Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/s5VUHSEd5PeoKhsUrYivR1WVUnA.roa
File: s5VUHSEd5PeoKhsUrYivR1WVUnA.roa (raw, json)
Hash identifier: R+eLnm6AWniHs55ayM5w/fQ+QJzDA0FiLmWXyIr3MqA=
Subject key identifier: B3:95:54:1D:21:1D:E4:F7:A8:2A:1B:14:AD:88:AF:47:55:95:52:70
Certificate issuer: /CN=178235df535526d9e6d6aff6fa7ac52293a92c71
Certificate serial: 0189444B24401E9C7549BE586279B668B3B0
Authority key identifier: 17:82:35:DF:53:55:26:D9:E6:D6:AF:F6:FA:7A:C5:22:93:A9:2C:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F4I131NVJtnm1q_2-nrFIpOpLHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/s5VUHSEd5PeoKhsUrYivR1WVUnA.roa
Signing time: Tue 11 Jul 2023 09:32:02 +0000
ROA not before: Tue 11 Jul 2023 09:32:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25467
IP address blocks: 81.17.229.0/24 maxlen: 24
81.17.228.0/23 maxlen: 23
81.17.228.0/24 maxlen: 24
82.214.66.0/24 maxlen: 24
82.214.76.0/24 maxlen: 24
82.214.76.0/23 maxlen: 23
82.214.77.0/24 maxlen: 24
82.214.78.0/24 maxlen: 24
82.214.85.0/24 maxlen: 24
82.214.84.0/24 maxlen: 24
82.214.84.0/23 maxlen: 23
82.214.96.0/21 maxlen: 21
82.214.97.0/24 maxlen: 24
82.214.98.0/24 maxlen: 24
82.214.96.0/24 maxlen: 24
82.214.100.0/24 maxlen: 24
82.214.101.0/24 maxlen: 24
82.214.99.0/24 maxlen: 24
82.214.102.0/24 maxlen: 24
82.214.103.0/24 maxlen: 24
82.214.112.0/24 maxlen: 24
82.214.108.0/22 maxlen: 22
82.214.111.0/24 maxlen: 24
82.214.110.0/24 maxlen: 24
82.214.114.0/24 maxlen: 24
82.214.115.0/24 maxlen: 24
82.214.112.0/21 maxlen: 21
82.214.113.0/24 maxlen: 24
82.214.118.0/24 maxlen: 24
82.214.116.0/24 maxlen: 24
82.214.117.0/24 maxlen: 24
82.214.121.0/24 maxlen: 24
82.214.119.0/24 maxlen: 24
82.214.120.0/23 maxlen: 23
82.214.120.0/24 maxlen: 24
2a02:2230:6200::/40 maxlen: 40
2a02:2230:4200::/40 maxlen: 40
2a02:2230:3200::/40 maxlen: 40
2a02:2230:2200::/40 maxlen: 40
2a02:2230:1200::/40 maxlen: 40
2a02:2230:200::/40 maxlen: 40
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:44:4b:24:40:1e:9c:75:49:be:58:62:79:b6:68:b3:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=178235df535526d9e6d6aff6fa7ac52293a92c71
Validity
Not Before: Jul 11 09:32:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b395541d211de4f7a82a1b14ad88af4755955270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:0e:22:4a:00:bb:df:c6:b4:01:a2:96:b2:3d:
45:a3:10:02:c9:8c:ce:36:0d:8f:94:4a:ad:66:35:
30:65:0a:d0:4f:be:d5:93:f4:9e:24:3e:57:6e:c9:
d9:ea:75:7c:51:13:60:a5:bb:81:93:b6:80:20:e4:
12:4b:e0:13:d0:dd:6f:36:cc:8d:f4:3e:61:88:9b:
d1:e8:24:5d:2f:9f:85:c9:0a:5c:e6:a1:e5:21:73:
5e:c1:31:38:54:2d:aa:5a:17:c4:fe:17:ef:cd:17:
b3:4d:20:44:f2:c5:c3:ac:67:d4:d2:91:e1:7d:1d:
dd:2d:74:0e:5a:b8:f3:57:32:4e:4e:12:80:2c:4e:
c6:35:a5:d4:2c:28:f4:d1:98:8e:08:6e:15:a3:4f:
a0:53:85:3d:4c:98:d5:95:c0:a2:5a:32:81:40:93:
d0:83:1c:7b:55:2f:a2:0b:a7:37:c6:fb:eb:91:fd:
c4:f2:0a:6e:4a:1e:d3:01:a7:a9:e5:25:4a:40:0c:
ba:d3:c2:c2:8e:b9:0f:e3:85:d2:0e:bc:e8:83:2b:
ad:ce:a9:9a:81:10:e4:c4:66:9c:ed:d3:24:f5:66:
61:28:84:f7:b2:32:94:92:52:fb:98:75:15:21:65:
2c:89:2b:b6:9b:60:97:d7:14:a2:49:9d:9f:df:39:
0b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:95:54:1D:21:1D:E4:F7:A8:2A:1B:14:AD:88:AF:47:55:95:52:70
X509v3 Authority Key Identifier:
