Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/L_6_W9fXUU-MqZYcnSgi9QpK6JU.roa
File: L_6_W9fXUU-MqZYcnSgi9QpK6JU.roa (raw, json)
Hash identifier: +Sfwhy8euDqzcsSXgkkFqCPmgaPMI6dYl8VqXazgvSk=
Subject key identifier: 2F:FE:BF:5B:D7:D7:51:4F:8C:A9:96:1C:9D:28:22:F5:0A:4A:E8:95
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0187A25351F277DD0E1F4E782F4789B31B38
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/L_6_W9fXUU-MqZYcnSgi9QpK6JU.roa
Signing time: Fri 21 Apr 2023 05:39:42 +0000
ROA not before: Fri 21 Apr 2023 05:39:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.115.146.0/24 maxlen: 24
188.214.27.0/24 maxlen: 24
185.230.248.0/24 maxlen: 24
185.230.249.0/24 maxlen: 24
185.229.104.0/24 maxlen: 24
185.229.106.0/24 maxlen: 24
194.4.156.0/23 maxlen: 24
194.4.159.0/24 maxlen: 24
185.245.238.0/24 maxlen: 24
89.43.208.0/24 maxlen: 24
185.245.237.0/24 maxlen: 24
185.121.231.0/24 maxlen: 24
178.239.203.0/24 maxlen: 24
78.142.242.0/23 maxlen: 24
185.121.230.0/24 maxlen: 24
185.9.54.0/24 maxlen: 24
45.159.152.0/24 maxlen: 24
45.159.154.0/24 maxlen: 24
62.197.135.0/24 maxlen: 24
185.103.75.0/24 maxlen: 24
178.239.192.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:a2:53:51:f2:77:dd:0e:1f:4e:78:2f:47:89:b3:1b:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Apr 21 05:39:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2ffebf5bd7d7514f8ca9961c9d2822f50a4ae895
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:55:1f:80:3c:e9:5b:d6:f4:ca:04:a6:d8:41:
a7:39:3c:09:57:13:0f:54:7d:a2:66:6f:20:c2:b9:
4d:d5:96:70:5c:a4:b8:b5:e3:2f:ff:a1:43:59:75:
9a:70:b3:95:ad:97:49:00:22:e5:77:12:fa:7e:2d:
b8:eb:cf:1c:26:ec:54:07:f9:57:b7:09:d1:8a:a7:
2f:46:69:2a:51:be:a4:40:c2:1b:20:d1:ea:43:73:
14:af:a4:bb:19:4c:67:17:c3:35:29:b6:28:c7:d7:
5a:17:d8:d8:82:54:4f:6c:c6:3b:eb:d3:9f:07:a7:
58:0c:94:53:fb:bf:24:1e:26:0d:ba:df:1c:a9:20:
4c:14:fe:c0:91:5a:bb:c8:fd:e4:05:9d:b4:8a:7e:
6d:03:cb:49:26:f0:0f:d8:d9:be:7d:a6:27:c8:46:
50:1c:2f:2d:af:3b:69:d4:8a:7d:82:a1:f4:d9:b4:
8c:47:a4:40:08:f6:9e:89:f8:46:e3:e9:9a:45:dd:
24:8d:7a:42:f7:6d:72:bb:2a:ca:fb:41:ce:05:47:
2a:05:82:50:32:d7:31:0f:83:13:a4:f4:99:a5:ff:
dc:f4:cd:3e:73:c1:a7:9d:93:3c:2a:e2:80:64:ca:
53:1b:37:1f:51:1b:2c:af:13:4a:b3:14:b0:28:8c:
2a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:FE:BF:5B:D7:D7:51:4F:8C:A9:96:1C:9D:28:22:F5:0A:4A:E8:95
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/L_6_W9fXUU-MqZYcnSgi9QpK6JU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.152.0/24
45.159.154.0/24
62.197.135.0/24
78.142.242.0/23
89.43.208.0/24
178.239.192.0/24
178.239.203.0/24
185.9.54.0/24
185.103.75.0/24
