Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/UL37IugwjU1_GBd2eWHMOTftAZM.roa
File: UL37IugwjU1_GBd2eWHMOTftAZM.roa (raw, json)
Hash identifier: OLUU9BxobxZwpAqIhp34QIll1MR3hLYes/ULc1Jq9fA=
Subject key identifier: 50:BD:FB:22:E8:30:8D:4D:7F:18:17:76:79:61:CC:39:37:ED:01:93
Certificate issuer: /CN=70f9b16adf2fd31988859922b4457481dd7eef40
Certificate serial: 01897F7B7D9FC9D816CF63F2C12269EA86D6
Authority key identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/UL37IugwjU1_GBd2eWHMOTftAZM.roa
Signing time: Sat 22 Jul 2023 21:22:26 +0000
ROA not before: Sat 22 Jul 2023 21:22:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 141.226.246.0/24 maxlen: 24
141.226.243.0/24 maxlen: 24
141.226.247.0/24 maxlen: 24
213.137.80.0/24 maxlen: 24
213.137.84.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:7f:7b:7d:9f:c9:d8:16:cf:63:f2:c1:22:69:ea:86:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70f9b16adf2fd31988859922b4457481dd7eef40
Validity
Not Before: Jul 22 21:22:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=50bdfb22e8308d4d7f1817767961cc3937ed0193
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:3d:21:f0:ba:9f:a9:74:15:a9:80:31:27:cf:
a0:14:8b:64:cf:67:98:12:29:34:fb:02:ea:9f:c0:
af:9a:a1:78:98:ff:5c:9d:95:ee:64:f6:bd:08:9b:
0c:2a:ce:c6:58:61:c0:b2:c7:3a:f1:1d:ea:43:62:
e9:48:34:50:1f:7a:7f:c9:44:66:ec:92:a8:80:22:
b5:86:0f:6d:47:13:d2:c4:49:44:07:91:b0:6f:0f:
4e:3c:ac:38:f5:88:15:ec:22:5d:32:bf:3e:82:69:
2f:b9:27:6f:12:16:05:f9:4b:1a:fe:bb:7a:3c:b4:
47:86:88:d2:c3:4c:25:88:35:8e:f9:9c:21:65:69:
35:27:bd:5a:f8:21:c4:74:30:57:f3:b2:01:60:9a:
2b:8f:b3:0e:af:00:ad:9b:da:f6:f4:8f:93:69:92:
cd:d9:7d:1a:54:4b:3c:d9:b2:ca:6e:04:58:29:a5:
5b:5a:5f:07:82:b4:e3:db:1d:d6:aa:1e:04:44:17:
dd:0c:b4:86:3e:39:31:89:65:1e:76:aa:73:a8:ff:
14:ed:3e:d5:96:1c:ad:67:25:29:eb:44:ed:c2:9c:
f1:b4:ef:15:de:94:c1:b4:3e:e5:fc:27:97:c6:e0:
57:a4:05:e5:15:31:91:a1:1d:21:b1:f4:82:25:cd:
5f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:BD:FB:22:E8:30:8D:4D:7F:18:17:76:79:61:CC:39:37:ED:01:93
X509v3 Authority Key Identifier:
keyid:70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/UL37IugwjU1_GBd2eWHMOTftAZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.226.243.0/24
141.226.246.0/23
213.137.80.0/24
213.137.84.0/22
Signature Algorithm: sha256WithRSAEncryption
