Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/KiPOeAe_RfB-B2qKVVVDoJ_gkGI.roa
File: KiPOeAe_RfB-B2qKVVVDoJ_gkGI.roa (raw, json)
Hash identifier: 3hW7KG/u0nFT1XjzX/zALsQIOdDXUm+oVVwps4UiEcg=
Subject key identifier: 2A:23:CE:78:07:BF:45:F0:7E:07:6A:8A:55:55:43:A0:9F:E0:90:62
Certificate issuer: /CN=f2e2810f49b36fdd641c326bd1de4e42d128b046
Certificate serial: 01856C813548CB02CB7ACA2DDF1D82403619
Authority key identifier: F2:E2:81:0F:49:B3:6F:DD:64:1C:32:6B:D1:DE:4E:42:D1:28:B0:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8uKBD0mzb91kHDJr0d5OQtEosEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/KiPOeAe_RfB-B2qKVVVDoJ_gkGI.roa
Signing time: Sun 01 Jan 2023 08:44:45 +0000
ROA not before: Sun 01 Jan 2023 08:44:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12670
IP address blocks: 195.167.224.0/20 maxlen: 20
185.204.172.0/22 maxlen: 22
92.102.0.0/16 maxlen: 16
46.218.64.0/18 maxlen: 18
195.167.192.0/20 maxlen: 20
92.102.0.0/15 maxlen: 15
213.244.0.0/19 maxlen: 19
82.101.0.0/18 maxlen: 18
77.104.0.0/18 maxlen: 18
212.99.0.0/17 maxlen: 17
212.103.0.0/19 maxlen: 19
92.103.0.0/18 maxlen: 18
92.103.0.0/16 maxlen: 16
89.227.192.0/18 maxlen: 18
89.224.0.0/16 maxlen: 16
89.225.192.0/18 maxlen: 18
89.224.0.0/14 maxlen: 14
213.30.128.0/18 maxlen: 18
46.218.0.0/18 maxlen: 18
46.218.0.0/16 maxlen: 16
217.66.112.0/20 maxlen: 20
83.145.64.0/18 maxlen: 18
195.248.0.0/19 maxlen: 19
92.103.64.0/18 maxlen: 18
2a02:e000::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:81:35:48:cb:02:cb:7a:ca:2d:df:1d:82:40:36:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2e2810f49b36fdd641c326bd1de4e42d128b046
Validity
Not Before: Jan 1 08:44:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2a23ce7807bf45f07e076a8a555543a09fe09062
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:98:61:4b:51:18:39:07:1b:06:41:e9:00:d8:
65:b3:d5:c7:20:03:0d:88:20:64:cb:45:b8:cd:80:
53:9e:5a:d4:08:97:1b:d6:36:78:96:3c:7f:6f:59:
9c:c4:b3:4f:f8:81:6e:8e:f4:fd:c4:fd:cc:b2:30:
36:53:57:ca:43:e0:3a:43:49:24:84:41:c4:ac:93:
f8:fe:eb:d5:d6:19:48:d3:e1:18:10:59:97:20:85:
5b:4f:85:a9:39:1b:ad:df:42:6b:42:63:19:b8:da:
5e:fc:bf:a3:b3:43:a2:86:03:24:8b:d1:41:9f:1b:
6a:ca:5c:be:df:07:5d:87:76:83:55:60:61:3f:02:
0a:fb:8a:02:00:05:43:32:56:60:f7:35:9b:64:13:
64:58:e7:91:ea:27:2f:c9:2f:4e:4e:29:9f:99:ad:
82:01:e5:5b:1c:ca:e4:34:27:0a:8c:51:a7:69:f2:
89:ca:60:06:ab:1e:b9:78:cf:d8:b9:67:fd:3c:8d:
5a:fd:e1:25:f3:d3:89:23:64:b7:99:c9:a4:d3:e2:
b9:88:a0:36:0c:eb:73:c6:97:83:53:94:a4:45:ec:
10:a3:45:36:eb:a0:fb:b9:e3:8c:5b:2e:58:31:46:
06:97:fb:31:95:26:a7:eb:ef:90:f8:7a:c1:ff:f4:
bf:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:23:CE:78:07:BF:45:F0:7E:07:6A:8A:55:55:43:A0:9F:E0:90:62
X509v3 Authority Key Identifier:
keyid:F2:E2:81:0F:49:B3:6F:DD:64:1C:32:6B:D1:DE:4E:42:D1:28:B0:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8uKBD0mzb91kHDJr0d5OQtEosEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/KiPOeAe_RfB-B2qKVVVDoJ_gkGI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.218.0.0/16
