Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/e93e9f-8caf-49a0-868e-a8c4adf98721/1/t7-bmtKKNn0FpcJP6dRMrcbmgXA.roa
File: t7-bmtKKNn0FpcJP6dRMrcbmgXA.roa (raw, json)
Hash identifier: Nr0hWhWkGXvqribzoLyhJhr7zvzCYJIlRNSHZAIYQGo=
Subject key identifier: B7:BF:9B:9A:D2:8A:36:7D:05:A5:C2:4F:E9:D4:4C:AD:C6:E6:81:70
Certificate issuer: /CN=f81f6ad0df383720d3a5d03ba88c193095c574ef
Certificate serial: 01856F4B4615FC96D2C2FC002C598A063E53
Authority key identifier: F8:1F:6A:D0:DF:38:37:20:D3:A5:D0:3B:A8:8C:19:30:95:C5:74:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-B9q0N84NyDTpdA7qIwZMJXFdO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/e93e9f-8caf-49a0-868e-a8c4adf98721/1/t7-bmtKKNn0FpcJP6dRMrcbmgXA.roa
Signing time: Sun 01 Jan 2023 21:44:42 +0000
ROA not before: Sun 01 Jan 2023 21:44:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59754
IP address blocks: 185.73.78.0/23 maxlen: 23
185.73.78.0/24 maxlen: 24
185.73.76.0/24 maxlen: 24
185.73.76.0/23 maxlen: 23
185.73.76.0/22 maxlen: 22
185.73.77.0/24 maxlen: 24
185.73.79.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:4b:46:15:fc:96:d2:c2:fc:00:2c:59:8a:06:3e:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f81f6ad0df383720d3a5d03ba88c193095c574ef
Validity
Not Before: Jan 1 21:44:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b7bf9b9ad28a367d05a5c24fe9d44cadc6e68170
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:87:6f:97:dc:1d:2b:82:db:a0:36:eb:7f:c0:
6d:6c:fb:0b:db:5f:f0:07:bf:11:9b:54:59:8c:a1:
59:9c:b3:f3:4e:33:99:44:82:75:0b:96:fe:ab:b8:
07:6e:38:3b:1c:1a:ee:44:4e:8b:22:5d:68:cf:67:
44:b5:c6:a8:d8:e5:46:64:ea:12:1c:c1:74:73:a3:
1c:1a:92:3e:85:91:0e:fa:86:28:c2:c7:2a:43:0c:
92:30:d9:76:e4:f2:79:f7:79:49:0e:ff:68:63:ce:
f5:06:52:d6:e4:a4:db:69:d2:98:e2:30:8d:15:55:
37:92:23:b9:08:ff:91:22:5b:f7:86:7f:de:6a:5f:
6a:77:ac:47:33:15:09:ef:25:6f:a2:84:73:4a:be:
b1:59:dd:44:8a:97:66:a5:e2:8e:cf:f2:ad:d0:62:
32:a3:cc:c1:bb:fb:a0:a4:e2:bd:c5:ab:a4:1f:61:
8c:81:29:35:ea:3e:f0:bb:e5:f8:0f:18:14:dc:ef:
aa:0b:de:23:dd:8f:ee:14:4f:eb:5a:f9:06:f4:06:
a7:b0:1f:bb:5d:64:0f:ac:c8:72:09:b6:18:a3:b4:
65:73:9e:df:40:98:c6:2a:5e:16:85:fb:61:58:c8:
6e:60:5d:58:a5:c3:3a:a1:c3:ec:a2:9d:c4:78:a7:
ce:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:BF:9B:9A:D2:8A:36:7D:05:A5:C2:4F:E9:D4:4C:AD:C6:E6:81:70
X509v3 Authority Key Identifier:
keyid:F8:1F:6A:D0:DF:38:37:20:D3:A5:D0:3B:A8:8C:19:30:95:C5:74:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-B9q0N84NyDTpdA7qIwZMJXFdO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e93e9f-8caf-49a0-868e-a8c4adf98721/1/t7-bmtKKNn0FpcJP6dRMrcbmgXA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e93e9f-8caf-49a0-868e-a8c4adf98721/1/1-B9q0N84NyDTpdA7qIwZMJXFdO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.73.76.0/22
