Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/H--5siOUUkL-D45w6umGF-vrJAc.roa
File: H--5siOUUkL-D45w6umGF-vrJAc.roa (raw, json)
Hash identifier: PTDsYHBao0JeD7Qz+GaXVGDexqs57NHIx4biEdMKQGU=
Subject key identifier: 1F:EF:B9:B2:23:94:52:42:FE:0F:8E:70:EA:E9:86:17:EB:EB:24:07
Certificate issuer: /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial: 018BA5D140E05630D8115F9C9687B0F32680
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/H--5siOUUkL-D45w6umGF-vrJAc.roa
Signing time: Mon 06 Nov 2023 18:07:16 +0000
ROA not before: Mon 06 Nov 2023 18:07:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16589
IP address blocks: 213.159.10.0/23 maxlen: 24
213.159.12.0/23 maxlen: 24
195.133.208.0/23 maxlen: 24
89.37.216.0/23 maxlen: 24
85.204.148.0/22 maxlen: 24
194.135.26.0/23 maxlen: 24
93.113.184.0/21 maxlen: 21
62.112.12.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:a5:d1:40:e0:56:30:d8:11:5f:9c:96:87:b0:f3:26:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
Validity
Not Before: Nov 6 18:07:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1fefb9b223945242fe0f8e70eae98617ebeb2407
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:84:c9:fe:ea:3a:8f:94:56:59:5b:4e:79:65:
38:14:c2:c2:0a:93:4d:00:23:ce:ad:97:64:02:7a:
40:04:88:74:f6:4a:a6:33:df:8f:ae:5f:85:10:8a:
ee:96:7b:3c:56:15:0c:e7:aa:30:32:e9:2f:6d:a0:
93:ba:c7:f4:9a:5d:64:ef:86:eb:6c:f5:f7:ae:89:
26:e2:26:ef:fc:1f:2d:3a:ee:e2:c9:ad:ef:45:fd:
63:7e:b2:00:73:73:b9:5e:31:44:0e:b2:71:b3:61:
82:b5:ff:6b:c5:20:0a:dd:f0:fb:95:9e:1d:34:fe:
4d:d0:e8:37:c8:e7:06:df:91:ec:3d:39:f0:62:1d:
be:9b:18:ea:08:e5:31:95:b5:b7:67:58:df:e8:38:
94:27:c8:1c:be:ed:a2:62:72:f5:97:34:a2:ba:c8:
7c:06:4e:f0:6a:9b:43:4c:f9:42:70:87:a2:c3:d5:
56:65:6c:6f:4a:37:1a:df:1e:08:da:ff:e2:69:f2:
76:4a:2f:32:c9:c0:bf:56:57:29:5e:0f:8a:50:c7:
d6:4d:21:db:d5:73:04:44:15:79:ab:bb:a0:15:72:
4b:34:8d:27:92:95:64:d6:76:d8:a4:cb:b1:38:a8:
a9:f6:06:d0:03:86:3d:b8:87:af:7d:b7:b3:61:9a:
fb:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:EF:B9:B2:23:94:52:42:FE:0F:8E:70:EA:E9:86:17:EB:EB:24:07
X509v3 Authority Key Identifier:
keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/H--5siOUUkL-D45w6umGF-vrJAc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.112.12.0/23
85.204.148.0/22
89.37.216.0/23
93.113.184.0/21
194.135.26.0/23
195.133.208.0/23
213.159.10.0-213.159.13.255
Signature Algorithm: sha256WithRSAEncryption
1c:f1:b5:0d:5e:e4:8a:eb:0a:1d:ab:55:92:c2:86:6b:a6:fc:
d8:64:06:76:65:a9:34:ed:a4:e6:ee:d3:aa:33:1d:3a:5f:90:
