Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/9oFoktcNqr03q8EwkRmFmfF81WM.roa
File: 9oFoktcNqr03q8EwkRmFmfF81WM.roa (raw, json)
Hash identifier: rH8GzaZ94yfUPMfd1ck44qtINRExzk/kfcDLSRiSsro=
Subject key identifier: F6:81:68:92:D7:0D:AA:BD:37:AB:C1:30:91:19:85:99:F1:7C:D5:63
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01856CCACE91DF34D5ACAC882C854484F41E
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/9oFoktcNqr03q8EwkRmFmfF81WM.roa
Signing time: Sun 01 Jan 2023 10:05:08 +0000
ROA not before: Sun 01 Jan 2023 10:05:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3301
IP address blocks: 194.14.155.0/24 maxlen: 24
194.68.127.0/24 maxlen: 24
194.14.156.0/24 maxlen: 24
194.14.154.0/24 maxlen: 24
194.103.240.0/20 maxlen: 20
192.165.229.0/24 maxlen: 24
193.182.190.0/24 maxlen: 24
194.68.72.0/22 maxlen: 22
194.68.76.0/23 maxlen: 23
194.68.79.0/24 maxlen: 24
194.132.95.0/24 maxlen: 24
192.36.96.0/24 maxlen: 24
194.14.245.0/24 maxlen: 24
193.180.7.0/24 maxlen: 24
192.121.40.0/24 maxlen: 24
192.121.50.0/23 maxlen: 23
192.121.52.0/24 maxlen: 24
192.176.124.0/24 maxlen: 24
194.132.188.0/23 maxlen: 23
194.132.190.0/23 maxlen: 23
193.183.230.0/23 maxlen: 23
193.183.228.0/23 maxlen: 23
192.165.95.0/24 maxlen: 24
193.183.236.0/23 maxlen: 23
192.165.12.0/24 maxlen: 24
192.165.31.0/24 maxlen: 24
192.121.115.0/24 maxlen: 24
192.165.173.0/24 maxlen: 24
192.121.229.0/24 maxlen: 24
192.165.180.0/24 maxlen: 24
193.182.152.0/23 maxlen: 23
193.182.152.0/24 maxlen: 24
193.182.153.0/24 maxlen: 24
193.180.176.0/24 maxlen: 24
193.180.175.0/24 maxlen: 24
193.182.107.0/24 maxlen: 24
193.182.126.0/24 maxlen: 24
193.234.185.0/24 maxlen: 24
193.234.184.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ca:ce:91:df:34:d5:ac:ac:88:2c:85:44:84:f4:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 1 10:05:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f6816892d70daabd37abc13091198599f17cd563
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:be:f4:9b:0e:1a:a0:a1:fa:97:14:6d:03:e4:
12:14:c2:bb:1f:d8:5e:f4:89:3e:64:6e:7a:5f:ef:
21:c1:79:ef:d0:28:e8:89:5b:ca:75:93:0b:87:e0:
e3:dc:47:3c:dd:bc:6b:b9:05:d2:7f:1c:08:43:62:
8f:be:8f:24:df:27:a0:c2:89:65:59:0c:85:67:03:
cf:84:3a:b4:b9:54:67:46:c8:6d:d0:2d:81:73:44:
2d:81:f0:69:12:cd:0e:a1:84:8f:76:cc:af:aa:18:
e2:3d:fe:ef:ea:b8:ce:48:75:6a:24:dc:6a:d2:40:
8c:84:c7:99:c0:f6:51:bd:25:b8:35:03:af:1e:a6:
88:d1:c1:7a:09:92:a4:e5:c8:d2:4b:81:1a:74:15:
97:e1:50:59:20:d9:71:91:b2:4b:77:13:f2:ab:de:
77:88:dc:c2:21:08:a0:a7:72:f7:4d:f5:ba:49:df:
5a:1e:22:bf:40:48:51:61:5b:b8:c8:7b:75:2f:02:
0e:32:e8:05:5f:7f:af:bc:06:62:d0:96:ac:ff:f1:
70:4e:e9:6c:4f:de:c0:22:1f:ff:88:8d:93:de:5a:
cc:87:fa:3f:0c:fe:b6:2e:83:e0:30:06:78:53:e3:
0e:7e:63:76:51:30:24:e4:2f:31:f9:3b:8f:3d:83:
de:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:81:68:92:D7:0D:AA:BD:37:AB:C1:30:91:19:85:99:F1:7C:D5:63
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/9oFoktcNqr03q8EwkRmFmfF81WM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.36.96.0/24
192.121.40.0/24
192.121.50.0-192.121.52.255
