Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/37e363-84d1-470e-96a2-0ef1cac7418d/1/pT0qrU0SlPGs7CWGC37EQatYGqI.roa
File: pT0qrU0SlPGs7CWGC37EQatYGqI.roa (raw, json)
Hash identifier: ypI+1fOvQ7+7MUyOenuBG2vLHyeJlszDWpmUUyW++jU=
Subject key identifier: A5:3D:2A:AD:4D:12:94:F1:AC:EC:25:86:0B:7E:C4:41:AB:58:1A:A2
Certificate issuer: /CN=c3b4351e0a495c26efdc6e415f0bb189fbbd6edf
Certificate serial: 0185719586BE966A4573416D8B1692FDFD90
Authority key identifier: C3:B4:35:1E:0A:49:5C:26:EF:DC:6E:41:5F:0B:B1:89:FB:BD:6E:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w7Q1HgpJXCbv3G5BXwuxifu9bt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/37e363-84d1-470e-96a2-0ef1cac7418d/1/pT0qrU0SlPGs7CWGC37EQatYGqI.roa
Signing time: Mon 02 Jan 2023 08:25:02 +0000
ROA not before: Mon 02 Jan 2023 08:25:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50910
IP address blocks: 109.232.152.0/21 maxlen: 21
109.232.152.0/22 maxlen: 22
109.232.152.0/24 maxlen: 24
109.232.155.0/24 maxlen: 24
109.232.154.0/24 maxlen: 24
109.232.153.0/24 maxlen: 24
109.232.159.0/24 maxlen: 24
109.232.158.0/24 maxlen: 24
109.232.156.0/23 maxlen: 23
80.85.213.0/24 maxlen: 24
80.85.212.0/22 maxlen: 22
80.85.212.0/24 maxlen: 24
80.85.210.0/23 maxlen: 23
80.85.209.0/24 maxlen: 24
80.85.208.0/24 maxlen: 24
80.85.219.0/24 maxlen: 24
80.85.216.0/21 maxlen: 21
80.85.216.0/22 maxlen: 22
80.85.214.0/23 maxlen: 23
80.85.220.0/23 maxlen: 23
80.85.223.0/24 maxlen: 24
80.85.222.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:95:86:be:96:6a:45:73:41:6d:8b:16:92:fd:fd:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3b4351e0a495c26efdc6e415f0bb189fbbd6edf
Validity
Not Before: Jan 2 08:25:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a53d2aad4d1294f1acec25860b7ec441ab581aa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:2e:d5:24:98:d6:df:4f:a4:3f:7d:12:57:41:
91:37:49:ed:0b:bd:89:3f:f5:24:73:cb:48:68:76:
18:7d:94:de:2c:21:09:f9:3a:8c:27:67:82:a5:67:
03:66:91:77:f8:ec:1c:96:1c:4c:4f:0b:23:91:ba:
5c:e9:80:c6:39:31:3e:6d:92:24:33:d3:08:89:9c:
9c:11:a2:2a:1c:74:2e:bb:f3:31:69:09:62:36:90:
c4:00:f4:13:61:99:91:78:33:3d:8c:10:25:8f:bc:
b0:61:59:09:65:c9:27:d6:dd:7a:61:b3:ea:53:74:
73:7b:91:d8:76:69:0f:9a:b5:21:64:76:91:f4:4c:
4b:9d:29:69:e4:6c:6c:76:61:bf:14:0a:88:16:d9:
79:d2:41:77:f5:6c:37:43:f7:86:ff:26:da:b8:46:
26:f5:c2:01:46:7d:6e:7e:b2:59:f0:6f:6b:53:a9:
85:d7:8a:db:4d:a1:01:11:ba:20:63:76:2b:2b:63:
b8:62:b8:76:2f:ee:7d:31:ef:be:53:19:86:77:7c:
fc:0f:2d:bf:fa:11:63:96:da:a7:80:d6:55:c5:29:
8d:f1:27:48:b7:de:ca:9e:0e:76:26:fa:39:5a:e3:
81:bd:d5:44:47:73:be:64:a7:95:61:78:6a:b1:a8:
89:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:3D:2A:AD:4D:12:94:F1:AC:EC:25:86:0B:7E:C4:41:AB:58:1A:A2
X509v3 Authority Key Identifier:
