Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/sLwiLZLNxoHm1_vteiXVfIcPCiA.roa
File: sLwiLZLNxoHm1_vteiXVfIcPCiA.roa (raw, json)
Hash identifier: +fLkKSt90ZeVHyr39AJj3/XqtVr2l1j7mjzcJoaYzGo=
Subject key identifier: B0:BC:22:2D:92:CD:C6:81:E6:D7:FB:ED:7A:25:D5:7C:87:0F:0A:20
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 01874FB32AE77BBCCB3FD2DF79A5895E9718
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/sLwiLZLNxoHm1_vteiXVfIcPCiA.roa
Signing time: Wed 05 Apr 2023 04:35:54 +0000
ROA not before: Wed 05 Apr 2023 04:35:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 78.142.242.0/24 maxlen: 24
188.214.27.0/24 maxlen: 24
78.142.243.0/24 maxlen: 24
185.230.250.0/24 maxlen: 24
185.9.55.0/24 maxlen: 24
185.229.107.0/24 maxlen: 24
194.4.157.0/24 maxlen: 24
103.205.27.0/24 maxlen: 24
185.103.75.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:4f:b3:2a:e7:7b:bc:cb:3f:d2:df:79:a5:89:5e:97:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Apr 5 04:35:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b0bc222d92cdc681e6d7fbed7a25d57c870f0a20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:11:a2:30:77:12:2e:8c:6c:3d:e5:4d:51:d2:
d5:86:cc:1b:0a:86:46:5f:0e:6b:5f:81:f1:3c:53:
ec:17:0e:5f:fe:ef:f2:90:f9:9f:e4:57:a0:41:f9:
44:d7:3a:16:8d:ad:ff:99:2a:d1:9c:c8:86:fd:f3:
33:70:8e:fa:b2:d4:20:83:80:c6:e6:cf:f4:3f:7d:
6b:bf:d5:97:62:7b:ef:14:dd:0a:c6:29:c6:4f:e0:
d6:a2:3d:a1:ab:7c:b4:b6:4d:c5:79:08:8c:30:04:
58:4f:d6:f7:31:66:8f:e3:0a:d9:1f:74:65:82:a8:
de:77:90:96:26:d2:93:b0:cf:3e:97:9b:a7:19:e1:
8d:34:ae:fc:89:38:4e:e3:de:07:41:11:43:d0:e3:
c9:d4:95:76:d4:e5:b3:b7:6a:9a:57:0c:21:ee:70:
f7:bc:4c:a0:a5:2c:93:71:99:87:88:da:b9:1e:1f:
19:28:1d:a1:ed:c1:89:c5:e1:4b:b6:70:12:b6:f8:
0e:a0:72:20:f8:e2:5f:2f:f7:06:5e:64:cd:67:70:
bf:fe:1e:3a:84:65:18:31:a7:31:47:0a:a8:47:e9:
5a:e3:a8:68:9f:66:cc:17:9e:6b:0c:54:22:9d:e1:
08:4a:81:dd:b4:f4:7c:fe:f2:c4:05:fd:de:cd:5b:
ec:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:BC:22:2D:92:CD:C6:81:E6:D7:FB:ED:7A:25:D5:7C:87:0F:0A:20
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/sLwiLZLNxoHm1_vteiXVfIcPCiA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.142.242.0/23
103.205.27.0/24
185.9.55.0/24
185.103.75.0/24
185.229.107.0/24
185.230.250.0/24
188.214.27.0/24
194.4.157.0/24
Signature Algorithm: sha256WithRSAEncryption