192.121.115.0/24
192.121.229.0/24
192.165.12.0/24
192.165.31.0/24
192.165.95.0/24
192.165.173.0/24
192.165.180.0/24
192.165.229.0/24
192.176.124.0/24
193.180.7.0/24
193.180.175.0-193.180.176.255
193.182.107.0/24
193.182.126.0/24
193.182.152.0/23
193.182.190.0/24
193.183.228.0/22
193.183.236.0/23
193.234.184.0/23
194.14.154.0-194.14.156.255
194.14.245.0/24
194.68.72.0-194.68.77.255
194.68.79.0/24
194.68.127.0/24
194.103.240.0/20
194.132.95.0/24
194.132.188.0/22
Signature Algorithm: sha256WithRSAEncryption
34:07:60:7d:d8:d4:2d:6a:17:8d:74:9a:2c:b3:01:bb:ff:b2:
ef:11:28:28:b0:59:ce:a3:e6:fe:a1:a5:07:01:cb:04:99:02:
5a:06:73:3d:94:a7:4e:b5:75:bf:e8:22:8f:4b:3f:4f:35:88:
c0:5a:3c:8a:55:a7:a8:23:28:4e:75:3a:92:7f:2f:ad:63:59:
a9:b3:8e:ec:32:64:6f:fd:b5:01:74:86:36:46:63:4a:5f:4a:
a4:93:4d:05:57:d8:3f:40:0d:ad:06:fd:9e:de:ba:f4:0e:cf:
80:f5:66:c5:fe:4d:7b:22:28:eb:3e:3d:0d:de:7e:c7:5d:94:
6f:47:9e:f3:35:c5:cc:21:0d:82:f1:0e:1c:b2:c1:d4:a5:a5:
98:6c:c8:a4:ad:c5:bb:c9:6f:60:12:d4:da:2c:ec:91:c6:e1:
ad:21:4e:f6:af:4a:7e:14:89:c3:d4:5b:af:eb:5b:a7:cd:9d:
b3:37:1c:a0:d0:0e:9b:41:13:47:0e:6b:72:43:09:8c:96:1d:
a9:2c:4e:49:09:f9:6f:33:9d:7c:ce:57:1a:1d:03:91:fa:b6:
56:59:d3:16:b4:0d:65:73:11:9d:6a:d4:c2:24:ee:06:ee:3f:
82:58:f3:32:7c:33:d2:13:79:1e:9f:3e:db:13:9e:f2:05:80:
5a:ee:e6:38
-----BEGIN CERTIFICATE-----
MIIFyjCCBLKgAwIBAgISAYVsys6R3zTVrKyILIVEhPQeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh
ZGFmMWIwHhcNMjMwMTAxMTAwNTA4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNjgxNjg5MmQ3MGRhYWJkMzdhYmMxMzA5MTE5ODU5OWYxN2NkNTYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo770mw4aoKH6lxRtA+QSFMK7H9he
9Ik+ZG56X+8hwXnv0CjoiVvKdZMLh+Dj3Ec83bxruQXSfxwIQ2KPvo8k3yegwoll
WQyFZwPPhDq0uVRnRsht0C2Bc0QtgfBpEs0OoYSPdsyvqhjiPf7v6rjOSHVqJNxq
0kCMhMeZwPZRvSW4NQOvHqaI0cF6CZKk5cjSS4EadBWX4VBZINlxkbJLdxPyq953
iNzCIQigp3L3TfW6Sd9aHiK/QEhRYVu4yHt1LwIOMugFX3+vvAZi0Jas//FwTuls
T97AIh//iI2T3lrMh/o/DP62LoPgMAZ4U+MOfmN2UTAk5C8x+TuPPYPeCwIDAQAB
o4IC1jCCAtIwHQYDVR0OBBYEFPaBaJLXDaq9N6vBMJEZhZnxfNVjMB8GA1UdIwQY
MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt
OTQzZDAzMzIxMzI2LzEvOW9Gb2t0Y05xcjAzcThFd2tSbUZtZkY4MVdNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2
LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHrBggrBgEFBQcBBwEB/wSB2zCB2DCB1QQCAAEwgc4DBADA
JGADBADAeSgwDAMEAcB5MgMEAMB5NAMEAMB5cwMEAMB55QMEAMClDAMEAMClHwME
AMClXwMEAMClrQMEAMCltAMEAMCl5QMEAMCwfAMEAMG0BzAMAwQAwbSvAwQAwbSw
AwQAwbZrAwQAwbZ+AwQBwbaYAwQAwba+AwQCwbfkAwQBwbfsAwQBweq4MAwDBAHC
DpoDBADCDpwDBADCDvUwDAMEA8JESAMEAcJETAMEAMJETwMEAMJEfwMEBMJn8AME
AMKEXwMEAsKEvDANBgkqhkiG9w0BAQsFAAOCAQEANAdgfdjULWoXjXSaLLMBu/+y
7xEoKLBZzqPm/qGlBwHLBJkCWgZzPZSnTrV1v+gij0s/TzWIwFo8ilWnqCMoTnU6
kn8vrWNZqbOO7DJkb/21AXSGNkZjSl9KpJNNBVfYP0ANrQb9nt669A7PgPVmxf5N
eyIo6z49Dd5+x12Ub0ee8zXFzCENgvEOHLLB1KWlmGzIpK3Fu8lvYBLU2izskcbh
rSFO9q9KfhSJw9Rbr+tbp82dszccoNAOm0ETRw5rckMJjJYdqSxOSQn5bzOdfM5X
Gh0Dkfq2VlnTFrQNZXMRnWrUwiTuBu4/gljzMnwz0hN5Hp8+2xOe8gWAWu7mOA==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:38 2023 by rpki-client on console-ams.rpki-client.org