Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/UEPz0pwzwfV73aP9Un_uIZ_fkO8.roa
File: UEPz0pwzwfV73aP9Un_uIZ_fkO8.roa (raw, json)
Hash identifier: ltz8H8HMAmArOyj9MyTiNGIDKCRYNQhjX4vkhC5XorI=
Subject key identifier: 50:43:F3:D2:9C:33:C1:F5:7B:DD:A3:FD:52:7F:EE:21:9F:DF:90:EF
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0187216962FFE0B04CB633D8CC7C1EA9627D
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/UEPz0pwzwfV73aP9Un_uIZ_fkO8.roa
Signing time: Mon 27 Mar 2023 04:52:47 +0000
ROA not before: Mon 27 Mar 2023 04:52:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 89.34.202.0/24 maxlen: 24
89.34.219.0/24 maxlen: 24
89.35.119.0/24 maxlen: 24
185.112.249.0/24 maxlen: 24
89.35.129.0/24 maxlen: 24
89.35.130.0/23 maxlen: 23
89.35.131.0/24 maxlen: 24
188.241.136.0/24 maxlen: 24
188.241.137.0/24 maxlen: 24
94.198.171.0/24 maxlen: 24
93.114.244.0/24 maxlen: 24
77.81.100.0/24 maxlen: 24
62.192.152.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 28 Mar 2023 05:02:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:21:69:62:ff:e0:b0:4c:b6:33:d8:cc:7c:1e:a9:62:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Mar 27 04:52:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5043f3d29c33c1f57bdda3fd527fee219fdf90ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b0:8d:7d:25:11:6c:ac:f1:0c:d4:c1:56:0c:
07:c6:09:7c:f2:18:61:4a:af:39:38:04:b2:f8:47:
bb:4e:ca:7c:75:30:dc:cb:57:fc:51:2d:fd:c8:18:
15:98:fb:66:65:da:3a:97:d1:6d:a3:19:0b:9c:b1:
82:a8:d5:5e:fd:aa:45:ce:d5:53:22:f4:9d:e9:93:
91:a7:36:74:45:29:6f:70:cc:70:e5:94:f1:df:ac:
04:35:a4:ea:2e:37:a0:a8:d4:7b:af:e7:b1:75:4f:
3e:e9:73:e4:b1:4e:3d:08:47:09:7b:8b:11:2a:ff:
b4:b8:63:e7:a4:ad:f6:d7:be:1f:6e:b2:fb:f5:6c:
6d:f4:80:34:33:92:f3:e9:6d:14:84:24:19:c7:21:
00:e1:8f:e9:14:88:de:4a:c8:48:55:0f:c5:8e:9b:
aa:9e:60:15:6a:19:11:d3:25:04:7c:0d:a9:9c:13:
e0:81:af:67:0e:4e:9a:88:33:91:cc:e9:ea:4b:60:
d5:69:38:dd:b7:98:01:64:4b:98:28:31:e9:a5:c3:
89:a6:8d:56:a6:98:1b:46:d7:bb:53:86:1a:86:5d:
b7:44:eb:27:9d:14:10:7e:e6:be:30:34:d6:8b:8f:
d0:02:f6:5b:32:5b:b2:a0:c8:d5:7b:ea:cd:4b:f0:
4f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:43:F3:D2:9C:33:C1:F5:7B:DD:A3:FD:52:7F:EE:21:9F:DF:90:EF
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/UEPz0pwzwfV73aP9Un_uIZ_fkO8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.192.152.0/24
77.81.100.0/24
89.34.202.0/24
89.34.219.0/24