keyid:17:82:35:DF:53:55:26:D9:E6:D6:AF:F6:FA:7A:C5:22:93:A9:2C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F4I131NVJtnm1q_2-nrFIpOpLHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/s5VUHSEd5PeoKhsUrYivR1WVUnA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/F4I131NVJtnm1q_2-nrFIpOpLHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.17.228.0/23
82.214.66.0/24
82.214.76.0-82.214.78.255
82.214.84.0/23
82.214.96.0/21
82.214.108.0-82.214.121.255
IPv6:
2a02:2230:200::/40
2a02:2230:1200::/40
2a02:2230:2200::/40
2a02:2230:3200::/40
2a02:2230:4200::/40
2a02:2230:6200::/40
Signature Algorithm: sha256WithRSAEncryption
2e:f8:fa:f7:ec:ed:4c:f1:b1:1b:4e:0d:1b:8a:7e:bc:34:bc:
cd:67:5a:77:b8:4b:fb:5b:c4:41:66:d1:89:6c:40:bc:57:70:
91:8b:5b:18:07:b6:ba:55:d3:1d:6d:1e:41:bf:f0:05:52:c4:
df:2f:ca:48:bc:ad:0e:b6:62:8d:49:f1:82:ac:c5:2c:4f:92:
fd:c1:d1:2a:c2:54:80:39:1e:63:e7:35:5e:30:dd:98:0f:56:
4c:38:c0:2e:ca:64:06:18:ea:91:dd:e7:9d:08:e8:51:f6:32:
91:ba:f2:95:8a:a9:a4:4e:91:46:92:32:e7:c3:ed:7b:a2:0f:
1f:3a:89:11:72:73:6b:4f:83:15:2e:3e:87:21:73:03:1c:97:
08:86:75:aa:c4:c4:1c:14:8c:fd:32:3b:be:0a:ce:c5:a4:23:
43:cf:1e:08:84:ad:24:22:e6:47:8d:4f:cb:80:65:c5:ed:e0:
ae:c0:8f:34:ca:28:95:0c:00:6f:f8:ba:e4:29:a0:41:80:39:
93:75:1a:23:c3:81:f9:11:9e:36:f9:ac:73:cb:23:4c:4a:66:
5a:aa:37:06:c0:3d:a7:44:3d:c2:48:0e:90:bd:b7:bc:e2:b5:
3c:b8:73:e1:53:d3:cb:81:c6:e9:ec:f6:3f:8f:a2:a8:2f:8a:
dc:68:44:91
-----BEGIN CERTIFICATE-----
MIIFZDCCBEygAwIBAgISAYlESyRAHpx1Sb5YYnm2aLOwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3ODIzNWRmNTM1NTI2ZDllNmQ2YWZmNmZhN2FjNTIyOTNh
OTJjNzEwHhcNMjMwNzExMDkzMjAyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMzk1NTQxZDIxMWRlNGY3YTgyYTFiMTRhZDg4YWY0NzU1OTU1MjcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkA4iSgC738a0AaKWsj1FoxACyYzO
Ng2PlEqtZjUwZQrQT77Vk/SeJD5XbsnZ6nV8URNgpbuBk7aAIOQSS+AT0N1vNsyN
9D5hiJvR6CRdL5+FyQpc5qHlIXNewTE4VC2qWhfE/hfvzRezTSBE8sXDrGfU0pHh
fR3dLXQOWrjzVzJOThKALE7GNaXULCj00ZiOCG4Vo0+gU4U9TJjVlcCiWjKBQJPQ
gxx7VS+iC6c3xvvrkf3E8gpuSh7TAaep5SVKQAy608LCjrkP44XSDrzogyutzqma
gRDkxGac7dMk9WZhKIT3sjKUklL7mHUVIWUsiSu2m2CX1xSiSZ2f3zkLqQIDAQAB
o4ICcDCCAmwwHQYDVR0OBBYEFLOVVB0hHeT3qCobFK2Ir0dVlVJwMB8GA1UdIwQY
MBaAFBeCNd9TVSbZ5tav9vp6xSKTqSxxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjRJMTMxTlZKdG5tMXFfMi1uckZJcE9wTEhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9jMzgzYmItZTgwNi00YTZkLWEyZTgt
ZWU1Y2EzNmYxZDlhLzEvczVWVUhTRWQ1UGVvS2hzVXJZaXZSMVdWVW5BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi9jMzgzYmItZTgwNi00YTZkLWEyZTgtZWU1Y2EzNmYxZDlh
LzEvRjRJMTMxTlZKdG5tMXFfMi1uckZJcE9wTEhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGFBggrBgEFBQcBBwEB/wR2MHQwOgQCAAEwNAMEAVER5AME
AFLWQjAMAwQCUtZMAwQAUtZOAwQBUtZUAwQDUtZgMAwDBAJS1mwDBAFS1ngwNgQC
AAIwMAMGACoCIjACAwYAKgIiMBIDBgAqAiIwIgMGACoCIjAyAwYAKgIiMEIDBgAq
AiIwYjANBgkqhkiG9w0BAQsFAAOCAQEALvj69+ztTPGxG04NG4p+vDS8zWdad7hL
+1vEQWbRiWxAvFdwkYtbGAe2ulXTHW0eQb/wBVLE3y/KSLytDrZijUnxgqzFLE+S
/cHRKsJUgDkeY+c1XjDdmA9WTDjALspkBhjqkd3nnQjoUfYykbrylYqppE6RRpIy
58Pte6IPHzqJEXJza0+DFS4+hyFzAxyXCIZ1qsTEHBSM/TI7vgrOxaQjQ88eCISt
JCLmR41Py4Blxe3grsCPNMoolQwAb/i65CmgQYA5k3UaI8OB+RGeNvmsc8sjTEpm
Wqo3BsA9p0Q9wkgOkL23vOK1PLhz4VPTy4HG6ez2P4+iqC+K3GhEkQ==
-----END CERTIFICATE-----
Generated at Tue Jan 2 15:22:06 2024 by rpki-client on console-ams.rpki-client.org