185.115.146.0/24
185.121.230.0/23
185.229.104.0/24
185.229.106.0/24
185.230.248.0/23
185.245.237.0-185.245.238.255
188.214.27.0/24
194.4.156.0/23
194.4.159.0/24
Signature Algorithm: sha256WithRSAEncryption
71:3b:de:e3:3e:33:80:c1:6f:a4:99:63:17:f7:5a:08:f8:a9:
a1:8c:04:2d:3d:4c:e6:f7:39:8b:c3:b5:cc:7e:d2:f7:fc:f8:
3d:43:a0:b1:29:c0:52:d1:61:30:6c:3d:97:ee:5e:44:24:d7:
c1:80:b2:c4:28:c1:25:e0:d8:83:2f:ef:b7:02:e8:c8:6b:85:
d8:86:ad:c0:fd:d7:bb:26:81:17:53:c7:b6:b0:dd:f0:a8:79:
80:98:b8:bd:3f:90:08:09:da:25:eb:1f:35:e7:0e:bc:a0:6f:
10:94:fa:c7:00:14:a6:7a:5f:07:be:7f:e3:80:b3:af:de:ea:
58:ff:54:51:97:75:5c:1f:6a:7e:ad:a2:15:e7:d6:46:4b:ce:
cf:4e:eb:3c:9b:a7:11:8c:df:e5:b9:23:2e:08:ae:74:05:9f:
5c:87:38:b4:64:45:49:18:0f:35:c5:5f:40:1e:ce:54:8e:74:
da:d3:4c:a1:49:d8:1e:ad:04:eb:4e:4c:39:87:bd:55:20:e7:
8b:0c:d8:d0:ae:c5:5f:c4:00:3d:0f:f6:99:44:a5:51:90:4d:
2f:9a:3a:41:49:93:71:02:e9:56:c2:26:16:ea:78:c7:91:91:
7d:5d:8b:a9:1d:01:27:01:fd:48:24:84:4a:ea:27:41:16:e6:
b0:f8:9e:3f
-----BEGIN CERTIFICATE-----
MIIFbDCCBFSgAwIBAgISAYeiU1Hyd90OH054L0eJsxs4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw
NWIwZTIwHhcNMjMwNDIxMDUzOTQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZmZlYmY1YmQ3ZDc1MTRmOGNhOTk2MWM5ZDI4MjJmNTBhNGFlODk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4lUfgDzpW9b0ygSm2EGnOTwJVxMP
VH2iZm8gwrlN1ZZwXKS4teMv/6FDWXWacLOVrZdJACLldxL6fi24688cJuxUB/lX
twnRiqcvRmkqUb6kQMIbINHqQ3MUr6S7GUxnF8M1KbYox9daF9jYglRPbMY769Of
B6dYDJRT+78kHiYNut8cqSBMFP7AkVq7yP3kBZ20in5tA8tJJvAP2Nm+faYnyEZQ
HC8trztp1Ip9gqH02bSMR6RACPaeifhG4+maRd0kjXpC921yuyrK+0HOBUcqBYJQ
MtcxD4MTpPSZpf/c9M0+c8GnnZM8KuKAZMpTGzcfURssrxNKsxSwKIwqWQIDAQAB
o4ICeDCCAnQwHQYDVR0OBBYEFC/+v1vX11FPjKmWHJ0oIvUKSuiVMB8GA1UdIwQY
MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt
MmNjZWRiOTY2YTU4LzEvTF82X1c5ZlhVVS1NcVpZY25TZ2k5UXBLNkpVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4
LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGNBggrBgEFBQcBBwEB/wR+MHwwegQCAAEwdAMEAC2fmAME
AC2fmgMEAD7FhwMEAU6O8gMEAFkr0AMEALLvwAMEALLvywMEALkJNgMEALlnSwME
ALlzkgMEAbl55gMEALnlaAMEALnlagMEAbnm+DAMAwQAufXtAwQAufXuAwQAvNYb
AwQBwgScAwQAwgSfMA0GCSqGSIb3DQEBCwUAA4IBAQBxO97jPjOAwW+kmWMX91oI
+KmhjAQtPUzm9zmLw7XMftL3/Pg9Q6CxKcBS0WEwbD2X7l5EJNfBgLLEKMEl4NiD
L++3AujIa4XYhq3A/de7JoEXU8e2sN3wqHmAmLi9P5AICdol6x815w68oG8QlPrH
ABSmel8Hvn/jgLOv3upY/1RRl3VcH2p+raIV59ZGS87PTus8m6cRjN/luSMuCK50
BZ9chzi0ZEVJGA81xV9AHs5UjnTa00yhSdgerQTrTkw5h71VIOeLDNjQrsVfxAA9
D/aZRKVRkE0vmjpBSZNxAulWwiYW6njHkZF9XYupHQEnAf1IJIRK6idBFuaw+J4/
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:54 2023 by rpki-client on console-ams.rpki-client.org