Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/94c2ce-9f7b-4ca7-abbc-ca67fd64d34c/1/3SrNB4l-qlFwuFSElPnEhLfvxfM.roa
File: 3SrNB4l-qlFwuFSElPnEhLfvxfM.roa (raw, json)
Hash identifier: nm/i+pju0zWa+7f+UzGvXvo9KOEnRuLfc6jneKKRzV4=
Subject key identifier: DD:2A:CD:07:89:7E:AA:51:70:B8:54:84:94:F9:C4:84:B7:EF:C5:F3
Certificate issuer: /CN=762239893807eb09846e829727d71a92e963a7c8
Certificate serial: 018571C303EF5715025EE1A646C76D0CF883
Authority key identifier: 76:22:39:89:38:07:EB:09:84:6E:82:97:27:D7:1A:92:E9:63:A7:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/diI5iTgH6wmEboKXJ9cakuljp8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/94c2ce-9f7b-4ca7-abbc-ca67fd64d34c/1/3SrNB4l-qlFwuFSElPnEhLfvxfM.roa
Signing time: Mon 02 Jan 2023 09:14:43 +0000
ROA not before: Mon 02 Jan 2023 09:14:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200030
IP address blocks: 92.63.112.0/22 maxlen: 22
92.63.116.0/22 maxlen: 22
92.63.120.0/22 maxlen: 22
92.63.125.0/24 maxlen: 24
92.63.124.0/24 maxlen: 24
92.63.127.0/24 maxlen: 24
185.49.156.0/22 maxlen: 22
92.63.126.0/24 maxlen: 24
77.241.164.0/22 maxlen: 22
77.241.172.0/22 maxlen: 22
77.241.168.0/22 maxlen: 22
2a01:a360::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:c3:03:ef:57:15:02:5e:e1:a6:46:c7:6d:0c:f8:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=762239893807eb09846e829727d71a92e963a7c8
Validity
Not Before: Jan 2 09:14:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dd2acd07897eaa5170b8548494f9c484b7efc5f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:82:95:fe:26:7d:94:db:d5:57:6c:fd:97:e2:
10:48:9a:03:57:4e:d7:8e:59:d3:04:47:cb:7d:bd:
e8:0d:01:22:eb:4f:7d:c2:cc:88:5e:20:a7:57:7b:
1c:f5:71:f1:69:16:30:02:6f:c9:ca:55:6c:b9:04:
55:6c:83:c0:fc:89:cf:fe:54:df:ef:d1:31:b5:c2:
20:fb:b2:0b:eb:ae:a6:5c:a3:f5:48:1d:e1:01:c4:
64:4c:b6:1c:12:b2:02:17:f9:58:d1:a0:cc:09:eb:
fc:b0:53:3c:1d:1a:2a:b9:e9:49:73:53:f4:9f:8c:
57:60:49:23:2a:87:4f:44:7d:a9:84:d8:8b:d9:8f:
72:1c:aa:05:cc:38:55:10:c9:56:9e:31:c1:42:b5:
4d:01:b2:2e:6c:96:c0:b6:55:06:53:a5:64:0c:bd:
05:7d:f3:9c:50:70:d6:40:7f:16:ea:5f:e2:ec:b9:
5a:44:d9:76:de:66:43:a9:cb:c7:db:14:f5:ce:1a:
59:81:7e:af:90:6e:be:e5:90:e4:e2:90:5c:f4:56:
d6:88:04:09:b1:b4:34:d0:91:7b:ab:56:7e:87:07:
9a:67:26:36:fa:f9:36:69:b8:2b:9a:89:48:3e:01:
43:e0:dd:0e:7b:8c:4f:7a:de:ad:83:ec:e7:50:77:
c5:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:2A:CD:07:89:7E:AA:51:70:B8:54:84:94:F9:C4:84:B7:EF:C5:F3
X509v3 Authority Key Identifier:
keyid:76:22:39:89:38:07:EB:09:84:6E:82:97:27:D7:1A:92:E9:63:A7:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/diI5iTgH6wmEboKXJ9cakuljp8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/94c2ce-9f7b-4ca7-abbc-ca67fd64d34c/1/3SrNB4l-qlFwuFSElPnEhLfvxfM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/94c2ce-9f7b-4ca7-abbc-ca67fd64d34c/1/diI5iTgH6wmEboKXJ9cakuljp8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.241.164.0-77.241.175.255
