Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/2b5e7c-67b1-477d-895f-8f5fc92125db/1/adJF-1ma185LN_QDQvqi9LAG9Qw.roa
File: adJF-1ma185LN_QDQvqi9LAG9Qw.roa (raw, json)
Hash identifier: eUrFDRxHYMDiBxeueS9rjoSXr+MvjaSSlEpEWOj5HHs=
Subject key identifier: 69:D2:45:FB:59:9A:D7:CE:4B:37:F4:03:42:FA:A2:F4:B0:06:F5:0C
Certificate issuer: /CN=66d337d330ba44efcfef555355132a6a2c69783c
Certificate serial: 0187CB627A5934D1A93462A6A81DA4E91AD4
Authority key identifier: 66:D3:37:D3:30:BA:44:EF:CF:EF:55:53:55:13:2A:6A:2C:69:78:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtM30zC6RO_P71VTVRMqaixpeDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/2b5e7c-67b1-477d-895f-8f5fc92125db/1/adJF-1ma185LN_QDQvqi9LAG9Qw.roa
Signing time: Sat 29 Apr 2023 05:00:41 +0000
ROA not before: Sat 29 Apr 2023 05:00:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9147
IP address blocks: 185.119.240.0/22 maxlen: 22
185.119.240.0/23 maxlen: 23
212.86.64.0/19 maxlen: 19
185.119.240.0/24 maxlen: 24
212.86.64.0/24 maxlen: 24
212.86.67.0/24 maxlen: 24
212.86.69.0/24 maxlen: 24
212.86.70.0/24 maxlen: 24
185.119.242.0/23 maxlen: 23
185.119.242.0/24 maxlen: 24
212.86.68.0/24 maxlen: 24
185.119.241.0/24 maxlen: 24
185.119.243.0/24 maxlen: 24
212.86.71.0/24 maxlen: 24
212.86.65.0/24 maxlen: 24
212.86.66.0/24 maxlen: 24
212.86.72.0/24 maxlen: 24
212.86.73.0/24 maxlen: 24
212.86.76.0/24 maxlen: 24
212.86.74.0/24 maxlen: 24
212.86.75.0/24 maxlen: 24
212.86.77.0/24 maxlen: 24
212.86.78.0/24 maxlen: 24
212.86.79.0/24 maxlen: 24
212.86.80.0/24 maxlen: 24
212.86.83.0/24 maxlen: 24
212.86.81.0/24 maxlen: 24
212.86.82.0/24 maxlen: 24
212.86.84.0/24 maxlen: 24
212.86.85.0/24 maxlen: 24
212.86.86.0/24 maxlen: 24
212.86.87.0/24 maxlen: 24
212.86.90.0/24 maxlen: 24
212.86.88.0/24 maxlen: 24
212.86.89.0/24 maxlen: 24
212.86.91.0/24 maxlen: 24
212.86.93.0/24 maxlen: 24
212.86.94.0/24 maxlen: 24
212.86.92.0/24 maxlen: 24
212.86.95.0/24 maxlen: 24
185.176.57.0/24 maxlen: 24
185.176.58.0/24 maxlen: 24
185.176.56.0/24 maxlen: 24
185.176.56.0/22 maxlen: 22
185.176.59.0/24 maxlen: 24
78.31.232.0/24 maxlen: 24
78.31.232.0/23 maxlen: 23
78.31.232.0/22 maxlen: 22
78.31.233.0/24 maxlen: 24
78.31.234.0/23 maxlen: 23
78.31.234.0/24 maxlen: 24
78.31.235.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:cb:62:7a:59:34:d1:a9:34:62:a6:a8:1d:a4:e9:1a:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d337d330ba44efcfef555355132a6a2c69783c
Validity
Not Before: Apr 29 05:00:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=69d245fb599ad7ce4b37f40342faa2f4b006f50c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:fb:bf:7d:4f:17:f2:c4:b2:73:70:b9:bd:9d:
16:69:7e:18:54:5e:d4:b4:02:3b:d9:84:04:9e:b5:
07:6d:9e:3c:da:61:3a:ad:2a:83:0d:25:8d:0c:6a:
2e:34:27:ce:96:e3:b6:bf:b4:aa:fe:e3:a9:43:0e:
fc:99:3c:52:00:75:ba:12:d8:c5:02:93:33:fc:db:
54:0a:2d:5f:d2:f2:72:24:5e:53:b4:7b:85:56:77:
e0:8e:6f:0e:b1:4b:64:28:33:e5:32:81:1c:96:c0:
a0:65:61:55:f5:a2:a5:04:55:3f:3e:5b:05:88:98:
90:dc:07:bd:6d:d9:28:55:93:b3:be:bc:0a:a3:97:
60:bb:89:3a:55:02:6f:11:5a:50:56:23:00:a0:51:
2c:c9:4b:97:b4:33:6b:20:13:0f:94:b7:ab:81:38:
a0:89:7c:e4:ff:54:74:27:0e:1e:a3:b5:c1:b9:70:
b9:13:c6:58:98:3c:2a:ce:55:a4:75:53:78:00:aa:
d6:f5:e0:88:6f:ae:b2:e0:db:6b:57:93:b1:ae:9a:
f2:f5:b8:96:0e:14:73:a7:f7:16:d6:69:bc:5b:94:
65:16:b2:40:93:50:37:cb:4d:cb:63:75:f3:be:b4:
05:40:ca:77:9b:49:e7:b1:02:cd:97:41:5c:ca:7e:
56:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:D2:45:FB:59:9A:D7:CE:4B:37:F4:03:42:FA:A2:F4:B0:06:F5:0C
X509v3 Authority Key Identifier:
keyid:66:D3:37:D3:30:BA:44:EF:CF:EF:55:53:55:13:2A:6A:2C:69:78:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtM30zC6RO_P71VTVRMqaixpeDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2b5e7c-67b1-477d-895f-8f5fc92125db/1/adJF-1ma185LN_QDQvqi9LAG9Qw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2b5e7c-67b1-477d-895f-8f5fc92125db/1/ZtM30zC6RO_P71VTVRMqaixpeDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.31.232.0/22
185.119.240.0/22
185.176.56.0/22
212.86.64.0/19
Signature Algorithm: sha256WithRSAEncryption
ac:1e:0b:b6:44:03:8d:ad:52:c3:45:68:7b:42:d7:3b:81:e4:
66:0d:d4:6d:b0:68:0f:0a:f2:9a:30:09:74:b3:3f:89:15:9d:
fd:9c:41:97:df:8b:fb:25:de:d9:53:9e:ed:7d:1a:45:02:3f:
d8:ac:8c:91:f8:00:29:24:cf:b9:9f:73:cc:b9:90:38:69:60:
35:b7:f0:5e:0d:4d:a2:86:8a:39:4f:1d:a7:5a:af:7a:62:4d:
51:97:db:b0:b5:a3:ed:97:89:e3:3b:a5:15:fe:b9:84:3f:18:
61:bc:d9:cd:6b:7b:95:61:9b:b1:86:f7:27:d3:1c:c6:dd:bb:
93:48:17:b2:0e:bb:e5:01:17:f5:fd:6a:0b:6a:f1:e0:e3:3a:
8e:0d:2d:28:6e:fa:df:b1:9b:77:28:e9:d0:c1:4c:7c:8a:a7:
5e:03:ea:23:5a:7f:bd:16:f0:6d:75:54:36:4e:a1:ba:d3:16:
c8:0e:a4:fb:4e:b6:21:c8:6e:1f:01:6f:be:9c:b8:e1:ca:8e:
97:b6:f1:1f:85:66:c0:b3:41:b5:8c:cc:d1:8a:5d:de:c8:2c:
6e:04:c2:24:12:ae:ba:0e:ab:19:eb:d5:07:2c:46:c8:c0:03:
6b:00:52:52:41:5d:c9:59:bc:77:1f:b5:ff:4e:bd:4f:13:1f:
f5:9a:7b:a2
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYfLYnpZNNGpNGKmqB2k6RrUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2ZDMzN2QzMzBiYTQ0ZWZjZmVmNTU1MzU1MTMyYTZhMmM2
OTc4M2MwHhcNMjMwNDI5MDUwMDQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OWQyNDVmYjU5OWFkN2NlNGIzN2Y0MDM0MmZhYTJmNGIwMDZmNTBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvu/fU8X8sSyc3C5vZ0WaX4YVF7U
tAI72YQEnrUHbZ482mE6rSqDDSWNDGouNCfOluO2v7Sq/uOpQw78mTxSAHW6EtjF
ApMz/NtUCi1f0vJyJF5TtHuFVnfgjm8OsUtkKDPlMoEclsCgZWFV9aKlBFU/PlsF
iJiQ3Ae9bdkoVZOzvrwKo5dgu4k6VQJvEVpQViMAoFEsyUuXtDNrIBMPlLergTig
iXzk/1R0Jw4eo7XBuXC5E8ZYmDwqzlWkdVN4AKrW9eCIb66y4NtrV5Oxrpry9biW
DhRzp/cW1mm8W5RlFrJAk1A3y03LY3XzvrQFQMp3m0nnsQLNl0Fcyn5WBwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFGnSRftZmtfOSzf0A0L6ovSwBvUMMB8GA1UdIwQY
MBaAFGbTN9MwukTvz+9VU1UTKmosaXg8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnRNMzB6QzZST19QNzFWVFZSTXFhaXhwZUR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC8yYjVlN2MtNjdiMS00NzdkLTg5NWYt
OGY1ZmM5MjEyNWRiLzEvYWRKRi0xbWExODVMTl9RRFF2cWk5TEFHOVF3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC8yYjVlN2MtNjdiMS00NzdkLTg5NWYtOGY1ZmM5MjEyNWRi
LzEvWnRNMzB6QzZST19QNzFWVFZSTXFhaXhwZUR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCTh/oAwQC
uXfwAwQCubA4AwQF1FZAMA0GCSqGSIb3DQEBCwUAA4IBAQCsHgu2RAONrVLDRWh7
Qtc7geRmDdRtsGgPCvKaMAl0sz+JFZ39nEGX34v7Jd7ZU57tfRpFAj/YrIyR+AAp
JM+5n3PMuZA4aWA1t/BeDU2ihoo5Tx2nWq96Yk1Rl9uwtaPtl4njO6UV/rmEPxhh
vNnNa3uVYZuxhvcn0xzG3buTSBeyDrvlARf1/WoLavHg4zqODS0obvrfsZt3KOnQ
wUx8iqdeA+ojWn+9FvBtdVQ2TqG60xbIDqT7TrYhyG4fAW++nLjhyo6XtvEfhWbA
s0G1jMzRil3eyCxuBMIkEq66DqsZ69UHLEbIwANrAFJSQV3JWbx3H7X/Tr1PEx/1
mnui
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:37 2023 by rpki-client on console-ams.rpki-client.org