Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/YaEzpU_fxT4sUxXsMixP1OeJMXw.roa
File: YaEzpU_fxT4sUxXsMixP1OeJMXw.roa (raw, json)
Hash identifier: cS+h2o/EUj5EX/BkAvjZi8MGGeRZKZgapaE4dS31TaE=
Subject key identifier: 61:A1:33:A5:4F:DF:C5:3E:2C:53:15:EC:32:2C:4F:D4:E7:89:31:7C
Certificate issuer: /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial: 018B92AA9A34BE3D4AD36C9177D4270F613A
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/YaEzpU_fxT4sUxXsMixP1OeJMXw.roa
Signing time: Fri 03 Nov 2023 00:52:16 +0000
ROA not before: Fri 03 Nov 2023 00:52:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 188.240.83.0/24 maxlen: 24
84.247.20.0/24 maxlen: 24
89.37.106.0/24 maxlen: 24
89.42.40.0/24 maxlen: 24
62.112.30.0/24 maxlen: 24
89.34.171.0/24 maxlen: 24
89.36.231.0/24 maxlen: 24
89.42.213.0/24 maxlen: 24
89.42.215.0/24 maxlen: 24
46.102.174.0/24 maxlen: 24
89.37.128.0/24 maxlen: 24
93.114.69.0/24 maxlen: 24
89.40.43.0/24 maxlen: 24
176.223.190.0/24 maxlen: 24
188.211.249.0/24 maxlen: 24
94.177.113.0/24 maxlen: 24
94.177.118.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:92:aa:9a:34:be:3d:4a:d3:6c:91:77:d4:27:0f:61:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
Validity
Not Before: Nov 3 00:52:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=61a133a54fdfc53e2c5315ec322c4fd4e789317c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:ce:be:51:42:fc:00:86:4d:ce:4e:47:c4:fb:
41:cc:8b:88:2c:37:bf:57:26:d0:00:4d:10:8e:be:
08:94:73:bd:fc:1b:d8:78:6a:09:a6:76:65:6c:ad:
7c:37:90:2d:4d:ca:a8:e3:bb:1e:00:f5:e5:ed:69:
6c:5a:ad:a6:f5:44:2f:a6:21:f4:1d:b6:a5:2d:a1:
3f:72:c8:46:5b:c8:f5:eb:90:55:92:86:c2:5f:e2:
b7:59:0b:12:4d:47:92:49:cd:ca:aa:ce:92:1d:50:
34:be:d7:cf:a4:1a:59:d0:fd:ae:c4:47:47:bf:1c:
8c:86:ab:d7:c3:e1:eb:6c:8e:fa:7a:c3:2a:f4:02:
e2:4a:03:27:9b:66:8b:98:d3:67:5b:bf:b4:0a:d9:
e0:36:ac:c5:4e:9c:27:c6:e6:e8:35:2f:8b:c4:4f:
d1:06:ca:3c:14:3d:a6:c2:61:7f:16:c9:7e:8d:a1:
69:ea:15:6e:3c:af:81:cf:c7:0b:50:4b:35:59:9b:
22:dd:73:b6:7a:95:eb:84:9f:8d:cd:b5:0e:62:8a:
80:08:23:99:17:08:68:bf:b7:49:91:a3:d6:47:85:
d9:39:af:bb:67:16:fc:f3:d0:35:56:94:96:e2:c1:
b4:c4:f5:66:db:2b:49:83:bc:86:2c:fc:ec:0b:13:
cc:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:A1:33:A5:4F:DF:C5:3E:2C:53:15:EC:32:2C:4F:D4:E7:89:31:7C
X509v3 Authority Key Identifier:
keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/YaEzpU_fxT4sUxXsMixP1OeJMXw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.102.174.0/24
62.112.30.0/24
84.247.20.0/24
89.34.171.0/24
89.36.231.0/24
89.37.106.0/24
89.37.128.0/24
89.40.43.0/24
89.42.40.0/24
89.42.213.0/24
89.42.215.0/24
93.114.69.0/24
94.177.113.0/24
94.177.118.0/24
176.223.190.0/24
188.211.249.0/24
