Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/ClsX9OrNJCgDzDzwwVJ7KubVDzU.roa
File: ClsX9OrNJCgDzDzwwVJ7KubVDzU.roa (raw, json)
Hash identifier: kd+B1/yseiUQ7R/1u7HclqXa4F8pDhXfNrFrEYNHxHU=
Subject key identifier: 0A:5B:17:F4:EA:CD:24:28:03:CC:3C:F0:C1:52:7B:2A:E6:D5:0F:35
Certificate issuer: /CN=d4cf0fbd5f6e1759903cc69de0dc4ea24c1f83df
Certificate serial: 01859580C4A891613FD7F7BD6D8F67C421B4
Authority key identifier: D4:CF:0F:BD:5F:6E:17:59:90:3C:C6:9D:E0:DC:4E:A2:4C:1F:83:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1M8PvV9uF1mQPMad4NxOokwfg98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/ClsX9OrNJCgDzDzwwVJ7KubVDzU.roa
Signing time: Mon 09 Jan 2023 07:48:42 +0000
ROA not before: Mon 09 Jan 2023 07:48:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 40994
IP address blocks: 46.102.157.0/24 maxlen: 24
46.102.156.0/24 maxlen: 24
193.219.97.0/24 maxlen: 24
31.14.17.0/24 maxlen: 24
94.177.8.0/23 maxlen: 24
86.106.182.0/23 maxlen: 24
2a0d:f302::/32 maxlen: 32
2a0d:f301::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:95:80:c4:a8:91:61:3f:d7:f7:bd:6d:8f:67:c4:21:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4cf0fbd5f6e1759903cc69de0dc4ea24c1f83df
Validity
Not Before: Jan 9 07:48:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0a5b17f4eacd242803cc3cf0c1527b2ae6d50f35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:27:0a:00:b9:32:d2:7f:7f:87:72:87:14:4a:
4f:da:89:77:40:79:bc:a2:82:10:c1:a8:16:1e:e7:
d1:bf:9d:54:3a:a9:16:f7:d2:16:c5:18:24:af:de:
41:3e:5a:f5:6c:2d:b1:83:e3:dc:a9:05:49:cb:11:
2d:05:ce:5c:05:9d:e9:d6:4d:dd:13:a8:e2:0c:51:
77:d7:16:92:3a:ca:40:e6:d9:a1:b1:c5:04:15:4e:
ac:49:9d:91:18:36:86:26:29:d5:23:a7:5d:0b:71:
01:e1:93:d8:68:98:8b:5e:7d:49:3d:2f:28:79:b2:
21:b2:81:0f:14:34:77:a1:20:f4:c3:24:19:c5:b1:
86:4f:49:b4:f5:92:8b:cd:b5:31:a8:4e:37:4e:61:
00:5d:0c:7b:8b:5e:b8:07:1c:3a:91:c5:69:02:c5:
74:d7:97:50:69:1c:84:32:74:19:96:50:9c:49:9c:
ae:a2:4c:c3:e2:6f:ff:34:85:41:56:84:2e:53:85:
f3:22:b8:90:6d:84:32:09:bd:d9:80:22:02:d9:d7:
94:00:4d:82:26:de:3b:c6:2f:f9:f0:fd:e7:8f:ce:
a5:e7:d4:49:a0:26:be:bc:53:81:18:fa:ca:f5:65:
eb:7d:bd:94:c4:07:9f:1b:db:7c:f9:95:67:43:d4:
9a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:5B:17:F4:EA:CD:24:28:03:CC:3C:F0:C1:52:7B:2A:E6:D5:0F:35
X509v3 Authority Key Identifier:
keyid:D4:CF:0F:BD:5F:6E:17:59:90:3C:C6:9D:E0:DC:4E:A2:4C:1F:83:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1M8PvV9uF1mQPMad4NxOokwfg98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/ClsX9OrNJCgDzDzwwVJ7KubVDzU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.17.0/24
46.102.156.0/23
86.106.182.0/23
94.177.8.0/23
193.219.97.0/24
IPv6:
