Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/yZw3FElwsFSHJccnbgLraqZqaRw.roa
File: yZw3FElwsFSHJccnbgLraqZqaRw.roa (raw, json)
Hash identifier: HCtEzF74Z7f7fNkk+w/WJcgc7DLNkp/3OoQjnCWMfM0=
Subject key identifier: C9:9C:37:14:49:70:B0:54:87:25:C7:27:6E:02:EB:6A:A6:6A:69:1C
Certificate issuer: /CN=a952d0d266557385836aab7ae3fdced4ca74ad89
Certificate serial: 0188438EB01A621C77D2AA0DE9DC9BDBCFEC
Authority key identifier: A9:52:D0:D2:66:55:73:85:83:6A:AB:7A:E3:FD:CE:D4:CA:74:AD:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/yZw3FElwsFSHJccnbgLraqZqaRw.roa
Signing time: Mon 22 May 2023 13:03:24 +0000
ROA not before: Mon 22 May 2023 13:03:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210079
IP address blocks: 217.144.96.0/24 maxlen: 24
217.144.98.0/24 maxlen: 24
217.144.97.0/24 maxlen: 24
217.144.99.0/24 maxlen: 24
217.144.103.0/24 maxlen: 24
217.144.102.0/24 maxlen: 24
217.144.101.0/24 maxlen: 24
217.144.100.0/24 maxlen: 24
185.22.232.0/23 maxlen: 23
185.22.234.0/23 maxlen: 23
91.218.230.0/23 maxlen: 23
91.218.228.0/23 maxlen: 23
95.181.224.0/24 maxlen: 24
95.181.226.0/24 maxlen: 24
95.181.225.0/24 maxlen: 24
5.35.100.0/24 maxlen: 24
5.35.103.0/24 maxlen: 24
5.35.102.0/24 maxlen: 24
5.35.101.0/24 maxlen: 24
95.183.8.0/23 maxlen: 23
95.183.11.0/24 maxlen: 24
95.183.10.0/24 maxlen: 24
95.183.15.0/24 maxlen: 24
95.183.14.0/24 maxlen: 24
95.183.13.0/24 maxlen: 24
95.183.12.0/24 maxlen: 24
37.143.10.0/23 maxlen: 23
37.143.8.0/23 maxlen: 23
37.143.14.0/23 maxlen: 23
37.143.12.0/23 maxlen: 23
46.254.16.0/23 maxlen: 23
46.254.23.0/24 maxlen: 24
46.254.22.0/24 maxlen: 24
46.254.20.0/23 maxlen: 23
46.254.18.0/23 maxlen: 23
95.181.228.0/24 maxlen: 24
95.181.227.0/24 maxlen: 24
95.181.231.0/24 maxlen: 24
95.181.230.0/24 maxlen: 24
95.181.229.0/24 maxlen: 24
185.87.192.0/24 maxlen: 24
185.87.195.0/24 maxlen: 24
185.87.194.0/24 maxlen: 24
185.87.193.0/24 maxlen: 24
185.87.199.0/24 maxlen: 24
185.87.198.0/24 maxlen: 24
185.87.197.0/24 maxlen: 24
185.87.196.0/24 maxlen: 24
178.57.218.0/23 maxlen: 23
178.57.216.0/23 maxlen: 23
178.57.222.0/23 maxlen: 23
178.57.220.0/23 maxlen: 23
2a03:c980:b916::/48 maxlen: 48
2a03:c980:5fb5::/48 maxlen: 48
2a03:c980:d990::/48 maxlen: 48
2a03:c980:b957::/48 maxlen: 48
2a03:c980:e5::/48 maxlen: 48
2a03:c980:db::/48 maxlen: 48
2a03:c980:b239::/48 maxlen: 48
2a03:c980:beef::/48 maxlen: 48
