Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/0dbe56-3daa-4a64-925a-fa71ae05dc3f/1/yLJQHv8BkkmXe2xpWcbcoNmukkg.roa
File: yLJQHv8BkkmXe2xpWcbcoNmukkg.roa (raw, json)
Hash identifier: PLq2RgWYi5rYoRydGgjnzpXQrQaDmtL65lR+fmreiMM=
Subject key identifier: C8:B2:50:1E:FF:01:92:49:97:7B:6C:69:59:C6:DC:A0:D9:AE:92:48
Certificate issuer: /CN=b9e67fcb0bdc6001d8cf7073c649eb9819fc5eb8
Certificate serial: 0186FFC68B5264A2EA7DBE03107EF800C4FC
Authority key identifier: B9:E6:7F:CB:0B:DC:60:01:D8:CF:70:73:C6:49:EB:98:19:FC:5E:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/0dbe56-3daa-4a64-925a-fa71ae05dc3f/1/yLJQHv8BkkmXe2xpWcbcoNmukkg.roa
Signing time: Mon 20 Mar 2023 16:07:27 +0000
ROA not before: Mon 20 Mar 2023 16:07:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15547
IP address blocks: 81.88.176.0/21 maxlen: 21
81.88.176.0/20 maxlen: 20
213.221.128.0/19 maxlen: 19
195.162.167.0/24 maxlen: 24
2a03:4380::/32 maxlen: 32
2001:14a8::/32 maxlen: 32
2a02:26a0::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 20 Mar 2023 16:30:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ff:c6:8b:52:64:a2:ea:7d:be:03:10:7e:f8:00:c4:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9e67fcb0bdc6001d8cf7073c649eb9819fc5eb8
Validity
Not Before: Mar 20 16:07:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c8b2501eff019249977b6c6959c6dca0d9ae9248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2d:b9:42:9b:92:00:e9:4d:38:7f:b8:09:bd:
05:fa:23:d6:2b:10:f7:c1:a0:59:4f:9e:d3:e5:4d:
07:5e:9a:a7:71:ba:0d:56:b3:7d:ed:85:d9:0c:fc:
f5:b0:06:f1:53:8b:de:3e:27:5b:d2:d1:7e:a0:02:
6b:b6:7c:18:ac:48:19:30:3c:07:ca:f6:7a:00:50:
c3:45:10:e4:f2:23:89:5f:c6:f9:e1:6f:45:94:9b:
81:3b:89:22:c8:0b:9a:12:9f:63:12:84:ed:4a:70:
a4:c4:ac:7a:37:6f:62:64:97:1e:fc:fa:fe:d5:66:
41:50:85:3b:bd:fc:2a:8e:64:b7:46:4b:83:60:a3:
e2:9c:5b:f0:57:3e:c2:c3:da:73:7f:26:c6:b5:17:
28:a7:97:22:98:a6:5b:96:43:30:83:e9:53:25:9e:
6e:f0:5d:16:7f:f7:d5:b0:7b:33:74:60:dc:b9:1c:
a2:14:56:f3:31:92:8e:c3:b4:64:4f:07:55:fc:ec:
89:83:f4:8f:b7:8b:63:b6:80:b5:a8:23:55:4c:2c:
79:21:13:0f:d3:02:ba:f1:f3:cc:ca:56:46:fa:1e:
ec:5b:a1:88:be:03:5a:8c:56:48:92:8e:a9:36:05:
d4:b3:cd:6d:a2:b5:b1:87:2d:e5:c5:51:31:ce:e0:
95:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:B2:50:1E:FF:01:92:49:97:7B:6C:69:59:C6:DC:A0:D9:AE:92:48
X509v3 Authority Key Identifier:
keyid:B9:E6:7F:CB:0B:DC:60:01:D8:CF:70:73:C6:49:EB:98:19:FC:5E:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/0dbe56-3daa-4a64-925a-fa71ae05dc3f/1/yLJQHv8BkkmXe2xpWcbcoNmukkg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/0dbe56-3daa-4a64-925a-fa71ae05dc3f/1/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.88.176.0/20
195.162.167.0/24
