Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/zcgmuEQsFVSuTe7SHqwSX3e5-o8.roa
File: zcgmuEQsFVSuTe7SHqwSX3e5-o8.roa (raw, json)
Hash identifier: C80kuXkmJsGYCtRTq7xf6slkSMnaCeWhdxdgMnWGSGo=
Subject key identifier: CD:C8:26:B8:44:2C:15:54:AE:4D:EE:D2:1E:AC:12:5F:77:B9:FA:8F
Certificate issuer: /CN=547841eeff20c78b33d411dae51a692adb892e31
Certificate serial: 018571FA160C50B3179F6141D1197C6E3778
Authority key identifier: 54:78:41:EE:FF:20:C7:8B:33:D4:11:DA:E5:1A:69:2A:DB:89:2E:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VHhB7v8gx4sz1BHa5RppKtuJLjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/zcgmuEQsFVSuTe7SHqwSX3e5-o8.roa
Signing time: Mon 02 Jan 2023 10:14:53 +0000
ROA not before: Mon 02 Jan 2023 10:14:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202491
IP address blocks: 212.225.228.0/23 maxlen: 23
212.225.232.0/24 maxlen: 24
171.33.238.0/24 maxlen: 24
89.37.75.0/24 maxlen: 24
46.37.87.0/24 maxlen: 24
46.37.95.0/24 maxlen: 24
89.39.18.0/23 maxlen: 23
89.39.20.0/23 maxlen: 23
89.39.152.0/23 maxlen: 23
89.39.157.0/24 maxlen: 24
37.61.148.0/22 maxlen: 22
37.61.154.0/24 maxlen: 24
89.32.114.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:fa:16:0c:50:b3:17:9f:61:41:d1:19:7c:6e:37:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=547841eeff20c78b33d411dae51a692adb892e31
Validity
Not Before: Jan 2 10:14:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cdc826b8442c1554ae4deed21eac125f77b9fa8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:03:68:c5:7f:98:87:6b:47:e4:3d:24:fd:80:
9f:61:5f:de:3f:f7:c4:84:5a:70:d3:99:35:28:59:
8c:7a:e7:7f:4f:09:69:b4:2c:aa:75:57:a6:2d:4e:
7e:7d:6b:71:34:b0:73:c9:e0:1c:01:d5:21:64:9e:
0d:c2:52:83:a5:95:16:d4:69:4a:31:aa:33:52:ae:
22:ce:dc:4c:5f:01:aa:79:49:86:d3:aa:61:85:2f:
66:03:d9:03:96:f1:be:76:25:f4:49:c8:26:07:9f:
76:c3:af:3e:f0:19:0d:49:1a:5d:b7:66:5c:ea:ff:
95:71:5e:a4:2d:e5:66:49:39:6b:f9:8f:c4:52:ca:
ca:6c:b5:1c:c7:33:5f:d4:98:35:a4:93:0b:cb:a1:
d8:27:b3:e8:ef:36:0c:e4:12:7f:17:12:9b:af:cd:
9f:53:87:83:9a:9c:0f:64:0b:71:0f:5e:7c:10:68:
0b:26:35:06:de:ba:26:21:10:a6:b5:fc:b7:84:bd:
da:4d:ea:2f:0d:98:a1:89:2c:85:5f:e2:66:b0:a7:
17:c5:04:09:fd:bf:2c:b3:37:f8:23:1c:0c:bd:5f:
32:3e:72:f3:cc:10:90:c1:28:13:48:22:5a:b7:3e:
3d:13:f2:a4:77:f3:bc:42:63:a0:12:c1:05:a1:e9:
cf:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:C8:26:B8:44:2C:15:54:AE:4D:EE:D2:1E:AC:12:5F:77:B9:FA:8F
X509v3 Authority Key Identifier:
keyid:54:78:41:EE:FF:20:C7:8B:33:D4:11:DA:E5:1A:69:2A:DB:89:2E:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHhB7v8gx4sz1BHa5RppKtuJLjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/zcgmuEQsFVSuTe7SHqwSX3e5-o8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/VHhB7v8gx4sz1BHa5RppKtuJLjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.61.148.0/22
37.61.154.0/24
46.37.87.0/24
