Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/tfDTC9e0WU_TpzeMHyxO8u7t71U.roa
File: tfDTC9e0WU_TpzeMHyxO8u7t71U.roa (raw, json)
Hash identifier: A1vJzcqV1PDdAybUWLjm4/HCvogWzKR0PDDASP+ie8w=
Subject key identifier: B5:F0:D3:0B:D7:B4:59:4F:D3:A7:37:8C:1F:2C:4E:F2:EE:ED:EF:55
Certificate issuer: /CN=1ba51a0bc0f0afebbf6d5d927fe1f9816f52352d
Certificate serial: 0188E45CF314A451FF665BC49F0E96EC4FB4
Authority key identifier: 1B:A5:1A:0B:C0:F0:AF:EB:BF:6D:5D:92:7F:E1:F9:81:6F:52:35:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/tfDTC9e0WU_TpzeMHyxO8u7t71U.roa
Signing time: Thu 22 Jun 2023 18:27:56 +0000
ROA not before: Thu 22 Jun 2023 18:27:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 133499
IP address blocks: 77.95.116.0/22 maxlen: 32
89.44.245.0/24 maxlen: 32
89.34.7.0/24 maxlen: 32
94.177.52.0/22 maxlen: 32
185.221.221.0/24 maxlen: 32
94.176.216.0/22 maxlen: 32
78.138.30.0/24 maxlen: 32
185.243.108.0/22 maxlen: 32
185.223.58.0/23 maxlen: 32
103.204.212.0/22 maxlen: 32
94.176.163.0/24 maxlen: 32
89.44.115.0/24 maxlen: 32
188.241.146.0/24 maxlen: 32
78.138.16.0/24 maxlen: 32
89.41.62.0/24 maxlen: 32
188.214.93.0/24 maxlen: 32
89.32.129.0/24 maxlen: 32
31.14.219.0/24 maxlen: 32
185.225.104.0/22 maxlen: 32
31.14.236.0/23 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:e4:5c:f3:14:a4:51:ff:66:5b:c4:9f:0e:96:ec:4f:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ba51a0bc0f0afebbf6d5d927fe1f9816f52352d
Validity
Not Before: Jun 22 18:27:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b5f0d30bd7b4594fd3a7378c1f2c4ef2eeedef55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ca:25:e7:fd:68:e4:c0:18:01:ac:45:80:71:
6d:ed:60:b6:14:32:43:26:cf:30:01:b9:74:12:ee:
99:38:2d:be:c0:c2:97:c1:68:01:d9:fe:be:c1:d0:
39:66:85:0a:12:32:77:87:b3:a1:24:01:bb:eb:a8:
50:a4:da:db:75:3e:b7:b1:1e:95:c1:ff:7e:85:a7:
55:f4:2e:78:54:fb:4d:6f:18:b8:9a:57:7b:03:63:
da:8b:b5:17:4b:93:f8:71:f2:ff:6b:77:4c:ae:a6:
a0:e1:06:a7:7e:82:1c:50:fc:69:e4:68:49:d5:1e:
94:9f:e0:1e:8b:c3:37:2b:5c:d7:dc:18:51:72:33:
76:cc:05:65:8c:7e:b0:ac:5e:53:03:dd:c5:91:72:
6e:99:fb:30:59:c0:21:8b:5f:8c:0b:33:7d:40:cf:
c5:12:a7:60:0f:97:d4:70:4b:fc:a3:7b:68:d7:f8:
c7:7f:ad:aa:22:d4:f3:96:df:cf:2c:b2:06:2f:39:
21:e0:9e:cc:0c:fb:18:7c:e7:1e:fb:a8:eb:ab:0f:
5a:90:bd:4f:cf:15:b1:c4:22:57:84:e0:a2:71:1f:
12:f2:e4:d5:6c:78:65:bd:0f:63:9e:7b:5c:6a:fc:
1c:82:ec:44:02:0b:89:05:fc:1f:a2:12:55:cc:83:
80:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:F0:D3:0B:D7:B4:59:4F:D3:A7:37:8C:1F:2C:4E:F2:EE:ED:EF:55
X509v3 Authority Key Identifier:
keyid:1B:A5:1A:0B:C0:F0:AF:EB:BF:6D:5D:92:7F:E1:F9:81:6F:52:35:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/tfDTC9e0WU_TpzeMHyxO8u7t71U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.219.0/24
31.14.236.0/23
77.95.116.0/22
78.138.16.0/24
78.138.30.0/24
89.32.129.0/24
89.34.7.0/24
89.41.62.0/24
89.44.115.0/24
89.44.245.0/24
