Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/EE_00cc60zb0vVoHjS38GxvvQ5s.roa
File: EE_00cc60zb0vVoHjS38GxvvQ5s.roa (raw, json)
Hash identifier: 0SOKrTLa0sQI7qdv/ngmphttKSi0r6OMUDdRgsvFrNQ=
Subject key identifier: 10:4F:F4:D1:C7:3A:D3:36:F4:BD:5A:07:8D:2D:FC:1B:1B:EF:43:9B
Certificate issuer: /CN=dbe0ca7c1e0e8a1c7ad02d0bb828b41188ae5243
Certificate serial: 018571B9F33E797C1DF838D18BEF7B6ED6AE
Authority key identifier: DB:E0:CA:7C:1E:0E:8A:1C:7A:D0:2D:0B:B8:28:B4:11:88:AE:52:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-DKfB4Oihx60C0LuCi0EYiuUkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/EE_00cc60zb0vVoHjS38GxvvQ5s.roa
Signing time: Mon 02 Jan 2023 09:04:49 +0000
ROA not before: Mon 02 Jan 2023 09:04:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 33854
IP address blocks: 194.150.253.0/24 maxlen: 24
194.150.252.0/24 maxlen: 24
217.172.128.0/20 maxlen: 24
92.60.96.0/20 maxlen: 24
80.93.170.0/24 maxlen: 24
2a00:1a90::/32 maxlen: 34
2a00:1a90:8000::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:b9:f3:3e:79:7c:1d:f8:38:d1:8b:ef:7b:6e:d6:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbe0ca7c1e0e8a1c7ad02d0bb828b41188ae5243
Validity
Not Before: Jan 2 09:04:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=104ff4d1c73ad336f4bd5a078d2dfc1b1bef439b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:24:d2:b9:5d:67:92:fc:11:09:57:62:04:23:
67:09:ed:8a:eb:c5:b7:c1:ec:aa:34:aa:61:75:2a:
b2:23:c7:16:09:2a:45:e6:67:12:0c:99:cf:0f:d2:
88:2a:3a:a9:16:65:3e:48:47:87:05:66:ff:d8:3e:
5f:d9:b9:4d:97:73:ef:e2:7c:52:a4:27:cc:ca:89:
fe:61:66:d1:4d:19:b3:52:2c:8b:ce:c2:2a:cc:f4:
aa:d2:a4:73:2e:0a:74:e3:86:5a:c4:90:49:ff:3e:
ea:b5:90:61:0f:dc:e6:0f:45:bd:e9:d3:73:e7:81:
ed:83:5c:35:1a:9e:9b:fe:4c:4d:01:dd:6a:b7:53:
67:16:a1:05:e6:9b:cf:dc:f3:0b:89:0f:aa:33:24:
ad:45:02:90:02:a6:ff:e0:00:9a:9f:c0:d5:58:bc:
ad:ab:76:00:68:1e:24:7c:43:cc:70:10:1e:1b:ae:
78:1c:68:06:58:e1:8b:ab:49:a1:d2:20:61:da:64:
b2:cf:e7:df:99:47:70:59:4a:79:76:a1:26:be:3f:
27:9c:da:64:bd:86:95:7e:34:c4:2d:4e:c0:06:5f:
ea:e3:71:2a:a5:f9:82:e9:b5:91:3e:7c:ea:24:fe:
5e:60:d0:22:a0:af:dc:2d:d5:a1:fe:f4:34:9c:c0:
ff:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:4F:F4:D1:C7:3A:D3:36:F4:BD:5A:07:8D:2D:FC:1B:1B:EF:43:9B
X509v3 Authority Key Identifier:
keyid:DB:E0:CA:7C:1E:0E:8A:1C:7A:D0:2D:0B:B8:28:B4:11:88:AE:52:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-DKfB4Oihx60C0LuCi0EYiuUkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/EE_00cc60zb0vVoHjS38GxvvQ5s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.93.170.0/24
92.60.96.0/20
194.150.252.0/23
217.172.128.0/20
IPv6:
