fc:8c:87:c3:6c:4c:ca:13:df:b2:
32:73:a8:28:c9:42:bc:46:11:7f:29:62:0d:f4:bc:09:97:7f:
93:3f:ae:19:52:a5:8d:b9:e2:43:2a:93:95:54:a2:41:e9:b4:
be:d9:dc:9b:75:d0:a0:15:c5:e4:34:52:5b:83:ae:54:04:34:
ac:67:1a:09:e7:63:9b:fe:bf:08:57:f8:1e:3f:12:97:23:5b:
3b:eb:f9:a2:dc:b0:b4:24:a0:a2:b9:1d:f9:a8:bc:cc:d2:44:
48:53:f7:5b:17:a9:67:ea:88:2a:dc:fd:af:94:b2:3f:7f:c6:
5c:a1:c6:db:67:b3:79:0c:5a:57:d3:a6:80:9d:43:33:3e:f1:
67:c4:9e:3d:e5:7f:62:62:d9:d0:81:79:9a:89:35:f6:6b:7a:
9c:bd:0f:fe:9c:d9:6d:3e:de:37:8e:64:6d:ec:1c:16:78:d1:
a1:19:5c:08:f5:2c:6f:a1:02:2e:d0:37:1d:61:4f:4f:c0:c0:
98:be:a5:b7:4d:78:d8:ba:d5:06:68:d3:a0:3a:a3:5e:ab:bf:
85:83:54:0e:85:a2:df:32:f8:92:9b:98:ad:a8:2b:16:b0:73:
f0:71:24:c3
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgISAYVuL7hjlmZF9ICNfIUtDk0LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwNTQ0MmM0ZmZlOWMxZDc2MWU3YzU2OTM2MGVhZDA0MjQz
OGY5MDMwHhcNMjMwMTAxMTYzNDU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYzI4Yzk1NDdhZDYwMTZjY2I4ZjFiZmUzZTlmOTAxMDllOTQ1ZGNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgnGbog5H2RV8O9XxWeFJfLecpYeY
+lpgZUj+FcwuEl+s3BNMnGkcB+KkPtJOG3kmcRNao8XlsrQ7WD2iQi/BNgyQCZ/v
jO1DlJmGOeU89RFlRDgXdKCmCYRlzLqj7Au5wC4qxc/sPgA63H1QrddgcE1a/I+4
v+T8S8Vl7ja81oC3l9qsLNwW2YBOMUnXqRTbdIl+TweGA/jRBkZdEWsovCuLbOQ+
RTBgfd4j+ZhxHARCdaoHLWGj4kf+uJXy6n5QORxMyNtLHAakGeCvRzT4/lRz6RP3
bCx6NONOJf4Ge0phQHvJcR8/Zxuauj3dxawq7WATygpFGQYTX4tC9nxMuwIDAQAB
o4ICMDCCAiwwHQYDVR0OBBYEFOwoyVR61gFsy48b/j6fkBCelF3OMB8GA1UdIwQY
MBaAFLBUQsT/6cHXYefFaTYOrQQkOPkDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0ZSQ3hQX3B3ZGRoNThWcE5nNnRCQ1E0LVFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS80Yjc3ZTctMzQ3Yy00OWZhLTgwOGIt
NmVkMzMxZjMxZTA5LzEvN0NqSlZIcldBV3pManh2LVBwLVFFSjZVWGM0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS80Yjc3ZTctMzQ3Yy00OWZhLTgwOGItNmVkMzMxZjMxZTA5
LzEvc0ZSQ3hQX3B3ZGRoNThWcE5nNnRCQ1E0LVFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQDT6tYAwQD
WR8AAwQAhmV9AwQCwW5EAwQE2aqwMA0EAgACMAcDBQAqABfwMA0GCSqGSIb3DQEB
CwUAA4IBAQAOHxHJ9ROuRR83X5qtIBIEGQp2blPEq7JHbPyMh8NsTMoT37Iyc6go
yUK8RhF/KWIN9LwJl3+TP64ZUqWNueJDKpOVVKJB6bS+2dybddCgFcXkNFJbg65U
BDSsZxoJ52Ob/r8IV/gePxKXI1s76/mi3LC0JKCiuR35qLzM0kRIU/dbF6ln6ogq
3P2vlLI/f8ZcocbbZ7N5DFpX06aAnUMzPvFnxJ495X9iYtnQgXmaiTX2a3qcvQ/+
nNltPt43jmRt7BwWeNGhGVwI9SxvoQIu0DcdYU9PwMCYvqW3TXjYutUGaNOgOqNe
q7+Fg1QOhaLfMviSm5itqCsWsHPwcSTD
-----END CERTIFICATE-----
Generated at Tue Jan 2 06:32:15 2024 by rpki-client on console-ams.rpki-client.org