188.240.83.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:cf:4d:20:34:06:69:a1:e3:b5:55:eb:d1:0b:02:e0:36:e8:
01:9c:95:02:78:f0:e6:64:eb:95:58:af:00:e3:c9:90:6c:19:
d2:c0:26:40:5e:0b:ba:38:95:9c:7e:e2:81:66:cf:db:b2:9f:
6a:32:a9:12:6b:1f:51:ab:03:33:9c:7f:46:f7:f5:33:46:e4:
04:2a:ef:c2:2b:cf:29:cc:ad:15:eb:98:20:d8:17:66:2d:18:
8f:68:3c:69:71:90:ec:cc:0b:97:fb:80:42:70:3f:77:79:29:
23:34:14:23:f9:11:35:b2:86:dd:aa:af:67:f0:ec:56:15:57:
69:33:47:93:dc:32:5e:f8:33:f6:8c:a1:7e:0e:0d:b5:9a:ca:
b4:d2:e3:8d:80:38:68:37:ed:44:8e:63:46:ee:cf:d0:1a:4c:
bf:f7:54:ee:ee:5c:e0:49:89:43:46:56:47:b1:17:25:c5:4c:
8b:88:34:dd:45:47:55:67:74:0d:0c:73:3a:1c:87:69:cf:5c:
9c:c8:a0:cd:d0:9d:8f:43:02:b4:0c:f2:f5:30:55:bc:ab:8e:
0d:98:ff:8a:aa:d6:f5:80:2c:a9:91:3c:82:7b:97:76:bd:2d:
fc:8f:e9:31:49:e3:b2:7a:bb:3b:65:5a:9a:c2:f3:b9:2e:33:
fd:ed:3a:5d
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgISAYuSqpo0vj1K02yRd9QnD2E6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhMDBlOTgxOTUzMDYxOTcyYzg5NmJkNmQyNzczOGQwODNh
YWRiMGUwHhcNMjMxMTAzMDA1MjE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MWExMzNhNTRmZGZjNTNlMmM1MzE1ZWMzMjJjNGZkNGU3ODkzMTdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7M6+UUL8AIZNzk5HxPtBzIuILDe/
VybQAE0Qjr4IlHO9/BvYeGoJpnZlbK18N5AtTcqo47seAPXl7WlsWq2m9UQvpiH0
HbalLaE/cshGW8j165BVkobCX+K3WQsSTUeSSc3Kqs6SHVA0vtfPpBpZ0P2uxEdH
vxyMhqvXw+HrbI76esMq9ALiSgMnm2aLmNNnW7+0CtngNqzFTpwnxuboNS+LxE/R
Bso8FD2mwmF/Fsl+jaFp6hVuPK+Bz8cLUEs1WZsi3XO2epXrhJ+NzbUOYoqACCOZ
Fwhov7dJkaPWR4XZOa+7Zxb889A1VpSW4sG0xPVm2ytJg7yGLPzsCxPMkwIDAQAB
o4ICaTCCAmUwHQYDVR0OBBYEFGGhM6VP38U+LFMV7DIsT9TniTF8MB8GA1UdIwQY
MBaAFNoA6YGVMGGXLIlr1tJ3ONCDqtsOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmdEcGdaVXdZWmNzaVd2VzBuYzQwSU9xMnc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi84MmE3ZDYtOTJhOS00MjA0LTlhZTAt
OWE0OGVjZjllMTVlLzEvWWFFenBVX2Z4VDRzVXhYc01peFAxT2VKTVh3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi84MmE3ZDYtOTJhOS00MjA0LTlhZTAtOWE0OGVjZjllMTVl
LzEvMmdEcGdaVXdZWmNzaVd2VzBuYzQwSU9xMnc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMH8GCCsGAQUFBwEHAQH/BHAwbjBsBAIAATBmAwQALmauAwQA
PnAeAwQAVPcUAwQAWSKrAwQAWSTnAwQAWSVqAwQAWSWAAwQAWSgrAwQAWSooAwQA
WSrVAwQAWSrXAwQAXXJFAwQAXrFxAwQAXrF2AwQAsN++AwQAvNP5AwQAvPBTMA0G
CSqGSIb3DQEBCwUAA4IBAQA7z00gNAZpoeO1VevRCwLgNugBnJUCePDmZOuVWK8A
48mQbBnSwCZAXgu6OJWcfuKBZs/bsp9qMqkSax9RqwMznH9G9/UzRuQEKu/CK88p
zK0V65gg2BdmLRiPaDxpcZDszAuX+4BCcD93eSkjNBQj+RE1sobdqq9n8OxWFVdp
M0eT3DJe+DP2jKF+Dg21msq00uONgDhoN+1EjmNG7s/QGky/91Tu7lzgSYlDRlZH
sRclxUyLiDTdRUdVZ3QNDHM6HIdpz1ycyKDN0J2PQwK0DPL1MFW8q44NmP+Kqtb1
gCypkTyCe5d2vS38j+kxSeOyers7ZVqawvO5LjP97Tpd
-----END CERTIFICATE-----
Generated at Sun Nov 5 19:40:58 2023 by rpki-client on console-fra.rpki-client.org