Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/b14193-f569-434a-aea4-f5deaa9bf0f7/1/IDv8HZ13F7Cz3neJuLCWgwyxWEY.roa
File: IDv8HZ13F7Cz3neJuLCWgwyxWEY.roa (raw, json)
Hash identifier: MaCtg1uTfCVUtApdGRfgUonsoIhHO/GISo+6dm7rdfA=
Subject key identifier: 20:3B:FC:1D:9D:77:17:B0:B3:DE:77:89:B8:B0:96:83:0C:B1:58:46
Certificate issuer: /CN=7afa135b2072dfcc4ef3b541c136bc8001ef4307
Certificate serial: 01856F022A93580D7D94D728500A4D777BFD
Authority key identifier: 7A:FA:13:5B:20:72:DF:CC:4E:F3:B5:41:C1:36:BC:80:01:EF:43:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/evoTWyBy38xO87VBwTa8gAHvQwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/b14193-f569-434a-aea4-f5deaa9bf0f7/1/IDv8HZ13F7Cz3neJuLCWgwyxWEY.roa
Signing time: Sun 01 Jan 2023 20:24:50 +0000
ROA not before: Sun 01 Jan 2023 20:24:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58193
IP address blocks: 185.154.86.0/24 maxlen: 24
178.251.124.0/24 maxlen: 24
178.251.125.0/24 maxlen: 24
2a02:fae0::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:02:2a:93:58:0d:7d:94:d7:28:50:0a:4d:77:7b:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7afa135b2072dfcc4ef3b541c136bc8001ef4307
Validity
Not Before: Jan 1 20:24:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=203bfc1d9d7717b0b3de7789b8b096830cb15846
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:82:ea:6a:0b:8a:fb:7d:a7:99:eb:28:b4:c7:
95:9f:ff:03:cf:18:79:40:08:51:a5:f1:d9:31:27:
9a:f6:51:92:62:7f:a4:03:50:b2:06:5f:46:20:e6:
54:25:bb:d3:40:a8:e3:02:72:b9:b9:38:1c:bb:58:
ce:1b:42:96:aa:04:72:bf:94:82:d3:7e:58:dc:13:
e1:4c:db:2e:6d:af:2c:e1:45:45:e6:55:6e:79:07:
c8:4b:8b:67:9e:fc:72:cd:b3:8d:77:fe:c0:66:6d:
c9:11:2f:d6:bb:59:00:b0:a7:ac:d0:f6:86:34:bf:
a8:f8:24:20:f4:b9:11:28:c2:f2:16:15:00:7b:a8:
c1:17:b9:bc:83:96:b5:2d:7b:d4:68:ce:43:52:4f:
a1:47:48:53:a4:07:b4:57:9f:ca:b0:e3:91:de:0f:
58:1b:b3:bd:b6:57:f9:29:1c:e9:53:cc:5e:9d:28:
08:1f:20:6e:3b:b5:30:32:cc:13:ea:a0:40:66:91:
72:f9:cb:9e:51:cf:ec:0e:79:71:ff:7c:00:a6:dc:
4c:11:20:0f:a2:e8:05:b7:64:bb:e4:7c:2c:17:3f:
51:a1:7a:7d:1e:93:81:17:fe:bf:ea:e9:60:86:cc:
fe:cb:23:b3:4e:c8:d6:c7:5f:ed:a6:94:eb:3a:97:
55:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:3B:FC:1D:9D:77:17:B0:B3:DE:77:89:B8:B0:96:83:0C:B1:58:46
X509v3 Authority Key Identifier:
keyid:7A:FA:13:5B:20:72:DF:CC:4E:F3:B5:41:C1:36:BC:80:01:EF:43:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/evoTWyBy38xO87VBwTa8gAHvQwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/b14193-f569-434a-aea4-f5deaa9bf0f7/1/IDv8HZ13F7Cz3neJuLCWgwyxWEY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/b14193-f569-434a-aea4-f5deaa9bf0f7/1/evoTWyBy38xO87VBwTa8gAHvQwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.251.124.0/23