94.176.163.0/24
94.176.216.0/22
94.177.52.0/22
103.204.212.0/22
185.221.221.0/24
185.223.58.0/23
185.225.104.0/22
185.243.108.0/22
188.214.93.0/24
188.241.146.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:91:50:a6:c1:de:4d:24:0d:13:9a:d4:ef:89:51:bb:45:e2:
d2:af:87:fa:c4:cd:83:9e:eb:9c:e1:4d:79:72:8d:a7:f8:62:
54:c2:e1:9f:75:40:a2:22:f0:33:f8:20:61:07:e9:98:a5:fc:
9e:92:6d:7b:a1:2c:1b:4a:91:42:8b:28:5a:4f:34:c1:00:a9:
00:9d:1d:b4:c1:9e:aa:a7:4d:ca:90:d5:7e:e9:a5:cf:74:4b:
66:d3:72:70:4d:8b:98:55:26:0e:0f:85:a8:89:de:aa:29:31:
67:54:59:f7:d5:74:58:dc:a6:60:15:dd:cd:09:87:69:62:31:
d6:08:b1:6f:48:f6:71:09:ec:89:0d:6f:2d:30:ed:4a:9a:15:
26:78:a8:39:a2:26:77:bb:45:87:a5:0f:4d:93:62:75:ca:2a:
43:fe:37:69:25:47:f3:66:b8:dd:63:6a:ea:07:23:06:3f:b8:
5d:09:2d:c4:b3:e9:d1:cf:be:1a:c6:e0:68:44:65:d2:21:76:
7b:01:8a:2d:9c:7a:8d:8f:0b:80:d5:7a:93:c9:05:df:62:ab:
c6:68:74:fc:40:63:98:15:da:8b:78:8f:5f:70:11:99:54:4c:
27:6b:49:be:b8:e4:b2:b8:89:6b:30:eb:de:26:ac:1f:95:8d:
7d:ab:5f:81
-----BEGIN CERTIFICATE-----
MIIFcjCCBFqgAwIBAgISAYjkXPMUpFH/ZlvEnw6W7E+0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiYTUxYTBiYzBmMGFmZWJiZjZkNWQ5MjdmZTFmOTgxNmY1
MjM1MmQwHhcNMjMwNjIyMTgyNzU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNWYwZDMwYmQ3YjQ1OTRmZDNhNzM3OGMxZjJjNGVmMmVlZWRlZjU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMol5/1o5MAYAaxFgHFt7WC2FDJD
Js8wAbl0Eu6ZOC2+wMKXwWgB2f6+wdA5ZoUKEjJ3h7OhJAG766hQpNrbdT63sR6V
wf9+hadV9C54VPtNbxi4mld7A2Pai7UXS5P4cfL/a3dMrqag4QanfoIcUPxp5GhJ
1R6Un+Aei8M3K1zX3BhRcjN2zAVljH6wrF5TA93FkXJumfswWcAhi1+MCzN9QM/F
EqdgD5fUcEv8o3to1/jHf62qItTzlt/PLLIGLzkh4J7MDPsYfOce+6jrqw9akL1P
zxWxxCJXhOCicR8S8uTVbHhlvQ9jnntcavwcguxEAguJBfwfohJVzIOAKQIDAQAB
o4ICfjCCAnowHQYDVR0OBBYEFLXw0wvXtFlP06c3jB8sTvLu7e9VMB8GA1UdIwQY
MBaAFBulGgvA8K/rv21dkn/h+YFvUjUtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzZVYUM4RHdyLXVfYlYyU2YtSDVnVzlTTlMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS80ZjIxMWUtNzlkNy00NTA0LTllYWQt
ODcxZjllZDcwOGUwLzEvdGZEVEM5ZTBXVV9UcHplTUh5eE84dTd0NzFVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS80ZjIxMWUtNzlkNy00NTA0LTllYWQtODcxZjllZDcwOGUw
LzEvRzZVYUM4RHdyLXVfYlYyU2YtSDVnVzlTTlMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGTBggrBgEFBQcBBwEB/wSBgzCBgDB+BAIAATB4AwQAHw7b
AwQBHw7sAwQCTV90AwQATooQAwQATooeAwQAWSCBAwQAWSIHAwQAWSk+AwQAWSxz
AwQAWSz1AwQAXrCjAwQCXrDYAwQCXrE0AwQCZ8zUAwQAud3dAwQBud86AwQCueFo
AwQCufNsAwQAvNZdAwQAvPGSMA0GCSqGSIb3DQEBCwUAA4IBAQBckVCmwd5NJA0T
mtTviVG7ReLSr4f6xM2Dnuuc4U15co2n+GJUwuGfdUCiIvAz+CBhB+mYpfyekm17
oSwbSpFCiyhaTzTBAKkAnR20wZ6qp03KkNV+6aXPdEtm03JwTYuYVSYOD4Woid6q
KTFnVFn31XRY3KZgFd3NCYdpYjHWCLFvSPZxCeyJDW8tMO1KmhUmeKg5oiZ3u0WH
pQ9Nk2J1yipD/jdpJUfzZrjdY2rqByMGP7hdCS3Es+nRz74axuBoRGXSIXZ7AYot
nHqNjwuA1XqTyQXfYqvGaHT8QGOYFdqLeI9fcBGZVEwna0m+uOSyuIlrMOveJqwf
lY19q1+B
-----END CERTIFICATE-----
Generated at Mon Jan 1 23:38:10 2024 by rpki-client on console-fra.rpki-client.org