89.35.119.0/24
89.35.129.0-89.35.131.255
93.114.244.0/24
94.198.171.0/24
185.112.249.0/24
188.241.136.0/23
Signature Algorithm: sha256WithRSAEncryption
71:44:da:77:93:4c:78:09:12:3c:b1:aa:fa:d4:94:8c:61:6e:
e0:f3:86:d8:86:8a:40:e6:63:9c:16:3a:3a:47:1e:e0:17:4e:
ce:28:21:58:36:b2:4d:22:9d:d3:56:72:a8:6f:2a:0b:ba:b0:
14:23:e9:61:1e:be:0f:b8:57:54:5d:5b:0a:13:2d:0d:16:b2:
ed:26:be:81:b6:c0:ff:dc:dc:7b:0b:39:ed:49:6c:8d:99:e5:
5e:af:69:48:a6:73:39:54:55:89:70:e9:4c:9a:8d:6c:c1:7e:
e6:ef:d3:a6:4d:58:9e:37:1f:18:9e:ac:ff:25:24:ac:b5:ef:
e6:8f:e3:38:b0:1c:d7:45:7b:2b:4c:29:21:d2:c7:f8:39:18:
59:8f:83:84:fc:33:8a:4c:a1:60:2e:bb:71:5f:94:e6:d9:3e:
e7:d4:23:4e:c1:93:c8:8e:0a:95:51:7f:5d:56:ea:05:5e:3d:
ef:e7:f6:af:b0:0d:2b:d7:fe:20:22:cd:04:22:46:70:fe:f8:
4e:3b:22:86:48:94:18:27:fc:c7:fb:22:18:5a:57:26:0f:e4:
5c:9a:53:38:99:8b:a3:e2:d7:a4:2b:91:3d:66:a2:81:b3:ee:
01:2a:74:e8:d5:b2:05:9f:db:12:8f:a1:29:7e:f5:b2:27:3c:
6f:8a:3d:ae
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgISAYchaWL/4LBMtjPYzHweqWJ9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjMwMzI3MDQ1MjQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MDQzZjNkMjljMzNjMWY1N2JkZGEzZmQ1MjdmZWUyMTlmZGY5MGVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7CNfSURbKzxDNTBVgwHxgl88hhh
Sq85OASy+Ee7Tsp8dTDcy1f8US39yBgVmPtmZdo6l9FtoxkLnLGCqNVe/apFztVT
IvSd6ZORpzZ0RSlvcMxw5ZTx36wENaTqLjegqNR7r+exdU8+6XPksU49CEcJe4sR
Kv+0uGPnpK32174fbrL79Wxt9IA0M5Lz6W0UhCQZxyEA4Y/pFIjeSshIVQ/Fjpuq
nmAVahkR0yUEfA2pnBPgga9nDk6aiDORzOnqS2DVaTjdt5gBZEuYKDHppcOJpo1W
ppgbRte7U4Yahl23ROsnnRQQfua+MDTWi4/QAvZbMluyoMjVe+rNS/BPfwIDAQAB
o4ICRzCCAkMwHQYDVR0OBBYEFFBD89KcM8H1e92j/VJ/7iGf35DvMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvVUVQejBwd3p3ZlY3M2FQOVVuX3VJWl9ma084LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMF0GCCsGAQUFBwEHAQH/BE4wTDBKBAIAATBEAwQAPsCYAwQA
TVFkAwQAWSLKAwQAWSLbAwQAWSN3MAwDBABZI4EDBAJZI4ADBABdcvQDBABexqsD
BAC5cPkDBAG88YgwDQYJKoZIhvcNAQELBQADggEBAHFE2neTTHgJEjyxqvrUlIxh
buDzhtiGikDmY5wWOjpHHuAXTs4oIVg2sk0indNWcqhvKgu6sBQj6WEevg+4V1Rd
WwoTLQ0Wsu0mvoG2wP/c3HsLOe1JbI2Z5V6vaUimczlUVYlw6UyajWzBfubv06ZN
WJ43HxierP8lJKy17+aP4ziwHNdFeytMKSHSx/g5GFmPg4T8M4pMoWAuu3FflObZ
PufUI07Bk8iOCpVRf11W6gVePe/n9q+wDSvX/iAizQQiRnD++E47IoZIlBgn/Mf7
IhhaVyYP5FyaUziZi6Pi16QrkT1mooGz7gEqdOjVsgWf2xKPoSl+9bInPG+KPa4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:13 2024 by rpki-client on console-ams.rpki-client.org