Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/6cfc2b-9be8-4fe0-a424-196cc167113e/1/P7GG0BHKkyKnhmV0nNv_ayYBNvA.roa
File: P7GG0BHKkyKnhmV0nNv_ayYBNvA.roa (raw, json)
Hash identifier: X3yHg9AuFSrAONt1+8PFKZbUIushlbel+wBGg2beO4s=
Subject key identifier: 3F:B1:86:D0:11:CA:93:22:A7:86:65:74:9C:DB:FF:6B:26:01:36:F0
Certificate issuer: /CN=1c88af2f43654b3f452d5c74ed074712570d1fde
Certificate serial: 018A834DDB8EC702186A2D51310355F6B83A
Authority key identifier: 1C:88:AF:2F:43:65:4B:3F:45:2D:5C:74:ED:07:47:12:57:0D:1F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HIivL0NlSz9FLVx07QdHElcNH94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/6cfc2b-9be8-4fe0-a424-196cc167113e/1/P7GG0BHKkyKnhmV0nNv_ayYBNvA.roa
Signing time: Mon 11 Sep 2023 08:13:52 +0000
ROA not before: Mon 11 Sep 2023 08:13:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16205
IP address blocks: 178.249.24.0/21 maxlen: 21
81.201.144.0/20 maxlen: 20
185.75.184.0/22 maxlen: 22
217.18.176.0/20 maxlen: 20
176.52.200.0/21 maxlen: 21
2a00:8180::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:83:4d:db:8e:c7:02:18:6a:2d:51:31:03:55:f6:b8:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c88af2f43654b3f452d5c74ed074712570d1fde
Validity
Not Before: Sep 11 08:13:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3fb186d011ca9322a78665749cdbff6b260136f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:be:19:f3:1c:f1:15:32:3d:4f:86:23:c5:1b:
bd:f2:32:0f:f1:71:1a:51:62:69:29:5e:1a:8b:06:
34:19:4f:ac:8c:eb:85:f8:9f:1d:e3:5c:61:22:7d:
b3:3e:5b:28:00:42:d5:32:d9:ac:38:32:5e:68:b7:
d9:de:9e:8d:f1:18:50:79:68:70:ea:4c:cc:01:b6:
25:d7:d0:dd:3d:ea:4d:20:e9:c9:b2:43:95:e0:97:
03:04:6d:96:05:6f:c0:6d:ef:21:8d:69:0f:e7:1f:
1e:b6:6a:10:e1:65:1c:b0:1a:e2:4a:2d:ba:72:c8:
04:6d:e0:2e:87:2c:37:a4:23:7b:1f:af:69:69:af:
17:85:fd:93:44:85:67:a0:1c:d9:4e:02:40:ee:b9:
e2:cb:ec:3a:50:3b:bb:d5:4a:f1:d8:0b:be:05:be:
56:c3:17:95:34:d1:5e:a1:b1:a8:f9:b1:95:b7:fb:
11:e5:87:3a:7a:f8:8d:1f:08:23:6f:d1:03:3c:a7:
35:b7:42:21:de:2e:26:a2:9e:60:a7:54:83:e5:5f:
c7:ef:ce:d6:4e:16:10:81:ed:45:e1:64:0d:01:e2:
34:c9:e0:00:8d:4c:aa:84:9e:ac:89:36:79:c7:c6:
2c:e8:83:a5:0d:ae:d9:c5:9b:e6:d6:5c:69:84:77:
37:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:B1:86:D0:11:CA:93:22:A7:86:65:74:9C:DB:FF:6B:26:01:36:F0
X509v3 Authority Key Identifier:
keyid:1C:88:AF:2F:43:65:4B:3F:45:2D:5C:74:ED:07:47:12:57:0D:1F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HIivL0NlSz9FLVx07QdHElcNH94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/6cfc2b-9be8-4fe0-a424-196cc167113e/1/P7GG0BHKkyKnhmV0nNv_ayYBNvA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/6cfc2b-9be8-4fe0-a424-196cc167113e/1/HIivL0NlSz9FLVx07QdHElcNH94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.201.144.0/20
