Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/SeE1nr_WEU8R-pmsn4-3LnaKvkw.roa
File: SeE1nr_WEU8R-pmsn4-3LnaKvkw.roa (raw, json)
Hash identifier: qvV7V9jOK6VZZNP8xu2veoOI3ZRh4gqUmO+78nXt2Gk=
Subject key identifier: 49:E1:35:9E:BF:D6:11:4F:11:FA:99:AC:9F:8F:B7:2E:76:8A:BE:4C
Certificate issuer: /CN=d766fc6f1b8e2b604f7fb73c29fd5d689a0ea81d
Certificate serial: 0186CC0DF8F4C2FA8497B0ACBCDAC72F78BC
Authority key identifier: D7:66:FC:6F:1B:8E:2B:60:4F:7F:B7:3C:29:FD:5D:68:9A:0E:A8:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12b8bxuOK2BPf7c8Kf1daJoOqB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/SeE1nr_WEU8R-pmsn4-3LnaKvkw.roa
Signing time: Fri 10 Mar 2023 15:05:13 +0000
ROA not before: Fri 10 Mar 2023 15:05:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48135
IP address blocks: 151.89.128.0/17 maxlen: 17
94.127.84.0/22 maxlen: 22
94.127.83.0/24 maxlen: 24
94.127.80.0/22 maxlen: 22
94.127.81.0/24 maxlen: 24
94.127.86.0/24 maxlen: 24
94.127.86.0/23 maxlen: 23
94.127.87.0/24 maxlen: 24
151.89.232.0/22 maxlen: 22
151.89.55.0/24 maxlen: 24
151.89.56.0/24 maxlen: 24
151.89.54.0/24 maxlen: 24
151.89.0.0/17 maxlen: 17
151.89.0.0/16 maxlen: 16
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:cc:0d:f8:f4:c2:fa:84:97:b0:ac:bc:da:c7:2f:78:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d766fc6f1b8e2b604f7fb73c29fd5d689a0ea81d
Validity
Not Before: Mar 10 15:05:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=49e1359ebfd6114f11fa99ac9f8fb72e768abe4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:be:f0:0a:09:3e:f6:2f:74:d5:58:ed:10:82:
69:e2:31:4b:de:fa:65:1c:7d:99:60:c2:4a:d3:9a:
83:f8:89:2b:02:eb:8a:86:22:17:73:56:45:7e:d2:
58:00:ce:5d:27:ad:ef:37:d2:7f:11:8f:2c:92:2d:
9c:6d:11:42:cd:31:2a:e9:81:3e:58:cc:cb:64:42:
4a:2e:06:92:57:0e:9b:64:9c:cf:df:13:83:5c:be:
ab:d7:8a:00:2b:54:96:8b:55:08:6d:2d:9c:24:94:
41:f0:f1:bc:35:67:14:f9:27:0f:0a:bb:30:56:d2:
83:84:bd:01:b5:75:df:48:9e:99:ed:42:0d:49:2d:
97:70:a9:fc:2c:e7:ea:01:51:de:8d:e2:e3:17:89:
fa:04:73:82:ed:1e:49:c5:f8:ac:a1:3b:74:de:66:
22:1a:4b:cf:2f:2a:45:a8:ca:e7:00:ca:17:28:cd:
28:dc:4b:d0:2c:6f:79:7d:8c:47:2c:ed:ce:15:6b:
3f:b0:a2:a2:53:74:ab:b2:27:35:40:ed:f4:34:80:
35:99:f3:ef:2b:56:fb:70:65:64:d0:1a:84:39:62:
3e:cb:be:bf:db:61:f6:8a:bc:bb:3b:92:e6:cc:26:
92:bc:56:15:23:40:d7:b1:86:b4:41:ac:01:1d:21:
36:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:E1:35:9E:BF:D6:11:4F:11:FA:99:AC:9F:8F:B7:2E:76:8A:BE:4C
X509v3 Authority Key Identifier:
keyid:D7:66:FC:6F:1B:8E:2B:60:4F:7F:B7:3C:29:FD:5D:68:9A:0E:A8:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12b8bxuOK2BPf7c8Kf1daJoOqB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/SeE1nr_WEU8R-pmsn4-3LnaKvkw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.127.80.0/21