2a00:1a90::/32
Signature Algorithm: sha256WithRSAEncryption
aa:55:f7:2c:31:ad:4c:87:7d:63:c0:cb:c2:b6:99:2d:ee:6f:
92:b2:74:0f:c6:b1:d2:9a:06:e7:db:f3:9d:f8:56:40:e9:12:
58:bd:eb:4c:12:18:3b:6e:a4:19:44:a6:32:c9:33:8a:1b:72:
59:d7:97:bc:29:d2:15:1e:a0:4e:e2:96:c3:2c:33:0a:1c:45:
0e:78:16:18:3a:bb:14:3c:0f:3f:08:78:9e:55:23:ca:d9:a5:
8b:ec:56:23:81:39:8e:0e:25:36:13:83:c1:33:e9:e1:d7:a7:
e5:c6:da:1d:ad:91:6e:56:3b:47:39:d8:3a:65:97:33:54:a9:
5b:91:dd:cb:74:a9:5d:8c:ba:15:71:e8:28:d7:c7:ae:cd:52:
0f:37:1c:06:37:41:2b:04:79:51:d0:41:ae:bf:e2:80:a3:89:
18:3b:a8:87:78:44:e5:6e:06:af:5b:08:58:04:c2:38:08:28:
da:e1:90:ce:74:83:3d:1a:ac:fd:9a:1f:5b:42:6d:1c:21:be:
57:03:55:ab:d1:d1:df:fb:c7:cc:3f:68:81:ca:25:81:8a:f6:
07:e5:31:99:4d:7f:d9:c8:b2:36:76:d3:be:ed:6f:4e:61:20:
23:1a:63:b4:e2:34:7a:03:c3:9f:73:f8:ed:60:ba:5c:15:a6:
05:9d:32:4e
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAYVxufM+eXwd+DjRi+97btauMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiZTBjYTdjMWUwZThhMWM3YWQwMmQwYmI4MjhiNDExODhh
ZTUyNDMwHhcNMjMwMTAyMDkwNDQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMDRmZjRkMWM3M2FkMzM2ZjRiZDVhMDc4ZDJkZmMxYjFiZWY0MzliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4STSuV1nkvwRCVdiBCNnCe2K68W3
weyqNKphdSqyI8cWCSpF5mcSDJnPD9KIKjqpFmU+SEeHBWb/2D5f2blNl3Pv4nxS
pCfMyon+YWbRTRmzUiyLzsIqzPSq0qRzLgp044ZaxJBJ/z7qtZBhD9zmD0W96dNz
54Htg1w1Gp6b/kxNAd1qt1NnFqEF5pvP3PMLiQ+qMyStRQKQAqb/4ACan8DVWLyt
q3YAaB4kfEPMcBAeG654HGgGWOGLq0mh0iBh2mSyz+ffmUdwWUp5dqEmvj8nnNpk
vYaVfjTELU7ABl/q43EqpfmC6bWRPnzqJP5eYNAioK/cLdWh/vQ0nMD/WwIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFBBP9NHHOtM29L1aB40t/Bsb70ObMB8GA1UdIwQY
MBaAFNvgynweDoocetAtC7gotBGIrlJDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMi1ES2ZCNE9paHg2MEMwTHVDaTBFWWl1VWtNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9mM2M4ZTgtYzViYy00MjExLWE5YWMt
NGY5MTEyZWRlOTY4LzEvRUVfMDBjYzYwemIwdlZvSGpTMzhHeHZ2UTVzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9mM2M4ZTgtYzViYy00MjExLWE5YWMtNGY5MTEyZWRlOTY4
LzEvMi1ES2ZCNE9paHg2MEMwTHVDaTBFWWl1VWtNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQAUF2qAwQE
XDxgAwQBwpb8AwQE2ayAMA0EAgACMAcDBQAqABqQMA0GCSqGSIb3DQEBCwUAA4IB
AQCqVfcsMa1Mh31jwMvCtpkt7m+SsnQPxrHSmgbn2/Od+FZA6RJYvetMEhg7bqQZ
RKYyyTOKG3JZ15e8KdIVHqBO4pbDLDMKHEUOeBYYOrsUPA8/CHieVSPK2aWL7FYj
gTmODiU2E4PBM+nh16flxtodrZFuVjtHOdg6ZZczVKlbkd3LdKldjLoVcego18eu
zVIPNxwGN0ErBHlR0EGuv+KAo4kYO6iHeETlbgavWwhYBMI4CCja4ZDOdIM9Gqz9
mh9bQm0cIb5XA1Wr0dHf+8fMP2iByiWBivYH5TGZTX/ZyLI2dtO+7W9OYSAjGmO0
4jR6A8Ofc/jtYLpcFaYFnTJO
-----END CERTIFICATE-----
Generated at Mon Jan 1 15:02:44 2024 by rpki-client on console-ams.rpki-client.org