213.221.128.0/19
IPv6:
2001:14a8::/32
2a02:26a0::/29
2a03:4380::/32
Signature Algorithm: sha256WithRSAEncryption
29:f9:aa:22:01:34:69:b7:a4:ec:c5:30:0c:19:7f:65:a2:41:
08:c5:43:33:a9:8a:dd:43:a1:b7:8d:e3:0d:3f:55:61:ee:2d:
50:c9:89:e7:85:ed:04:fc:99:95:26:c0:3e:42:6f:34:5b:31:
cc:e4:1d:5c:7b:3a:95:21:b7:a5:18:49:28:d8:04:55:cd:d2:
21:89:fc:e6:53:47:2d:e2:c7:4e:44:19:a3:ea:1e:e7:1a:21:
ca:c5:ac:cd:1c:f9:f7:ce:ba:50:02:6a:07:78:21:65:f7:42:
34:f4:b5:a5:7b:81:70:e4:19:58:d2:73:e5:0e:5a:d3:55:b7:
0a:64:14:c1:ca:d2:8b:a7:08:87:79:27:6a:c5:01:c3:4e:6d:
9a:7c:1a:f7:fa:24:d6:29:cb:64:e7:ea:13:ee:71:45:65:76:
a1:ef:33:23:0c:df:f4:63:f9:6f:db:75:7e:7f:e5:a0:d1:6c:
51:71:f8:5e:a1:03:7d:ea:51:25:83:a5:28:40:69:39:5b:8b:
a1:da:7e:4c:9f:1b:be:6b:3c:42:c6:9c:c9:c9:28:f3:0d:b5:
45:1e:c8:9b:98:94:3b:0a:fc:c1:7d:10:b3:58:eb:32:5d:85:
7d:02:48:af:61:f0:ae:b9:2b:d0:e8:db:e4:83:dd:26:cd:1a:
a9:b3:3e:89
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgISAYb/xotSZKLqfb4DEH74AMT8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5ZTY3ZmNiMGJkYzYwMDFkOGNmNzA3M2M2NDllYjk4MTlm
YzVlYjgwHhcNMjMwMzIwMTYwNzI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOGIyNTAxZWZmMDE5MjQ5OTc3YjZjNjk1OWM2ZGNhMGQ5YWU5MjQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArS25QpuSAOlNOH+4Cb0F+iPWKxD3
waBZT57T5U0HXpqncboNVrN97YXZDPz1sAbxU4vePidb0tF+oAJrtnwYrEgZMDwH
yvZ6AFDDRRDk8iOJX8b54W9FlJuBO4kiyAuaEp9jEoTtSnCkxKx6N29iZJce/Pr+
1WZBUIU7vfwqjmS3RkuDYKPinFvwVz7Cw9pzfybGtRcop5cimKZblkMwg+lTJZ5u
8F0Wf/fVsHszdGDcuRyiFFbzMZKOw7RkTwdV/OyJg/SPt4tjtoC1qCNVTCx5IRMP
0wK68fPMylZG+h7sW6GIvgNajFZIko6pNgXUs81torWxhy3lxVExzuCV6QIDAQAB
o4ICMjCCAi4wHQYDVR0OBBYEFMiyUB7/AZJJl3tsaVnG3KDZrpJIMB8GA1UdIwQY
MBaAFLnmf8sL3GAB2M9wc8ZJ65gZ/F64MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWVaX3l3dmNZQUhZejNCenhrbnJtQm44WHJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC8wZGJlNTYtM2RhYS00YTY0LTkyNWEt
ZmE3MWFlMDVkYzNmLzEveUxKUUh2OEJra21YZTJ4cFdjYmNvTm11a2tnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC8wZGJlNTYtM2RhYS00YTY0LTkyNWEtZmE3MWFlMDVkYzNm
LzEvdWVaX3l3dmNZQUhZejNCenhrbnJtQm44WHJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEgGCCsGAQUFBwEHAQH/BDkwNzAYBAIAATASAwQEUViwAwQA
w6KnAwQF1d2AMBsEAgACMBUDBQAgARSoAwUDKgImoAMFACoDQ4AwDQYJKoZIhvcN
AQELBQADggEBACn5qiIBNGm3pOzFMAwZf2WiQQjFQzOpit1DobeN4w0/VWHuLVDJ
ieeF7QT8mZUmwD5CbzRbMczkHVx7OpUht6UYSSjYBFXN0iGJ/OZTRy3ix05EGaPq
HucaIcrFrM0c+ffOulACagd4IWX3QjT0taV7gXDkGVjSc+UOWtNVtwpkFMHK0oun
CId5J2rFAcNObZp8Gvf6JNYpy2Tn6hPucUVldqHvMyMM3/Rj+W/bdX5/5aDRbFFx
+F6hA33qUSWDpShAaTlbi6HafkyfG75rPELGnMnJKPMNtUUeyJuYlDsK/MF9ELNY
6zJdhX0CSK9h8K65K9Do2+SD3SbNGqmzPok=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:09 2024 by rpki-client on console-ams.rpki-client.org