Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/UY4IW1bx4AUiwIMMQGsbZ9AU3LA.roa
File: UY4IW1bx4AUiwIMMQGsbZ9AU3LA.roa (raw, json)
Hash identifier: Ops22zOUlwwzipbid+JlDIvziB5vnxU+vu0bOvoJhOI=
Subject key identifier: 51:8E:08:5B:56:F1:E0:05:22:C0:83:0C:40:6B:1B:67:D0:14:DC:B0
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 01856ECB7450A781EFCBF9A6A717A8D5367E
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/UY4IW1bx4AUiwIMMQGsbZ9AU3LA.roa
Signing time: Sun 01 Jan 2023 19:25:05 +0000
ROA not before: Sun 01 Jan 2023 19:25:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39543
IP address blocks: 89.33.12.0/23 maxlen: 23
188.241.240.0/23 maxlen: 23
188.241.240.0/24 maxlen: 24
188.241.241.0/24 maxlen: 24
193.19.192.0/24 maxlen: 24
193.19.192.0/22 maxlen: 24
93.113.176.0/21 maxlen: 21
93.113.181.0/24 maxlen: 24
93.113.204.0/24 maxlen: 24
93.114.79.0/24 maxlen: 24
89.40.67.0/24 maxlen: 24
89.43.140.0/22 maxlen: 22
89.42.80.0/21 maxlen: 21
89.42.88.0/21 maxlen: 21
89.35.158.0/24 maxlen: 24
89.45.164.0/24 maxlen: 24
89.39.111.0/24 maxlen: 24
89.46.2.0/23 maxlen: 23
89.46.2.0/24 maxlen: 24
89.46.4.0/24 maxlen: 24
89.46.3.0/24 maxlen: 24
89.46.0.0/23 maxlen: 23
195.28.2.0/23 maxlen: 23
89.34.224.0/21 maxlen: 21
89.34.224.0/22 maxlen: 22
89.34.228.0/23 maxlen: 23
89.34.230.0/23 maxlen: 23
89.47.96.0/24 maxlen: 24
89.47.96.0/20 maxlen: 20
89.47.97.0/24 maxlen: 24
89.47.98.0/24 maxlen: 24
89.47.99.0/24 maxlen: 24
89.47.101.0/24 maxlen: 24
93.114.194.0/24 maxlen: 24
89.47.100.0/24 maxlen: 24
89.47.103.0/24 maxlen: 24
89.47.102.0/24 maxlen: 24
89.47.104.0/24 maxlen: 24
89.47.105.0/24 maxlen: 24
89.47.106.0/24 maxlen: 24
89.47.108.0/24 maxlen: 24
89.47.107.0/24 maxlen: 24
89.47.110.0/24 maxlen: 24
89.47.109.0/24 maxlen: 24
89.47.111.0/24 maxlen: 24
89.47.112.0/20 maxlen: 20
89.47.113.0/24 maxlen: 24
89.47.115.0/24 maxlen: 24
89.47.114.0/24 maxlen: 24
89.47.118.0/24 maxlen: 24
89.47.119.0/24 maxlen: 24
89.37.196.0/23 maxlen: 23
89.34.27.0/24 maxlen: 24
2001:4d18::/32 maxlen: 32
2001:4d18::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:cb:74:50:a7:81:ef:cb:f9:a6:a7:17:a8:d5:36:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jan 1 19:25:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=518e085b56f1e00522c0830c406b1b67d014dcb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:08:16:31:b1:83:39:ca:ca:4d:45:01:98:d2:
0e:51:bd:dd:09:32:6e:f2:7d:4a:63:c4:52:3e:fd:
98:18:1c:bf:94:43:4c:67:b4:bd:84:ee:20:b9:0a:
e8:e8:fa:b8:3d:e7:f6:79:32:83:bb:50:e2:bf:cb:
10:40:ec:96:8c:02:ef:f6:41:ad:00:d8:5d:b5:ac:
b1:9e:ca:6e:58:79:64:8b:30:7f:d7:b2:96:50:68:
2c:f1:14:0b:31:38:12:9d:3a:88:82:bc:03:94:07:
65:47:62:30:b6:81:e2:69:f9:45:32:7a:5b:0f:0a:
57:17:1e:d1:c8:f3:29:88:85:36:e7:58:33:d4:3b:
5a:a1:6d:a4:07:0d:0a:3a:02:71:d7:99:69:ef:72:
77:6e:0b:12:6f:36:43:9a:83:94:f4:20:91:e3:da:
22:e2:8a:e5:8c:66:06:c4:50:84:33:6f:af:92:3e:
c3:b6:d4:85:1e:0f:69:05:3f:75:7d:31:e3:5d:1d:
d0:31:c0:a8:d5:17:61:01:9a:9a:c6:45:bc:5c:2b:
d9:22:72:d7:0c:5f:08:1b:ae:00:15:a8:bf:d9:5b:
02:46:e4:06:d9:8e:04:ac:2b:47:a0:11:5a:c3:af:
82:e1:32:40:cc:9e:e6:bb:28:e5:d5:b6:04:dd:48:
c5:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:8E:08:5B:56:F1:E0:05:22:C0:83:0C:40:6B:1B:67:D0:14:DC:B0
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/UY4IW1bx4AUiwIMMQGsbZ9AU3LA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.33.12.0/23
89.34.27.0/24
89.34.224.0/21
89.35.158.0/24
89.37.196.0/23
89.39.111.0/24
89.40.67.0/24
89.42.80.0/20
89.43.140.0/22
89.45.164.0/24
89.46.0.0-89.46.4.255
89.47.96.0/19
93.113.176.0/21
93.113.204.0/24
93.114.79.0/24
93.114.194.0/24
188.241.240.0/23
193.19.192.0/22
195.28.2.0/23
IPv6:
2001:4d18::/32
Signature Algorithm: sha256WithRSAEncryption
5b:56:a7:ac:9a:1a:1d:4e:9c:bb:cc:d3:75:94:da:dd:e3:ba:
da:da:2b:d0:bf:a6:8c:ca:be:7c:05:54:e6:f5:96:a2:c3:72:
01:9b:d2:fa:72:32:77:28:43:90:00:12:b3:b6:4f:4b:d1:82:
55:48:37:91:d2:b7:e8:c0:f3:1f:f6:36:f4:b6:0f:59:f7:25:
bf:90:c2:f2:97:1a:0f:1d:ec:6b:5a:c8:a6:05:97:b3:c5:f8:
76:c7:7c:dd:64:3d:4b:f4:e2:26:7b:bf:44:5b:1e:65:6a:cc:
be:d7:89:c3:ee:f0:a1:a5:67:02:f1:e2:b0:c9:db:85:54:a6:
53:e9:fd:e7:ee:d7:25:fb:a6:60:58:5a:41:e9:ac:71:5a:5d:
4d:57:0d:c5:53:9c:d8:0b:96:11:88:9e:24:51:83:1c:0f:6f:
90:3d:d6:d8:97:e7:72:03:bd:3d:3d:9a:5f:29:59:38:68:f4:
d1:ab:35:9b:3c:b5:d6:cc:6d:ac:ed:a0:9b:6d:d9:35:38:15:
66:14:a7:ff:a9:e2:55:53:3e:d3:be:e3:72:74:16:9c:81:17:
44:bc:42:5c:92:53:4f:fa:f6:a4:0c:f6:3f:f2:a5:34:a3:b5:
08:1a:c4:7e:3c:19:e6:7d:90:df:ee:c1:de:ef:5c:dc:d7:09:
e6:1b:c1:05
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgISAYVuy3RQp4Hvy/mmpxeo1TZ+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxZDQ2ZTBlM2U4Y2FhYWVkNGE1MjliZDdkNzMwOGJkMWVm
MDFjMWQwHhcNMjMwMTAxMTkyNTA1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MThlMDg1YjU2ZjFlMDA1MjJjMDgzMGM0MDZiMWI2N2QwMTRkY2IwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsggWMbGDOcrKTUUBmNIOUb3dCTJu
8n1KY8RSPv2YGBy/lENMZ7S9hO4guQro6Pq4Pef2eTKDu1Div8sQQOyWjALv9kGt
ANhdtayxnspuWHlkizB/17KWUGgs8RQLMTgSnTqIgrwDlAdlR2IwtoHiaflFMnpb
DwpXFx7RyPMpiIU251gz1DtaoW2kBw0KOgJx15lp73J3bgsSbzZDmoOU9CCR49oi
4orljGYGxFCEM2+vkj7DttSFHg9pBT91fTHjXR3QMcCo1RdhAZqaxkW8XCvZInLX
DF8IG64AFai/2VsCRuQG2Y4ErCtHoBFaw6+C4TJAzJ7muyjl1bYE3UjF2QIDAQAB
o4ICjjCCAoowHQYDVR0OBBYEFFGOCFtW8eAFIsCDDEBrG2fQFNywMB8GA1UdIwQY
MBaAFPHUbg4+jKqu1KUpvX1zCL0e8BwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMt
YjQyZjIzZDgyOGMzLzEvVVk0SVcxYng0QVVpd0lNTVFHc2JaOUFVM0xBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMtYjQyZjIzZDgyOGMz
LzEvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGjBggrBgEFBQcBBwEB/wSBkzCBkDB/BAIAATB5AwQBWSEM
AwQAWSIbAwQDWSLgAwQAWSOeAwQBWSXEAwQAWSdvAwQAWShDAwQEWSpQAwQCWSuM
AwQAWS2kMAsDAwFZLgMEAFkuBAMEBVkvYAMEA11xsAMEAF1xzAMEAF1yTwMEAF1y
wgMEAbzx8AMEAsETwAMEAcMcAjANBAIAAjAHAwUAIAFNGDANBgkqhkiG9w0BAQsF
AAOCAQEAW1anrJoaHU6cu8zTdZTa3eO62tor0L+mjMq+fAVU5vWWosNyAZvS+nIy
dyhDkAASs7ZPS9GCVUg3kdK36MDzH/Y29LYPWfclv5DC8pcaDx3sa1rIpgWXs8X4
dsd83WQ9S/TiJnu/RFseZWrMvteJw+7woaVnAvHisMnbhVSmU+n95+7XJfumYFha
QemscVpdTVcNxVOc2AuWEYieJFGDHA9vkD3W2JfncgO9PT2aXylZOGj00as1mzy1
1sxtrO2gm23ZNTgVZhSn/6niVVM+077jcnQWnIEXRLxCXJJTT/r2pAz2P/KlNKO1
CBrEfjwZ5n2Q3+7B3u9c3NcJ5hvBBQ==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:03 2023 by rpki-client on console-fra.rpki-client.org