Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/27uLwUIg7Uz-R6hTlXipNgFl9l0.roa
File: 27uLwUIg7Uz-R6hTlXipNgFl9l0.roa (raw, json)
Hash identifier: B0GZ3d58I/IRUERTOBg3MewArGkX7T51wXeZNGuBmfg=
Subject key identifier: DB:BB:8B:C1:42:20:ED:4C:FE:47:A8:53:95:78:A9:36:01:65:F6:5D
Certificate issuer: /CN=1ba51a0bc0f0afebbf6d5d927fe1f9816f52352d
Certificate serial: 0186EA4750BD79F9107D975B7DF9F3192A54
Authority key identifier: 1B:A5:1A:0B:C0:F0:AF:EB:BF:6D:5D:92:7F:E1:F9:81:6F:52:35:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/27uLwUIg7Uz-R6hTlXipNgFl9l0.roa
Signing time: Thu 16 Mar 2023 11:56:27 +0000
ROA not before: Thu 16 Mar 2023 11:56:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207990
IP address blocks: 89.19.42.0/23 maxlen: 32
83.229.76.0/22 maxlen: 32
119.13.192.0/20 maxlen: 32
83.229.104.0/22 maxlen: 32
93.114.10.0/23 maxlen: 32
93.114.12.0/22 maxlen: 32
95.215.36.0/22 maxlen: 32
45.142.92.0/22 maxlen: 32
209.20.176.0/21 maxlen: 32
93.180.192.0/20 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ea:47:50:bd:79:f9:10:7d:97:5b:7d:f9:f3:19:2a:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ba51a0bc0f0afebbf6d5d927fe1f9816f52352d
Validity
Not Before: Mar 16 11:56:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dbbb8bc14220ed4cfe47a8539578a9360165f65d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:b4:24:c4:94:f5:7c:bb:dd:a7:a3:51:d4:ff:
e8:b7:ec:50:db:c2:2e:2d:6f:bf:4f:04:68:6f:56:
ea:b0:6f:96:c6:14:4e:f6:a2:c8:03:53:b8:0f:60:
ca:b5:29:5e:03:c1:75:3c:da:c9:43:b3:5e:30:c0:
4c:d4:95:a3:94:8b:48:c2:e1:44:df:f0:f9:62:7c:
ec:3b:39:b2:c4:af:04:c7:56:1b:55:26:b6:bf:37:
7e:df:cb:d3:43:79:78:d5:07:7e:0b:51:4a:4f:7d:
ad:f7:1e:31:8f:d2:4e:87:dc:32:e0:67:69:3a:93:
bd:8a:92:8c:a0:ad:3e:b9:c3:1f:5d:eb:75:af:97:
ae:ef:a0:86:4e:d5:d1:0b:16:80:2a:75:b7:3c:6d:
bb:ce:f1:2e:42:47:e4:90:c7:76:b5:e6:f7:ba:57:
38:97:c4:b7:32:26:97:cb:02:82:b6:c8:30:43:63:
2e:46:65:1b:6f:ac:66:e2:88:d4:9b:3d:c0:de:be:
ef:50:e9:9f:f3:1c:77:15:b2:a6:a9:41:2b:3d:e6:
36:b4:38:44:b9:fe:0a:36:b2:de:18:a4:e3:1c:aa:
c7:cd:13:a5:9a:67:a6:d1:a7:91:6c:86:29:7a:3e:
1a:70:eb:8f:27:e4:08:e8:9a:ab:15:51:5d:d1:bf:
32:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:BB:8B:C1:42:20:ED:4C:FE:47:A8:53:95:78:A9:36:01:65:F6:5D
X509v3 Authority Key Identifier:
keyid:1B:A5:1A:0B:C0:F0:AF:EB:BF:6D:5D:92:7F:E1:F9:81:6F:52:35:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/27uLwUIg7Uz-R6hTlXipNgFl9l0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.92.0/22
83.229.76.0/22
83.229.104.0/22
89.19.42.0/23
93.114.10.0-93.114.15.255
93.180.192.0/20
95.215.36.0/22
119.13.192.0/20
209.20.176.0/21