keyid:C3:B4:35:1E:0A:49:5C:26:EF:DC:6E:41:5F:0B:B1:89:FB:BD:6E:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w7Q1HgpJXCbv3G5BXwuxifu9bt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/37e363-84d1-470e-96a2-0ef1cac7418d/1/pT0qrU0SlPGs7CWGC37EQatYGqI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/37e363-84d1-470e-96a2-0ef1cac7418d/1/w7Q1HgpJXCbv3G5BXwuxifu9bt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.85.208.0/20
109.232.152.0/21
Signature Algorithm: sha256WithRSAEncryption
1d:5e:74:f8:30:0d:1c:1c:28:2e:93:22:12:ae:fe:08:eb:d2:
b5:08:13:00:50:a5:c4:84:57:97:c8:13:d6:c7:d0:cd:14:5f:
b7:9a:e8:f0:55:f4:02:68:9d:39:2b:41:95:22:00:4a:c6:e7:
bd:e3:ef:55:9e:cd:88:ce:1e:b4:29:51:fd:39:9f:b9:2a:14:
ea:6c:fd:22:c9:9b:11:53:a0:83:c7:9f:47:f8:8f:69:21:a0:
3b:d1:ed:27:30:76:3d:ff:78:0b:ab:b5:7c:33:e8:d2:c4:4d:
a0:02:ff:50:6d:86:d0:56:a7:e4:96:e0:e5:93:1f:7d:c2:3d:
19:a8:9e:b4:0b:51:24:f6:df:0f:31:de:af:d2:80:b0:24:d9:
b7:96:d4:1b:dd:19:e4:c2:c3:93:a5:b7:75:4e:b0:63:fb:78:
67:83:4c:b0:4d:d6:94:bc:c3:0c:47:29:65:76:7d:a7:bb:b0:
5d:0f:f0:ab:64:3f:9e:68:86:4d:12:cb:89:f3:d8:cf:69:dc:
8c:35:85:93:0c:97:07:d3:4f:37:08:c9:7f:b6:f5:c7:9e:7a:
9b:d1:ed:ad:bb:af:99:4e:7b:f8:dd:22:93:84:e2:d4:12:74:
1a:1e:f6:6b:66:5e:9e:27:42:3c:31:d8:40:2d:ed:3c:30:3a:
14:a5:32:cd
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVxlYa+lmpFc0FtixaS/f2QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYjQzNTFlMGE0OTVjMjZlZmRjNmU0MTVmMGJiMTg5ZmJi
ZDZlZGYwHhcNMjMwMTAyMDgyNTAyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNTNkMmFhZDRkMTI5NGYxYWNlYzI1ODYwYjdlYzQ0MWFiNTgxYWEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAky7VJJjW30+kP30SV0GRN0ntC72J
P/Ukc8tIaHYYfZTeLCEJ+TqMJ2eCpWcDZpF3+OwclhxMTwsjkbpc6YDGOTE+bZIk
M9MIiZycEaIqHHQuu/MxaQliNpDEAPQTYZmReDM9jBAlj7ywYVkJZckn1t16YbPq
U3Rze5HYdmkPmrUhZHaR9ExLnSlp5GxsdmG/FAqIFtl50kF39Ww3Q/eG/ybauEYm
9cIBRn1ufrJZ8G9rU6mF14rbTaEBEbogY3YrK2O4Yrh2L+59Me++UxmGd3z8Dy2/
+hFjltqngNZVxSmN8SdIt97Kng52Jvo5WuOBvdVER3O+ZKeVYXhqsaiJowIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFKU9Kq1NEpTxrOwlhgt+xEGrWBqiMB8GA1UdIwQY
MBaAFMO0NR4KSVwm79xuQV8LsYn7vW7fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzdRMUhncEpYQ2J2M0c1Qlh3dXhpZnU5YnQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8zN2UzNjMtODRkMS00NzBlLTk2YTIt
MGVmMWNhYzc0MThkLzEvcFQwcXJVMFNsUEdzN0NXR0MzN0VRYXRZR3FJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC8zN2UzNjMtODRkMS00NzBlLTk2YTItMGVmMWNhYzc0MThk
LzEvdzdRMUhncEpYQ2J2M0c1Qlh3dXhpZnU5YnQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEUFXQAwQD
beiYMA0GCSqGSIb3DQEBCwUAA4IBAQAdXnT4MA0cHCgukyISrv4I69K1CBMAUKXE
hFeXyBPWx9DNFF+3mujwVfQCaJ05K0GVIgBKxue94+9Vns2Izh60KVH9OZ+5KhTq
bP0iyZsRU6CDx59H+I9pIaA70e0nMHY9/3gLq7V8M+jSxE2gAv9QbYbQVqfkluDl
kx99wj0ZqJ60C1Ek9t8PMd6v0oCwJNm3ltQb3RnkwsOTpbd1TrBj+3hng0ywTdaU
vMMMRylldn2nu7BdD/CrZD+eaIZNEsuJ89jPadyMNYWTDJcH0083CMl/tvXHnnqb
0e2tu6+ZTnv43SKThOLUEnQaHvZrZl6eJ0I8MdhALe08MDoUpTLN
-----END CERTIFICATE-----
Generated at Tue Jan 2 06:55:40 2024 by rpki-client on console.sobornost.net