2a0d:f301::/48
2a0d:f302::/32
Signature Algorithm: sha256WithRSAEncryption
6c:2b:0b:c9:7c:d5:72:18:b6:32:1b:49:38:78:2f:20:1f:73:
11:b9:2b:df:c2:09:97:6f:f8:b8:9a:f4:8c:49:a6:08:8f:a7:
d8:9e:54:cd:20:37:0f:6d:5f:19:54:9a:0d:f7:15:e0:b6:72:
26:30:83:09:c2:6f:c3:f8:de:8b:82:8a:47:7e:20:80:85:1c:
33:50:d7:fe:a8:72:ae:be:70:6b:73:cc:c5:69:c7:c6:55:42:
1f:7e:d6:ff:ae:9b:fb:f7:ae:da:b2:06:f9:c7:8f:52:3c:51:
7e:97:ce:0b:b3:55:60:93:4d:9a:81:7c:54:9d:be:4d:48:ad:
30:25:33:00:bd:aa:e5:c7:07:cc:95:49:6b:da:29:6c:35:c7:
6b:b5:6e:b0:ce:57:ba:6e:c5:68:f0:a1:b2:40:bf:af:a1:81:
4f:9d:07:d1:33:44:f2:d9:03:86:fb:be:84:e3:8d:22:a9:7c:
38:eb:37:bb:91:48:30:49:eb:e1:1f:1b:79:03:25:b1:aa:b0:
c6:3e:71:6e:b7:3f:a4:52:66:be:e1:62:87:0b:ac:86:89:55:
bd:53:a2:a9:21:43:49:3c:f9:3c:9e:a4:b6:6a:2b:c0:6a:7b:
1c:9a:0a:80:39:74:c4:67:b9:30:e8:b5:b1:a1:a7:e2:27:b0:
24:e6:e9:4b
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgISAYWVgMSokWE/1/e9bY9nxCG0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0Y2YwZmJkNWY2ZTE3NTk5MDNjYzY5ZGUwZGM0ZWEyNGMx
ZjgzZGYwHhcNMjMwMTA5MDc0ODQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYTViMTdmNGVhY2QyNDI4MDNjYzNjZjBjMTUyN2IyYWU2ZDUwZjM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlicKALky0n9/h3KHFEpP2ol3QHm8
ooIQwagWHufRv51UOqkW99IWxRgkr95BPlr1bC2xg+PcqQVJyxEtBc5cBZ3p1k3d
E6jiDFF31xaSOspA5tmhscUEFU6sSZ2RGDaGJinVI6ddC3EB4ZPYaJiLXn1JPS8o
ebIhsoEPFDR3oSD0wyQZxbGGT0m09ZKLzbUxqE43TmEAXQx7i164Bxw6kcVpAsV0
15dQaRyEMnQZllCcSZyuokzD4m//NIVBVoQuU4XzIriQbYQyCb3ZgCIC2deUAE2C
Jt47xi/58P3nj86l59RJoCa+vFOBGPrK9WXrfb2UxAefG9t8+ZVnQ9SaGwIDAQAB
o4ICOTCCAjUwHQYDVR0OBBYEFApbF/TqzSQoA8w88MFSeyrm1Q81MB8GA1UdIwQY
MBaAFNTPD71fbhdZkDzGneDcTqJMH4PfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMU04UHZWOXVGMW1RUE1hZDROeE9va3dmZzk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9kMzRmYTItM2EzNy00MzA4LWI3ODMt
NTg1N2YxYzE3NjI0LzEvQ2xzWDlPck5KQ2dEekR6d3dWSjdLdWJWRHpVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS9kMzRmYTItM2EzNy00MzA4LWI3ODMtNTg1N2YxYzE3NjI0
LzEvMU04UHZWOXVGMW1RUE1hZDROeE9va3dmZzk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjAkBAIAATAeAwQAHw4RAwQB
LmacAwQBVmq2AwQBXrEIAwQAwdthMBYEAgACMBADBwAqDfMBAAADBQAqDfMCMA0G
CSqGSIb3DQEBCwUAA4IBAQBsKwvJfNVyGLYyG0k4eC8gH3MRuSvfwgmXb/i4mvSM
SaYIj6fYnlTNIDcPbV8ZVJoN9xXgtnImMIMJwm/D+N6LgopHfiCAhRwzUNf+qHKu
vnBrc8zFacfGVUIfftb/rpv7967asgb5x49SPFF+l84Ls1Vgk02agXxUnb5NSK0w
JTMAvarlxwfMlUlr2ilsNcdrtW6wzle6bsVo8KGyQL+voYFPnQfRM0Ty2QOG+76E
440iqXw46ze7kUgwSevhHxt5AyWxqrDGPnFutz+kUma+4WKHC6yGiVW9U6KpIUNJ
PPk8nqS2aivAanscmgqAOXTEZ7kw6LWxoafiJ7Ak5ulL
-----END CERTIFICATE-----
Generated at Fri Aug 4 15:37:11 2023 by rpki-client on console-fra.rpki-client.org