Signature Algorithm: sha256WithRSAEncryption
a5:a3:77:38:1b:fd:b4:0d:15:8e:9f:cd:a5:9c:de:ad:ac:25:
3b:2a:64:1f:64:2b:89:1d:0a:af:13:ea:95:51:68:0d:b6:82:
63:93:ad:f0:8c:f2:d8:e9:ee:a7:91:96:93:4d:15:fc:5d:07:
fe:a4:ea:40:3e:28:1e:20:5d:66:92:e6:ea:b3:37:76:1f:e3:
23:a0:ad:e4:29:e6:ca:b3:c1:98:d4:a1:6e:e1:2f:2d:ea:e7:
d0:37:1e:9f:07:0f:f0:6e:ec:60:8e:6a:5e:4d:7d:fa:0d:97:
54:a4:9d:39:61:fd:c6:18:37:ae:f2:e0:64:f6:0e:a2:80:b5:
e6:1b:a3:21:90:3b:d5:eb:79:f8:41:31:20:fb:cf:b4:8c:b1:
0a:dc:aa:e3:fa:57:7f:eb:29:a8:f6:f5:01:7b:8f:4e:52:9a:
e9:29:09:d6:ad:28:4b:ba:9a:77:13:ea:ba:87:05:dc:58:fe:
86:a6:43:a6:fb:0d:7d:e8:82:a9:c8:8d:3b:c3:1a:83:97:d6:
d0:af:35:3d:99:98:36:4a:e3:b0:18:97:75:8c:40:25:5d:9f:
6d:45:b7:55:ba:05:52:f3:92:44:62:89:00:b3:50:b1:f1:fe:
de:78:c6:56:9d:b3:60:3a:9a:e5:1a:d6:4a:d5:1c:4a:ea:97:
ea:b1:b2:6d
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYVvS0YV/JbSwvwALFmKBj5TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4MWY2YWQwZGYzODM3MjBkM2E1ZDAzYmE4OGMxOTMwOTVj
NTc0ZWYwHhcNMjMwMTAxMjE0NDQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiN2JmOWI5YWQyOGEzNjdkMDVhNWMyNGZlOWQ0NGNhZGM2ZTY4MTcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArodvl9wdK4LboDbrf8BtbPsL21/w
B78Rm1RZjKFZnLPzTjOZRIJ1C5b+q7gHbjg7HBruRE6LIl1oz2dEtcao2OVGZOoS
HMF0c6McGpI+hZEO+oYowscqQwySMNl25PJ593lJDv9oY871BlLW5KTbadKY4jCN
FVU3kiO5CP+RIlv3hn/eal9qd6xHMxUJ7yVvooRzSr6xWd1EipdmpeKOz/Kt0GIy
o8zBu/ugpOK9xaukH2GMgSk16j7wu+X4DxgU3O+qC94j3Y/uFE/rWvkG9AansB+7
XWQPrMhyCbYYo7Rlc57fQJjGKl4WhfthWMhuYF1YpcM6ocPsop3EeKfOnQIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFLe/m5rSijZ9BaXCT+nUTK3G5oFwMB8GA1UdIwQY
MBaAFPgfatDfODcg06XQO6iMGTCVxXTvMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1COXEwTjg0TnlEVHBkQTdxSXdaTUpYRmRPOC5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDQvZTkzZTlmLThjYWYtNDlhMC04Njhl
LWE4YzRhZGY5ODcyMS8xL3Q3LWJtdEtLTm4wRnBjSlA2ZFJNcmNibWdYQS5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMDQvZTkzZTlmLThjYWYtNDlhMC04NjhlLWE4YzRhZGY5ODcy
MS8xLzEtQjlxME44NE55RFRwZEE3cUl3Wk1KWEZkTzguY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK5SUww
DQYJKoZIhvcNAQELBQADggEBAKWjdzgb/bQNFY6fzaWc3q2sJTsqZB9kK4kdCq8T
6pVRaA22gmOTrfCM8tjp7qeRlpNNFfxdB/6k6kA+KB4gXWaS5uqzN3Yf4yOgreQp
5sqzwZjUoW7hLy3q59A3Hp8HD/Bu7GCOal5NffoNl1SknTlh/cYYN67y4GT2DqKA
teYboyGQO9XrefhBMSD7z7SMsQrcquP6V3/rKaj29QF7j05SmukpCdatKEu6mncT
6rqHBdxY/oamQ6b7DX3ogqnIjTvDGoOX1tCvNT2ZmDZK47AYl3WMQCVdn21Ft1W6
BVLzkkRiiQCzULHx/t54xlads2A6muUa1krVHErql+qxsm0=
-----END CERTIFICATE-----
Generated at Tue Jan 2 08:59:16 2024 by rpki-client on console-ams.rpki-client.org