Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/cDP8Vgg8LMEcghuuSDmXzO5PX_g.roa
File: cDP8Vgg8LMEcghuuSDmXzO5PX_g.roa (raw, json)
Hash identifier: 2rajobj//ch47jm8C7lI1tyq8LXTGYWAzxQhjBBdG/Y=
Subject key identifier: 70:33:FC:56:08:3C:2C:C1:1C:82:1B:AE:48:39:97:CC:EE:4F:5F:F8
Certificate issuer: /CN=94166b704843d3d9754095c83a91b493828200a2
Certificate serial: 0189F5B7C1E6C6D17AEA18E399D6CD3D0C5E
Authority key identifier: 94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/cDP8Vgg8LMEcghuuSDmXzO5PX_g.roa
Signing time: Mon 14 Aug 2023 20:23:27 +0000
ROA not before: Mon 14 Aug 2023 20:23:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 171.22.144.0/24 maxlen: 24
171.22.146.0/24 maxlen: 24
171.22.147.0/24 maxlen: 24
91.103.120.0/21 maxlen: 24
31.43.174.0/24 maxlen: 24
185.235.71.0/24 maxlen: 24
95.111.128.0/20 maxlen: 20
95.111.144.0/20 maxlen: 20
185.149.12.0/23 maxlen: 24
185.149.13.0/24 maxlen: 24
185.149.14.0/23 maxlen: 24
185.149.14.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:f5:b7:c1:e6:c6:d1:7a:ea:18:e3:99:d6:cd:3d:0c:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94166b704843d3d9754095c83a91b493828200a2
Validity
Not Before: Aug 14 20:23:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7033fc56083c2cc11c821bae483997ccee4f5ff8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:30:65:7e:ca:45:c6:e5:2a:11:ee:72:2c:5e:
85:44:61:0e:bb:f5:1b:bd:ad:10:da:09:87:3b:28:
48:b5:41:64:ce:b2:6c:30:9a:fa:32:33:34:03:bc:
23:f2:31:34:7c:dd:1b:e8:00:5b:00:d4:84:bf:a2:
09:da:3a:51:aa:4c:f5:69:a0:32:4a:c9:15:ec:07:
6f:41:85:ce:1d:c4:92:29:b7:75:8d:e7:a3:86:91:
b6:9f:f0:ea:48:7b:13:2f:3f:61:51:85:56:2a:fb:
e1:ab:8b:23:f6:fd:4e:e1:4c:9b:be:45:52:bc:bf:
e4:22:c7:9e:33:ac:2d:dc:c1:da:c3:0d:20:e0:cd:
f3:8c:54:b8:eb:80:c3:6d:8a:5d:fb:f1:90:31:27:
15:5f:cc:2c:c0:84:27:1c:1f:35:fe:3f:1b:f8:70:
37:0e:4d:8d:43:a2:f4:c1:15:95:95:53:17:e1:80:
38:18:ab:c0:b6:dc:71:b7:a1:c2:10:95:eb:d1:61:
d2:86:09:58:8d:60:13:ca:9b:c6:60:2e:18:17:b8:
b5:e0:f5:57:e4:56:7e:7b:4e:71:cf:b6:d6:3b:1e:
48:94:4e:00:9b:d5:e3:ab:37:40:58:c4:be:ba:28:
69:2f:20:dd:93:8e:6b:9d:db:4c:13:82:ea:7a:4d:
02:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:33:FC:56:08:3C:2C:C1:1C:82:1B:AE:48:39:97:CC:EE:4F:5F:F8
X509v3 Authority Key Identifier:
keyid:94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/cDP8Vgg8LMEcghuuSDmXzO5PX_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.43.174.0/24
91.103.120.0/21
95.111.128.0/19
171.22.144.0/24
171.22.146.0/23
185.149.12.0/22
185.235.71.0/24
Signature Algorithm: sha256WithRSAEncryption
