Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/CJEQmE-G-sPvLsmMJHrtcQrQoO0.roa
File: CJEQmE-G-sPvLsmMJHrtcQrQoO0.roa (raw, json)
Hash identifier: CDHvsAV/GqiY22CfKQpfrLm7CI1TKy5R635mYeia8Yc=
Subject key identifier: 08:91:10:98:4F:86:FA:C3:EF:2E:C9:8C:24:7A:ED:71:0A:D0:A0:ED
Certificate issuer: /CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Certificate serial: 0189BC4B985F9932D5246A67A53E39DB64A3
Authority key identifier: E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/CJEQmE-G-sPvLsmMJHrtcQrQoO0.roa
Signing time: Thu 03 Aug 2023 16:46:58 +0000
ROA not before: Thu 03 Aug 2023 16:46:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6461
IP address blocks: 82.98.192.0/21 maxlen: 21
94.31.0.0/18 maxlen: 18
193.160.88.0/22 maxlen: 22
82.98.232.0/21 maxlen: 21
213.161.64.0/19 maxlen: 19
82.98.240.0/20 maxlen: 20
193.28.62.0/23 maxlen: 23
213.152.224.0/19 maxlen: 19
94.31.59.0/24 maxlen: 24
79.141.32.0/20 maxlen: 20
193.28.104.0/23 maxlen: 23
2a00:16f8::/29 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:bc:4b:98:5f:99:32:d5:24:6a:67:a5:3e:39:db:64:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Validity
Not Before: Aug 3 16:46:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=089110984f86fac3ef2ec98c247aed710ad0a0ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ae:6f:3c:6e:2f:d2:02:17:b1:0b:3b:c9:39:
06:b2:0c:f2:26:8a:7b:91:ec:cf:b1:8d:9e:b2:6c:
04:42:2a:e8:2a:e6:59:47:2d:94:da:49:60:63:5d:
6b:01:12:66:64:f8:11:fc:e3:3a:cb:a8:ae:13:35:
08:64:ca:b8:66:03:43:fc:40:c7:7f:c8:e7:46:83:
24:d1:ee:62:0d:ec:0e:24:f2:73:96:3d:20:08:b0:
3f:78:6a:80:96:7b:61:48:5e:64:cb:df:9d:07:91:
3d:03:ed:ee:36:50:aa:da:ff:7f:3c:31:a2:73:66:
6a:2b:5d:f7:bd:db:22:eb:c6:94:b0:7c:89:61:60:
9f:77:39:4b:46:3b:87:76:3c:89:4f:14:eb:f9:4d:
24:4a:a8:81:79:13:fd:dd:bf:bc:bf:41:a2:ea:d9:
0d:69:5d:83:65:4b:53:5b:09:78:40:c9:4c:21:e8:
28:20:ba:ea:c1:5a:ff:dd:e4:96:4b:b8:3c:47:ea:
bb:69:f5:34:a3:b5:c0:cb:69:b8:15:43:f0:d4:2e:
e4:76:a4:28:86:20:76:16:fb:cd:3c:40:b0:f7:de:
e5:6c:7f:3e:99:81:c0:0d:f2:53:c7:f5:9e:72:1e:
b9:79:c3:26:52:4f:9d:7f:75:16:5d:94:d7:2a:11:
06:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:91:10:98:4F:86:FA:C3:EF:2E:C9:8C:24:7A:ED:71:0A:D0:A0:ED
X509v3 Authority Key Identifier:
keyid:E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/CJEQmE-G-sPvLsmMJHrtcQrQoO0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.141.32.0/20
82.98.192.0/21
82.98.232.0-82.98.255.255
94.31.0.0/18
193.28.62.0/23
193.28.104.0/23
193.160.88.0/22
213.152.224.0/19
213.161.64.0/19
IPv6:
2a00:16f8::/29
Signature Algorithm: sha256WithRSAEncryption
