Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/d0edd5-6087-4be1-b36f-ab3dd5dc6709/1/ARNApvCMgSbPaCDk8VhkTACSNag.roa
File: ARNApvCMgSbPaCDk8VhkTACSNag.roa (raw, json)
Hash identifier: 6M/3VXS5xrjCQgbPS6h0i1cnGckpqToJfaxJ7vduam8=
Subject key identifier: 01:13:40:A6:F0:8C:81:26:CF:68:20:E4:F1:58:64:4C:00:92:35:A8
Certificate issuer: /CN=50f2d6b21660fad1f60e2df9d0bd7c6ccf95c311
Certificate serial: 018CB4B6FF315367E5BAFD40059337590492
Authority key identifier: 50:F2:D6:B2:16:60:FA:D1:F6:0E:2D:F9:D0:BD:7C:6C:CF:95:C3:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UPLWshZg-tH2Di350L18bM-VwxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/d0edd5-6087-4be1-b36f-ab3dd5dc6709/1/ARNApvCMgSbPaCDk8VhkTACSNag.roa
Signing time: Fri 29 Dec 2023 08:35:40 +0000
ROA not before: Fri 29 Dec 2023 08:35:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41722
IP address blocks: 185.174.165.0/24 maxlen: 24
185.174.166.0/24 maxlen: 24
185.174.167.0/24 maxlen: 24
91.142.80.0/24 maxlen: 24
91.142.83.0/24 maxlen: 24
91.142.84.0/24 maxlen: 24
91.142.81.0/24 maxlen: 24
91.142.82.0/24 maxlen: 24
91.142.85.0/24 maxlen: 24
91.142.87.0/24 maxlen: 24
185.53.20.0/24 maxlen: 24
91.142.86.0/24 maxlen: 24
91.142.90.0/24 maxlen: 24
185.53.23.0/24 maxlen: 24
185.53.22.0/24 maxlen: 24
91.142.91.0/24 maxlen: 24
91.142.88.0/24 maxlen: 24
185.53.21.0/24 maxlen: 24
91.142.89.0/24 maxlen: 24
91.142.94.0/24 maxlen: 24
91.142.92.0/24 maxlen: 24
91.142.93.0/24 maxlen: 24
91.142.95.0/24 maxlen: 24
178.250.152.0/24 maxlen: 24
178.250.154.0/24 maxlen: 24
178.250.155.0/24 maxlen: 24
178.250.153.0/24 maxlen: 24
185.73.212.0/24 maxlen: 24
185.73.213.0/24 maxlen: 24
178.249.71.0/24 maxlen: 24
178.249.70.0/24 maxlen: 24
178.249.68.0/24 maxlen: 24
178.249.69.0/24 maxlen: 24
185.162.92.0/24 maxlen: 24
185.162.93.0/24 maxlen: 24
185.162.95.0/24 maxlen: 24
185.162.94.0/24 maxlen: 24
185.162.94.0/23 maxlen: 23
185.147.80.0/24 maxlen: 24
185.147.83.0/24 maxlen: 24
185.147.81.0/24 maxlen: 24
185.147.82.0/24 maxlen: 24
2a03:21c0::/32 maxlen: 32
2a07:a501::/32 maxlen: 32
2a07:a500::/32 maxlen: 32
2a07:a502::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:b4:b6:ff:31:53:67:e5:ba:fd:40:05:93:37:59:04:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50f2d6b21660fad1f60e2df9d0bd7c6ccf95c311
Validity
Not Before: Dec 29 08:35:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=011340a6f08c8126cf6820e4f158644c009235a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:93:d2:dc:32:12:ce:d1:54:15:e6:0e:ac:69:
aa:79:9c:3b:ae:68:79:99:81:ed:13:e7:01:ad:82:
c2:16:12:91:2b:d4:21:71:5d:83:f8:a0:4d:1a:c3:
65:21:e1:30:38:bb:3a:6c:a1:4e:2c:1e:60:62:c1:
ff:3f:2a:21:47:e2:8d:c0:fe:17:e5:27:93:51:94:
96:21:c2:f2:47:69:12:da:c4:c1:10:18:94:bb:13:
6a:fd:59:22:10:aa:aa:49:db:f0:34:22:49:e8:fa:
e2:5d:e8:2b:9d:71:4f:05:53:c3:ea:47:5f:c9:80:
65:8f:9e:3f:0d:7a:3a:7a:9c:f9:98:dd:d4:b1:94:
01:b4:8f:42:c9:0c:74:b1:8f:db:d6:c2:c1:62:98:
d5:8e:53:91:de:23:36:b1:7f:d5:37:c7:41:bc:85:
20:0e:4c:3e:e1:b8:b7:e7:3c:b5:b5:1d:cc:6a:21:
fa:45:54:df:b5:79:b5:3e:80:d6:af:f7:6c:fd:b3:
9c:ca:e8:d8:1b:af:b1:9b:81:c2:e5:88:28:34:d5:
70:98:96:a5:18:bc:42:36:8f:3f:cd:f3:6a:b3:49:
a0:76:a4:46:5a:3b:f2:2a:76:7c:c8:e4:14:29:78:
52:5f:d4:95:54:35:74:14:87:ec:68:f9:54:23:a4:
b0:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:13:40:A6:F0:8C:81:26:CF:68:20:E4:F1:58:64:4C:00:92:35:A8