46.37.95.0/24
89.32.114.0/23
89.37.75.0/24
89.39.18.0-89.39.21.255
89.39.152.0/23
89.39.157.0/24
171.33.238.0/24
212.225.228.0/23
212.225.232.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:7e:16:40:a2:6f:a7:e7:f9:4c:d7:70:46:b4:1e:3d:0b:69:
5d:da:a1:18:0f:8c:97:fe:9f:f4:fc:95:c5:92:01:e6:44:52:
f6:3a:bf:fe:93:17:ad:e9:b8:d0:8b:f1:ac:e8:0f:de:9a:86:
49:ac:35:38:ba:32:3a:fc:86:86:06:b5:83:2f:fc:81:f5:d6:
a3:33:80:f3:15:9d:23:34:52:34:7a:07:52:47:93:34:12:07:
b3:78:cd:e4:b4:b3:96:e8:ac:1f:b3:8b:e1:c1:bd:b4:3c:55:
d6:82:0c:4c:f4:e0:9f:aa:cf:e1:27:dc:67:71:7b:15:08:a6:
0d:cb:9d:71:26:9a:2a:c3:49:62:fd:33:81:13:2e:07:62:ef:
56:45:ce:0a:e4:47:23:52:37:07:f9:94:af:f9:ad:fb:5b:63:
40:2d:a6:7a:cd:89:ac:ee:2e:fb:39:96:6c:cd:38:33:36:5a:
ac:0d:4b:6d:fe:a6:a2:f3:b0:ca:e1:62:e1:71:13:79:d9:6e:
f2:71:47:41:8b:b6:1f:47:53:eb:20:4d:a1:dc:e4:c1:18:09:
8f:3e:d3:15:62:24:75:e7:49:72:57:aa:c3:de:ff:bf:8c:1c:
77:9e:bc:d6:7f:34:1e:5b:41:e8:43:62:a5:59:64:2c:32:e4:
b7:1e:5b:0a
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgISAYVx+hYMULMXn2FB0Rl8bjd4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0Nzg0MWVlZmYyMGM3OGIzM2Q0MTFkYWU1MWE2OTJhZGI4
OTJlMzEwHhcNMjMwMTAyMTAxNDUzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZGM4MjZiODQ0MmMxNTU0YWU0ZGVlZDIxZWFjMTI1Zjc3YjlmYThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiANoxX+Yh2tH5D0k/YCfYV/eP/fE
hFpw05k1KFmMeud/TwlptCyqdVemLU5+fWtxNLBzyeAcAdUhZJ4NwlKDpZUW1GlK
MaozUq4iztxMXwGqeUmG06phhS9mA9kDlvG+diX0ScgmB592w68+8BkNSRpdt2Zc
6v+VcV6kLeVmSTlr+Y/EUsrKbLUcxzNf1Jg1pJMLy6HYJ7Po7zYM5BJ/FxKbr82f
U4eDmpwPZAtxD158EGgLJjUG3romIRCmtfy3hL3aTeovDZihiSyFX+JmsKcXxQQJ
/b8sszf4IxwMvV8yPnLzzBCQwSgTSCJatz49E/Kkd/O8QmOgEsEFoenP+QIDAQAB
o4ICUzCCAk8wHQYDVR0OBBYEFM3IJrhELBVUrk3u0h6sEl93ufqPMB8GA1UdIwQY
MBaAFFR4Qe7/IMeLM9QR2uUaaSrbiS4xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkhoQjd2OGd4NHN6MUJIYTVScHBLdHVKTGpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9jOGQzOTMtM2UyOC00ZjA3LTk5NmIt
MzY2YmExNzAwZmUwLzEvemNnbXVFUXNGVlN1VGU3U0hxd1NYM2U1LW84LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC9jOGQzOTMtM2UyOC00ZjA3LTk5NmItMzY2YmExNzAwZmUw
LzEvVkhoQjd2OGd4NHN6MUJIYTVScHBLdHVKTGpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGkGCCsGAQUFBwEHAQH/BFowWDBWBAIAATBQAwQCJT2UAwQA
JT2aAwQALiVXAwQALiVfAwQBWSByAwQAWSVLMAwDBAFZJxIDBAFZJxQDBAFZJ5gD
BABZJ50DBACrIe4DBAHU4eQDBADU4egwDQYJKoZIhvcNAQELBQADggEBAK1+FkCi
b6fn+UzXcEa0Hj0LaV3aoRgPjJf+n/T8lcWSAeZEUvY6v/6TF63puNCL8azoD96a
hkmsNTi6Mjr8hoYGtYMv/IH11qMzgPMVnSM0UjR6B1JHkzQSB7N4zeS0s5borB+z
i+HBvbQ8VdaCDEz04J+qz+En3GdxexUIpg3LnXEmmirDSWL9M4ETLgdi71ZFzgrk
RyNSNwf5lK/5rftbY0AtpnrNiazuLvs5lmzNODM2WqwNS23+pqLzsMrhYuFxE3nZ
bvJxR0GLth9HU+sgTaHc5MEYCY8+0xViJHXnSXJXqsPe/7+MHHeevNZ/NB5bQehD
YqVZZCwy5LceWwo=
-----END CERTIFICATE-----
Generated at Mon Jan 1 15:15:22 2024 by rpki-client on console-fra.rpki-client.org