Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/ZG2DQlmu34Hzky8uoeB_vCe0rUI.roa
File: ZG2DQlmu34Hzky8uoeB_vCe0rUI.roa (raw, json)
Hash identifier: X6aH7zJv+xyPtpFQY6ChwWsQjJuhR8+voASiaDnexOk=
Subject key identifier: 64:6D:83:42:59:AE:DF:81:F3:93:2F:2E:A1:E0:7F:BC:27:B4:AD:42
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 018678F6AEADD3FC7D32C6763513176C5668
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/ZG2DQlmu34Hzky8uoeB_vCe0rUI.roa
Signing time: Wed 22 Feb 2023 11:51:17 +0000
ROA not before: Wed 22 Feb 2023 11:51:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31732
IP address blocks: 82.97.240.0/20 maxlen: 24
5.34.208.0/20 maxlen: 24
185.220.236.0/22 maxlen: 24
188.209.155.0/24 maxlen: 24
45.137.180.0/22 maxlen: 24
213.173.32.0/22 maxlen: 24
82.115.8.0/22 maxlen: 24
82.115.12.0/23 maxlen: 24
185.129.108.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:78:f6:ae:ad:d3:fc:7d:32:c6:76:35:13:17:6c:56:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Feb 22 11:51:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=646d834259aedf81f3932f2ea1e07fbc27b4ad42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:43:4e:ad:c9:99:d9:15:c4:bc:0d:b6:0a:ec:
62:e2:97:f7:99:07:e6:3a:16:7e:66:b2:9d:3f:52:
ec:f4:fc:4d:da:0b:a7:c7:38:a4:4a:a4:e4:66:45:
d0:b8:29:38:ff:cd:ab:e7:68:0d:8a:b7:48:55:c1:
d1:b2:cd:fb:4b:16:84:cc:b9:2b:84:8a:bb:62:f7:
c6:f2:08:f7:99:a8:f6:da:bf:d4:a8:c1:87:b2:fa:
e1:00:93:02:d8:fd:91:72:02:98:1b:ff:d4:49:85:
01:5c:e7:ce:4c:2f:e5:c9:02:6a:14:ee:38:4e:6b:
b9:4d:93:c5:5b:0d:b3:b4:f7:b9:39:31:bb:ab:64:
e2:56:16:df:fd:06:64:6c:f1:ac:fa:4a:15:e8:aa:
15:70:9c:8e:1a:28:f3:6d:c5:94:fc:21:af:06:51:
e9:ab:ec:43:4c:15:bf:8d:ea:b1:07:66:44:f2:fb:
77:97:ae:fd:66:5e:e4:5b:a5:4e:05:f2:4d:fb:b8:
54:b2:0a:40:3c:ff:79:cf:03:d6:f5:f5:67:da:85:
54:b0:10:11:09:d2:61:0d:ae:d9:fe:f4:f9:9d:77:
0d:4a:b2:15:2e:0b:5c:92:6e:77:7b:c0:95:04:cd:
e5:b3:cc:ba:6d:b1:0f:7c:12:6d:b4:7a:9a:b7:5e:
5d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:6D:83:42:59:AE:DF:81:F3:93:2F:2E:A1:E0:7F:BC:27:B4:AD:42
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/ZG2DQlmu34Hzky8uoeB_vCe0rUI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.34.208.0/20
45.137.180.0/22
82.97.240.0/20
82.115.8.0-82.115.13.255
185.129.108.0/22
185.220.236.0/22
188.209.155.0/24
213.173.32.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:5f:15:4f:99:0f:bf:2e:47:e3:ce:b0:6f:71:4a:4e:c2:36:
b6:99:7e:5b:e9:56:bd:08:cf:14:0c:7f:fc:5f:8f:b7:23:2f:
32:24:e5:e1:ca:87:14:33:fb:5d:6f:aa:6b:b7:b0:3d:3d:24:
7d:4e:02:9f:40:cd:6c:f2:ed:19:15:55:33:89:99:bd:92:4e:
04:ee:dc:29:33:af:3e:5c:01:37:6a:21:90:08:85:c0:8a:99:
7c:ad:a0:9f:66:97:1c:70:55:c9:cb:20:54:20:c7:3e:9a:93:
5f:bd:60:98:dc:b2:da:0d:a9:d2:3b:8e:65:a6:df:99:69:7b:
44:4b:ae:ca:e4:51:fe:a8:e5:85:e6:b6:7b:cc:ff:f2:d2:b6:
fe:79:df:92:9e:50:40:07:29:ff:e2:19:67:dd:d5:80:ff:3f:
31:4d:d4:af:95:74:9c:84:8e:b3:4d:e3:8a:10:7a:f5:2a:ce:
f9:b3:3f:41:79:57:d3:0c:6e:dd:16:07:e3:5d:23:cc:81:8d:
df:5d:3d:65:6c:48:e9:b8:4c:73:be:09:a7:ad:d3:cb:de:df:
f9:dd:86:94:d5:60:be:b9:85:8a:78:41:76:31:0d:5c:23:1b:
3c:c2:4a:8e:c7:b8:51:d8:e8:66:0d:08:61:e8:94:ef:fe:de:
0c:c3:1a:cf
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgISAYZ49q6t0/x9MsZ2NRMXbFZoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYzNkYWExYjE0ODUwZjJlNjFjNTkyYjIxOTE5MTVhNWU2
NWE0NzgwHhcNMjMwMjIyMTE1MTE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NDZkODM0MjU5YWVkZjgxZjM5MzJmMmVhMWUwN2ZiYzI3YjRhZDQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAikNOrcmZ2RXEvA22Cuxi4pf3mQfm
OhZ+ZrKdP1Ls9PxN2gunxzikSqTkZkXQuCk4/82r52gNirdIVcHRss37SxaEzLkr
hIq7YvfG8gj3maj22r/UqMGHsvrhAJMC2P2RcgKYG//USYUBXOfOTC/lyQJqFO44
Tmu5TZPFWw2ztPe5OTG7q2TiVhbf/QZkbPGs+koV6KoVcJyOGijzbcWU/CGvBlHp
q+xDTBW/jeqxB2ZE8vt3l679Zl7kW6VOBfJN+7hUsgpAPP95zwPW9fVn2oVUsBAR
CdJhDa7Z/vT5nXcNSrIVLgtckm53e8CVBM3ls8y6bbEPfBJttHqat15d1QIDAQAB
o4ICOzCCAjcwHQYDVR0OBBYEFGRtg0JZrt+B85MvLqHgf7wntK1CMB8GA1UdIwQY
MBaAFCrD2qGxSFDy5hxZKyGRkVpeZaR4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUt
ZmUwNjU5MTc2YTU2LzEvWkcyRFFsbXUzNEh6a3k4dW9lQl92Q2UwclVJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUtZmUwNjU5MTc2YTU2
LzEvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFEGCCsGAQUFBwEHAQH/BEIwQDA+BAIAATA4AwQEBSLQAwQC
LYm0AwQEUmHwMAwDBANScwgDBAFScwwDBAK5gWwDBAK53OwDBAC80ZsDBALVrSAw
DQYJKoZIhvcNAQELBQADggEBAGxfFU+ZD78uR+POsG9xSk7CNraZflvpVr0IzxQM
f/xfj7cjLzIk5eHKhxQz+11vqmu3sD09JH1OAp9AzWzy7RkVVTOJmb2STgTu3Ckz
rz5cATdqIZAIhcCKmXytoJ9mlxxwVcnLIFQgxz6ak1+9YJjcstoNqdI7jmWm35lp
e0RLrsrkUf6o5YXmtnvM//LStv5535KeUEAHKf/iGWfd1YD/PzFN1K+VdJyEjrNN
44oQevUqzvmzP0F5V9MMbt0WB+NdI8yBjd9dPWVsSOm4THO+Caet08ve3/ndhpTV
YL65hYp4QXYxDVwjGzzCSo7HuFHY6GYNCGHolO/+3gzDGs8=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:45 2023 by rpki-client on console-fra.rpki-client.org