Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/_osPwgTku4ZZl-awv29wnlffQgw.roa
File: _osPwgTku4ZZl-awv29wnlffQgw.roa (raw, json)
Hash identifier: NJGvAYQS2gc+uRCnTkXixei80yKcN1f6fQQSItEn6Kw=
Subject key identifier: FE:8B:0F:C2:04:E4:BB:86:59:97:E6:B0:BF:6F:70:9E:57:DF:42:0C
Certificate issuer: /CN=1c7ad7754795ddd605f28838bb7cc359df7a266a
Certificate serial: 0187E724AB95FDDDA5F341633BA1D4A6CC80
Authority key identifier: 1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/_osPwgTku4ZZl-awv29wnlffQgw.roa
Signing time: Thu 04 May 2023 14:22:32 +0000
ROA not before: Thu 04 May 2023 14:22:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34568
IP address blocks: 193.138.81.0/24 maxlen: 24
194.116.234.0/23 maxlen: 24
77.87.248.0/21 maxlen: 24
185.217.192.0/22 maxlen: 24
84.246.120.0/21 maxlen: 24
2a01:1f8::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e7:24:ab:95:fd:dd:a5:f3:41:63:3b:a1:d4:a6:cc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c7ad7754795ddd605f28838bb7cc359df7a266a
Validity
Not Before: May 4 14:22:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fe8b0fc204e4bb865997e6b0bf6f709e57df420c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:68:8c:bf:df:ed:bf:71:0b:f5:c7:74:56:94:
6c:b6:ce:f5:9c:15:74:ec:c6:ed:b8:92:88:ec:f5:
0c:7c:b8:d8:80:e3:61:32:77:bc:a8:7a:6e:51:9b:
fc:a2:35:c7:53:ef:98:9f:16:86:fa:5f:38:97:df:
8e:9a:59:a5:5e:d6:d8:6e:ec:83:94:c0:93:f4:54:
16:16:89:b4:31:ac:25:0c:35:51:05:14:c9:6a:1a:
92:4a:1f:df:fc:a6:b8:3a:e3:fb:8c:e3:8d:ee:ed:
bb:f2:f6:ed:6d:9a:b2:d5:67:bc:d2:27:b5:d0:04:
93:de:cf:c3:78:58:4c:9b:2c:45:ea:14:a3:a0:bf:
b1:c1:b3:b9:0a:41:69:56:e5:95:66:c9:34:1e:43:
65:2b:5a:63:b0:c3:cd:6c:7e:a6:cf:1f:ac:55:f5:
ce:68:a4:e0:95:72:fd:6c:9b:0e:05:c2:47:56:70:
5f:a4:2a:21:eb:09:96:46:74:f3:5a:c3:75:55:b7:
49:7f:4b:ae:70:20:ec:20:28:0b:7d:9b:5b:66:ea:
d8:07:5e:b5:32:8b:94:2d:1b:a5:2d:15:f6:7a:ec:
eb:a9:94:82:18:14:88:92:c3:2c:fb:05:57:b3:d8:
00:7b:7a:33:b8:fa:0b:89:7d:58:f2:e8:f0:d5:cc:
30:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:8B:0F:C2:04:E4:BB:86:59:97:E6:B0:BF:6F:70:9E:57:DF:42:0C
X509v3 Authority Key Identifier:
keyid:1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/_osPwgTku4ZZl-awv29wnlffQgw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.87.248.0/21
84.246.120.0/21
185.217.192.0/22
193.138.81.0/24
194.116.234.0/23
IPv6:
2a01:1f8::/32
Signature Algorithm: sha256WithRSAEncryption
7d:21:17:73:f6:fc:23:21:90:6d:71:6c:fc:e8:88:ce:94:3a:
85:4e:05:b0:79:b5:b1:f6:66:0e:39:7e:90:59:42:10:5b:d4:
e5:f1:f3:7f:9a:f7:d4:b9:3b:4c:93:58:45:78:ea:a8:b1:05:
29:6b:3c:98:5b:dc:4d:aa:1c:f9:bd:b3:b5:ff:14:2f:cf:87:
78:44:f9:0a:78:14:6c:b5:73:82:17:0c:68:18:aa:60:c3:d3:
ae:bd:ea:51:e7:90:83:06:b2:6c:51:72:0a:b7:91:cf:86:6b:
46:7c:ad:c5:35:b4:ce:d8:c7:26:ed:3d:7a:84:07:10:9c:76:
6e:47:a8:79:a5:59:cb:d3:7c:a5:2c:d3:43:3b:8d:9c:c9:bd:
9f:49:d8:3d:4b:f4:5d:4e:1d:7b:70:e7:82:be:f9:86:03:54:
4b:f0:ac:cc:be:8a:f9:82:d1:06:a8:66:fd:ca:a5:e5:e6:3a:
03:bf:3c:62:b5:11:2e:2b:34:80:ac:94:d1:b5:c5:d3:1f:08:
e6:62:81:9e:2b:05:d5:4d:bb:b3:53:c1:02:83:c2:8d:cb:7a:
0b:03:f2:40:62:ef:99:d5:08:cc:d7:69:fa:dc:70:c2:d9:f1:
b2:29:b9:f5:2d:44:95:ff:50:0b:e1:95:1f:c6:f5:d7:64:52:
f5:5d:7e:45
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgISAYfnJKuV/d2l80FjO6HUpsyAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjN2FkNzc1NDc5NWRkZDYwNWYyODgzOGJiN2NjMzU5ZGY3
YTI2NmEwHhcNMjMwNTA0MTQyMjMyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZThiMGZjMjA0ZTRiYjg2NTk5N2U2YjBiZjZmNzA5ZTU3ZGY0MjBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2iMv9/tv3EL9cd0VpRsts71nBV0
7MbtuJKI7PUMfLjYgONhMne8qHpuUZv8ojXHU++YnxaG+l84l9+OmlmlXtbYbuyD
lMCT9FQWFom0MawlDDVRBRTJahqSSh/f/Ka4OuP7jOON7u278vbtbZqy1We80ie1
0AST3s/DeFhMmyxF6hSjoL+xwbO5CkFpVuWVZsk0HkNlK1pjsMPNbH6mzx+sVfXO
aKTglXL9bJsOBcJHVnBfpCoh6wmWRnTzWsN1VbdJf0uucCDsICgLfZtbZurYB161
MouULRulLRX2euzrqZSCGBSIksMs+wVXs9gAe3ozuPoLiX1Y8ujw1cww7QIDAQAB
o4ICMDCCAiwwHQYDVR0OBBYEFP6LD8IE5LuGWZfmsL9vcJ5X30IMMB8GA1UdIwQY
MBaAFBx613VHld3WBfKIOLt8w1nfeiZqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEhyWGRVZVYzZFlGOG9nNHUzekRXZDk2Sm1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9jNWE5ZTMtNjcyMi00YjZhLWJlNTgt
YWRhNWMyMGUzZjdiLzEvX29zUHdnVGt1NFpabC1hd3YyOXdubGZmUWd3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS9jNWE5ZTMtNjcyMi00YjZhLWJlNTgtYWRhNWMyMGUzZjdi
LzEvSEhyWGRVZVYzZFlGOG9nNHUzekRXZDk2Sm1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQDTVf4AwQD
VPZ4AwQCudnAAwQAwYpRAwQBwnTqMA0EAgACMAcDBQAqAQH4MA0GCSqGSIb3DQEB
CwUAA4IBAQB9IRdz9vwjIZBtcWz86IjOlDqFTgWwebWx9mYOOX6QWUIQW9Tl8fN/
mvfUuTtMk1hFeOqosQUpazyYW9xNqhz5vbO1/xQvz4d4RPkKeBRstXOCFwxoGKpg
w9OuvepR55CDBrJsUXIKt5HPhmtGfK3FNbTO2Mcm7T16hAcQnHZuR6h5pVnL03yl
LNNDO42cyb2fSdg9S/RdTh17cOeCvvmGA1RL8KzMvor5gtEGqGb9yqXl5joDvzxi
tREuKzSArJTRtcXTHwjmYoGeKwXVTbuzU8ECg8KNy3oLA/JAYu+Z1QjM12n63HDC
2fGyKbn1LUSV/1AL4ZUfxvXXZFL1XX5F
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:48 2023 by rpki-client on console-ams.rpki-client.org