Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/936915-213a-40d9-978b-7f7bab83bda0/1/bdPNgS2pbRnXlXTt_L-R7VWyp2g.roa
File: bdPNgS2pbRnXlXTt_L-R7VWyp2g.roa (raw, json)
Hash identifier: VEMRsl+AIY1Nb0mJzjOJs9P1VeNR9oYQ/tE+C2BppRI=
Subject key identifier: 6D:D3:CD:81:2D:A9:6D:19:D7:95:74:ED:FC:BF:91:ED:55:B2:A7:68
Certificate issuer: /CN=d19178bb4a6114eab98be00478cc7f13b0ad202a
Certificate serial: 0185704BC80EC6A22C743BC9301FF135BA37
Authority key identifier: D1:91:78:BB:4A:61:14:EA:B9:8B:E0:04:78:CC:7F:13:B0:AD:20:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ZF4u0phFOq5i-AEeMx_E7CtICo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/936915-213a-40d9-978b-7f7bab83bda0/1/bdPNgS2pbRnXlXTt_L-R7VWyp2g.roa
Signing time: Mon 02 Jan 2023 02:24:52 +0000
ROA not before: Mon 02 Jan 2023 02:24:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39360
IP address blocks: 213.226.80.0/22 maxlen: 22
213.226.80.0/24 maxlen: 24
2a09:4980::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:4b:c8:0e:c6:a2:2c:74:3b:c9:30:1f:f1:35:ba:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d19178bb4a6114eab98be00478cc7f13b0ad202a
Validity
Not Before: Jan 2 02:24:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6dd3cd812da96d19d79574edfcbf91ed55b2a768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1a:4a:c0:95:de:44:55:7a:0c:c0:05:60:06:
07:4b:d7:67:f2:a7:a3:86:cf:61:35:4a:f8:16:9d:
3c:6a:fa:8f:35:7e:30:7f:90:7d:5f:0b:24:49:4e:
83:91:ce:b3:32:c5:d7:b8:43:13:9d:b3:35:8d:59:
ca:cf:56:de:dd:10:35:67:a2:d8:01:e8:55:44:5b:
da:86:6a:51:7d:9f:4d:3a:bb:8e:cc:10:32:d6:d5:
6d:c5:2b:5b:24:ee:14:d1:75:d1:7f:e8:b3:6e:f1:
58:05:f8:09:e8:ad:7a:56:c6:d7:ca:c2:1e:35:42:
4e:6c:3d:2d:f6:85:0e:35:64:71:c9:f2:1f:c8:04:
e8:41:5d:2f:10:78:b6:a8:bf:be:b8:a6:56:e8:08:
1d:56:98:5f:e0:de:9f:5f:d0:cf:d4:ef:d9:ae:39:
cb:bd:3d:5b:e0:bf:7f:8b:d2:06:71:19:11:c7:34:
ff:34:c6:05:08:e4:66:72:fc:98:9f:ab:9e:72:ba:
37:b2:f5:0d:0d:5d:5f:9f:fd:f0:f5:f2:f9:8a:5d:
25:87:49:3b:85:ab:96:94:05:d6:5e:d5:63:03:d0:
6d:ec:4d:19:dc:a3:04:36:8d:1f:e7:66:17:51:c7:
68:89:74:f8:07:b8:01:84:85:20:45:c1:c5:e2:c1:
d9:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:D3:CD:81:2D:A9:6D:19:D7:95:74:ED:FC:BF:91:ED:55:B2:A7:68
X509v3 Authority Key Identifier:
keyid:D1:91:78:BB:4A:61:14:EA:B9:8B:E0:04:78:CC:7F:13:B0:AD:20:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ZF4u0phFOq5i-AEeMx_E7CtICo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/936915-213a-40d9-978b-7f7bab83bda0/1/bdPNgS2pbRnXlXTt_L-R7VWyp2g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/936915-213a-40d9-978b-7f7bab83bda0/1/0ZF4u0phFOq5i-AEeMx_E7CtICo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.226.80.0/22
