Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/KYLl30ktP8J5iCrPSS4htvO34xg.roa
File: KYLl30ktP8J5iCrPSS4htvO34xg.roa (raw, json)
Hash identifier: Eolvs1vdf8+aB5QW1wVcH8sQj7JRSApNF5buqoOa+qg=
Subject key identifier: 29:82:E5:DF:49:2D:3F:C2:79:88:2A:CF:49:2E:21:B6:F3:B7:E3:18
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 01876A4F6C3141428685B6EF4240A112BEC3
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/KYLl30ktP8J5iCrPSS4htvO34xg.roa
Signing time: Mon 10 Apr 2023 08:36:42 +0000
ROA not before: Mon 10 Apr 2023 08:36:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3507
IP address blocks: 93.114.192.0/24 maxlen: 24
193.23.130.0/24 maxlen: 24
45.156.158.0/24 maxlen: 24
89.33.84.0/24 maxlen: 24
93.115.109.0/24 maxlen: 24
188.240.232.0/24 maxlen: 24
188.241.110.0/24 maxlen: 24
188.241.214.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:6a:4f:6c:31:41:42:86:85:b6:ef:42:40:a1:12:be:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Apr 10 08:36:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2982e5df492d3fc279882acf492e21b6f3b7e318
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:06:61:6d:75:e4:f2:cc:af:e8:88:e0:d9:f2:
ae:22:d9:47:b3:57:d2:eb:79:b4:c0:98:5a:f0:9f:
e9:de:8c:c8:4d:f1:20:f8:c3:5f:a8:d2:6c:80:0f:
6a:2a:5b:08:c5:f4:01:c6:f2:d8:07:e0:4e:71:a3:
b3:48:67:9e:60:67:0f:de:9a:c1:e9:d8:97:3c:87:
2d:c6:13:cf:eb:cc:c7:bb:0f:67:f4:f2:f6:3b:ea:
29:83:2d:ec:e2:a6:f0:63:df:4c:95:9f:35:63:f5:
97:d3:7a:b5:24:9b:cc:a6:93:c1:6f:f3:a8:40:e9:
17:c9:b6:dd:26:8a:c9:d2:49:71:e5:56:55:0e:98:
91:ba:5a:82:50:99:cc:92:de:63:4f:51:e0:0f:a3:
06:c2:5d:89:07:05:0a:fe:22:01:cc:07:07:c8:af:
6d:05:30:3c:be:c3:4b:da:2e:9f:83:66:a4:fe:71:
7d:d2:3c:d4:1b:75:d3:71:f3:f4:71:d2:4c:6f:b9:
a6:9b:02:9b:97:99:fd:69:13:76:f8:77:8c:09:f7:
77:af:fd:91:73:9b:07:65:1d:4b:da:4e:52:89:e3:
2d:53:b2:c6:ee:5e:5f:af:4d:00:62:9d:de:9f:98:
8f:79:a4:ed:ae:9d:02:1f:66:cf:0e:6b:c9:b2:53:
de:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:82:E5:DF:49:2D:3F:C2:79:88:2A:CF:49:2E:21:B6:F3:B7:E3:18
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/KYLl30ktP8J5iCrPSS4htvO34xg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.158.0/24
89.33.84.0/24
93.114.192.0/24
93.115.109.0/24
188.240.232.0/24
188.241.110.0/24
188.241.214.0/24
193.23.130.0/24
Signature Algorithm: sha256WithRSAEncryption
83:c7:e8:27:fa:05:74:eb:89:63:fe:92:71:33:8e:71:73:76:
5a:e2:4c:7d:0f:4e:a8:7f:fa:aa:99:af:9e:a6:78:8c:74:5c:
55:dc:15:c6:03:df:59:93:71:5b:73:82:91:6f:2e:67:a0:0b:
1f:0f:dc:86:27:77:5d:02:f7:81:21:1f:82:8d:ba:12:5c:db:
71:d5:be:26:bd:d4:4e:0c:ec:1a:5f:c2:1c:26:32:d8:6a:d6:
57:71:87:09:a8:89:00:c4:a0:03:d9:1b:4e:1f:00:e0:01:e9:
a8:99:66:ea:2b:45:9c:a4:ed:cb:e4:92:d4:75:9f:a8:2d:91:
29:50:5f:ab:fc:1a:20:4a:0c:78:90:cc:6d:67:a2:0a:d0:68:
ea:91:1d:45:8f:d3:ec:96:ea:96:05:47:23:ff:65:0f:42:03:
3a:27:55:4a:2d:93:7b:1a:d0:e7:47:83:ef:8f:12:de:3c:29:
73:43:df:57:34:1d:42:ac:aa:f1:c5:c9:e4:c8:3a:13:e3:bd:
d5:f1:b2:d5:1e:c5:b7:3d:88:ce:ca:e8:99:9f:5e:20:d5:3f:
96:05:0a:e2:e1:35:54:71:b5:b3:3f:33:db:92:07:0f:b1:a3:
87:69:34:f6:ad:ec:e8:60:e4:2b:8d:56:62:25:a3:60:cf:02:
4b:be:e0:e3
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgISAYdqT2wxQUKGhbbvQkChEr7DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw
NWIwZTIwHhcNMjMwNDEwMDgzNjQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyOTgyZTVkZjQ5MmQzZmMyNzk4ODJhY2Y0OTJlMjFiNmYzYjdlMzE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwZhbXXk8syv6Ijg2fKuItlHs1fS
63m0wJha8J/p3ozITfEg+MNfqNJsgA9qKlsIxfQBxvLYB+BOcaOzSGeeYGcP3prB
6diXPIctxhPP68zHuw9n9PL2O+opgy3s4qbwY99MlZ81Y/WX03q1JJvMppPBb/Oo
QOkXybbdJorJ0klx5VZVDpiRulqCUJnMkt5jT1HgD6MGwl2JBwUK/iIBzAcHyK9t
BTA8vsNL2i6fg2ak/nF90jzUG3XTcfP0cdJMb7mmmwKbl5n9aRN2+HeMCfd3r/2R
c5sHZR1L2k5SieMtU7LG7l5fr00AYp3en5iPeaTtrp0CH2bPDmvJslPeMQIDAQAB
o4ICMzCCAi8wHQYDVR0OBBYEFCmC5d9JLT/CeYgqz0kuIbbzt+MYMB8GA1UdIwQY
MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt
MmNjZWRiOTY2YTU4LzEvS1lMbDMwa3RQOEo1aUNyUFNTNGh0dk8zNHhnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4
LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQALZyeAwQA
WSFUAwQAXXLAAwQAXXNtAwQAvPDoAwQAvPFuAwQAvPHWAwQAwReCMA0GCSqGSIb3
DQEBCwUAA4IBAQCDx+gn+gV064lj/pJxM45xc3Za4kx9D06of/qqma+epniMdFxV
3BXGA99Zk3Fbc4KRby5noAsfD9yGJ3ddAveBIR+CjboSXNtx1b4mvdRODOwaX8Ic
JjLYatZXcYcJqIkAxKAD2RtOHwDgAemomWbqK0WcpO3L5JLUdZ+oLZEpUF+r/Bog
Sgx4kMxtZ6IK0GjqkR1Fj9PsluqWBUcj/2UPQgM6J1VKLZN7GtDnR4PvjxLePClz
Q99XNB1CrKrxxcnkyDoT473V8bLVHsW3PYjOyuiZn14g1T+WBQri4TVUcbWzPzPb
kgcPsaOHaTT2rezoYOQrjVZiJaNgzwJLvuDj
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:01 2023 by rpki-client on console-fra.rpki-client.org