Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/Zb5xOrWMIBP4ORJdVmhv4chJNsY.roa
File: Zb5xOrWMIBP4ORJdVmhv4chJNsY.roa (raw, json)
Hash identifier: 1yT9uDG4PtkFmgSvfPTgaYnt0LOyS4eTLh0+6TVIuVk=
Subject key identifier: 65:BE:71:3A:B5:8C:20:13:F8:39:12:5D:56:68:6F:E1:C8:49:36:C6
Certificate issuer: /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial: 018BA0E925B021EFAC7FC233EC9A56D8BDCD
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/Zb5xOrWMIBP4ORJdVmhv4chJNsY.roa
Signing time: Sun 05 Nov 2023 19:15:15 +0000
ROA not before: Sun 05 Nov 2023 19:15:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 188.240.83.0/24 maxlen: 24
84.247.20.0/24 maxlen: 24
89.37.106.0/24 maxlen: 24
89.42.40.0/24 maxlen: 24
62.112.30.0/24 maxlen: 24
89.34.171.0/24 maxlen: 24
89.36.231.0/24 maxlen: 24
89.42.213.0/24 maxlen: 24
46.102.174.0/24 maxlen: 24
89.37.128.0/24 maxlen: 24
93.114.69.0/24 maxlen: 24
89.40.43.0/24 maxlen: 24
176.223.190.0/24 maxlen: 24
188.211.249.0/24 maxlen: 24
94.177.113.0/24 maxlen: 24
94.177.118.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:a0:e9:25:b0:21:ef:ac:7f:c2:33:ec:9a:56:d8:bd:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
Validity
Not Before: Nov 5 19:15:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=65be713ab58c2013f839125d56686fe1c84936c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:c1:0c:4b:52:14:c8:55:2a:da:ae:18:d4:be:
e1:68:55:cd:bc:b9:56:12:1d:0c:a3:7e:8d:7f:d4:
b7:8f:f6:b4:17:29:95:3d:c9:0e:b8:43:3a:4d:50:
18:ea:5a:d4:51:fa:96:f2:4f:07:fe:d9:1b:60:b7:
e1:4c:54:93:49:92:89:dc:50:79:51:2e:47:91:f3:
b3:9c:d4:1d:fd:28:f6:a6:22:72:ac:d3:7d:0c:07:
29:7b:da:85:39:08:d6:61:b3:ec:a0:e6:44:d2:1b:
bb:8f:7e:00:45:00:f7:bb:e5:69:80:a3:17:80:4f:
0b:3a:71:55:96:5e:62:ee:f9:14:98:5b:a6:ba:2a:
43:5d:92:31:ca:bb:9b:5f:b8:75:5d:3e:9c:7b:6c:
52:3c:2f:8d:46:f3:5e:82:c3:af:82:1a:96:d4:dc:
51:7b:66:88:59:3f:ac:3d:d3:6a:90:43:b9:76:26:
ce:03:1a:d2:0c:c7:66:20:ea:74:27:de:ba:4e:ba:
f3:3f:ce:0a:7e:14:71:de:b5:d4:27:55:90:e8:23:
30:5a:f7:41:26:f4:a8:30:e0:0f:c5:af:39:47:93:
f0:ef:18:18:78:9a:96:bc:86:4c:26:11:c7:08:77:
92:68:bd:e9:4c:81:df:e9:c0:12:69:ba:e6:fc:4c:
68:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:BE:71:3A:B5:8C:20:13:F8:39:12:5D:56:68:6F:E1:C8:49:36:C6
X509v3 Authority Key Identifier:
keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/Zb5xOrWMIBP4ORJdVmhv4chJNsY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.102.174.0/24
62.112.30.0/24
84.247.20.0/24
89.34.171.0/24
89.36.231.0/24
89.37.106.0/24
89.37.128.0/24
89.40.43.0/24
89.42.40.0/24
89.42.213.0/24
93.114.69.0/24
94.177.113.0/24
94.177.118.0/24
176.223.190.0/24
188.211.249.0/24
188.240.83.0/24