151.89.0.0/16
Signature Algorithm: sha256WithRSAEncryption
c2:45:83:0d:c7:2d:2e:8d:37:c2:96:21:55:02:41:76:cb:35:
b5:67:d6:00:30:ef:89:e3:30:ec:f8:43:8d:7d:a8:27:61:29:
55:1a:8b:a8:79:a5:97:f0:89:63:75:0a:fd:1e:ee:84:ea:df:
3b:b5:5e:2f:4b:80:9a:78:de:58:f5:46:6e:69:0f:cb:f7:3c:
bc:16:e6:68:84:8a:54:f3:33:b0:42:04:6b:4c:83:29:1c:9a:
d0:29:0b:a3:06:23:67:57:dd:43:9e:00:b9:e5:6c:ae:99:65:
f4:88:cf:38:1b:39:e0:b4:b2:9a:f7:e4:6e:2e:9d:ef:f0:d4:
e8:c4:07:fd:eb:a3:3c:4c:41:22:9b:79:b4:0d:fe:1e:80:a3:
a9:76:47:30:c1:0b:92:e6:70:56:c5:67:53:75:3c:6b:c0:4b:
02:90:c1:2b:43:c0:42:09:7c:50:2a:6c:cb:e9:47:41:60:11:
71:32:b9:b2:8c:b4:14:ad:8a:dc:1d:28:5e:b5:5e:cb:13:ee:
c0:d7:78:c4:d3:56:b3:80:14:74:95:5a:4e:eb:85:2f:c4:d5:
58:4f:ab:4d:e6:f1:5e:ad:c1:5f:34:d7:df:2d:e9:c0:71:59:
25:c8:27:99:35:b8:0a:ba:02:11:03:25:c3:bf:a4:2f:4a:dc:
5f:63:88:9f
-----BEGIN CERTIFICATE-----
MIIFAjCCA+qgAwIBAgISAYbMDfj0wvqEl7CsvNrHL3i8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3NjZmYzZmMWI4ZTJiNjA0ZjdmYjczYzI5ZmQ1ZDY4OWEw
ZWE4MWQwHhcNMjMwMzEwMTUwNTEzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OWUxMzU5ZWJmZDYxMTRmMTFmYTk5YWM5ZjhmYjcyZTc2OGFiZTRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjr7wCgk+9i901VjtEIJp4jFL3vpl
HH2ZYMJK05qD+IkrAuuKhiIXc1ZFftJYAM5dJ63vN9J/EY8ski2cbRFCzTEq6YE+
WMzLZEJKLgaSVw6bZJzP3xODXL6r14oAK1SWi1UIbS2cJJRB8PG8NWcU+ScPCrsw
VtKDhL0BtXXfSJ6Z7UINSS2XcKn8LOfqAVHejeLjF4n6BHOC7R5JxfisoTt03mYi
GkvPLypFqMrnAMoXKM0o3EvQLG95fYxHLO3OFWs/sKKiU3Srsic1QO30NIA1mfPv
K1b7cGVk0BqEOWI+y76/22H2iry7O5LmzCaSvFYVI0DXsYa0QawBHSE2dwIDAQAB
o4ICDjCCAgowHQYDVR0OBBYEFEnhNZ6/1hFPEfqZrJ+Pty52ir5MMB8GA1UdIwQY
MBaAFNdm/G8bjitgT3+3PCn9XWiaDqgdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTJiOGJ4dU9LMkJQZjdjOEtmMWRhSm9PcUIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9mMzgyOWEtOTUyNy00NDRiLWJkNzIt
M2VmM2ZkOTY5OTU3LzEvU2VFMW5yX1dFVThSLXBtc240LTNMbmFLdmt3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My9mMzgyOWEtOTUyNy00NDRiLWJkNzItM2VmM2ZkOTY5OTU3
LzEvMTJiOGJ4dU9LMkJQZjdjOEtmMWRhSm9PcUIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAATALAwQDXn9QAwMA
l1kwDQYJKoZIhvcNAQELBQADggEBAMJFgw3HLS6NN8KWIVUCQXbLNbVn1gAw74nj
MOz4Q419qCdhKVUai6h5pZfwiWN1Cv0e7oTq3zu1Xi9LgJp43lj1Rm5pD8v3PLwW
5miEilTzM7BCBGtMgykcmtApC6MGI2dX3UOeALnlbK6ZZfSIzzgbOeC0spr35G4u
ne/w1OjEB/3rozxMQSKbebQN/h6Ao6l2RzDBC5LmcFbFZ1N1PGvASwKQwStDwEIJ
fFAqbMvpR0FgEXEyubKMtBStitwdKF61XssT7sDXeMTTVrOAFHSVWk7rhS/E1VhP
q03m8V6twV80198t6cBxWSXIJ5k1uAq6AhEDJcO/pC9K3F9jiJ8=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:29 2023 by rpki-client on console-fra.rpki-client.org