Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/171251-6a75-4e9e-acf0-825e5a061df9/1/yRoL_wFfxSpc-4O7m3m7E2rXIMk.roa
File: yRoL_wFfxSpc-4O7m3m7E2rXIMk.roa (raw, json)
Hash identifier: qBmECmzoFS5bemJE8W59naipZYOXWOaM0Ftst+3OfwI=
Subject key identifier: C9:1A:0B:FF:01:5F:C5:2A:5C:FB:83:BB:9B:79:BB:13:6A:D7:20:C9
Certificate issuer: /CN=78811e8e36e22280bb2f65a7d2c6034ecf86716c
Certificate serial: 01881E80AD2C364AC73DA81D1617450C35FF
Authority key identifier: 78:81:1E:8E:36:E2:22:80:BB:2F:65:A7:D2:C6:03:4E:CF:86:71:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eIEejjbiIoC7L2Wn0sYDTs-GcWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/171251-6a75-4e9e-acf0-825e5a061df9/1/yRoL_wFfxSpc-4O7m3m7E2rXIMk.roa
Signing time: Mon 15 May 2023 08:22:09 +0000
ROA not before: Mon 15 May 2023 08:22:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59702
IP address blocks: 207.189.192.0/20 maxlen: 20
81.25.144.0/20 maxlen: 20
195.42.104.0/23 maxlen: 23
146.66.232.0/21 maxlen: 21
185.80.216.0/22 maxlen: 22
216.158.96.0/20 maxlen: 20
194.37.249.0/24 maxlen: 24
213.244.240.0/21 maxlen: 21
185.16.200.0/22 maxlen: 22
31.31.161.0/24 maxlen: 24
31.31.164.0/24 maxlen: 24
31.31.163.0/24 maxlen: 24
31.31.165.0/24 maxlen: 24
31.31.166.0/24 maxlen: 24
31.31.167.0/24 maxlen: 24
185.47.192.0/22 maxlen: 22
185.47.192.0/24 maxlen: 24
172.103.88.0/21 maxlen: 21
185.47.193.0/24 maxlen: 24
185.47.194.0/24 maxlen: 24
2a03:780::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:1e:80:ad:2c:36:4a:c7:3d:a8:1d:16:17:45:0c:35:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78811e8e36e22280bb2f65a7d2c6034ecf86716c
Validity
Not Before: May 15 08:22:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c91a0bff015fc52a5cfb83bb9b79bb136ad720c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ab:7a:56:1c:61:48:37:35:21:be:eb:0f:5a:
85:2d:65:5d:8a:19:fa:d1:e0:10:67:8c:81:17:76:
45:b5:0b:af:a5:11:15:3a:bf:88:1b:01:85:8f:45:
d7:8f:c3:45:f6:a6:a4:e2:53:be:3b:85:36:3b:fb:
82:a7:77:c6:31:12:6c:e8:42:7a:d7:d7:ab:f8:b6:
6e:35:82:f3:72:3d:c5:f3:72:5a:04:3b:d2:76:09:
bf:1d:9b:3b:4d:d6:80:bb:8e:d7:4b:ee:ba:bc:8a:
c1:a8:4c:37:1a:23:60:63:ba:4e:42:bb:46:f2:21:
25:52:19:1a:c3:f5:84:22:5e:93:e7:16:4e:12:1b:
84:0b:bb:93:e7:5e:ac:a7:c7:4f:f9:a4:91:cb:ab:
01:05:f5:6e:39:8e:ee:60:b3:09:f8:e3:d8:60:de:
7c:cc:42:fb:be:68:4c:f6:ce:c9:c1:3b:37:54:57:
18:a9:d2:6f:52:e6:8a:89:43:0d:47:a6:b3:7d:ce:
b5:37:ab:af:04:79:71:f5:6d:df:33:50:27:93:6e:
dc:3d:c0:4b:98:69:b6:ef:15:b1:08:09:c6:67:34:
3c:17:a0:02:21:8e:b4:c2:55:fd:29:ed:79:95:c4:
9b:b8:ca:37:99:0e:8c:7b:45:33:38:23:17:7e:17:
93:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:1A:0B:FF:01:5F:C5:2A:5C:FB:83:BB:9B:79:BB:13:6A:D7:20:C9
X509v3 Authority Key Identifier:
keyid:78:81:1E:8E:36:E2:22:80:BB:2F:65:A7:D2:C6:03:4E:CF:86:71:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eIEejjbiIoC7L2Wn0sYDTs-GcWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/171251-6a75-4e9e-acf0-825e5a061df9/1/yRoL_wFfxSpc-4O7m3m7E2rXIMk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/171251-6a75-4e9e-acf0-825e5a061df9/1/eIEejjbiIoC7L2Wn0sYDTs-GcWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.31.161.0/24
