Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/DzgQGDTxMjFcCEz8xu3RzWBd8u8.roa
File: DzgQGDTxMjFcCEz8xu3RzWBd8u8.roa (raw, json)
Hash identifier: R0XCx9EgXLCB6qLM1gV62YK1riJt9t1DzlQkpop7378=
Subject key identifier: 0F:38:10:18:34:F1:32:31:5C:08:4C:FC:C6:ED:D1:CD:60:5D:F2:EF
Certificate issuer: /CN=c87b594e5e6713a5b80a5481a5ce71e652d84573
Certificate serial: 0186BBC2A3DC76C9663AB34808C957EA11DD
Authority key identifier: C8:7B:59:4E:5E:67:13:A5:B8:0A:54:81:A5:CE:71:E6:52:D8:45:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yHtZTl5nE6W4ClSBpc5x5lLYRXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/DzgQGDTxMjFcCEz8xu3RzWBd8u8.roa
Signing time: Tue 07 Mar 2023 11:09:00 +0000
ROA not before: Tue 07 Mar 2023 11:09:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62257
IP address blocks: 194.147.150.0/24 maxlen: 24
194.147.170.0/24 maxlen: 24
194.36.172.0/24 maxlen: 24
194.36.172.0/23 maxlen: 23
194.36.173.0/24 maxlen: 24
194.36.175.0/24 maxlen: 24
45.139.9.0/24 maxlen: 24
194.180.208.0/24 maxlen: 24
194.180.209.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:bb:c2:a3:dc:76:c9:66:3a:b3:48:08:c9:57:ea:11:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c87b594e5e6713a5b80a5481a5ce71e652d84573
Validity
Not Before: Mar 7 11:09:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0f38101834f132315c084cfcc6edd1cd605df2ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d2:66:3d:ff:33:47:24:65:56:71:ea:88:1c:
9a:f0:78:d8:18:68:57:63:ef:f7:25:7f:99:ab:35:
26:7e:5f:df:0a:3e:f3:00:35:07:7d:50:bb:bf:96:
6c:f6:8d:7d:4c:45:67:b6:89:4d:27:dd:8d:a2:e5:
ac:91:02:ea:98:5e:32:ce:d7:a4:77:77:f8:47:9d:
bb:cf:45:f8:e3:e0:b8:d6:a8:d8:2b:c7:29:53:45:
82:56:72:4b:c0:25:c5:64:5b:e0:b5:cf:67:22:58:
72:1f:84:a7:7f:12:08:61:56:ba:06:c3:32:c3:91:
c2:a1:ed:77:20:53:50:ca:1a:3a:5c:e5:fd:bc:23:
1d:20:4b:7c:1f:39:2c:6f:6d:7d:35:de:95:3b:db:
12:0a:59:1d:49:40:47:92:4e:c0:54:e0:54:a8:71:
55:9e:e9:2e:eb:24:69:61:e9:d3:e2:b0:f4:55:61:
6e:ab:59:8e:fe:5b:1d:bf:84:20:c4:e4:a0:d2:b2:
f9:fe:46:06:e6:e5:9e:92:e9:cc:28:42:f8:ca:9d:
22:6a:93:a2:dc:77:94:89:b6:0e:62:8c:35:c3:0b:
82:2b:f6:3b:f1:59:5b:3b:e8:7b:9c:2b:68:95:fd:
c9:9d:dc:5d:8c:b2:e0:2a:66:bc:e8:8e:10:3b:78:
16:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:38:10:18:34:F1:32:31:5C:08:4C:FC:C6:ED:D1:CD:60:5D:F2:EF
X509v3 Authority Key Identifier:
keyid:C8:7B:59:4E:5E:67:13:A5:B8:0A:54:81:A5:CE:71:E6:52:D8:45:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHtZTl5nE6W4ClSBpc5x5lLYRXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/DzgQGDTxMjFcCEz8xu3RzWBd8u8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/yHtZTl5nE6W4ClSBpc5x5lLYRXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.9.0/24
