Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/I1WUuZ3pPdkJtMofItM-jS9oWRE.roa
File: I1WUuZ3pPdkJtMofItM-jS9oWRE.roa (raw, json)
Hash identifier: JZA8JdLBfgCbAQ2NqnizovrKc3zo3u6B9mOrBbOnWqw=
Subject key identifier: 23:55:94:B9:9D:E9:3D:D9:09:B4:CA:1F:22:D3:3E:8D:2F:68:59:11
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 018824A2ECF4A69897EC029B55D38CEBC795
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/I1WUuZ3pPdkJtMofItM-jS9oWRE.roa
Signing time: Tue 16 May 2023 12:57:17 +0000
ROA not before: Tue 16 May 2023 12:57:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42337
IP address blocks: 87.107.44.0/22 maxlen: 24
87.107.48.0/23 maxlen: 23
87.107.56.0/21 maxlen: 24
87.107.64.0/22 maxlen: 24
87.107.72.0/21 maxlen: 24
87.107.80.0/21 maxlen: 24
87.107.16.0/21 maxlen: 24
87.107.28.0/22 maxlen: 24
87.107.32.0/23 maxlen: 23
87.107.36.0/22 maxlen: 24
87.107.148.0/22 maxlen: 24
87.107.156.0/22 maxlen: 24
62.220.118.0/23 maxlen: 24
62.220.113.0/24 maxlen: 24
62.220.112.0/21 maxlen: 21
87.107.176.0/21 maxlen: 24
87.107.184.0/22 maxlen: 24
87.107.92.0/22 maxlen: 24
87.107.100.0/22 maxlen: 22
87.107.136.0/21 maxlen: 24
81.12.0.0/21 maxlen: 24
81.12.32.0/21 maxlen: 24
81.12.40.0/21 maxlen: 24
81.12.54.0/23 maxlen: 24
81.12.56.0/23 maxlen: 23
81.12.64.0/21 maxlen: 24
81.12.60.0/22 maxlen: 24
81.12.64.0/18 maxlen: 24
81.12.72.0/21 maxlen: 24
81.12.80.0/20 maxlen: 24
81.12.96.0/19 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:24:a2:ec:f4:a6:98:97:ec:02:9b:55:d3:8c:eb:c7:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: May 16 12:57:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=235594b99de93dd909b4ca1f22d33e8d2f685911
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ba:cf:5d:f7:10:47:9e:22:c4:c2:eb:f3:f5:
7b:b3:16:21:36:6a:95:3e:e9:11:e0:73:a3:1c:90:
a4:01:d7:a8:e2:ff:26:10:94:fe:7d:16:0e:98:00:
ca:fd:78:b9:a5:15:97:5d:fb:25:b4:25:e0:d6:b1:
f3:e0:7e:cb:b7:b5:43:c4:48:60:8a:7d:ec:cb:91:
7b:2e:72:9d:3e:7e:dc:7a:40:a7:6b:5f:4b:55:de:
dd:8e:6e:ae:ee:bb:73:51:98:cd:70:8e:cb:42:aa:
2d:46:a6:a2:ec:39:8d:b8:a3:c6:b8:8d:01:70:1e:
cc:6e:46:9b:6b:b0:f8:63:2e:3c:28:ef:67:6d:79:
d2:79:4b:df:d9:7d:2f:27:24:3e:72:1f:d2:2d:d0:
b2:55:56:46:e8:48:0d:5f:78:ee:e6:11:c1:3d:9e:
f7:b4:43:e9:38:85:80:bb:cf:88:ff:de:9a:cf:ab:
7d:86:48:9c:43:f5:c7:60:5c:0a:2f:85:ea:93:fc:
e9:e1:f1:ac:9a:fc:ce:91:61:9e:f7:a1:40:8e:67:
23:bd:23:94:99:d8:1d:9c:99:79:12:92:9f:71:e1:
bc:27:f7:78:d7:02:a2:cd:54:cc:09:ad:1f:42:8a:
65:46:bc:f1:0b:94:9e:6e:39:83:15:e9:5c:e0:e7:
4e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:55:94:B9:9D:E9:3D:D9:09:B4:CA:1F:22:D3:3E:8D:2F:68:59:11
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/I1WUuZ3pPdkJtMofItM-jS9oWRE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.220.112.0/21
81.12.0.0/21
81.12.32.0/20
81.12.54.0-81.12.57.255
81.12.60.0-81.12.127.255