Signature Algorithm: sha256WithRSAEncryption
13:af:92:60:5e:e7:3f:97:4c:dc:7e:67:87:08:89:58:5f:c9:
c1:3b:a6:d4:66:d1:87:5b:59:d5:69:78:9d:78:26:97:3f:fe:
23:29:43:de:81:7b:6c:87:c8:46:fd:98:66:b7:54:28:d2:71:
8a:bc:b7:f5:b3:cd:18:fc:bf:23:a4:72:4e:b7:42:31:ab:80:
73:30:f3:85:4c:2a:79:a3:43:dd:82:4a:52:3e:b0:45:9b:b1:
2b:76:c2:c7:be:0a:8a:55:b3:d5:1e:13:d9:27:49:a4:54:43:
74:1b:9d:ba:d0:d1:f8:a3:3c:a2:69:a6:ef:35:79:5f:f5:0b:
9e:0a:dd:98:98:51:05:05:97:2f:5f:90:b0:04:a7:be:ff:e0:
1d:3b:80:11:75:71:3d:c6:26:91:f3:ca:68:66:2f:05:54:59:
4f:01:2c:9b:fe:cc:d1:86:e5:31:62:c1:bc:61:1c:7e:2f:5b:
f3:4a:e4:69:a7:0d:26:8f:1e:32:d5:41:a0:40:a6:ad:69:80:
1d:64:4e:38:65:fe:22:34:2c:83:19:b6:06:f2:ee:ab:05:f2:
ba:5a:b2:89:6d:6d:b4:1a:de:d4:0b:7e:90:c4:1e:67:23:f0:
0b:02:e8:07:0b:41:3d:56:bf:40:01:cb:bc:2a:a8:8c:ed:ff:
cd:f3:5b:ed
-----BEGIN CERTIFICATE-----
MIIFVzCCBD+gAwIBAgISAYug6SWwIe+sf8Iz7JpW2L3NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhMDBlOTgxOTUzMDYxOTcyYzg5NmJkNmQyNzczOGQwODNh
YWRiMGUwHhcNMjMxMTA1MTkxNTE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NWJlNzEzYWI1OGMyMDEzZjgzOTEyNWQ1NjY4NmZlMWM4NDkzNmM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh8EMS1IUyFUq2q4Y1L7haFXNvLlW
Eh0Mo36Nf9S3j/a0FymVPckOuEM6TVAY6lrUUfqW8k8H/tkbYLfhTFSTSZKJ3FB5
US5HkfOznNQd/Sj2piJyrNN9DAcpe9qFOQjWYbPsoOZE0hu7j34ARQD3u+VpgKMX
gE8LOnFVll5i7vkUmFumuipDXZIxyrubX7h1XT6ce2xSPC+NRvNegsOvghqW1NxR
e2aIWT+sPdNqkEO5dibOAxrSDMdmIOp0J966TrrzP84KfhRx3rXUJ1WQ6CMwWvdB
JvSoMOAPxa85R5Pw7xgYeJqWvIZMJhHHCHeSaL3pTIHf6cASabrm/ExoFwIDAQAB
o4ICYzCCAl8wHQYDVR0OBBYEFGW+cTq1jCAT+DkSXVZob+HISTbGMB8GA1UdIwQY
MBaAFNoA6YGVMGGXLIlr1tJ3ONCDqtsOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmdEcGdaVXdZWmNzaVd2VzBuYzQwSU9xMnc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi84MmE3ZDYtOTJhOS00MjA0LTlhZTAt
OWE0OGVjZjllMTVlLzEvWmI1eE9yV01JQlA0T1JKZFZtaHY0Y2hKTnNZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi84MmE3ZDYtOTJhOS00MjA0LTlhZTAtOWE0OGVjZjllMTVl
LzEvMmdEcGdaVXdZWmNzaVd2VzBuYzQwSU9xMnc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHkGCCsGAQUFBwEHAQH/BGowaDBmBAIAATBgAwQALmauAwQA
PnAeAwQAVPcUAwQAWSKrAwQAWSTnAwQAWSVqAwQAWSWAAwQAWSgrAwQAWSooAwQA
WSrVAwQAXXJFAwQAXrFxAwQAXrF2AwQAsN++AwQAvNP5AwQAvPBTMA0GCSqGSIb3
DQEBCwUAA4IBAQATr5JgXuc/l0zcfmeHCIlYX8nBO6bUZtGHW1nVaXideCaXP/4j
KUPegXtsh8hG/Zhmt1Qo0nGKvLf1s80Y/L8jpHJOt0Ixq4BzMPOFTCp5o0PdgkpS
PrBFm7ErdsLHvgqKVbPVHhPZJ0mkVEN0G5260NH4ozyiaabvNXlf9QueCt2YmFEF
BZcvX5CwBKe+/+AdO4ARdXE9xiaR88poZi8FVFlPASyb/szRhuUxYsG8YRx+L1vz
SuRppw0mjx4y1UGgQKataYAdZE44Zf4iNCyDGbYG8u6rBfK6WrKJbW20Gt7UC36Q
xB5nI/ALAugHC0E9Vr9AAcu8KqiM7f/N81vt
-----END CERTIFICATE-----
Generated at Tue Nov 7 18:43:48 2023 by rpki-client on console-ams.rpki-client.org