194.36.172.0/23
194.36.175.0/24
194.147.150.0/24
194.147.170.0/24
194.180.208.0/23
Signature Algorithm: sha256WithRSAEncryption
6c:57:97:79:40:de:7f:ec:8a:c3:85:ff:6e:58:77:39:3b:60:
2c:c8:ef:d7:50:af:37:ba:84:ed:48:da:b7:53:1e:61:a6:38:
0b:b5:70:82:b6:e0:ef:ce:0d:08:49:32:1a:fa:74:d0:3c:f1:
d8:53:f4:29:48:7c:3a:45:fc:b1:02:d0:25:2f:f8:de:71:ab:
66:2c:af:69:3f:42:a9:1e:4c:a9:8a:a0:9d:af:d1:61:21:19:
b9:bc:96:be:fc:b1:a4:c8:35:5d:86:e2:3c:9d:d6:96:79:4e:
80:2d:31:a4:e0:62:a3:bc:15:f1:62:0c:a6:9c:45:6a:2c:3e:
3c:ec:a6:88:1e:eb:37:3e:ce:80:33:70:7f:b8:42:d6:8d:1c:
c6:bf:a7:11:bd:6f:af:f1:f5:f8:77:06:3e:79:b6:f8:8a:f4:
fd:bf:6d:94:a1:7b:27:86:e3:62:f3:4b:91:60:53:53:56:bb:
ef:31:74:af:18:ef:6a:b9:12:d4:e6:58:3e:67:e3:fb:ac:ad:
45:8a:3a:f4:3a:b5:9e:89:5f:80:ce:9c:e0:2e:ad:45:c4:97:
1e:a2:5d:2e:43:de:5d:f2:3b:8a:ab:7b:87:8f:c4:20:88:26:
33:af:96:f4:42:1e:9f:ad:c7:af:86:d1:08:fe:48:0d:28:c1:
ac:30:f2:99
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAYa7wqPcdslmOrNICMlX6hHdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4N2I1OTRlNWU2NzEzYTViODBhNTQ4MWE1Y2U3MWU2NTJk
ODQ1NzMwHhcNMjMwMzA3MTEwOTAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZjM4MTAxODM0ZjEzMjMxNWMwODRjZmNjNmVkZDFjZDYwNWRmMmVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9JmPf8zRyRlVnHqiBya8HjYGGhX
Y+/3JX+ZqzUmfl/fCj7zADUHfVC7v5Zs9o19TEVntolNJ92NouWskQLqmF4yztek
d3f4R527z0X44+C41qjYK8cpU0WCVnJLwCXFZFvgtc9nIlhyH4SnfxIIYVa6BsMy
w5HCoe13IFNQyho6XOX9vCMdIEt8Hzksb219Nd6VO9sSClkdSUBHkk7AVOBUqHFV
nuku6yRpYenT4rD0VWFuq1mO/lsdv4QgxOSg0rL5/kYG5uWekunMKEL4yp0iapOi
3HeUibYOYow1wwuCK/Y78VlbO+h7nCtolf3JndxdjLLgKma86I4QO3gWOwIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFA84EBg08TIxXAhM/Mbt0c1gXfLvMB8GA1UdIwQY
MBaAFMh7WU5eZxOluApUgaXOceZS2EVzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUh0WlRsNW5FNlc0Q2xTQnBjNXg1bExZUlhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi84MjRmNzgtZGVlMi00N2JjLWFmMmYt
MzhjYjZlNDE2ZjNhLzEvRHpnUUdEVHhNakZjQ0V6OHh1M1J6V0JkOHU4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi84MjRmNzgtZGVlMi00N2JjLWFmMmYtMzhjYjZlNDE2ZjNh
LzEveUh0WlRsNW5FNlc0Q2xTQnBjNXg1bExZUlhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQALYsJAwQB
wiSsAwQAwiSvAwQAwpOWAwQAwpOqAwQBwrTQMA0GCSqGSIb3DQEBCwUAA4IBAQBs
V5d5QN5/7IrDhf9uWHc5O2AsyO/XUK83uoTtSNq3Ux5hpjgLtXCCtuDvzg0ISTIa
+nTQPPHYU/QpSHw6RfyxAtAlL/jecatmLK9pP0KpHkypiqCdr9FhIRm5vJa+/LGk
yDVdhuI8ndaWeU6ALTGk4GKjvBXxYgymnEVqLD487KaIHus3Ps6AM3B/uELWjRzG
v6cRvW+v8fX4dwY+ebb4ivT9v22UoXsnhuNi80uRYFNTVrvvMXSvGO9quRLU5lg+
Z+P7rK1Fijr0OrWeiV+AzpzgLq1FxJceol0uQ95d8juKq3uHj8QgiCYzr5b0Qh6f
rcevhtEI/kgNKMGsMPKZ
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:14 2023 by rpki-client on console-ams.rpki-client.org