69:3f:4e:0d:57:1d:72:b1:a0:8f:4a:59:28:bd:de:f0:3c:6c:
c8:92:84:6d:bc:46:49:3a:92:5b:90:9d:02:bf:16:49:7b:ca:
c6:7f:eb:0c:b6:20:32:71:04:b8:69:a0:e2:5c:06:97:e9:79:
a1:28:f9:34:dc:65:60:e3:6c:8a:af:e2:1e:c7:0e:9f:cc:e0:
c0:d3:f1:c1:1d:f5:8a:f4:02:8c:c5:08:47:9c:e6:09:7d:0c:
4d:85:4f:16:6e:26:af:ac:4f:8f:65:5a:c5:41:99:0e:fd:4c:
8d:08:cc:fe:68:dd:2a:2f:23:2b:d8:f0:6e:2d:4f:32:b5:57:
c8:dc:49:08:15:8b:c7:12:b4:8f:f2:0d:9e:f8:b4:ca:17:a7:
63:3b:cc:4f:2f:00:02:ab:53:69:48:1b:1e:77:6d:15:b0:19:
07:2c:0f:aa:23:66:8f:e4:d5:80:a3:83:d9:f3:d2:33:11:a5:
1a:a9:10:ef:65:17:a8:4d:1f:14:21:4d:3a:c2:4b:b3:28:5b:
41:84:0f:43:16:d4:a5:f3:96:f2:fc:ee:c7:10:8f:3a:d0:5f:
cd:46:fd:3f:e9:70:8b:f8:65:08:56:ad:6b:c5:80:18:42:af:
f9:1b:7f:78:fd:f9:90:0f:e8:dc:cb:1f:55:6e:94:e7:0b:63:
5b:91:84:55
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgISAYm8S5hfmTLVJGpnpT4522SjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzMGNjOTQyOWI2MzM4MmU5YjE3MTRkMjFiM2M5NmQyZTVl
YmUyNTcwHhcNMjMwODAzMTY0NjU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwODkxMTA5ODRmODZmYWMzZWYyZWM5OGMyNDdhZWQ3MTBhZDBhMGVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjK5vPG4v0gIXsQs7yTkGsgzyJop7
kezPsY2esmwEQiroKuZZRy2U2klgY11rARJmZPgR/OM6y6iuEzUIZMq4ZgND/EDH
f8jnRoMk0e5iDewOJPJzlj0gCLA/eGqAlnthSF5ky9+dB5E9A+3uNlCq2v9/PDGi
c2ZqK133vdsi68aUsHyJYWCfdzlLRjuHdjyJTxTr+U0kSqiBeRP93b+8v0Gi6tkN
aV2DZUtTWwl4QMlMIegoILrqwVr/3eSWS7g8R+q7afU0o7XAy2m4FUPw1C7kdqQo
hiB2FvvNPECw997lbH8+mYHADfJTx/Wech65ecMmUk+df3UWXZTXKhEGywIDAQAB
o4ICTzCCAkswHQYDVR0OBBYEFAiREJhPhvrD7y7JjCR67XEK0KDtMB8GA1UdIwQY
MBaAFOMMyUKbYzgumxcU0hs8ltLl6+JXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHd6SlFwdGpPQzZiRnhUU0d6eVcwdVhyNGxjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9jNzMyODctYjFiMS00YWNhLWJkMmUt
ZGI0ZjM1MmU5YWQzLzEvQ0pFUW1FLUctc1B2THNtTUpIcnRjUXJRb08wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9jNzMyODctYjFiMS00YWNhLWJkMmUtZGI0ZjM1MmU5YWQz
LzEvNHd6SlFwdGpPQzZiRnhUU0d6eVcwdVhyNGxjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGUGCCsGAQUFBwEHAQH/BFYwVDBDBAIAATA9AwQET40gAwQD
UmLAMAsDBANSYugDAwBSYgMEBl4fAAMEAcEcPgMEAcEcaAMEAsGgWAMEBdWY4AME
BdWhQDANBAIAAjAHAwUDKgAW+DANBgkqhkiG9w0BAQsFAAOCAQEAaT9ODVcdcrGg
j0pZKL3e8DxsyJKEbbxGSTqSW5CdAr8WSXvKxn/rDLYgMnEEuGmg4lwGl+l5oSj5
NNxlYONsiq/iHscOn8zgwNPxwR31ivQCjMUIR5zmCX0MTYVPFm4mr6xPj2VaxUGZ
Dv1MjQjM/mjdKi8jK9jwbi1PMrVXyNxJCBWLxxK0j/INnvi0yhenYzvMTy8AAqtT
aUgbHndtFbAZBywPqiNmj+TVgKOD2fPSMxGlGqkQ72UXqE0fFCFNOsJLsyhbQYQP
QxbUpfOW8vzuxxCPOtBfzUb9P+lwi/hlCFata8WAGEKv+Rt/eP35kA/o3MsfVW6U
5wtjW5GEVQ==
-----END CERTIFICATE-----
Generated at Thu Aug 3 18:30:37 2023 by rpki-client on console-ams.rpki-client.org