IPv6:
2a09:4980::/32
Signature Algorithm: sha256WithRSAEncryption
17:48:90:c3:db:64:6a:ab:e7:74:7b:09:aa:69:93:0c:93:fc:
38:16:22:d6:b8:67:0b:0a:af:4a:e2:ba:ae:7d:c4:c6:2c:ca:
05:7e:60:7e:44:e5:04:3e:63:59:fb:ec:37:26:dd:ce:1b:25:
1d:04:bd:3f:98:59:18:70:1f:43:ce:4d:90:60:be:57:21:ea:
13:e8:f3:5a:18:9a:b5:9d:0b:77:47:6a:db:a9:46:a8:e4:51:
bf:9b:05:42:c7:7a:bf:d9:06:1d:b5:a4:53:62:d4:1e:0d:2a:
92:5b:63:33:70:a1:6e:0a:d9:2b:fe:9e:be:0b:bb:e0:dd:ff:
d4:e5:9e:b7:0d:04:32:85:81:7e:55:71:fa:d4:7a:26:f2:43:
0c:67:fe:c0:91:73:6a:76:62:60:d9:1b:f8:6f:8f:86:d3:34:
89:ea:0e:1c:da:8a:cd:43:73:75:43:08:6c:a5:14:da:3d:1c:
33:78:a7:dc:00:af:c4:dc:fa:be:e4:aa:d9:e3:b5:0f:dc:91:
ed:17:2b:49:de:e1:42:56:16:de:6d:e6:8e:42:ec:b8:e0:3d:
75:76:c3:fe:cb:b9:d6:20:08:96:23:13:6a:40:04:2f:61:23:
d2:15:ab:e6:6e:c7:88:f4:7d:06:44:ea:1b:82:5b:dc:28:03:
e3:b2:b5:0d
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVwS8gOxqIsdDvJMB/xNbo3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxOTE3OGJiNGE2MTE0ZWFiOThiZTAwNDc4Y2M3ZjEzYjBh
ZDIwMmEwHhcNMjMwMTAyMDIyNDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZGQzY2Q4MTJkYTk2ZDE5ZDc5NTc0ZWRmY2JmOTFlZDU1YjJhNzY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohpKwJXeRFV6DMAFYAYHS9dn8qej
hs9hNUr4Fp08avqPNX4wf5B9XwskSU6Dkc6zMsXXuEMTnbM1jVnKz1be3RA1Z6LY
AehVRFvahmpRfZ9NOruOzBAy1tVtxStbJO4U0XXRf+izbvFYBfgJ6K16VsbXysIe
NUJObD0t9oUONWRxyfIfyAToQV0vEHi2qL++uKZW6AgdVphf4N6fX9DP1O/ZrjnL
vT1b4L9/i9IGcRkRxzT/NMYFCORmcvyYn6uecro3svUNDV1fn/3w9fL5il0lh0k7
hauWlAXWXtVjA9Bt7E0Z3KMENo0f52YXUcdoiXT4B7gBhIUgRcHF4sHZTQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFG3TzYEtqW0Z15V07fy/ke1VsqdoMB8GA1UdIwQY
MBaAFNGReLtKYRTquYvgBHjMfxOwrSAqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFpGNHUwcGhGT3E1aS1BRWVNeF9FN0N0SUNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi85MzY5MTUtMjEzYS00MGQ5LTk3OGIt
N2Y3YmFiODNiZGEwLzEvYmRQTmdTMnBiUm5YbFhUdF9MLVI3Vld5cDJnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi85MzY5MTUtMjEzYS00MGQ5LTk3OGItN2Y3YmFiODNiZGEw
LzEvMFpGNHUwcGhGT3E1aS1BRWVNeF9FN0N0SUNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQC1eJQMA0E
AgACMAcDBQAqCUmAMA0GCSqGSIb3DQEBCwUAA4IBAQAXSJDD22Rqq+d0ewmqaZMM
k/w4FiLWuGcLCq9K4rqufcTGLMoFfmB+ROUEPmNZ++w3Jt3OGyUdBL0/mFkYcB9D
zk2QYL5XIeoT6PNaGJq1nQt3R2rbqUao5FG/mwVCx3q/2QYdtaRTYtQeDSqSW2Mz
cKFuCtkr/p6+C7vg3f/U5Z63DQQyhYF+VXH61Hom8kMMZ/7AkXNqdmJg2Rv4b4+G
0zSJ6g4c2orNQ3N1QwhspRTaPRwzeKfcAK/E3Pq+5KrZ47UP3JHtFytJ3uFCVhbe
beaOQuy44D11dsP+y7nWIAiWIxNqQAQvYSPSFavmbseI9H0GROobglvcKAPjsrUN
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:51 2024 by rpki-client on console-ams.rpki-client.org