Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/CzKSG25VjPexktuiVHGE22LHRJM.roa
File: CzKSG25VjPexktuiVHGE22LHRJM.roa (raw, json)
Hash identifier: NjbNVwcQtYrRW3GE5UImw+fxs2qOkjluvCLo/bvxZqk=
Subject key identifier: 0B:32:92:1B:6E:55:8C:F7:B1:92:DB:A2:54:71:84:DB:62:C7:44:93
Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial: 0188D2B7DAE3ED4F46906D0E27325E3DC204
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/CzKSG25VjPexktuiVHGE22LHRJM.roa
Signing time: Mon 19 Jun 2023 08:14:04 +0000
ROA not before: Mon 19 Jun 2023 08:14:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205647
IP address blocks: 151.242.0.0/21 maxlen: 21
151.242.8.0/22 maxlen: 22
31.56.116.0/24 maxlen: 24
151.241.224.0/21 maxlen: 21
151.247.214.0/23 maxlen: 23
151.247.216.0/21 maxlen: 21
151.247.224.0/22 maxlen: 22
151.247.232.0/22 maxlen: 22
151.247.228.0/22 maxlen: 22
151.247.238.0/23 maxlen: 23
151.247.237.0/24 maxlen: 24
151.247.240.0/24 maxlen: 24
151.247.236.0/24 maxlen: 24
151.247.241.0/24 maxlen: 24
151.247.248.0/22 maxlen: 22
31.58.240.0/20 maxlen: 20
151.244.52.0/22 maxlen: 22
151.244.56.0/21 maxlen: 21
85.15.49.0/24 maxlen: 24
85.15.48.0/24 maxlen: 24
151.240.240.0/21 maxlen: 21
31.59.12.0/22 maxlen: 22
94.183.192.0/18 maxlen: 18
31.56.64.0/19 maxlen: 19
31.56.96.0/20 maxlen: 20
31.56.0.0/18 maxlen: 18
94.183.0.0/18 maxlen: 18
151.240.80.0/21 maxlen: 21
94.182.192.0/18 maxlen: 18
94.182.204.0/24 maxlen: 24
94.182.205.0/24 maxlen: 24
94.182.206.0/24 maxlen: 24
94.182.204.0/22 maxlen: 22
94.182.207.0/24 maxlen: 24
94.182.217.0/24 maxlen: 24
94.182.226.0/24 maxlen: 24
94.182.222.0/23 maxlen: 23
94.182.228.0/22 maxlen: 22
151.240.168.0/22 maxlen: 22
151.240.192.0/21 maxlen: 21
94.183.128.0/18 maxlen: 18
151.244.48.0/22 maxlen: 22
31.58.236.0/22 maxlen: 22
94.183.64.0/18 maxlen: 18
94.182.41.0/24 maxlen: 24
94.182.56.0/22 maxlen: 22
94.182.60.0/22 maxlen: 22
94.182.64.0/18 maxlen: 18
94.182.72.0/21 maxlen: 21
94.182.97.192/28 maxlen: 28
94.182.0.0/18 maxlen: 18
94.182.8.0/23 maxlen: 23
94.182.12.0/23 maxlen: 23
94.182.82.0/24 maxlen: 24
94.182.116.0/22 maxlen: 22
94.182.114.0/23 maxlen: 23
94.182.120.0/21 maxlen: 21
94.182.128.0/18 maxlen: 18
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d2:b7:da:e3:ed:4f:46:90:6d:0e:27:32:5e:3d:c2:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
Validity
Not Before: Jun 19 08:14:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0b32921b6e558cf7b192dba2547184db62c74493
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f6:59:4f:09:69:05:c2:dd:12:a8:ff:d5:31:
0c:69:2a:53:2a:7b:5a:0d:1a:09:84:82:52:89:95:
4c:17:c9:00:34:dc:08:8a:dc:97:e5:7a:c5:7d:f1:
c2:86:7c:09:3c:0f:2a:72:c7:9d:d3:02:ac:9c:ea:
b0:37:01:e4:4d:ab:84:08:31:29:53:ce:1e:cf:18:
8b:0d:3c:4c:ed:e6:86:dd:ec:87:c8:49:cb:0e:94:
4e:d1:4c:1f:44:81:7f:2d:41:0d:7e:fc:07:d5:97:
c5:f4:f2:06:d7:dc:8f:70:68:1a:e3:81:10:10:64:
95:e3:7e:ea:79:e1:a8:bc:7d:8c:31:5c:d4:1f:66:
e8:0c:85:12:20:73:32:b0:aa:83:83:22:06:dd:18:
4f:c8:41:43:7c:70:5b:a3:ef:1a:27:e9:1b:31:01:
5d:1e:8b:19:09:e7:80:0b:f2:85:eb:9b:52:fa:20:
f3:c5:a5:4c:c3:b5:31:81:3d:79:28:26:9f:fa:a2:
d2:2a:7d:91:f7:57:2c:51:9a:b7:f4:a1:13:72:40:
00:30:61:9a:94:4a:a6:4a:2d:9f:be:9b:67:87:d4:
9c:78:c6:f8:65:3d:14:87:aa:fe:2c:86:e9:b5:84:
e7:3c:7e:c7:74:9e:7b:7d:cc:c4:87:84:25:56:ea:
51:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:32:92:1B:6E:55:8C:F7:B1:92:DB:A2:54:71:84:DB:62:C7:44:93
X509v3 Authority Key Identifier:
keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/CzKSG25VjPexktuiVHGE22LHRJM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.0.0-31.56.111.255
31.56.116.0/24
31.58.236.0-31.58.255.255
31.59.12.0/22
85.15.48.0/23
94.182.0.0/15
151.240.80.0/21
151.240.168.0/22
151.240.192.0/21
151.240.240.0/21
151.241.224.0/21
151.242.0.0-151.242.11.255
151.244.48.0/20
151.247.214.0-151.247.241.255
151.247.248.0/22
Signature Algorithm: sha256WithRSAEncryption
b7:c4:04:d1:dd:54:7c:db:76:e5:63:f4:08:ed:f4:29:8c:c9:
bf:84:25:9f:8d:c3:3d:98:5a:d1:3c:00:18:6a:02:f3:d4:71:
43:0d:dd:73:a0:c2:0a:c4:ea:4b:11:39:04:82:1b:47:6a:e2:
40:aa:5e:96:c9:66:58:7d:31:da:1d:57:cd:ea:f1:33:d6:91:
64:eb:38:c9:0d:97:3a:cd:00:0c:59:31:4f:da:75:1a:2b:03:
9b:88:ff:8c:48:41:00:13:49:de:d9:42:5b:1b:41:cf:6f:d1:
a5:35:fb:49:91:59:3f:e1:98:2f:17:cb:21:bf:ba:9a:02:62:
89:3a:e2:3c:e8:01:4b:26:b6:15:8f:c7:57:74:26:4b:a7:65:
49:41:21:89:30:77:e1:e7:7b:03:04:8c:f8:94:ad:33:c6:09:
f5:24:eb:1c:b1:50:24:9e:7b:dc:dd:69:48:1c:32:71:fe:f3:
9d:11:d6:fc:50:d7:0d:a2:1e:32:78:aa:29:9b:6e:ae:38:bc:
3f:05:df:e9:0c:33:4b:66:f4:9d:c6:cb:d7:11:5c:50:a5:5c:
35:cd:ca:82:36:91:06:4b:ba:62:6e:f6:bf:38:89:ad:ad:cc:
39:d1:34:78:bd:98:c3:c5:d8:34:7a:cb:c3:d5:7c:e2:83:64:
e2:81:89:a7
-----BEGIN CERTIFICATE-----
MIIFbzCCBFegAwIBAgISAYjSt9rj7U9GkG0OJzJePcIEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkZjQ5MTQ4OGE3Y2Q4NDQ4YTQyMDk0NTg3MWMwYjk5Njcy
ZGM2NmUwHhcNMjMwNjE5MDgxNDA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYjMyOTIxYjZlNTU4Y2Y3YjE5MmRiYTI1NDcxODRkYjYyYzc0NDkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvZZTwlpBcLdEqj/1TEMaSpTKnta
DRoJhIJSiZVMF8kANNwIityX5XrFffHChnwJPA8qcsed0wKsnOqwNwHkTauECDEp
U84ezxiLDTxM7eaG3eyHyEnLDpRO0UwfRIF/LUENfvwH1ZfF9PIG19yPcGga44EQ
EGSV437qeeGovH2MMVzUH2boDIUSIHMysKqDgyIG3RhPyEFDfHBbo+8aJ+kbMQFd
HosZCeeAC/KF65tS+iDzxaVMw7UxgT15KCaf+qLSKn2R91csUZq39KETckAAMGGa
lEqmSi2fvptnh9SceMb4ZT0Uh6r+LIbptYTnPH7HdJ57fczEh4QlVupRdQIDAQAB
o4ICezCCAncwHQYDVR0OBBYEFAsykhtuVYz3sZLbolRxhNtix0STMB8GA1UdIwQY
MBaAFK30kUiKfNhEikIJRYccC5lnLcZuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmZTUlNJcDgyRVNLUWdsRmh4d0xtV2N0eG00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi83MTVkMTUtMjgxMC00ODI3LThkYmQt
MGJlZTA2MTI2YjFhLzEvQ3pLU0cyNVZqUGV4a3R1aVZIR0UyMkxIUkpNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi83MTVkMTUtMjgxMC00ODI3LThkYmQtMGJlZTA2MTI2YjFh
LzEvcmZTUlNJcDgyRVNLUWdsRmh4d0xtV2N0eG00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGQBggrBgEFBQcBBwEB/wSBgDB+MHwEAgABMHYwCwMDAx84
AwQEHzhgAwQAHzh0MAsDBAIfOuwDAwAfOgMEAh87DAMEAVUPMAMDAV62AwQDl/BQ
AwQCl/CoAwQDl/DAAwQDl/DwAwQDl/HgMAsDAwGX8gMEApfyCAMEBJf0MDAMAwQB
l/fWAwQBl/fwAwQCl/f4MA0GCSqGSIb3DQEBCwUAA4IBAQC3xATR3VR823blY/QI
7fQpjMm/hCWfjcM9mFrRPAAYagLz1HFDDd1zoMIKxOpLETkEghtHauJAql6WyWZY
fTHaHVfN6vEz1pFk6zjJDZc6zQAMWTFP2nUaKwObiP+MSEEAE0ne2UJbG0HPb9Gl
NftJkVk/4ZgvF8shv7qaAmKJOuI86AFLJrYVj8dXdCZLp2VJQSGJMHfh53sDBIz4
lK0zxgn1JOscsVAknnvc3WlIHDJx/vOdEdb8UNcNoh4yeKopm26uOLw/Bd/pDDNL
ZvSdxsvXEVxQpVw1zcqCNpEGS7pibva/OImtrcw50TR4vZjDxdg0esvD1Xzig2Ti
gYmn
Generated at Wed Jul 26 10:59:35 2023 by rpki-client on console-ams.rpki-client.org