Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/spTxr-shsacWVpS-yqKRm9dqa88.roa
File: spTxr-shsacWVpS-yqKRm9dqa88.roa (raw, json)
Hash identifier: 8UzQdgtZSAsEqz1rofP6VNinsgOm9S7QLr/rKTz+8Nk=
Subject key identifier: B2:94:F1:AF:EB:21:B1:A7:16:56:94:BE:CA:A2:91:9B:D7:6A:6B:CF
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 01879DAFD70F3CDFA4312E668D6B2D8269D4
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/spTxr-shsacWVpS-yqKRm9dqa88.roa
Signing time: Thu 20 Apr 2023 08:02:39 +0000
ROA not before: Thu 20 Apr 2023 08:02:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.115.146.0/24 maxlen: 24
185.230.248.0/24 maxlen: 24
185.230.249.0/24 maxlen: 24
185.229.104.0/24 maxlen: 24
185.229.106.0/24 maxlen: 24
194.4.156.0/23 maxlen: 24
194.4.159.0/24 maxlen: 24
185.245.238.0/24 maxlen: 24
89.43.208.0/24 maxlen: 24
185.245.237.0/24 maxlen: 24
185.121.231.0/24 maxlen: 24
178.239.203.0/24 maxlen: 24
78.142.242.0/23 maxlen: 24
185.121.230.0/24 maxlen: 24
185.9.54.0/24 maxlen: 24
45.159.152.0/24 maxlen: 24
45.159.154.0/24 maxlen: 24
62.197.135.0/24 maxlen: 24
185.103.75.0/24 maxlen: 24
178.239.192.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:9d:af:d7:0f:3c:df:a4:31:2e:66:8d:6b:2d:82:69:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Apr 20 08:02:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b294f1afeb21b1a7165694becaa2919bd76a6bcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f6:c6:e5:19:dc:37:39:42:c6:82:36:5d:56:
53:95:7c:8c:3f:ae:2e:16:31:7a:99:71:84:10:81:
9b:f8:b5:db:62:f6:5a:48:7a:01:e5:68:2e:cf:47:
cb:43:68:02:60:37:d1:77:7c:02:59:0e:62:18:e5:
43:cc:a9:01:07:c8:61:db:79:32:0e:21:73:70:02:
ae:ab:66:aa:bc:ba:e9:5c:18:f0:e3:3d:d5:e8:4a:
55:9b:36:a0:fa:fc:72:c6:36:38:d0:76:f8:00:c8:
52:6f:51:84:20:ac:81:9d:e2:53:98:16:52:e9:55:
7b:7b:4f:aa:d4:1a:c7:7f:b2:23:14:87:76:7c:75:
a6:d3:ff:43:fc:7b:f1:77:c1:56:24:da:7e:e0:05:
95:d5:d0:5f:c6:4f:8c:86:60:e2:ac:20:79:fb:5f:
81:bf:c6:3b:23:5a:3e:82:0b:54:48:75:e1:67:e8:
ce:5c:f7:62:6a:ee:2a:64:2b:44:65:2a:fa:9e:dd:
ba:7e:bc:ed:1c:55:6e:6d:fa:cf:7d:d6:c9:24:e9:
72:bf:fc:f6:79:41:45:88:7a:a2:75:3c:d3:a5:9a:
49:35:e1:48:9d:e0:d9:5d:97:09:3c:26:35:b7:51:
5e:c4:89:7a:c9:46:8a:0d:20:67:0c:dd:1c:71:3c:
b7:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:94:F1:AF:EB:21:B1:A7:16:56:94:BE:CA:A2:91:9B:D7:6A:6B:CF
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/spTxr-shsacWVpS-yqKRm9dqa88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.152.0/24
45.159.154.0/24
62.197.135.0/24
78.142.242.0/23
89.43.208.0/24
178.239.192.0/24
178.239.203.0/24
185.9.54.0/24
185.103.75.0/24
