Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/2GXr6s6ZXvu90VrS2iCU51DEggc.roa
File: 2GXr6s6ZXvu90VrS2iCU51DEggc.roa (raw, json)
Hash identifier: uYRgNUtexABfRzOtABW1GK4OHVmxMOa824I1xcpcuj0=
Subject key identifier: D8:65:EB:EA:CE:99:5E:FB:BD:D1:5A:D2:DA:20:94:E7:50:C4:82:07
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 018572DF1F52057E1431F020E88C88F8F969
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/2GXr6s6ZXvu90VrS2iCU51DEggc.roa
Signing time: Mon 02 Jan 2023 14:25:03 +0000
ROA not before: Mon 02 Jan 2023 14:25:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 40676
IP address blocks: 94.26.89.0/24 maxlen: 24
93.152.206.0/24 maxlen: 24
93.152.210.0/24 maxlen: 24
93.152.212.0/24 maxlen: 24
93.152.217.0/24 maxlen: 24
93.152.218.0/24 maxlen: 24
94.190.195.0/24 maxlen: 24
93.152.226.0/24 maxlen: 24
93.152.222.0/24 maxlen: 24
93.152.227.0/24 maxlen: 24
212.102.105.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:df:1f:52:05:7e:14:31:f0:20:e8:8c:88:f8:f9:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: Jan 2 14:25:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d865ebeace995efbbdd15ad2da2094e750c48207
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:af:4c:93:bf:3f:bc:68:4e:34:a3:af:eb:4c:
73:59:f2:f2:5e:e1:e9:8c:a0:c7:ce:42:f7:a4:27:
71:70:35:5e:79:ed:eb:1a:2e:d4:b6:53:e4:2a:73:
68:eb:3a:61:fa:99:80:23:cb:1d:d3:ed:34:e5:1c:
31:e1:ff:8b:cb:0d:cf:20:67:c1:ef:fb:1d:c3:a9:
fb:af:31:f1:18:12:79:23:fa:1e:81:b3:88:46:21:
47:61:b2:c4:08:8d:ec:56:b8:d4:02:94:1e:4d:cd:
95:bc:dd:c8:7f:5b:c1:51:cd:e0:70:a3:2e:0b:9a:
cb:99:8b:d4:57:95:74:45:b2:29:ea:66:b3:7e:b5:
60:71:be:47:a3:d0:0b:e5:61:34:83:c8:3d:13:66:
ec:01:b9:30:58:6a:ef:fa:19:ad:bd:b9:1f:e7:9b:
c3:62:69:12:8d:24:78:16:b1:55:b8:a8:4b:a1:91:
25:09:02:61:07:a6:3e:e5:d2:1a:66:c3:ee:8b:f0:
31:68:2c:da:97:e7:1f:78:0f:31:f2:d2:20:2a:bc:
63:b2:da:c9:e5:5e:81:78:af:8b:32:b1:a3:56:46:
6d:37:82:77:d1:20:f4:f3:fb:70:c9:bf:d2:cd:03:
04:50:d2:63:5d:ee:ff:46:1c:34:ed:ca:71:aa:8a:
32:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:65:EB:EA:CE:99:5E:FB:BD:D1:5A:D2:DA:20:94:E7:50:C4:82:07
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/2GXr6s6ZXvu90VrS2iCU51DEggc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.152.206.0/24
93.152.210.0/24
93.152.212.0/24
93.152.217.0-93.152.218.255
93.152.222.0/24
93.152.226.0/23
94.26.89.0/24
94.190.195.0/24
212.102.105.0/24
Signature Algorithm: sha256WithRSAEncryption
77:05:b7:50:72:f8:02:01:db:6b:1e:1c:ac:ee:60:e9:97:50:
