Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/8Lw_zyLSgXBfCc0FTl-n3QDhxfs.roa
File: 8Lw_zyLSgXBfCc0FTl-n3QDhxfs.roa (raw, json)
Hash identifier: o8bgjlBPmZVOGrSgysXJEp25iEcY/fPtADFZBe35s+E=
Subject key identifier: F0:BC:3F:CF:22:D2:81:70:5F:09:CD:05:4E:5F:A7:DD:00:E1:C5:FB
Certificate issuer: /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial: 01882544FA2BD3B10F53882D3DB36EB31C77
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/8Lw_zyLSgXBfCc0FTl-n3QDhxfs.roa
Signing time: Tue 16 May 2023 15:54:17 +0000
ROA not before: Tue 16 May 2023 15:54:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 37.153.132.0/24 maxlen: 24
46.102.174.0/24 maxlen: 24
89.37.128.0/24 maxlen: 24
93.114.169.0/24 maxlen: 24
94.177.113.0/24 maxlen: 24
94.177.118.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:25:44:fa:2b:d3:b1:0f:53:88:2d:3d:b3:6e:b3:1c:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
Validity
Not Before: May 16 15:54:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f0bc3fcf22d281705f09cd054e5fa7dd00e1c5fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7a:be:ff:ab:61:0f:43:6c:ba:2f:47:a6:c1:
0e:14:34:b1:78:ea:3f:32:96:f0:4c:21:12:b5:bf:
bc:43:97:c3:69:d1:b0:54:29:da:6b:68:1a:4c:46:
d5:dc:0c:3b:e4:ac:c8:38:fe:e4:39:2f:81:19:da:
58:20:14:db:b5:fe:9e:f6:32:cf:87:13:d8:32:70:
03:fd:c2:b0:f9:10:6c:89:af:ba:d6:36:27:b1:49:
dc:47:53:1f:73:44:28:c1:1a:42:d6:22:3c:f9:f9:
fd:23:90:c3:45:ba:60:c0:e0:29:1a:14:7f:98:1f:
52:08:88:b2:3d:61:01:f3:c6:2a:d0:e9:94:60:b8:
c2:8c:44:07:20:a9:2f:08:3c:27:2c:bb:a0:89:98:
df:5d:a9:4a:ab:6b:a8:41:62:f2:59:f4:82:b0:53:
c5:7a:08:f1:45:ad:17:9f:f4:ad:85:72:36:f7:7c:
27:25:68:fc:da:54:1a:d1:56:2e:98:9a:c7:3c:7b:
3d:40:90:d8:34:17:c5:77:27:19:ef:a3:5e:d0:5d:
fa:24:4c:c5:83:9c:c7:ff:dd:f6:0b:c4:de:03:7b:
1e:ad:a5:0c:1f:d2:97:03:96:fd:fe:36:6f:14:d7:
be:ea:22:f8:81:9f:b7:d9:aa:9d:21:e9:23:56:e5:
ff:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:BC:3F:CF:22:D2:81:70:5F:09:CD:05:4E:5F:A7:DD:00:E1:C5:FB
X509v3 Authority Key Identifier:
keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/8Lw_zyLSgXBfCc0FTl-n3QDhxfs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.153.132.0/24
46.102.174.0/24
89.37.128.0/24
93.114.169.0/24
94.177.113.0/24
94.177.118.0/24
Signature Algorithm: sha256WithRSAEncryption
10:a9:94:10:98:9b:8e:4a:dd:88:31:09:95:74:56:86:34:9f:
13:cc:60:0c:6f:a7:62:06:77:6e:c4:0e:22:5c:58:da:e4:d8:
16:7e:8c:74:c5:c9:e7:9c:c8:0b:4d:d3:3a:f9:61:9b:92:92:
2a:57:df:73:b6:fc:9c:86:ed:76:ce:45:7a:43:2e:37:b0:59:
57:ce:6f:01:75:0c:e0:61:4d:b8:1d:88:47:b6:4a:c3:91:00:
31:19:c9:00:7f:88:a4:40:67:69:43:7e:a9:88:41:58:f9:17:
bd:2b:d5:91:83:d7:fb:7b:fa:f2:91:10:ea:0d:ac:5e:20:f3:
8a:89:9d:38:09:72:6f:df:18:17:9f:3c:52:1c:2f:19:54:eb:
7a:07:60:bc:af:ce:92:f2:22:3f:5f:1a:13:e9:2f:4d:43:3f:
28:14:09:7f:04:8e:05:81:71:2b:87:c6:0e:c1:f5:50:87:4b:
9c:13:55:c9:ee:83:bf:d5:05:81:04:1d:96:ce:9a:dc:1e:e2:
4d:6b:e0:aa:71:d0:48:56:d3:34:10:a9:0a:da:cd:c8:b8:66:
2c:6f:1d:4f:7a:b4:43:62:f6:a3:49:90:08:e6:0d:03:d0:91:
8c:f9:c7:2c:da:c3:c4:e5:43:59:b5:1e:41:41:0c:6c:d0:52:
6d:92:78:21
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAYglRPor07EPU4gtPbNusxx3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhMDBlOTgxOTUzMDYxOTcyYzg5NmJkNmQyNzczOGQwODNh
YWRiMGUwHhcNMjMwNTE2MTU1NDE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMGJjM2ZjZjIyZDI4MTcwNWYwOWNkMDU0ZTVmYTdkZDAwZTFjNWZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXq+/6thD0Nsui9HpsEOFDSxeOo/
MpbwTCEStb+8Q5fDadGwVCnaa2gaTEbV3Aw75KzIOP7kOS+BGdpYIBTbtf6e9jLP
hxPYMnAD/cKw+RBsia+61jYnsUncR1Mfc0QowRpC1iI8+fn9I5DDRbpgwOApGhR/
mB9SCIiyPWEB88Yq0OmUYLjCjEQHIKkvCDwnLLugiZjfXalKq2uoQWLyWfSCsFPF
egjxRa0Xn/SthXI293wnJWj82lQa0VYumJrHPHs9QJDYNBfFdycZ76Ne0F36JEzF
g5zH/932C8TeA3seraUMH9KXA5b9/jZvFNe+6iL4gZ+32aqdIekjVuX/bwIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFPC8P88i0oFwXwnNBU5fp90A4cX7MB8GA1UdIwQY
MBaAFNoA6YGVMGGXLIlr1tJ3ONCDqtsOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmdEcGdaVXdZWmNzaVd2VzBuYzQwSU9xMnc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi84MmE3ZDYtOTJhOS00MjA0LTlhZTAt
OWE0OGVjZjllMTVlLzEvOEx3X3p5TFNnWEJmQ2MwRlRsLW4zUURoeGZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi84MmE3ZDYtOTJhOS00MjA0LTlhZTAtOWE0OGVjZjllMTVl
LzEvMmdEcGdaVXdZWmNzaVd2VzBuYzQwSU9xMnc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAJZmEAwQA
LmauAwQAWSWAAwQAXXKpAwQAXrFxAwQAXrF2MA0GCSqGSIb3DQEBCwUAA4IBAQAQ
qZQQmJuOSt2IMQmVdFaGNJ8TzGAMb6diBnduxA4iXFja5NgWfox0xcnnnMgLTdM6
+WGbkpIqV99ztvychu12zkV6Qy43sFlXzm8BdQzgYU24HYhHtkrDkQAxGckAf4ik
QGdpQ36piEFY+Re9K9WRg9f7e/rykRDqDaxeIPOKiZ04CXJv3xgXnzxSHC8ZVOt6
B2C8r86S8iI/XxoT6S9NQz8oFAl/BI4FgXErh8YOwfVQh0ucE1XJ7oO/1QWBBB2W
zprcHuJNa+CqcdBIVtM0EKkK2s3IuGYsbx1PerRDYvajSZAI5g0D0JGM+ccs2sPE
5UNZtR5BQQxs0FJtkngh
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:04 2023 by rpki-client on console-fra.rpki-client.org