Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/iGIRR6wyStwL_VN8O9MQDTo0leQ.roa
File: iGIRR6wyStwL_VN8O9MQDTo0leQ.roa (raw, json)
Hash identifier: 428HjlP+Eh5qtmX+nVq+nzqcJo+OsfRdNguRL4dc45I=
Subject key identifier: 88:62:11:47:AC:32:4A:DC:0B:FD:53:7C:3B:D3:10:0D:3A:34:95:E4
Certificate issuer: /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial: 018A4FA8EA6D907EBFA842C1218880B1EB2D
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/iGIRR6wyStwL_VN8O9MQDTo0leQ.roa
Signing time: Fri 01 Sep 2023 07:33:04 +0000
ROA not before: Fri 01 Sep 2023 07:33:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209706
IP address blocks: 185.172.20.0/22 maxlen: 22
185.64.100.0/22 maxlen: 22
62.112.0.0/21 maxlen: 24
62.112.12.0/23 maxlen: 24
86.107.108.0/23 maxlen: 24
188.212.104.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:4f:a8:ea:6d:90:7e:bf:a8:42:c1:21:88:80:b1:eb:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
Validity
Not Before: Sep 1 07:33:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=88621147ac324adc0bfd537c3bd3100d3a3495e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:93:07:0e:a6:36:11:ff:72:05:05:db:d8:4c:
b4:70:e8:1b:e6:9f:22:a2:fb:45:32:42:5b:24:e7:
33:9d:e5:7b:b5:97:e5:f2:7b:a6:f6:4c:14:99:62:
eb:a7:f0:de:7e:f5:86:a7:1d:3c:4d:d8:f2:3d:6c:
cc:19:a3:15:39:cd:37:bb:e9:0f:3b:ad:d2:fd:58:
c7:c6:d6:6c:2b:0a:8d:4f:b7:89:4c:65:b4:68:a5:
79:9d:4f:cc:87:33:7f:55:c5:9a:98:2b:85:e8:c7:
ee:19:e4:68:1b:b1:ec:f6:0a:e1:e3:d9:98:a9:6a:
fa:ce:71:94:8a:9e:bd:e3:90:ff:ba:4a:2f:8c:88:
28:bc:50:2a:55:f1:31:67:a0:df:61:6b:94:ad:6c:
95:41:4a:b4:c3:41:f6:c0:1c:c3:26:d9:01:62:7a:
9b:7d:8e:1e:e6:f6:62:ce:78:ec:0f:cc:77:da:55:
d3:01:9b:76:36:8f:9b:6e:a9:b8:ae:23:8d:7e:c0:
6e:fa:05:e2:1b:e7:84:17:9b:79:79:a8:ea:f3:da:
8d:8d:ca:62:c3:84:bc:9f:ad:d6:2c:02:70:f3:b5:
74:ea:43:a7:67:dd:b4:9b:2c:1d:b7:ed:3c:ad:c2:
06:33:e1:92:7e:9d:13:63:e2:f1:36:c5:d4:3e:be:
e3:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:62:11:47:AC:32:4A:DC:0B:FD:53:7C:3B:D3:10:0D:3A:34:95:E4
X509v3 Authority Key Identifier:
keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/iGIRR6wyStwL_VN8O9MQDTo0leQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.112.0.0/21
62.112.12.0/23
86.107.108.0/23
185.64.100.0/22
185.172.20.0/22
188.212.104.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:8f:ae:1f:19:17:33:8a:ef:f5:be:cc:ec:51:8e:07:69:97:
e6:a9:72:d4:65:f9:b2:e1:5b:00:93:a8:69:99:6d:b5:14:13:
8b:4c:3e:84:85:ae:be:30:dd:b5:36:5e:10:97:37:51:ff:bc:
05:39:3d:45:14:b6:ae:18:fa:d7:0b:18:3f:16:b8:41:de:22:
fd:d8:fb:00:72:2f:da:c1:a1:2c:f4:60:f8:40:e1:5d:d9:bd:
b8:4d:d5:a4:43:fb:76:73:96:d1:7d:ea:7d:31:fb:42:24:e7:
95:a4:fa:1d:1c:28:ad:64:1c:26:e0:80:83:99:28:b2:53:41:
00:1b:c7:45:5f:92:24:4a:a1:9e:f9:25:3e:69:03:82:1f:19:
77:e4:85:10:eb:d8:2a:df:a2:47:9a:38:cd:6c:5d:3c:45:90:
c0:09:2c:4d:37:6c:90:76:06:df:bd:d4:0f:7d:69:0b:c9:f2:
48:d1:79:80:af:2a:60:83:78:06:e0:d8:90:66:a7:e7:44:8c:
01:4b:e8:91:39:59:20:fa:ad:3d:6b:09:2d:6d:ac:9f:05:bb:
11:02:8c:77:49:05:46:7f:41:0b:24:d8:72:a1:08:26:39:31:
5e:d3:ff:b4:de:39:79:1b:72:2a:7b:60:31:6e:19:4c:13:1c:
98:a2:e7:6c
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAYpPqOptkH6/qELBIYiAsestMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhMDBlOTgxOTUzMDYxOTcyYzg5NmJkNmQyNzczOGQwODNh
YWRiMGUwHhcNMjMwOTAxMDczMzA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ODYyMTE0N2FjMzI0YWRjMGJmZDUzN2MzYmQzMTAwZDNhMzQ5NWU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupMHDqY2Ef9yBQXb2Ey0cOgb5p8i
ovtFMkJbJOczneV7tZfl8num9kwUmWLrp/DefvWGpx08TdjyPWzMGaMVOc03u+kP
O63S/VjHxtZsKwqNT7eJTGW0aKV5nU/MhzN/VcWamCuF6MfuGeRoG7Hs9grh49mY
qWr6znGUip6945D/ukovjIgovFAqVfExZ6DfYWuUrWyVQUq0w0H2wBzDJtkBYnqb
fY4e5vZiznjsD8x32lXTAZt2No+bbqm4riONfsBu+gXiG+eEF5t5eajq89qNjcpi
w4S8n63WLAJw87V06kOnZ920mywdt+08rcIGM+GSfp0TY+LxNsXUPr7jUwIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFIhiEUesMkrcC/1TfDvTEA06NJXkMB8GA1UdIwQY
MBaAFNoA6YGVMGGXLIlr1tJ3ONCDqtsOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmdEcGdaVXdZWmNzaVd2VzBuYzQwSU9xMnc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi84MmE3ZDYtOTJhOS00MjA0LTlhZTAt
OWE0OGVjZjllMTVlLzEvaUdJUlI2d3lTdHdMX1ZOOE85TVFEVG8wbGVRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi84MmE3ZDYtOTJhOS00MjA0LTlhZTAtOWE0OGVjZjllMTVl
LzEvMmdEcGdaVXdZWmNzaVd2VzBuYzQwSU9xMnc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQDPnAAAwQB
PnAMAwQBVmtsAwQCuUBkAwQCuawUAwQCvNRoMA0GCSqGSIb3DQEBCwUAA4IBAQAt
j64fGRcziu/1vszsUY4HaZfmqXLUZfmy4VsAk6hpmW21FBOLTD6Eha6+MN21Nl4Q
lzdR/7wFOT1FFLauGPrXCxg/FrhB3iL92PsAci/awaEs9GD4QOFd2b24TdWkQ/t2
c5bRfep9MftCJOeVpPodHCitZBwm4ICDmSiyU0EAG8dFX5IkSqGe+SU+aQOCHxl3
5IUQ69gq36JHmjjNbF08RZDACSxNN2yQdgbfvdQPfWkLyfJI0XmArypgg3gG4NiQ
ZqfnRIwBS+iROVkg+q09awktbayfBbsRAox3SQVGf0ELJNhyoQgmOTFe0/+03jl5
G3Iqe2AxbhlMExyYouds
Generated at Sun Oct 15 03:11:34 2023 by rpki-client on console-fra.rpki-client.org