176.52.200.0/21
178.249.24.0/21
185.75.184.0/22
217.18.176.0/20
IPv6:
2a00:8180::/32
Signature Algorithm: sha256WithRSAEncryption
67:25:fb:83:43:68:59:7c:0e:56:7c:64:32:84:89:66:27:82:
71:a1:d8:cf:c4:91:d7:90:a7:dd:bf:ba:93:2e:d1:80:29:d1:
2b:d6:a6:bf:c5:f7:54:cf:f7:56:f0:c4:3d:f1:f4:38:90:99:
81:6d:1f:3a:e0:05:7d:8b:c5:da:7c:7a:e8:ee:37:20:ca:b3:
8a:1f:e1:ab:ed:9b:b3:9f:d1:61:d4:d4:08:6f:52:17:83:7f:
1d:96:d2:f2:20:e3:f9:58:a5:a2:f4:5f:09:76:29:8b:15:27:
09:5f:73:bc:b9:ae:87:bb:60:1a:3a:01:ba:11:ab:dc:42:59:
74:13:fb:0d:3e:f6:c6:25:cc:12:c3:7a:2f:2d:c8:f6:15:4f:
fa:2f:ac:b2:ae:61:5f:62:0f:d4:bd:83:dc:ee:38:23:07:a9:
0c:13:4e:15:13:c3:3f:66:c0:10:f1:ca:e4:45:7a:79:fc:f9:
dc:a8:3a:bf:04:2c:88:e6:a5:84:83:66:8e:e7:3b:d0:47:76:
00:49:09:36:ed:4d:cc:86:7a:c2:eb:a1:93:87:55:2a:86:d0:
61:03:7d:d8:eb:5b:69:61:2a:e0:a3:c5:e3:6a:ce:ac:db:17:
ef:9a:a3:27:e8:a3:90:1c:78:4e:3c:5c:16:ce:b8:8a:71:2e:
59:47:62:8a
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgISAYqDTduOxwIYai1RMQNV9rg6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjODhhZjJmNDM2NTRiM2Y0NTJkNWM3NGVkMDc0NzEyNTcw
ZDFmZGUwHhcNMjMwOTExMDgxMzUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZmIxODZkMDExY2E5MzIyYTc4NjY1NzQ5Y2RiZmY2YjI2MDEzNmYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArL4Z8xzxFTI9T4YjxRu98jIP8XEa
UWJpKV4aiwY0GU+sjOuF+J8d41xhIn2zPlsoAELVMtmsODJeaLfZ3p6N8RhQeWhw
6kzMAbYl19DdPepNIOnJskOV4JcDBG2WBW/Abe8hjWkP5x8etmoQ4WUcsBriSi26
csgEbeAuhyw3pCN7H69paa8Xhf2TRIVnoBzZTgJA7rniy+w6UDu71Urx2Au+Bb5W
wxeVNNFeobGo+bGVt/sR5Yc6eviNHwgjb9EDPKc1t0Ih3i4mop5gp1SD5V/H787W
ThYQge1F4WQNAeI0yeAAjUyqhJ6siTZ5x8Ys6IOlDa7ZxZvm1lxphHc3uQIDAQAB
o4ICMDCCAiwwHQYDVR0OBBYEFD+xhtARypMip4ZldJzb/2smATbwMB8GA1UdIwQY
MBaAFByIry9DZUs/RS1cdO0HRxJXDR/eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSElpdkwwTmxTejlGTFZ4MDdRZEhFbGNOSDk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS82Y2ZjMmItOWJlOC00ZmUwLWE0MjQt
MTk2Y2MxNjcxMTNlLzEvUDdHRzBCSEtreUtuaG1WMG5Odl9heVlCTnZBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS82Y2ZjMmItOWJlOC00ZmUwLWE0MjQtMTk2Y2MxNjcxMTNl
LzEvSElpdkwwTmxTejlGTFZ4MDdRZEhFbGNOSDk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQEUcmQAwQD
sDTIAwQDsvkYAwQCuUu4AwQE2RKwMA0EAgACMAcDBQAqAIGAMA0GCSqGSIb3DQEB
CwUAA4IBAQBnJfuDQ2hZfA5WfGQyhIlmJ4JxodjPxJHXkKfdv7qTLtGAKdEr1qa/
xfdUz/dW8MQ98fQ4kJmBbR864AV9i8XafHro7jcgyrOKH+Gr7Zuzn9Fh1NQIb1IX
g38dltLyIOP5WKWi9F8JdimLFScJX3O8ua6Hu2AaOgG6EavcQll0E/sNPvbGJcwS
w3ovLcj2FU/6L6yyrmFfYg/UvYPc7jgjB6kME04VE8M/ZsAQ8crkRXp5/PncqDq/
BCyI5qWEg2aO5zvQR3YASQk27U3MhnrC66GTh1UqhtBhA33Y61tpYSrgo8Xjas6s
2xfvmqMn6KOQHHhOPFwWzriKcS5ZR2KK
-----END CERTIFICATE-----
Generated at Tue Oct 24 12:09:36 2023 by rpki-client on console-fra.rpki-client.org