77.104.0.0/18
82.101.0.0/18
83.145.64.0/18
89.224.0.0/14
92.102.0.0/15
185.204.172.0/22
195.167.192.0/20
195.167.224.0/20
195.248.0.0/19
212.99.0.0/17
212.103.0.0/19
213.30.128.0/18
213.244.0.0/19
217.66.112.0/20
IPv6:
2a02:e000::/29
Signature Algorithm: sha256WithRSAEncryption
32:cc:5f:bd:e3:93:ff:63:24:6b:09:81:14:7e:c1:58:ee:1f:
2c:31:1a:ad:93:e8:ec:15:c5:15:f1:50:39:b8:e5:ff:30:1f:
24:ab:8e:42:ba:e7:23:d8:33:e0:87:20:34:7e:32:1f:af:e0:
a4:bf:41:96:65:8d:87:60:7e:81:98:32:24:5d:86:a6:0f:45:
e6:92:e4:0e:ba:f1:d4:cb:65:4a:d3:91:b8:b7:0b:ea:12:12:
dc:47:7d:bd:2b:e7:e2:d9:96:8c:e6:a6:2d:4f:e2:29:2d:cf:
46:b3:27:19:62:98:f3:76:69:37:d0:2d:47:70:62:38:ac:c8:
75:1f:14:64:63:ce:1c:03:da:a1:05:2a:41:77:94:90:59:3e:
7b:71:b4:6c:29:6d:cf:dc:c2:e4:aa:a2:8a:38:0b:c5:bb:c7:
4e:2e:bb:63:90:2e:19:1a:7a:eb:e6:34:ae:71:7d:4b:c1:ed:
b8:f8:3a:53:34:7c:9a:6b:79:42:91:a3:65:cb:bf:97:5e:c7:
df:98:c8:a1:7c:21:7e:93:12:b4:95:f7:8c:35:3a:b1:20:c0:
1c:a7:a6:75:40:a9:35:d0:b2:52:11:a9:23:4d:fb:00:00:4f:
32:88:78:d7:54:26:61:f4:73:a5:8e:6e:ef:39:a7:4a:34:49:
de:5e:4a:87
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgISAYVsgTVIywLLesot3x2CQDYZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyZTI4MTBmNDliMzZmZGQ2NDFjMzI2YmQxZGU0ZTQyZDEy
OGIwNDYwHhcNMjMwMTAxMDg0NDQ1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYTIzY2U3ODA3YmY0NWYwN2UwNzZhOGE1NTU1NDNhMDlmZTA5MDYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlphhS1EYOQcbBkHpANhls9XHIAMN
iCBky0W4zYBTnlrUCJcb1jZ4ljx/b1mcxLNP+IFujvT9xP3MsjA2U1fKQ+A6Q0kk
hEHErJP4/uvV1hlI0+EYEFmXIIVbT4WpORut30JrQmMZuNpe/L+js0OihgMki9FB
nxtqyly+3wddh3aDVWBhPwIK+4oCAAVDMlZg9zWbZBNkWOeR6icvyS9OTimfma2C
AeVbHMrkNCcKjFGnafKJymAGqx65eM/YuWf9PI1a/eEl89OJI2S3mcmk0+K5iKA2
DOtzxpeDU5SkRewQo0U266D7ueOMWy5YMUYGl/sxlSan6++Q+HrB//S/JwIDAQAB
o4ICaTCCAmUwHQYDVR0OBBYEFCojzngHv0XwfgdqilVVQ6Cf4JBiMB8GA1UdIwQY
MBaAFPLigQ9Js2/dZBwya9HeTkLRKLBGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHVLQkQwbXpiOTFrSERKcjBkNU9RdEVvc0VZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi83OWU5MDUtZmIwZC00YjhiLTkzOTAt
NTBkMmI3MGJjZjMxLzEvS2lQT2VBZV9SZkItQjJxS1ZWVkRvSl9na0dJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi83OWU5MDUtZmIwZC00YjhiLTkzOTAtNTBkMmI3MGJjZjMx
LzEvOHVLQkQwbXpiOTFrSERKcjBkNU9RdEVvc0VZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMH8GCCsGAQUFBwEHAQH/BHAwbjBdBAIAATBXAwMALtoDBAZN
aAADBAZSZQADBAZTkUADAwJZ4AMDAVxmAwQCucysAwQEw6fAAwQEw6fgAwQFw/gA
AwQH1GMAAwQF1GcAAwQG1R6AAwQF1fQAAwQE2UJwMA0EAgACMAcDBQMqAuAAMA0G
CSqGSIb3DQEBCwUAA4IBAQAyzF+945P/YyRrCYEUfsFY7h8sMRqtk+jsFcUV8VA5
uOX/MB8kq45Cuucj2DPghyA0fjIfr+Ckv0GWZY2HYH6BmDIkXYamD0XmkuQOuvHU
y2VK05G4twvqEhLcR329K+fi2ZaM5qYtT+IpLc9GsycZYpjzdmk30C1HcGI4rMh1
HxRkY84cA9qhBSpBd5SQWT57cbRsKW3P3MLkqqKKOAvFu8dOLrtjkC4ZGnrr5jSu
cX1Lwe24+DpTNHyaa3lCkaNly7+XXsffmMihfCF+kxK0lfeMNTqxIMAcp6Z1QKk1
0LJSEakjTfsAAE8yiHjXVCZh9HOljm7vOadKNEneXkqH
-----END CERTIFICATE-----
Generated at Tue Jan 2 17:36:22 2024 by rpki-client on console-fra.rpki-client.org