Signature Algorithm: sha256WithRSAEncryption
78:d8:8c:73:d3:aa:6a:6a:78:1d:b0:db:7f:5e:14:8a:86:08:
3c:ed:73:61:1a:9c:ba:74:2b:1c:7c:82:fd:8e:cf:10:f9:51:
70:9b:de:66:59:01:e9:5d:8c:9a:bd:3a:19:74:a2:e4:99:12:
b1:5b:19:f4:f9:ee:5b:0f:ce:f0:0b:61:4a:7b:7a:c5:b8:b4:
67:a1:22:fc:78:00:cc:13:40:81:6b:d9:fb:37:8a:dd:7f:a5:
8b:db:c1:ce:77:13:73:7f:7f:b9:29:f7:05:30:af:fd:32:b6:
02:ca:19:38:5b:8d:b8:c5:5d:7c:da:9b:d2:ad:0d:0c:c4:11:
04:c3:c5:44:a6:cd:3c:17:69:b2:8e:f0:dc:9d:d4:cf:da:b8:
8f:a3:e8:a3:cf:e2:90:fc:f7:20:74:6a:d3:d6:c5:35:66:c7:
8b:66:83:fb:ba:1b:07:85:8f:b9:6d:70:41:a9:01:75:74:6b:
fd:a8:76:9d:8a:48:8f:c3:9c:c4:9d:69:27:7b:d9:62:bf:d3:
c4:d7:73:37:83:d3:38:71:8d:a4:f0:14:be:74:f5:ab:b8:a7:
2e:c1:d8:5e:36:a7:e4:45:ff:3f:d1:73:db:a7:5e:4d:8d:43:
0c:5e:73:44:d5:e9:bb:67:4e:54:22:fd:5a:3b:b9:ca:6a:9f:
cb:83:7c:30
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgISAYbqR1C9efkQfZdbffnzGSpUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiYTUxYTBiYzBmMGFmZWJiZjZkNWQ5MjdmZTFmOTgxNmY1
MjM1MmQwHhcNMjMwMzE2MTE1NjI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYmJiOGJjMTQyMjBlZDRjZmU0N2E4NTM5NTc4YTkzNjAxNjVmNjVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi7QkxJT1fLvdp6NR1P/ot+xQ28Iu
LW+/TwRob1bqsG+WxhRO9qLIA1O4D2DKtSleA8F1PNrJQ7NeMMBM1JWjlItIwuFE
3/D5YnzsOzmyxK8Ex1YbVSa2vzd+38vTQ3l41Qd+C1FKT32t9x4xj9JOh9wy4Gdp
OpO9ipKMoK0+ucMfXet1r5eu76CGTtXRCxaAKnW3PG27zvEuQkfkkMd2teb3ulc4
l8S3MiaXywKCtsgwQ2MuRmUbb6xm4ojUmz3A3r7vUOmf8xx3FbKmqUErPeY2tDhE
uf4KNrLeGKTjHKrHzROlmmem0aeRbIYpej4acOuPJ+QI6JqrFVFd0b8yxwIDAQAB
o4ICQTCCAj0wHQYDVR0OBBYEFNu7i8FCIO1M/keoU5V4qTYBZfZdMB8GA1UdIwQY
MBaAFBulGgvA8K/rv21dkn/h+YFvUjUtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzZVYUM4RHdyLXVfYlYyU2YtSDVnVzlTTlMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS80ZjIxMWUtNzlkNy00NTA0LTllYWQt
ODcxZjllZDcwOGUwLzEvMjd1THdVSWc3VXotUjZoVGxYaXBOZ0ZsOWwwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS80ZjIxMWUtNzlkNy00NTA0LTllYWQtODcxZjllZDcwOGUw
LzEvRzZVYUM4RHdyLXVfYlYyU2YtSDVnVzlTTlMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFcGCCsGAQUFBwEHAQH/BEgwRjBEBAIAATA+AwQCLY5cAwQC
U+VMAwQCU+VoAwQBWRMqMAwDBAFdcgoDBARdcgADBARdtMADBAJf1yQDBAR3DcAD
BAPRFLAwDQYJKoZIhvcNAQELBQADggEBAHjYjHPTqmpqeB2w239eFIqGCDztc2Ea
nLp0Kxx8gv2OzxD5UXCb3mZZAeldjJq9Ohl0ouSZErFbGfT57lsPzvALYUp7esW4
tGehIvx4AMwTQIFr2fs3it1/pYvbwc53E3N/f7kp9wUwr/0ytgLKGThbjbjFXXza
m9KtDQzEEQTDxUSmzTwXabKO8Nyd1M/auI+j6KPP4pD89yB0atPWxTVmx4tmg/u6
GweFj7ltcEGpAXV0a/2odp2KSI/DnMSdaSd72WK/08TXczeD0zhxjaTwFL509au4
py7B2F42p+RF/z/Rc9unXk2NQwxec0TV6btnTlQi/Vo7ucpqn8uDfDA=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:24 2023 by rpki-client on console-fra.rpki-client.org