52:9b:e0:0b:95:3c:cd:16:d8:61:62:41:8c:ab:bc:2d:8c:b4:
8a:9c:a0:2c:e0:99:d7:f1:8a:e3:cf:18:00:06:5a:66:9e:18:
41:b6:dd:d8:9f:bc:c4:fd:89:cc:43:81:12:c4:24:57:96:5e:
93:24:50:6a:66:00:63:71:20:fc:8d:8c:d6:f4:38:46:87:10:
9e:89:60:c2:f0:d2:da:0a:9a:dd:40:88:f7:8e:70:78:6c:29:
f7:64:89:c9:24:79:18:71:d1:85:1a:96:e4:b3:0e:79:ba:c9:
a7:13:26:a9:f1:d3:93:41:f5:72:9b:d1:e0:a2:8d:fb:c8:f3:
6c:4d:09:1f:4b:fc:90:61:54:50:f2:a9:25:6f:8d:61:22:1b:
54:1c:9d:42:c7:96:e1:fc:e1:54:02:b3:c9:e4:0b:0e:c4:41:
97:e7:7b:b3:04:b8:f8:1c:79:9f:e3:1f:79:e3:6d:f6:cc:4c:
a2:5c:63:2b:2f:06:ac:cc:93:7d:01:9d:0c:42:cf:a0:59:82:
ea:ae:3b:40:13:0f:28:88:2f:a3:38:15:53:15:be:c3:48:e3:
f9:ce:01:2b:63:8e:1f:c4:77:3a:19:40:f5:a8:26:ab:90:47:
c2:26:13:cc:64:37:ba:09:5e:d2:db:7a:a7:a3:96:7d:96:f7:
3a:61:83:36
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYl/e32fydgWz2PywSJp6obWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwZjliMTZhZGYyZmQzMTk4ODg1OTkyMmI0NDU3NDgxZGQ3
ZWVmNDAwHhcNMjMwNzIyMjEyMjI2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MGJkZmIyMmU4MzA4ZDRkN2YxODE3NzY3OTYxY2MzOTM3ZWQwMTkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+T0h8LqfqXQVqYAxJ8+gFItkz2eY
Eik0+wLqn8CvmqF4mP9cnZXuZPa9CJsMKs7GWGHAssc68R3qQ2LpSDRQH3p/yURm
7JKogCK1hg9tRxPSxElEB5Gwbw9OPKw49YgV7CJdMr8+gmkvuSdvEhYF+Usa/rt6
PLRHhojSw0wliDWO+ZwhZWk1J71a+CHEdDBX87IBYJorj7MOrwCtm9r29I+TaZLN
2X0aVEs82bLKbgRYKaVbWl8HgrTj2x3Wqh4ERBfdDLSGPjkxiWUedqpzqP8U7T7V
lhytZyUp60TtwpzxtO8V3pTBtD7l/CeXxuBXpAXlFTGRoR0hsfSCJc1fUwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFFC9+yLoMI1NfxgXdnlhzDk37QGTMB8GA1UdIwQY
MBaAFHD5sWrfL9MZiIWZIrRFdIHdfu9AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUt
YmM2ZGI3MjQ4YWRkLzEvVUwzN0l1Z3dqVTFfR0JkMmVXSE1PVGZ0QVpNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUtYmM2ZGI3MjQ4YWRk
LzEvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAjeLzAwQB
jeL2AwQA1YlQAwQC1YlUMA0GCSqGSIb3DQEBCwUAA4IBAQBSm+ALlTzNFthhYkGM
q7wtjLSKnKAs4JnX8YrjzxgABlpmnhhBtt3Yn7zE/YnMQ4ESxCRXll6TJFBqZgBj
cSD8jYzW9DhGhxCeiWDC8NLaCprdQIj3jnB4bCn3ZInJJHkYcdGFGpbksw55usmn
Eyap8dOTQfVym9Hgoo37yPNsTQkfS/yQYVRQ8qklb41hIhtUHJ1Cx5bh/OFUArPJ
5AsOxEGX53uzBLj4HHmf4x954232zEyiXGMrLwaszJN9AZ0MQs+gWYLqrjtAEw8o
iC+jOBVTFb7DSOP5zgErY44fxHc6GUD1qCarkEfCJhPMZDe6CV7S23qno5Z9lvc6
YYM2
-----END CERTIFICATE-----
Generated at Mon Jul 24 14:09:29 2023 by rpki-client on console-ams.rpki-client.org