185.115.146.0/24
185.121.230.0/23
185.229.104.0/24
185.229.106.0/24
185.230.248.0/23
185.245.237.0-185.245.238.255
194.4.156.0/23
194.4.159.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:18:82:71:2c:2a:36:c8:7e:a0:0c:f0:9e:96:d0:22:f8:df:
e6:df:16:d3:a7:51:3f:dc:a7:f0:fd:b3:f7:1e:66:19:a4:85:
5c:5d:7b:d5:2f:d5:74:f6:7a:6e:32:f8:48:34:42:c1:15:05:
7f:ef:93:8a:51:71:5a:46:d0:01:4c:d6:72:29:d5:43:10:d3:
b0:bb:da:fd:29:b2:29:7a:86:14:12:41:3d:f9:24:ba:97:4c:
67:59:2a:b1:a0:b2:c1:1e:6f:e7:8c:77:78:94:db:eb:ba:f4:
e1:5f:cf:5c:cd:f5:3c:80:a7:79:99:be:eb:f6:bc:56:3e:d6:
01:35:fa:41:c0:99:06:02:91:a6:7c:ee:40:2a:8d:0e:5a:ea:
a0:59:63:90:60:31:c8:3c:60:53:17:70:50:60:ad:ff:0c:4c:
74:78:bf:70:d5:b3:f5:67:27:99:8f:93:4e:66:91:ff:2c:a3:
a4:1e:43:ba:05:4d:1c:fb:56:89:41:e8:9e:65:28:7b:60:66:
3c:c7:48:72:e2:3b:82:0b:1c:5f:e7:66:f3:0c:a6:f6:08:60:
0d:b5:d1:38:7b:e5:da:ed:49:4e:38:7d:48:51:50:3b:00:04:
aa:53:1a:e3:a6:04:ff:e2:ac:ff:58:2e:44:46:fa:e4:ea:75:
f1:18:82:1c
-----BEGIN CERTIFICATE-----
MIIFZjCCBE6gAwIBAgISAYedr9cPPN+kMS5mjWstgmnUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw
NWIwZTIwHhcNMjMwNDIwMDgwMjM5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMjk0ZjFhZmViMjFiMWE3MTY1Njk0YmVjYWEyOTE5YmQ3NmE2YmNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/bG5RncNzlCxoI2XVZTlXyMP64u
FjF6mXGEEIGb+LXbYvZaSHoB5Wguz0fLQ2gCYDfRd3wCWQ5iGOVDzKkBB8hh23ky
DiFzcAKuq2aqvLrpXBjw4z3V6EpVmzag+vxyxjY40Hb4AMhSb1GEIKyBneJTmBZS
6VV7e0+q1BrHf7IjFId2fHWm0/9D/Hvxd8FWJNp+4AWV1dBfxk+MhmDirCB5+1+B
v8Y7I1o+ggtUSHXhZ+jOXPdiau4qZCtEZSr6nt26frztHFVubfrPfdbJJOlyv/z2
eUFFiHqidTzTpZpJNeFIneDZXZcJPCY1t1FexIl6yUaKDSBnDN0ccTy31QIDAQAB
o4ICcjCCAm4wHQYDVR0OBBYEFLKU8a/rIbGnFlaUvsqikZvXamvPMB8GA1UdIwQY
MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt
MmNjZWRiOTY2YTU4LzEvc3BUeHItc2hzYWNXVnBTLXlxS1JtOWRxYTg4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4
LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGHBggrBgEFBQcBBwEB/wR4MHYwdAQCAAEwbgMEAC2fmAME
AC2fmgMEAD7FhwMEAU6O8gMEAFkr0AMEALLvwAMEALLvywMEALkJNgMEALlnSwME
ALlzkgMEAbl55gMEALnlaAMEALnlagMEAbnm+DAMAwQAufXtAwQAufXuAwQBwgSc
AwQAwgSfMA0GCSqGSIb3DQEBCwUAA4IBAQBMGIJxLCo2yH6gDPCeltAi+N/m3xbT
p1E/3Kfw/bP3HmYZpIVcXXvVL9V09npuMvhINELBFQV/75OKUXFaRtABTNZyKdVD
ENOwu9r9KbIpeoYUEkE9+SS6l0xnWSqxoLLBHm/njHd4lNvruvThX89czfU8gKd5
mb7r9rxWPtYBNfpBwJkGApGmfO5AKo0OWuqgWWOQYDHIPGBTF3BQYK3/DEx0eL9w
1bP1ZyeZj5NOZpH/LKOkHkO6BU0c+1aJQeieZSh7YGY8x0hy4juCCxxf52bzDKb2
CGANtdE4e+Xa7UlOOH1IUVA7AASqUxrjpgT/4qz/WC5ERvrk6nXxGIIc
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:56 2023 by rpki-client on console-ams.rpki-client.org