X509v3 Authority Key Identifier:
keyid:50:F2:D6:B2:16:60:FA:D1:F6:0E:2D:F9:D0:BD:7C:6C:CF:95:C3:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UPLWshZg-tH2Di350L18bM-VwxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d0edd5-6087-4be1-b36f-ab3dd5dc6709/1/ARNApvCMgSbPaCDk8VhkTACSNag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d0edd5-6087-4be1-b36f-ab3dd5dc6709/1/UPLWshZg-tH2Di350L18bM-VwxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.142.80.0/20
178.249.68.0/22
178.250.152.0/22
185.53.20.0/22
185.73.212.0/23
185.147.80.0/22
185.162.92.0/22
185.174.165.0-185.174.167.255
IPv6:
2a03:21c0::/32
2a07:a500::-2a07:a502:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
17:d2:e0:96:75:b8:e9:ef:f5:f6:3e:aa:70:0f:fc:7b:4d:fc:
48:3a:65:55:85:fe:2b:a9:13:3b:a1:5f:f6:f1:a5:2f:d6:c3:
4c:48:23:f6:92:0a:13:9c:86:32:38:74:36:99:55:29:8f:ea:
28:c0:d0:4f:fc:3c:84:0f:24:ba:ff:d9:5a:a5:0f:82:33:70:
e8:a2:2c:42:62:71:ff:d4:ae:43:f1:44:7b:50:96:73:80:61:
56:76:85:32:78:8a:ae:26:85:91:d3:bb:13:a9:6d:bd:94:84:
7f:6f:f6:a8:be:c9:bd:ca:6d:ca:0c:8b:6d:31:cb:00:fe:1e:
d1:06:01:8d:74:64:77:a7:9a:d6:35:11:af:96:01:82:f6:0f:
86:59:5e:bc:fe:46:d1:56:34:5a:83:9a:d0:3d:09:c7:27:5c:
e4:f9:a5:2d:2e:b0:ed:90:42:e0:64:37:d5:bf:5a:ea:23:a4:
98:87:76:db:c7:01:05:54:47:b3:ea:cf:b7:1e:d9:c0:1e:e2:
cb:82:0f:ea:61:da:8d:bf:7b:d0:2d:01:7f:ae:3e:7d:4b:c1:
07:3c:b7:ff:03:c1:d9:85:62:1c:f5:b3:88:35:c7:15:63:07:
65:66:af:cd:90:f0:ed:04:0f:84:d8:ca:e2:2e:b9:79:64:ea:
ef:68:ee:bc
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgISAYy0tv8xU2fluv1ABZM3WQSSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwZjJkNmIyMTY2MGZhZDFmNjBlMmRmOWQwYmQ3YzZjY2Y5
NWMzMTEwHhcNMjMxMjI5MDgzNTQwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMTEzNDBhNmYwOGM4MTI2Y2Y2ODIwZTRmMTU4NjQ0YzAwOTIzNWE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgZPS3DISztFUFeYOrGmqeZw7rmh5
mYHtE+cBrYLCFhKRK9QhcV2D+KBNGsNlIeEwOLs6bKFOLB5gYsH/PyohR+KNwP4X
5SeTUZSWIcLyR2kS2sTBEBiUuxNq/VkiEKqqSdvwNCJJ6PriXegrnXFPBVPD6kdf
yYBlj54/DXo6epz5mN3UsZQBtI9CyQx0sY/b1sLBYpjVjlOR3iM2sX/VN8dBvIUg
Dkw+4bi35zy1tR3MaiH6RVTftXm1PoDWr/ds/bOcyujYG6+xm4HC5YgoNNVwmJal
GLxCNo8/zfNqs0mgdqRGWjvyKnZ8yOQUKXhSX9SVVDV0FIfsaPlUI6SwWQIDAQAB
o4ICWTCCAlUwHQYDVR0OBBYEFAETQKbwjIEmz2gg5PFYZEwAkjWoMB8GA1UdIwQY
MBaAFFDy1rIWYPrR9g4t+dC9fGzPlcMRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVBMV3NoWmctdEgyRGkzNTBMMThiTS1Wd3hFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9kMGVkZDUtNjA4Ny00YmUxLWIzNmYt
YWIzZGQ1ZGM2NzA5LzEvQVJOQXB2Q01nU2JQYUNEazhWaGtUQUNTTmFnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC9kMGVkZDUtNjA4Ny00YmUxLWIzNmYtYWIzZGQ1ZGM2NzA5
LzEvVVBMV3NoWmctdEgyRGkzNTBMMThiTS1Wd3hFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMG8GCCsGAQUFBwEHAQH/BGAwXjA+BAIAATA4AwQEW45QAwQC
svlEAwQCsvqYAwQCuTUUAwQBuUnUAwQCuZNQAwQCuaJcMAwDBAC5rqUDBAO5rqAw
HAQCAAIwFgMFACoDIcAwDQMEACoHpQMFACoHpQIwDQYJKoZIhvcNAQELBQADggEB
ABfS4JZ1uOnv9fY+qnAP/HtN/Eg6ZVWF/iupEzuhX/bxpS/Ww0xII/aSChOchjI4
dDaZVSmP6ijA0E/8PIQPJLr/2VqlD4IzcOiiLEJicf/UrkPxRHtQlnOAYVZ2hTJ4
iq4mhZHTuxOpbb2UhH9v9qi+yb3KbcoMi20xywD+HtEGAY10ZHenmtY1Ea+WAYL2
D4ZZXrz+RtFWNFqDmtA9CccnXOT5pS0usO2QQuBkN9W/WuojpJiHdtvHAQVUR7Pq
z7ce2cAe4suCD+ph2o2/e9AtAX+uPn1LwQc8t/8DwdmFYhz1s4g1xxVjB2Vmr82Q
8O0ED4TYyuIuuXlk6u9o7rw=
-----END CERTIFICATE-----
Generated at Mon Jan 1 21:19:33 2024 by rpki-client on console-ams.rpki-client.org