Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/V4oulEtZ0DHL62nVI-X52efcwfI.roa
File: V4oulEtZ0DHL62nVI-X52efcwfI.roa (raw, json)
Hash identifier: lvsn8Gx9zI2l1aC3+ibfqz6lRT8inWKK6kBqcgjS98Y=
Subject key identifier: 57:8A:2E:94:4B:59:D0:31:CB:EB:69:D5:23:E5:F9:D9:E7:DC:C1:F2
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018BD36D9A6F1BD9C2D5EC03204DCC9368C7
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/V4oulEtZ0DHL62nVI-X52efcwfI.roa
Signing time: Wed 15 Nov 2023 14:40:57 +0000
ROA not before: Wed 15 Nov 2023 14:40:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39543
IP address blocks: 195.28.2.0/23 maxlen: 23
193.19.192.0/22 maxlen: 22
193.19.192.0/24 maxlen: 24
193.19.193.0/24 maxlen: 24
193.19.195.0/24 maxlen: 24
193.19.194.0/24 maxlen: 24
93.113.204.0/24 maxlen: 24
93.114.79.0/24 maxlen: 24
89.40.67.0/24 maxlen: 24
89.43.143.0/24 maxlen: 24
89.47.96.0/24 maxlen: 24
89.47.96.0/20 maxlen: 20
89.47.97.0/24 maxlen: 24
89.47.98.0/24 maxlen: 24
89.47.99.0/24 maxlen: 24
89.47.101.0/24 maxlen: 24
93.114.194.0/24 maxlen: 24
89.47.100.0/24 maxlen: 24
89.47.103.0/24 maxlen: 24
89.47.102.0/24 maxlen: 24
89.47.104.0/24 maxlen: 24
89.47.105.0/24 maxlen: 24
89.35.158.0/24 maxlen: 24
89.47.106.0/24 maxlen: 24
89.47.108.0/24 maxlen: 24
89.47.107.0/24 maxlen: 24
89.47.110.0/24 maxlen: 24
89.47.109.0/24 maxlen: 24
89.47.111.0/24 maxlen: 24
89.47.112.0/20 maxlen: 20
89.47.113.0/24 maxlen: 24
89.47.115.0/24 maxlen: 24
89.47.114.0/24 maxlen: 24
89.47.118.0/24 maxlen: 24
89.47.119.0/24 maxlen: 24
89.45.164.0/24 maxlen: 24
89.39.111.0/24 maxlen: 24
89.34.27.0/24 maxlen: 24
2001:4d18::/32 maxlen: 32
2001:4d18::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d3:6d:9a:6f:1b:d9:c2:d5:ec:03:20:4d:cc:93:68:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Nov 15 14:40:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=578a2e944b59d031cbeb69d523e5f9d9e7dcc1f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a4:10:c3:98:71:01:9d:21:32:09:6f:00:2c:
b1:ac:0c:95:a8:9e:20:20:46:7f:40:08:da:3f:f7:
a7:03:15:f6:2c:fc:08:62:7d:61:53:ff:d3:45:bc:
a7:0c:2b:14:cd:00:7e:82:d1:ec:cc:e8:3f:89:3f:
0b:32:07:e3:08:6e:fd:cf:a6:0b:35:8e:28:0e:7f:
27:34:57:53:11:a3:8e:82:74:74:97:81:0e:7e:d4:
9c:ed:a8:f1:aa:0e:fb:c1:ae:d5:a8:53:e5:0a:6a:
a3:8f:6c:bf:19:66:ee:cf:23:ce:08:8e:8c:70:60:
43:2d:a3:09:e9:13:e7:66:b2:a0:69:cc:b5:54:f2:
db:30:dd:77:73:c0:88:f0:5a:ad:9c:be:77:a4:98:
c9:99:77:bb:7b:80:a5:4b:3e:7e:22:d4:9e:0a:b1:
af:65:a3:c2:b4:d8:09:96:d2:32:4d:55:6d:61:a0:
cb:d7:2b:d9:61:cc:b5:04:f3:9f:91:b2:0b:b8:1f:
df:a9:d9:a1:e9:0b:be:de:94:ae:7a:15:02:13:6a:
eb:3b:81:26:f1:f1:5a:f3:cb:56:54:80:52:67:62:
de:f9:52:02:54:69:b5:6e:11:0b:f7:16:b5:ed:f7:
ab:2b:8a:28:a4:e4:38:90:70:36:60:03:fd:1b:a2:
8a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:8A:2E:94:4B:59:D0:31:CB:EB:69:D5:23:E5:F9:D9:E7:DC:C1:F2