31.31.163.0-31.31.167.255
81.25.144.0/20
146.66.232.0/21
172.103.88.0/21
185.16.200.0/22
185.47.192.0/22
185.80.216.0/22
194.37.249.0/24
195.42.104.0/23
207.189.192.0/20
213.244.240.0/21
216.158.96.0/20
IPv6:
2a03:780::/32
Signature Algorithm: sha256WithRSAEncryption
68:af:95:72:0b:48:7b:b4:9e:4d:fe:fb:51:cc:11:35:32:65:
03:7a:af:da:59:88:df:75:ae:24:20:ca:a4:72:b2:99:83:fa:
c6:3a:a7:f4:1e:90:e6:39:f0:bd:f7:b8:84:33:b6:26:0e:f2:
03:0a:7c:d9:96:dc:56:7e:89:9e:79:5d:a0:13:a4:21:1d:53:
15:6d:39:40:20:de:25:e2:8f:e1:0c:d0:c2:55:82:85:64:91:
b2:f2:f5:5c:0b:6d:b7:2d:91:f8:28:b2:d4:a3:f9:d9:56:98:
09:c5:a2:9b:94:13:b2:28:4e:1d:c0:00:56:9c:88:a7:b9:b4:
6a:68:2c:f9:06:f6:4c:95:ea:af:9b:34:36:80:d2:8b:57:ae:
7f:ff:0b:51:38:a6:fb:a1:42:9f:00:c9:8b:70:f1:3c:08:63:
a9:82:7a:b1:ae:36:75:7f:62:10:ba:68:5f:2f:3c:87:41:ae:
0c:61:6e:d8:13:a3:8e:7b:ee:c6:1b:b5:9f:f6:88:58:4e:c3:
6e:33:11:17:f2:2e:87:30:c0:05:78:f1:f8:89:eb:fb:d3:25:
f6:ad:2a:3b:c7:3d:12:63:81:e8:77:a7:90:00:b7:5d:bb:a5:
74:78:ae:e0:d3:fb:e6:67:2b:24:03:0f:2c:fa:36:04:f8:c2:
9f:64:98:06
-----BEGIN CERTIFICATE-----
MIIFXDCCBESgAwIBAgISAYgegK0sNkrHPagdFhdFDDX/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4ODExZThlMzZlMjIyODBiYjJmNjVhN2QyYzYwMzRlY2Y4
NjcxNmMwHhcNMjMwNTE1MDgyMjA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOTFhMGJmZjAxNWZjNTJhNWNmYjgzYmI5Yjc5YmIxMzZhZDcyMGM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6t6VhxhSDc1Ib7rD1qFLWVdihn6
0eAQZ4yBF3ZFtQuvpREVOr+IGwGFj0XXj8NF9qak4lO+O4U2O/uCp3fGMRJs6EJ6
19er+LZuNYLzcj3F83JaBDvSdgm/HZs7TdaAu47XS+66vIrBqEw3GiNgY7pOQrtG
8iElUhkaw/WEIl6T5xZOEhuEC7uT516sp8dP+aSRy6sBBfVuOY7uYLMJ+OPYYN58
zEL7vmhM9s7JwTs3VFcYqdJvUuaKiUMNR6azfc61N6uvBHlx9W3fM1Ank27cPcBL
mGm27xWxCAnGZzQ8F6ACIY60wlX9Ke15lcSbuMo3mQ6Me0UzOCMXfheTpwIDAQAB
o4ICaDCCAmQwHQYDVR0OBBYEFMkaC/8BX8UqXPuDu5t5uxNq1yDJMB8GA1UdIwQY
MBaAFHiBHo424iKAuy9lp9LGA07PhnFsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUlFZWpqYmlJb0M3TDJXbjBzWURUcy1HY1d3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS8xNzEyNTEtNmE3NS00ZTllLWFjZjAt
ODI1ZTVhMDYxZGY5LzEveVJvTF93RmZ4U3BjLTRPN20zbTdFMnJYSU1rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS8xNzEyNTEtNmE3NS00ZTllLWFjZjAtODI1ZTVhMDYxZGY5
LzEvZUlFZWpqYmlJb0M3TDJXbjBzWURUcy1HY1d3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMH4GCCsGAQUFBwEHAQH/BG8wbTBcBAIAATBWAwQAHx+hMAwD
BAAfH6MDBAMfH6ADBARRGZADBAOSQugDBAOsZ1gDBAK5EMgDBAK5L8ADBAK5UNgD
BADCJfkDBAHDKmgDBATPvcADBAPV9PADBATYnmAwDQQCAAIwBwMFACoDB4AwDQYJ
KoZIhvcNAQELBQADggEBAGivlXILSHu0nk3++1HMETUyZQN6r9pZiN91riQgyqRy
spmD+sY6p/QekOY58L33uIQztiYO8gMKfNmW3FZ+iZ55XaATpCEdUxVtOUAg3iXi
j+EM0MJVgoVkkbLy9VwLbbctkfgostSj+dlWmAnFopuUE7IoTh3AAFaciKe5tGpo
LPkG9kyV6q+bNDaA0otXrn//C1E4pvuhQp8AyYtw8TwIY6mCerGuNnV/YhC6aF8v
PIdBrgxhbtgTo4577sYbtZ/2iFhOw24zERfyLocwwAV48fiJ6/vTJfatKjvHPRJj
geh3p5AAt127pXR4ruDT++ZnKyQDDyz6NgT4wp9kmAY=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:04 2023 by rpki-client on console-fra.rpki-client.org