Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/_rXnmwmukSSdgdd22Zb6l5h6_kk.roa
File: _rXnmwmukSSdgdd22Zb6l5h6_kk.roa (raw, json)
Hash identifier: Zq4ViMYPho1WQtRSokk7lGWmiwh/04MOM539EWuNnjU=
Subject key identifier: FE:B5:E7:9B:09:AE:91:24:9D:81:D7:76:D9:96:FA:97:98:7A:FE:49
Certificate issuer: /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial: 018796E632C9F5E8FC333B2F27BCCAE40B40
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/_rXnmwmukSSdgdd22Zb6l5h6_kk.roa
Signing time: Wed 19 Apr 2023 00:24:41 +0000
ROA not before: Wed 19 Apr 2023 00:24:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 188.240.83.0/24 maxlen: 24
5.35.192.0/21 maxlen: 24
84.234.16.0/20 maxlen: 24
62.112.0.0/21 maxlen: 24
85.204.160.0/22 maxlen: 24
93.113.184.0/21 maxlen: 24
194.88.112.0/20 maxlen: 24
89.37.128.0/24 maxlen: 24
91.232.136.0/22 maxlen: 24
176.223.190.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:96:e6:32:c9:f5:e8:fc:33:3b:2f:27:bc:ca:e4:0b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
Validity
Not Before: Apr 19 00:24:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=feb5e79b09ae91249d81d776d996fa97987afe49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:03:db:b2:d8:30:38:6b:fa:8e:92:dc:6e:d5:
3e:a6:e7:c5:d0:e4:0c:1e:bb:34:bb:36:18:bc:2e:
d1:b3:46:2b:96:d6:ab:06:b2:14:39:57:3c:ad:74:
ed:9d:ea:df:38:80:49:8e:9c:9e:28:cc:85:aa:60:
2b:36:5b:ba:bb:92:0d:93:71:ae:81:5e:55:b3:ff:
b6:b7:06:0f:1a:57:8d:28:ac:ec:4d:da:c6:aa:38:
9d:19:1a:c5:e8:d0:b2:db:86:85:bb:75:df:fa:f8:
4c:7e:a7:85:57:2d:44:e0:47:76:74:90:f1:e0:ec:
12:ee:89:45:6b:6a:33:3a:f3:03:94:95:4d:4d:eb:
a0:a3:10:b9:ff:c9:ba:4f:7f:9b:28:ef:0b:34:cd:
f3:24:99:6d:0c:18:dd:17:28:f0:32:37:ee:10:23:
79:f5:94:90:47:ce:7e:73:66:e8:21:e9:87:a6:16:
0d:10:ed:88:9b:8e:9c:ee:9a:93:d8:fe:9a:df:af:
6d:0c:11:25:82:d1:c6:d8:e8:20:19:02:30:be:a5:
f6:5d:48:47:ee:98:75:20:4c:f4:fd:40:8d:e2:27:
c6:ef:eb:af:d8:ba:76:bf:d6:77:fc:9b:8b:8f:42:
45:23:ad:4e:25:06:63:dc:84:19:0f:30:21:6f:89:
d1:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:B5:E7:9B:09:AE:91:24:9D:81:D7:76:D9:96:FA:97:98:7A:FE:49
X509v3 Authority Key Identifier:
keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/_rXnmwmukSSdgdd22Zb6l5h6_kk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.35.192.0/21
62.112.0.0/21
84.234.16.0/20
85.204.160.0/22
89.37.128.0/24
91.232.136.0/22
93.113.184.0/21
176.223.190.0/24
188.240.83.0/24
194.88.112.0/20
Signature Algorithm: sha256WithRSAEncryption
7c:66:38:7a:ee:28:de:55:62:b7:d4:d5:6d:bf:67:8c:07:f9:
a4:b0:c0:cb:d3:f2:ad:58:31:77:1d:9a:8c:d8:c3:78:18:4e:
19:26:ca:b4:44:32:b5:41:3a:6d:c4:71:4f:3a:1b:8c:fc:6b:
7d:32:0e:8e:a5:0a:ac:14:6a:aa:32:76:d9:46:bf:7a:e6:10:
43:e7:1a:76:40:5f:4f:77:aa:64:d8:f2:f5:fe:d6:0b:ad:2f:
9f:67:8d:78:b4:15:6b:2b:37:ae:d4:e8:c8:74:60:c8:c9:4d:
5d:56:e8:01:c7:e3:30:83:7b:95:1c:73:cd:63:99:ec:f6:db:
85:9f:ea:04:a3:8a:28:25:7f:62:db:11:af:aa:5f:f1:ae:e6:
72:71:37:d0:a5:52:ff:50:a7:89:87:52:57:5c:cb:e5:40:e8:
ef:e1:72:e1:e9:38:26:85:da:1e:fc:15:45:60:03:4a:31:f0:
f3:18:60:3e:00:03:e1:05:89:34:db:20:30:18:74:0f:82:46:
9f:19:b8:81:b1:95:2a:1b:53:f0:16:17:fe:73:83:77:f2:18:
f8:ee:6b:14:58:6a:20:18:78:95:90:b7:d2:51:6b:6f:7f:53:
99:61:b8:36:ed:30:26:a1:a2:b5:48:a9:f7:52:a9:b4:d3:13:
ae:89:3b:ac
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgISAYeW5jLJ9ej8MzsvJ7zK5AtAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhMDBlOTgxOTUzMDYxOTcyYzg5NmJkNmQyNzczOGQwODNh
YWRiMGUwHhcNMjMwNDE5MDAyNDQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZWI1ZTc5YjA5YWU5MTI0OWQ4MWQ3NzZkOTk2ZmE5Nzk4N2FmZTQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQPbstgwOGv6jpLcbtU+pufF0OQM
Hrs0uzYYvC7Rs0YrltarBrIUOVc8rXTtnerfOIBJjpyeKMyFqmArNlu6u5INk3Gu
gV5Vs/+2twYPGleNKKzsTdrGqjidGRrF6NCy24aFu3Xf+vhMfqeFVy1E4Ed2dJDx
4OwS7olFa2ozOvMDlJVNTeugoxC5/8m6T3+bKO8LNM3zJJltDBjdFyjwMjfuECN5
9ZSQR85+c2boIemHphYNEO2Im46c7pqT2P6a369tDBElgtHG2OggGQIwvqX2XUhH
7ph1IEz0/UCN4ifG7+uv2Lp2v9Z3/JuLj0JFI61OJQZj3IQZDzAhb4nRrQIDAQAB
o4ICPzCCAjswHQYDVR0OBBYEFP6155sJrpEknYHXdtmW+peYev5JMB8GA1UdIwQY
MBaAFNoA6YGVMGGXLIlr1tJ3ONCDqtsOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmdEcGdaVXdZWmNzaVd2VzBuYzQwSU9xMnc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi84MmE3ZDYtOTJhOS00MjA0LTlhZTAt
OWE0OGVjZjllMTVlLzEvX3JYbm13bXVrU1NkZ2RkMjJaYjZsNWg2X2trLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi84MmE3ZDYtOTJhOS00MjA0LTlhZTAtOWE0OGVjZjllMTVl
LzEvMmdEcGdaVXdZWmNzaVd2VzBuYzQwSU9xMnc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8AwQDBSPAAwQD
PnAAAwQEVOoQAwQCVcygAwQAWSWAAwQCW+iIAwQDXXG4AwQAsN++AwQAvPBTAwQE
wlhwMA0GCSqGSIb3DQEBCwUAA4IBAQB8Zjh67ijeVWK31NVtv2eMB/mksMDL0/Kt
WDF3HZqM2MN4GE4ZJsq0RDK1QTptxHFPOhuM/Gt9Mg6OpQqsFGqqMnbZRr965hBD
5xp2QF9Pd6pk2PL1/tYLrS+fZ414tBVrKzeu1OjIdGDIyU1dVugBx+Mwg3uVHHPN
Y5ns9tuFn+oEo4ooJX9i2xGvql/xruZycTfQpVL/UKeJh1JXXMvlQOjv4XLh6Tgm
hdoe/BVFYANKMfDzGGA+AAPhBYk02yAwGHQPgkafGbiBsZUqG1PwFhf+c4N38hj4
7msUWGogGHiVkLfSUWtvf1OZYbg27TAmoaK1SKn3Uqm00xOuiTus
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:55 2023 by rpki-client on console-ams.rpki-client.org