27:af:23:a3:00:84:a8:7c:95:2b:eb:9d:1a:42:ce:35:00:d9:
e7:f7:d3:0d:5b:02:8a:55:5b:cc:99:0e:17:de:f4:ce:5b:c7:
46:ae:33:8e:a7:5f:b7:89:87:f7:83:63:50:28:ca:ba:f2:8a:
0b:d8:b3:d8:7e:03:f7:9b:85:b4:e8:3c:d3:93:64:c2:ed:45:
9a:09:a9:d4:d0:fd:cd:d0:68:ff:31:35:e2:4b:28:4a:8d:e0:
3f:23:2e:16:58:7b:6a:43:1b:82:cf:5e:3d:ac:e0:2f:3e:73:
f8:ca:d5:a5:e8:76:9e:72:19:4a:73:1a:80:62:bc:34:d9:a7:
b7:5b:ae:e5:b1:1e:67:7d:00:41:8c:37:24:0d:8f:e4:0f:8c:
1f:80:2e:20:72:64:95:f3:38:05:8c:8c:6e:f6:dd:a4:c5:93:
8f:44:c6:1b:44:65:d5:c8:49:86:b2:ba:fc:b2:dd:ee:6c:53:
8f:98:1d:87:49:7e:d0:9e:f0:f8:31:44:15:c3:8c:94:d0:19:
e8:1d:05:57:dc:2e:5e:a7:c6:e0:ab:99:b3:2a:7c:a3:55:a3:
52:39:bc:f8:d4:fd:b2:22:fa:34:42:ac:2f:02:01:2f:e2:c2:
e8:33:45:28:25:d7:e7:59:8d:21:13:31:b7:51:f5:60:b8:c2:
2c:22:01:ac
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgISAYdPsyrne7zLP9LfeaWJXpcYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw
NWIwZTIwHhcNMjMwNDA1MDQzNTU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMGJjMjIyZDkyY2RjNjgxZTZkN2ZiZWQ3YTI1ZDU3Yzg3MGYwYTIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAghGiMHcSLoxsPeVNUdLVhswbCoZG
Xw5rX4HxPFPsFw5f/u/ykPmf5FegQflE1zoWja3/mSrRnMiG/fMzcI76stQgg4DG
5s/0P31rv9WXYnvvFN0KxinGT+DWoj2hq3y0tk3FeQiMMARYT9b3MWaP4wrZH3Rl
gqjed5CWJtKTsM8+l5unGeGNNK78iThO494HQRFD0OPJ1JV21OWzt2qaVwwh7nD3
vEygpSyTcZmHiNq5Hh8ZKB2h7cGJxeFLtnAStvgOoHIg+OJfL/cGXmTNZ3C//h46
hGUYMacxRwqoR+la46hon2bMF55rDFQineEISoHdtPR8/vLEBf3ezVvsMQIDAQAB
o4ICMzCCAi8wHQYDVR0OBBYEFLC8Ii2SzcaB5tf77Xol1XyHDwogMB8GA1UdIwQY
MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt
MmNjZWRiOTY2YTU4LzEvc0x3aUxaTE54b0htMV92dGVpWFZmSWNQQ2lBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4
LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQBTo7yAwQA
Z80bAwQAuQk3AwQAuWdLAwQAueVrAwQAueb6AwQAvNYbAwQAwgSdMA0GCSqGSIb3
DQEBCwUAA4IBAQAnryOjAISofJUr650aQs41ANnn99MNWwKKVVvMmQ4X3vTOW8dG
rjOOp1+3iYf3g2NQKMq68ooL2LPYfgP3m4W06DzTk2TC7UWaCanU0P3N0Gj/MTXi
SyhKjeA/Iy4WWHtqQxuCz149rOAvPnP4ytWl6HaechlKcxqAYrw02ae3W67lsR5n
fQBBjDckDY/kD4wfgC4gcmSV8zgFjIxu9t2kxZOPRMYbRGXVyEmGsrr8st3ubFOP
mB2HSX7QnvD4MUQVw4yU0BnoHQVX3C5ep8bgq5mzKnyjVaNSObz41P2yIvo0Qqwv
AgEv4sLoM0UoJdfnWY0hEzG3UfVguMIsIgGs
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:56 2023 by rpki-client on console-ams.rpki-client.org