a3:f4:5a:31:45:40:89:a5:e8:c8:3a:e4:da:aa:4d:83:4c:a4:
9d:30:bd:e0:69:e0:74:c8:3d:ae:fa:b1:38:69:35:dc:ce:49:
51:93:38:1a:6b:4a:62:cf:8f:cf:b4:ba:68:21:18:b3:11:4e:
a1:11:30:36:ea:6c:97:36:23:26:20:23:61:4c:9a:fe:65:67:
c5:11:0d:7d:a6:0f:bd:89:c9:1f:59:d0:bc:ca:82:7d:3e:48:
06:f1:6c:b9:44:01:7a:b4:f6:15:be:3f:64:ab:d1:4a:a0:01:
b5:92:41:15:aa:46:eb:a0:4d:d6:b2:3f:4f:65:6c:06:c1:81:
b1:7b:10:73:fa:af:53:12:d7:3e:c9:e2:d2:9a:78:fe:45:45:
82:59:aa:2a:17:dd:4b:87:e1:f9:e2:09:ab:c1:54:6e:e2:55:
1e:5a:9c:00:27:94:f6:ca:94:81:f1:13:1b:95:66:48:62:fc:
f2:5f:42:b5:19:a3:3b:d8:68:4f:be:ad:11:5b:c0:3f:ff:4c:
05:7c:d0:2d:87:d1:1d:ea:61:11:27:77:61:89:5e:eb:ac:81:
40:b2:45:77:70:d0:9f:ed:03:1b:01:cf:89:8a:b1:b6:0e:06:
a3:a2:8c:87
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgISAYVy3x9SBX4UMfAg6IyI+PlpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkMWNhYTY5MzU4ZjhjOThmN2E3MTlmMjU5N2Q1ZGFkZGJk
MDAxOGMwHhcNMjMwMTAyMTQyNTAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkODY1ZWJlYWNlOTk1ZWZiYmRkMTVhZDJkYTIwOTRlNzUwYzQ4MjA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr69Mk78/vGhONKOv60xzWfLyXuHp
jKDHzkL3pCdxcDVeee3rGi7UtlPkKnNo6zph+pmAI8sd0+005Rwx4f+Lyw3PIGfB
7/sdw6n7rzHxGBJ5I/oegbOIRiFHYbLECI3sVrjUApQeTc2VvN3If1vBUc3gcKMu
C5rLmYvUV5V0RbIp6mazfrVgcb5Ho9AL5WE0g8g9E2bsAbkwWGrv+hmtvbkf55vD
YmkSjSR4FrFVuKhLoZElCQJhB6Y+5dIaZsPui/AxaCzal+cfeA8x8tIgKrxjstrJ
5V6BeK+LMrGjVkZtN4J30SD08/twyb/SzQMEUNJjXe7/Rhw07cpxqooyjwIDAQAB
o4ICQTCCAj0wHQYDVR0OBBYEFNhl6+rOmV77vdFa0toglOdQxIIHMB8GA1UdIwQY
MBaAFC0cqmk1j4yY96cZ8ll9Xa3b0AGMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9hOTM2OTktMTg4Yi00NzBhLTk2Yjct
MjliMDg1ZGQyM2FkLzEvMkdYcjZzNlpYdnU5MFZyUzJpQ1U1MURFZ2djLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9hOTM2OTktMTg4Yi00NzBhLTk2YjctMjliMDg1ZGQyM2Fk
LzEvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFcGCCsGAQUFBwEHAQH/BEgwRjBEBAIAATA+AwQAXZjOAwQA
XZjSAwQAXZjUMAwDBABdmNkDBABdmNoDBABdmN4DBAFdmOIDBABeGlkDBABevsMD
BADUZmkwDQYJKoZIhvcNAQELBQADggEBAHcFt1By+AIB22seHKzuYOmXUKP0WjFF
QIml6Mg65NqqTYNMpJ0wveBp4HTIPa76sThpNdzOSVGTOBprSmLPj8+0umghGLMR
TqERMDbqbJc2IyYgI2FMmv5lZ8URDX2mD72JyR9Z0LzKgn0+SAbxbLlEAXq09hW+
P2Sr0UqgAbWSQRWqRuugTdayP09lbAbBgbF7EHP6r1MS1z7J4tKaeP5FRYJZqioX
3UuH4fniCavBVG7iVR5anAAnlPbKlIHxExuVZkhi/PJfQrUZozvYaE++rRFbwD//
TAV80C2H0R3qYREnd2GJXuusgUCyRXdw0J/tAxsBz4mKsbYOBqOijIc=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:58 2023 by rpki-client on console-ams.rpki-client.org