87.107.16.0/21
87.107.28.0-87.107.33.255
87.107.36.0/22
87.107.44.0-87.107.49.255
87.107.56.0-87.107.67.255
87.107.72.0-87.107.87.255
87.107.92.0/22
87.107.100.0/22
87.107.136.0/21
87.107.148.0/22
87.107.156.0/22
87.107.176.0-87.107.187.255
Signature Algorithm: sha256WithRSAEncryption
43:a3:65:15:6a:48:fe:97:47:37:3e:76:ee:6b:78:88:af:c9:
ad:f6:4c:6a:ac:74:d0:eb:de:4a:6e:be:d5:7e:73:49:54:c3:
b1:fb:b3:45:7d:22:de:ed:93:46:aa:f9:c5:15:50:d4:61:d9:
f2:19:1d:d7:60:44:e1:be:ff:51:4e:62:52:0e:53:19:78:57:
8a:23:17:19:c7:20:f1:c7:2a:b6:76:aa:1b:eb:6f:17:4a:7b:
52:0c:36:10:d4:39:ec:f7:4d:d6:bd:12:a9:b9:ff:21:18:ce:
10:f9:fd:3b:97:df:ce:0d:66:aa:aa:5a:50:35:09:c1:ce:b2:
dd:77:42:54:36:76:81:67:c8:73:ad:85:bc:ab:19:18:37:c5:
3e:c3:49:40:11:60:25:c0:63:42:d3:b3:46:c9:0a:c6:60:b3:
a5:c5:fd:7b:23:89:0e:49:a3:ab:6a:6b:d8:a0:c2:29:df:8c:
8c:7f:91:89:14:23:de:73:ca:03:e4:f4:44:2f:ca:ae:b1:8e:
88:45:03:8d:2e:4a:f8:42:74:4b:fb:af:e6:27:49:8b:f0:8a:
c4:7c:d6:36:37:34:18:0a:30:6e:ac:c3:29:88:bd:3b:36:d9:
51:8a:6d:d6:2e:5f:8e:48:c1:59:a6:ea:e0:a5:58:38:99:86:
23:34:5c:a6
-----BEGIN CERTIFICATE-----
MIIFmjCCBIKgAwIBAgISAYgkouz0ppiX7AKbVdOM68eVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwNzc1ZDk0NzFiODVkOTYzZmVmNmQyODM1OTBlMmQ5NDJk
ZDVjMjEwHhcNMjMwNTE2MTI1NzE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMzU1OTRiOTlkZTkzZGQ5MDliNGNhMWYyMmQzM2U4ZDJmNjg1OTExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrrPXfcQR54ixMLr8/V7sxYhNmqV
PukR4HOjHJCkAdeo4v8mEJT+fRYOmADK/Xi5pRWXXfsltCXg1rHz4H7Lt7VDxEhg
in3sy5F7LnKdPn7cekCna19LVd7djm6u7rtzUZjNcI7LQqotRqai7DmNuKPGuI0B
cB7Mbkaba7D4Yy48KO9nbXnSeUvf2X0vJyQ+ch/SLdCyVVZG6EgNX3ju5hHBPZ73
tEPpOIWAu8+I/96az6t9hkicQ/XHYFwKL4Xqk/zp4fGsmvzOkWGe96FAjmcjvSOU
mdgdnJl5EpKfceG8J/d41wKizVTMCa0fQoplRrzxC5SebjmDFelc4OdO7wIDAQAB
o4ICpjCCAqIwHQYDVR0OBBYEFCNVlLmd6T3ZCbTKHyLTPo0vaFkRMB8GA1UdIwQY
MBaAFAB3XZRxuF2WP+9tKDWQ4tlC3VwhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQt
NzZiMzNlNGNlODIxLzEvSTFXVXVaM3BQZGtKdE1vZkl0TS1qUzlvV1JFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQtNzZiMzNlNGNlODIx
LzEvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIG7BggrBgEFBQcBBwEB/wSBqzCBqDCBpQQCAAEwgZ4DBAM+
3HADBANRDAADBARRDCAwDAMEAVEMNgMEAVEMODAMAwQCUQw8AwQHUQwAAwQDV2sQ
MAwDBAJXaxwDBAFXayADBAJXayQwDAMEAldrLAMEAVdrMDAMAwQDV2s4AwQCV2tA
MAwDBANXa0gDBANXa1ADBAJXa1wDBAJXa2QDBANXa4gDBAJXa5QDBAJXa5wwDAME
BFdrsAMEAldruDANBgkqhkiG9w0BAQsFAAOCAQEAQ6NlFWpI/pdHNz527mt4iK/J
rfZMaqx00OveSm6+1X5zSVTDsfuzRX0i3u2TRqr5xRVQ1GHZ8hkd12BE4b7/UU5i
Ug5TGXhXiiMXGccg8ccqtnaqG+tvF0p7Ugw2ENQ57PdN1r0Sqbn/IRjOEPn9O5ff
zg1mqqpaUDUJwc6y3XdCVDZ2gWfIc62FvKsZGDfFPsNJQBFgJcBjQtOzRskKxmCz
pcX9eyOJDkmjq2pr2KDCKd+MjH+RiRQj3nPKA+T0RC/KrrGOiEUDjS5K+EJ0S/uv
5idJi/CKxHzWNjc0GAowbqzDKYi9OzbZUYpt1i5fjkjBWabq4KVYOJmGIzRcpg==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:33 2023 by rpki-client on console-ams.rpki-client.org