63:f4:34:5e:cb:9d:39:b7:6a:56:42:d7:33:db:5d:eb:b4:4d:
01:45:8b:6b:b5:82:4d:9b:71:4d:f0:b0:15:8f:da:e3:f6:25:
4f:b7:f6:9e:06:c6:0e:1d:da:f6:23:41:51:58:66:52:2f:7a:
b9:ee:91:d8:1c:71:f9:9d:4e:3c:f8:41:4b:d3:c9:18:06:d9:
f8:39:02:73:22:50:a1:a0:53:86:fd:2b:56:24:8d:10:d3:36:
41:c6:ff:7b:7c:87:d5:4b:ba:94:72:3f:55:15:c5:b1:64:01:
8b:4a:22:e5:ec:65:56:18:ed:67:ce:79:31:fa:07:f1:d5:54:
e1:b2:e3:bd:72:50:d0:b7:66:86:95:e3:4d:4c:5f:60:75:92:
d7:c7:a5:ea:bf:e7:9d:41:b0:50:f1:a0:22:3e:b5:db:5f:78:
92:f8:94:cb:8b:16:68:93:6e:cd:75:89:92:cd:fd:53:97:24:
1e:12:9e:0a:eb:ea:b0:a8:b0:ec:07:80:99:b4:22:86:ec:3a:
47:5b:b6:d3:70:90:06:04:64:f2:73:c8:ca:d7:58:95:6e:8c:
08:b3:06:35:0c:f5:5c:85:ce:5b:a6:a8:8b:82:e0:8e:c9:55:
8e:10:72:5b:2e:d9:ef:b4:d7:11:60:be:49:36:2c:67:78:43:
dc:0c:16:3e
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAYn1t8HmxtF66hjjmdbNPQxeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0MTY2YjcwNDg0M2QzZDk3NTQwOTVjODNhOTFiNDkzODI4
MjAwYTIwHhcNMjMwODE0MjAyMzI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MDMzZmM1NjA4M2MyY2MxMWM4MjFiYWU0ODM5OTdjY2VlNGY1ZmY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiDBlfspFxuUqEe5yLF6FRGEOu/Ub
va0Q2gmHOyhItUFkzrJsMJr6MjM0A7wj8jE0fN0b6ABbANSEv6IJ2jpRqkz1aaAy
SskV7AdvQYXOHcSSKbd1jeejhpG2n/DqSHsTLz9hUYVWKvvhq4sj9v1O4UybvkVS
vL/kIseeM6wt3MHaww0g4M3zjFS464DDbYpd+/GQMScVX8wswIQnHB81/j8b+HA3
Dk2NQ6L0wRWVlVMX4YA4GKvAttxxt6HCEJXr0WHShglYjWATypvGYC4YF7i14PVX
5FZ+e05xz7bWOx5IlE4Am9XjqzdAWMS+uihpLyDdk45rndtME4Lqek0CvwIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFHAz/FYIPCzBHIIbrkg5l8zuT1/4MB8GA1UdIwQY
MBaAFJQWa3BIQ9PZdUCVyDqRtJOCggCiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEJacmNFaEQwOWwxUUpYSU9wRzBrNEtDQUtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi80M2ZmOGYtY2Q1NC00Y2YxLThhYWYt
NGJlMThlZjEyOGI0LzEvY0RQOFZnZzhMTUVjZ2h1dVNEbVh6TzVQWF9nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi80M2ZmOGYtY2Q1NC00Y2YxLThhYWYtNGJlMThlZjEyOGI0
LzEvbEJacmNFaEQwOWwxUUpYSU9wRzBrNEtDQUtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQAHyuuAwQD
W2d4AwQFX2+AAwQAqxaQAwQBqxaSAwQCuZUMAwQAuetHMA0GCSqGSIb3DQEBCwUA
A4IBAQBj9DRey505t2pWQtcz213rtE0BRYtrtYJNm3FN8LAVj9rj9iVPt/aeBsYO
Hdr2I0FRWGZSL3q57pHYHHH5nU48+EFL08kYBtn4OQJzIlChoFOG/StWJI0Q0zZB
xv97fIfVS7qUcj9VFcWxZAGLSiLl7GVWGO1nznkx+gfx1VThsuO9clDQt2aGleNN
TF9gdZLXx6Xqv+edQbBQ8aAiPrXbX3iS+JTLixZok27NdYmSzf1TlyQeEp4K6+qw
qLDsB4CZtCKG7DpHW7bTcJAGBGTyc8jK11iVbowIswY1DPVchc5bpqiLguCOyVWO
EHJbLtnvtNcRYL5JNixneEPcDBY+
-----END CERTIFICATE-----
Generated at Wed Aug 16 13:09:57 2023 by rpki-client on console-fra.rpki-client.org