185.154.86.0/24
IPv6:
2a02:fae0::/29
Signature Algorithm: sha256WithRSAEncryption
13:44:93:37:e9:0c:31:c9:c0:e6:93:8e:74:df:d3:0b:90:c6:
1c:d6:24:49:15:e0:1b:f2:cc:c8:b8:50:7b:0c:85:16:ec:ed:
57:f8:c9:03:8f:64:2a:2f:fc:a4:1d:93:dd:bb:71:ad:f0:12:
de:c0:a7:c0:80:63:f3:8e:98:98:76:db:b1:bd:db:ba:ba:33:
1c:2d:bd:e7:90:c9:a9:a7:07:4f:44:9f:1f:3c:53:50:28:42:
9c:80:9a:03:b6:d9:fe:13:06:5b:1c:41:50:07:c3:6a:46:b5:
58:cb:3f:67:9b:ca:69:5c:1d:1f:a7:3f:b2:e9:0e:dd:4d:ad:
0c:da:26:8e:08:c4:84:7a:b2:e5:42:48:ec:a4:c8:34:2b:31:
cf:27:45:93:f1:33:9f:fe:7f:ff:87:2c:ed:13:59:4c:cd:d0:
0c:52:48:54:4f:f6:f8:81:22:44:86:7b:65:8d:b9:fa:95:e8:
21:82:cc:38:de:4a:19:44:cd:52:cb:36:d0:bd:fc:13:34:61:
b7:ce:34:57:b5:a8:79:34:a6:f0:82:33:b6:42:c1:28:96:b6:
6c:49:42:88:96:16:01:be:2f:5f:96:51:8a:fa:7b:c9:d0:61:
55:11:04:ef:5c:30:a4:da:f8:dc:fb:43:da:d0:d6:9c:0f:8f:
25:a8:7e:01
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYVvAiqTWA19lNcoUApNd3v9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhZmExMzViMjA3MmRmY2M0ZWYzYjU0MWMxMzZiYzgwMDFl
ZjQzMDcwHhcNMjMwMTAxMjAyNDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMDNiZmMxZDlkNzcxN2IwYjNkZTc3ODliOGIwOTY4MzBjYjE1ODQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8oLqaguK+32nmesotMeVn/8Dzxh5
QAhRpfHZMSea9lGSYn+kA1CyBl9GIOZUJbvTQKjjAnK5uTgcu1jOG0KWqgRyv5SC
035Y3BPhTNsuba8s4UVF5lVueQfIS4tnnvxyzbONd/7AZm3JES/Wu1kAsKes0PaG
NL+o+CQg9LkRKMLyFhUAe6jBF7m8g5a1LXvUaM5DUk+hR0hTpAe0V5/KsOOR3g9Y
G7O9tlf5KRzpU8xenSgIHyBuO7UwMswT6qBAZpFy+cueUc/sDnlx/3wAptxMESAP
ougFt2S75HwsFz9RoXp9HpOBF/6/6ulghsz+yyOzTsjWx1/tppTrOpdVIQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFCA7/B2ddxews953ibiwloMMsVhGMB8GA1UdIwQY
MBaAFHr6E1sgct/MTvO1QcE2vIAB70MHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXZvVFd5QnkzOHhPODdWQndUYThnQUh2UXdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9iMTQxOTMtZjU2OS00MzRhLWFlYTQt
ZjVkZWFhOWJmMGY3LzEvSUR2OEhaMTNGN0N6M25lSnVMQ1dnd3l4V0VZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC9iMTQxOTMtZjU2OS00MzRhLWFlYTQtZjVkZWFhOWJmMGY3
LzEvZXZvVFd5QnkzOHhPODdWQndUYThnQUh2UXdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQBsvt8AwQA
uZpWMA0EAgACMAcDBQMqAvrgMA0GCSqGSIb3DQEBCwUAA4IBAQATRJM36QwxycDm
k45039MLkMYc1iRJFeAb8szIuFB7DIUW7O1X+MkDj2QqL/ykHZPdu3Gt8BLewKfA
gGPzjpiYdtuxvdu6ujMcLb3nkMmppwdPRJ8fPFNQKEKcgJoDttn+EwZbHEFQB8Nq
RrVYyz9nm8ppXB0fpz+y6Q7dTa0M2iaOCMSEerLlQkjspMg0KzHPJ0WT8TOf/n//
hyztE1lMzdAMUkhUT/b4gSJEhntljbn6leghgsw43koZRM1SyzbQvfwTNGG3zjRX
tah5NKbwgjO2QsEolrZsSUKIlhYBvi9fllGK+nvJ0GFVEQTvXDCk2vjc+0Pa0Nac
D48lqH4B
-----END CERTIFICATE-----
Generated at Thu Aug 31 10:06:37 2023 by rpki-client on console-fra.rpki-client.org