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/V4oulEtZ0DHL62nVI-X52efcwfI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.34.27.0/24
89.35.158.0/24
89.39.111.0/24
89.40.67.0/24
89.43.143.0/24
89.45.164.0/24
89.47.96.0/19
93.113.204.0/24
93.114.79.0/24
93.114.194.0/24
193.19.192.0/22
195.28.2.0/23
IPv6:
2001:4d18::/32
Signature Algorithm: sha256WithRSAEncryption
87:98:d2:b5:31:d6:3b:95:57:3e:cd:26:43:15:81:14:26:d1:
64:12:cd:d4:50:ea:3b:dd:66:97:cf:b8:88:2a:48:e2:f9:42:
d0:55:22:a2:de:75:69:7b:83:94:3d:19:26:3a:1f:e8:4e:01:
79:4f:c3:e3:36:d6:a6:48:42:d7:64:02:9a:4a:f1:87:0b:1b:
19:ff:88:e7:ce:11:2b:28:8e:ed:e2:1d:24:e3:c0:04:52:2e:
5c:d4:3f:1c:e8:5f:37:bb:d7:43:38:76:c8:d3:85:ef:64:89:
14:f6:7d:84:91:6f:28:e1:22:1d:f4:47:e7:13:87:07:19:7d:
3d:40:65:4e:cc:a8:eb:18:0b:c8:17:7b:a9:6e:1e:a1:c5:52:
81:49:87:2d:9d:e5:8f:ce:0b:be:4a:3c:d0:a6:db:e4:2f:86:
1e:ec:7f:9e:eb:c8:12:43:39:2f:30:2f:b0:e6:db:6c:92:74:
db:41:d4:5e:2e:8d:76:bc:45:25:e5:e9:cf:58:c3:4a:92:7c:
45:55:08:46:3a:b8:83:9e:1d:7f:03:cc:d1:33:2f:12:8b:41:
8d:61:a4:66:fb:e3:00:1a:1b:28:d7:8c:c7:ad:4f:82:f8:bd:
b3:28:18:33:99:4a:4f:48:1f:6a:70:a9:f2:c9:c1:a0:6f:b8:
8b:15:f7:1e
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgISAYvTbZpvG9nC1ewDIE3Mk2jHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxZDQ2ZTBlM2U4Y2FhYWVkNGE1MjliZDdkNzMwOGJkMWVm
MDFjMWQwHhcNMjMxMTE1MTQ0MDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NzhhMmU5NDRiNTlkMDMxY2JlYjY5ZDUyM2U1ZjlkOWU3ZGNjMWYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6QQw5hxAZ0hMglvACyxrAyVqJ4g
IEZ/QAjaP/enAxX2LPwIYn1hU//TRbynDCsUzQB+gtHszOg/iT8LMgfjCG79z6YL
NY4oDn8nNFdTEaOOgnR0l4EOftSc7ajxqg77wa7VqFPlCmqjj2y/GWbuzyPOCI6M
cGBDLaMJ6RPnZrKgacy1VPLbMN13c8CI8FqtnL53pJjJmXe7e4ClSz5+ItSeCrGv
ZaPCtNgJltIyTVVtYaDL1yvZYcy1BPOfkbILuB/fqdmh6Qu+3pSuehUCE2rrO4Em
8fFa88tWVIBSZ2Le+VICVGm1bhEL9xa17ferK4oopOQ4kHA2YAP9G6KKawIDAQAB
o4ICWjCCAlYwHQYDVR0OBBYEFFeKLpRLWdAxy+tp1SPl+dnn3MHyMB8GA1UdIwQY
MBaAFPHUbg4+jKqu1KUpvX1zCL0e8BwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMt
YjQyZjIzZDgyOGMzLzEvVjRvdWxFdFowREhMNjJuVkktWDUyZWZjd2ZJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMtYjQyZjIzZDgyOGMz
LzEvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHAGCCsGAQUFBwEHAQH/BGEwXzBOBAIAATBIAwQAWSIbAwQA
WSOeAwQAWSdvAwQAWShDAwQAWSuPAwQAWS2kAwQFWS9gAwQAXXHMAwQAXXJPAwQA
XXLCAwQCwRPAAwQBwxwCMA0EAgACMAcDBQAgAU0YMA0GCSqGSIb3DQEBCwUAA4IB
AQCHmNK1MdY7lVc+zSZDFYEUJtFkEs3UUOo73WaXz7iIKkji+ULQVSKi3nVpe4OU
PRkmOh/oTgF5T8PjNtamSELXZAKaSvGHCxsZ/4jnzhErKI7t4h0k48AEUi5c1D8c
6F83u9dDOHbI04XvZIkU9n2EkW8o4SId9EfnE4cHGX09QGVOzKjrGAvIF3upbh6h
xVKBSYctneWPzgu+SjzQptvkL4Ye7H+e68gSQzkvMC+w5ttsknTbQdReLo12vEUl
5enPWMNKknxFVQhGOriDnh1/A8zRMy8Si0GNYaRm++MAGhso14zHrU+C+L2zKBgz
mUpPSB9qcKnyycGgb7iLFfce
-----END CERTIFICATE-----
Generated at Thu Nov 16 14:14:02 2023 by rpki-client on console-ams.rpki-client.org