92.63.112.0/20
185.49.156.0/22
IPv6:
2a01:a360::/32
Signature Algorithm: sha256WithRSAEncryption
18:c3:13:a3:f9:44:08:35:66:b7:08:5b:8a:11:1d:c9:e5:41:
05:25:c6:b6:e2:48:d8:32:2a:50:0c:e4:78:49:d8:e0:0e:4b:
79:2c:08:80:ea:93:7e:54:8b:a6:73:89:98:b3:bd:fb:0a:76:
1e:c7:ce:3b:b0:43:a5:ab:8d:67:09:68:47:84:9f:1a:39:46:
68:8d:61:49:6e:6d:9e:3a:26:af:12:07:ec:52:6f:99:97:d2:
e3:18:8f:9f:b4:21:81:1c:23:eb:25:d1:99:e0:f1:36:9e:44:
d9:22:f2:a8:e8:a6:d6:34:6a:bf:5c:aa:bb:70:98:e1:20:40:
38:5f:0b:8d:a0:7a:95:6a:32:ab:a1:5f:ec:86:e9:e9:77:53:
fa:a4:21:0f:b1:57:51:c4:0e:2e:7e:b1:5b:9c:ed:0f:e8:d0:
24:0a:9c:16:aa:41:a7:81:96:73:47:e7:40:c9:73:95:b5:2b:
96:d0:74:96:d3:4e:2d:0e:ae:aa:b1:23:f9:b9:c7:6b:2b:fd:
f8:29:5e:22:e2:20:43:ca:48:bc:ad:b7:78:19:4f:8a:81:8e:
e3:78:98:6d:59:4b:bc:d9:1d:fd:8a:7d:a8:81:a6:57:b1:76:
86:b2:9f:8b:76:32:32:aa:b3:8f:90:88:5d:3a:4a:a5:96:ee:
22:79:88:ef
-----BEGIN CERTIFICATE-----
MIIFIDCCBAigAwIBAgISAYVxwwPvVxUCXuGmRsdtDPiDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2MjIzOTg5MzgwN2ViMDk4NDZlODI5NzI3ZDcxYTkyZTk2
M2E3YzgwHhcNMjMwMTAyMDkxNDQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZDJhY2QwNzg5N2VhYTUxNzBiODU0ODQ5NGY5YzQ4NGI3ZWZjNWYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqoKV/iZ9lNvVV2z9l+IQSJoDV07X
jlnTBEfLfb3oDQEi6099wsyIXiCnV3sc9XHxaRYwAm/JylVsuQRVbIPA/InP/lTf
79ExtcIg+7IL666mXKP1SB3hAcRkTLYcErICF/lY0aDMCev8sFM8HRoquelJc1P0
n4xXYEkjKodPRH2phNiL2Y9yHKoFzDhVEMlWnjHBQrVNAbIubJbAtlUGU6VkDL0F
ffOcUHDWQH8W6l/i7LlaRNl23mZDqcvH2xT1zhpZgX6vkG6+5ZDk4pBc9FbWiAQJ
sbQ00JF7q1Z+hweaZyY2+vk2abgrmolIPgFD4N0Oe4xPet6tg+znUHfF5QIDAQAB
o4ICLDCCAigwHQYDVR0OBBYEFN0qzQeJfqpRcLhUhJT5xIS378XzMB8GA1UdIwQY
MBaAFHYiOYk4B+sJhG6ClyfXGpLpY6fIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGlJNWlUZ0g2d21FYm9LWEo5Y2FrdWxqcDhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC85NGMyY2UtOWY3Yi00Y2E3LWFiYmMt
Y2E2N2ZkNjRkMzRjLzEvM1NyTkI0bC1xbEZ3dUZTRWxQbkVoTGZ2eGZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC85NGMyY2UtOWY3Yi00Y2E3LWFiYmMtY2E2N2ZkNjRkMzRj
LzEvZGlJNWlUZ0g2d21FYm9LWEo5Y2FrdWxqcDhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAgBAIAATAaMAwDBAJN8aQD
BARN8aADBARcP3ADBAK5MZwwDQQCAAIwBwMFACoBo2AwDQYJKoZIhvcNAQELBQAD
ggEBABjDE6P5RAg1ZrcIW4oRHcnlQQUlxrbiSNgyKlAM5HhJ2OAOS3ksCIDqk35U
i6ZziZizvfsKdh7HzjuwQ6WrjWcJaEeEnxo5RmiNYUlubZ46Jq8SB+xSb5mX0uMY
j5+0IYEcI+sl0Zng8TaeRNki8qjoptY0ar9cqrtwmOEgQDhfC42gepVqMquhX+yG
6el3U/qkIQ+xV1HEDi5+sVuc7Q/o0CQKnBaqQaeBlnNH50DJc5W1K5bQdJbTTi0O
rqqxI/m5x2sr/fgpXiLiIEPKSLytt3gZT4qBjuN4mG1ZS7zZHf2KfaiBplexdoay
n4t2MjKqs4+QiF06SqWW7iJ5iO8=
-----END CERTIFICATE-----
Generated at Mon Jan 1 23:30:14 2024 by rpki-client on console-ams.rpki-client.org