4a:03:ba:b2:71:35:42:a0:50:6e:dd:cb:b4:89:1e:29:64:14:
aa:2b:06:c1:0a:78:f2:e9:44:06:08:39:51:d7:d2:71:40:ef:
ec:44:69:95:d0:27:cc:c9:a0:df:26:42:aa:07:16:34:e6:5f:
62:5e:1f:e2:7a:ce:8a:39:94:e3:ce:4e:58:2b:a3:36:cc:dc:
3e:52:80:db:b8:fd:50:b0:10:23:d5:7a:10:59:a0:77:36:29:
41:ec:1b:76:5a:2a:10:2e:3d:d1:cc:fb:c9:53:4f:a0:33:dc:
d5:07:2f:79:91:eb:49:e3:c4:45:c6:b3:47:61:45:5c:d2:54:
63:9d:9f:3e:b2:65:96:59:e5:b2:3b:64:77:4e:97:28:8a:67:
09:14:b1:54:bf:48:4a:7a:b0:1b:4b:67:56:d1:2f:d8:9f:99:
9e:69:df:fe:cd:18:a7:b6:9b:08:54:e9:60:23:d6:e2:d4:e2:
d2:61:25:e0:71:09:6a:13:e5:f7:6d:bc:b8:27:82:a7:6a:31:
f8:ed:3b:5c:18:f8:1f:c3:06:c1:4e:0a:7b:de:cd:bb:d3:6b:
75:08:eb:f1
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgISAYul0UDgVjDYEV+cloew8yaAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhMDBlOTgxOTUzMDYxOTcyYzg5NmJkNmQyNzczOGQwODNh
YWRiMGUwHhcNMjMxMTA2MTgwNzE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZmVmYjliMjIzOTQ1MjQyZmUwZjhlNzBlYWU5ODYxN2ViZWIyNDA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4TJ/uo6j5RWWVtOeWU4FMLCCpNN
ACPOrZdkAnpABIh09kqmM9+Prl+FEIrulns8VhUM56owMukvbaCTusf0ml1k74br
bPX3rokm4ibv/B8tOu7iya3vRf1jfrIAc3O5XjFEDrJxs2GCtf9rxSAK3fD7lZ4d
NP5N0Og3yOcG35HsPTnwYh2+mxjqCOUxlbW3Z1jf6DiUJ8gcvu2iYnL1lzSiush8
Bk7waptDTPlCcIeiw9VWZWxvSjca3x4I2v/iafJ2Si8yycC/VlcpXg+KUMfWTSHb
1XMERBV5q7ugFXJLNI0nkpVk1nbYpMuxOKip9gbQA4Y9uIevfbezYZr7SQIDAQAB
o4ICNTCCAjEwHQYDVR0OBBYEFB/vubIjlFJC/g+OcOrphhfr6yQHMB8GA1UdIwQY
MBaAFNoA6YGVMGGXLIlr1tJ3ONCDqtsOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmdEcGdaVXdZWmNzaVd2VzBuYzQwSU9xMnc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi84MmE3ZDYtOTJhOS00MjA0LTlhZTAt
OWE0OGVjZjllMTVlLzEvSC0tNXNpT1VVa0wtRDQ1dzZ1bUdGLXZySkFjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi84MmE3ZDYtOTJhOS00MjA0LTlhZTAtOWE0OGVjZjllMTVl
LzEvMmdEcGdaVXdZWmNzaVd2VzBuYzQwSU9xMnc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEsGCCsGAQUFBwEHAQH/BDwwOjA4BAIAATAyAwQBPnAMAwQC
VcyUAwQBWSXYAwQDXXG4AwQBwocaAwQBw4XQMAwDBAHVnwoDBAHVnwwwDQYJKoZI
hvcNAQELBQADggEBABzxtQ1e5IrrCh2rVZLChmum/NhkBnZlqTTtpObu06ozHTpf
kEoDurJxNUKgUG7dy7SJHilkFKorBsEKePLpRAYIOVHX0nFA7+xEaZXQJ8zJoN8m
QqoHFjTmX2JeH+J6zoo5lOPOTlgrozbM3D5SgNu4/VCwECPVehBZoHc2KUHsG3Za
KhAuPdHM+8lTT6Az3NUHL3mR60njxEXGs0dhRVzSVGOdnz6yZZZZ5bI7ZHdOlyiK
ZwkUsVS/SEp6sBtLZ1bRL9ifmZ5p3/7NGKe2mwhU6WAj1uLU4tJhJeBxCWoT5fdt
vLgngqdqMfjtO1wY+B/DBsFOCnvezbvTa3UI6/E=
-----END CERTIFICATE-----
Generated at Mon Jan 1 17:26:45 2024 by rpki-client on console-fra.rpki-client.org