2a03:c980:dead::/48 maxlen: 48
2a03:c980:5fb7::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:43:8e:b0:1a:62:1c:77:d2:aa:0d:e9:dc:9b:db:cf:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a952d0d266557385836aab7ae3fdced4ca74ad89
Validity
Not Before: May 22 13:03:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c99c37144970b0548725c7276e02eb6aa66a691c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f1:77:af:90:83:df:27:1c:9d:12:e0:75:d7:
05:db:56:ef:3a:dd:e3:1d:6d:09:1c:64:4c:d0:10:
56:94:14:21:a6:bc:68:62:32:fc:34:f8:13:71:1d:
c7:b6:19:fe:ab:01:f5:d4:ce:52:ef:99:1c:85:51:
cf:9c:dd:5d:ff:77:0e:1c:dd:87:9a:3d:d2:df:cc:
39:26:0e:58:9a:2b:33:4f:ec:3a:0a:d3:20:ae:7c:
48:0a:2e:cc:87:8c:52:77:0a:d0:df:36:f7:64:bd:
aa:87:97:23:62:8a:ea:67:c9:a4:96:6e:c2:81:a1:
d9:e6:03:a9:be:1b:06:b6:ac:02:c5:f9:a6:5b:44:
ce:09:6a:35:9e:52:ce:09:be:9d:37:3e:07:b9:61:
c9:7b:11:e2:95:a3:a5:c9:8d:22:68:8d:ce:53:aa:
2c:8d:a4:f9:67:d1:38:bb:eb:a1:b9:8b:ef:55:d1:
46:0e:0d:c2:c9:cb:5f:c9:87:a4:36:18:54:86:e6:
f1:3c:a1:11:12:ae:d4:77:fe:a2:8e:ff:f1:8e:ea:
a7:ad:f3:3d:6e:ce:d0:d5:04:3f:5e:a3:9b:0a:02:
ab:c1:0a:23:55:fe:04:b1:86:1b:b9:03:67:f8:37:
8c:3c:38:fc:88:cb:99:5c:09:14:57:80:d3:0d:d4:
42:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:9C:37:14:49:70:B0:54:87:25:C7:27:6E:02:EB:6A:A6:6A:69:1C
X509v3 Authority Key Identifier:
keyid:A9:52:D0:D2:66:55:73:85:83:6A:AB:7A:E3:FD:CE:D4:CA:74:AD:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/yZw3FElwsFSHJccnbgLraqZqaRw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.35.100.0/22
37.143.8.0/21
46.254.16.0/21
91.218.228.0/22
95.181.224.0/21
95.183.8.0/21
178.57.216.0/21
185.22.232.0/22
185.87.192.0/21
217.144.96.0/21
IPv6:
2a03:c980:db::/48
2a03:c980:e5::/48
2a03:c980:5fb5::/48
2a03:c980:5fb7::/48
2a03:c980:b239::/48
2a03:c980:b916::/48
2a03:c980:b957::/48
2a03:c980:beef::/48
2a03:c980:d990::/48
2a03:c980:dead::/48
Signature Algorithm: sha256WithRSAEncryption
02:7d:6c:03:2a:b0:40:56:f8:f7:94:c9:a4:0a:97:f4:05:b2:
34:b2:dc:a9:78:41:a8:fc:ba:a4:83:bd:87:e3:f1:b0:65:a3:
e6:1c:fb:19:c0:e4:42:18:f6:e3:67:5c:6a:b4:87:1e:de:fd:
39:7f:69:c9:6b:67:e8:81:93:51:ab:be:01:af:e7:83:e9:2e:
74:54:af:d1:5e:50:d0:da:bb:98:d2:01:8b:f7:e7:cf:82:a5:
08:19:6b:24:f7:a9:db:ba:34:97:77:d2:2f:7f:6b:f1:89:9a:
0c:d5:b1:70:5d:bd:f2:61:76:06:bd:69:10:57:ed:57:ff:34:
9e:84:fc:19:4c:d7:8a:df:5a:7b:4e:d0:a3:88:5a:f4:98:3e:
d6:be:e4:04:b1:de:45:c9:34:ee:fd:81:a9:60:9b:06:4f:7c:
71:a5:d5:35:10:97:d5:74:5a:5c:3f:38:18:a1:9e:8c:4d:41:
d5:9a:b5:c6:32:f6:41:f1:39:5f:e3:ed:db:cb:ca:cc:9a:01:
04:8b:5c:8c:35:e3:bf:79:3d:02:df:b9:59:22:22:0e:69:be:
88:2d:37:c5:4d:fe:ad:31:ea:0d:a9:8f:2c:d3:dd:17:a3:18:
a1:c9:86:71:d6:31:5c:22:84:00:56:86:e4:42:5b:9d:7b:af:
3c:19:83:8a
-----BEGIN CERTIFICATE-----
MIIFmDCCBICgAwIBAgISAYhDjrAaYhx30qoN6dyb28/sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5NTJkMGQyNjY1NTczODU4MzZhYWI3YWUzZmRjZWQ0Y2E3
NGFkODkwHhcNMjMwNTIyMTMwMzI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOTljMzcxNDQ5NzBiMDU0ODcyNWM3Mjc2ZTAyZWI2YWE2NmE2OTFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvF3r5CD3yccnRLgddcF21bvOt3j
HW0JHGRM0BBWlBQhprxoYjL8NPgTcR3Hthn+qwH11M5S75kchVHPnN1d/3cOHN2H
mj3S38w5Jg5YmiszT+w6CtMgrnxICi7Mh4xSdwrQ3zb3ZL2qh5cjYorqZ8mklm7C
gaHZ5gOpvhsGtqwCxfmmW0TOCWo1nlLOCb6dNz4HuWHJexHilaOlyY0iaI3OU6os
jaT5Z9E4u+uhuYvvVdFGDg3CyctfyYekNhhUhubxPKEREq7Ud/6ijv/xjuqnrfM9
bs7Q1QQ/XqObCgKrwQojVf4EsYYbuQNn+DeMPDj8iMuZXAkUV4DTDdRCIwIDAQAB
o4ICpDCCAqAwHQYDVR0OBBYEFMmcNxRJcLBUhyXHJ24C62qmamkcMB8GA1UdIwQY
MBaAFKlS0NJmVXOFg2qreuP9ztTKdK2JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVZMUTBtWlZjNFdEYXF0NjRfM08xTXAwcllrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi8yNzBhOTEtY2JmZC00NTAzLWI5NjAt
NGMyMWE1MDVmMzQ2LzEveVp3M0ZFbHdzRlNISmNjbmJnTHJhcVpxYVJ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi8yNzBhOTEtY2JmZC00NTAzLWI5NjAtNGMyMWE1MDVmMzQ2
LzEvcVZMUTBtWlZjNFdEYXF0NjRfM08xTXAwcllrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIG5BggrBgEFBQcBBwEB/wSBqTCBpjBCBAIAATA8AwQCBSNk
AwQDJY8IAwQDLv4QAwQCW9rkAwQDX7XgAwQDX7cIAwQDsjnYAwQCuRboAwQDuVfA
AwQD2ZBgMGAEAgACMFoDBwAqA8mAANsDBwAqA8mAAOUDBwAqA8mAX7UDBwAqA8mA
X7cDBwAqA8mAsjkDBwAqA8mAuRYDBwAqA8mAuVcDBwAqA8mAvu8DBwAqA8mA2ZAD
BwAqA8mA3q0wDQYJKoZIhvcNAQELBQADggEBAAJ9bAMqsEBW+PeUyaQKl/QFsjSy
3Kl4Qaj8uqSDvYfj8bBlo+Yc+xnA5EIY9uNnXGq0hx7e/Tl/aclrZ+iBk1GrvgGv
54PpLnRUr9FeUNDau5jSAYv358+CpQgZayT3qdu6NJd30i9/a/GJmgzVsXBdvfJh
dga9aRBX7Vf/NJ6E/BlM14rfWntO0KOIWvSYPta+5ASx3kXJNO79galgmwZPfHGl
1TUQl9V0Wlw/OBihnoxNQdWatcYy9kHxOV/j7dvLysyaAQSLXIw14795PQLfuVki
Ig5pvogtN8VN/q0x6g2pjyzT3RejGKHJhnHWMVwihABWhuRCW517rzwZg4o=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:06 2023 by rpki-client on console.sobornost.net