Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/3BuhUxQ6PvNxqIunkoMFpR4CfZs.roa
File: 3BuhUxQ6PvNxqIunkoMFpR4CfZs.roa (raw, json)
Hash identifier: IS3UCHN6i+IplbAd0OS9ocReciwyvY52AeFPA3RoFDE=
Subject key identifier: DC:1B:A1:53:14:3A:3E:F3:71:A8:8B:A7:92:83:05:A5:1E:02:7D:9B
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 01856FF9833AE55928A8B489E5B8849FF8CD
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/3BuhUxQ6PvNxqIunkoMFpR4CfZs.roa
Signing time: Mon 02 Jan 2023 00:55:01 +0000
ROA not before: Mon 02 Jan 2023 00:55:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199898
IP address blocks: 217.79.38.0/24 maxlen: 24
92.247.164.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f9:83:3a:e5:59:28:a8:b4:89:e5:b8:84:9f:f8:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Jan 2 00:55:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dc1ba153143a3ef371a88ba7928305a51e027d9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:af:f3:6d:9f:02:6d:bb:8c:02:e1:11:0f:16:
0e:d1:99:32:40:8d:03:32:ec:31:70:68:00:c6:6e:
4e:77:68:6e:8b:8c:41:85:26:d9:4b:54:f8:74:a0:
b2:02:38:ae:cc:b6:0f:d0:e0:16:0c:72:cd:17:66:
36:d2:e9:dd:c9:53:e0:09:93:9b:c0:20:1a:1f:e2:
85:2a:92:88:c6:3f:30:22:26:e0:a5:19:f5:61:8f:
ee:75:04:0f:a3:90:05:68:67:41:8f:b6:2d:7a:8c:
b5:a9:f4:e4:ba:80:86:77:bb:ab:45:7a:91:5b:d1:
ff:3f:5e:84:6c:a3:d9:b6:32:d2:54:0b:b1:ca:3b:
3f:6f:61:2f:b0:37:e4:fd:89:40:c0:be:ab:8e:ce:
57:34:df:60:79:ad:c7:3f:9d:ad:92:d9:4b:c7:e7:
30:2c:b7:41:d2:33:b4:85:6b:5c:4d:48:83:bb:9a:
b3:67:18:c4:8b:4f:21:7c:b6:05:22:07:96:2d:75:
19:cc:a8:e4:7d:4c:18:4b:c7:32:a8:9b:9a:3a:93:
b8:d9:74:d6:cb:bb:ab:e0:a4:ac:ba:d4:dd:47:2b:
9b:63:fa:aa:9a:0e:a8:27:6e:0e:29:95:b2:8e:6d:
6c:2e:f7:18:a8:4f:3f:e2:de:e9:db:85:bd:cd:ba:
b9:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:1B:A1:53:14:3A:3E:F3:71:A8:8B:A7:92:83:05:A5:1E:02:7D:9B
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/3BuhUxQ6PvNxqIunkoMFpR4CfZs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.247.164.0/22
217.79.38.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:bd:cb:f6:07:d7:9e:bd:6b:10:e8:dd:ff:87:5f:5b:b6:b8:
4b:49:8c:ca:2c:e9:e5:36:c8:bc:2a:66:0d:f7:aa:0a:c8:70:
62:e7:e0:83:20:55:43:be:55:33:a4:b2:e2:31:29:22:5a:31:
ef:d2:b9:ae:66:0b:7c:12:48:7f:4d:84:ec:79:ac:75:c3:c3:
6c:74:2d:2d:0d:03:45:4d:dc:47:d7:55:d4:37:86:f3:7e:8a:
83:a5:81:5e:f9:3f:b6:88:08:1b:b6:90:40:62:88:c8:88:ce:
34:6b:5e:cd:7c:ff:c7:d1:9f:e7:3b:34:69:ca:27:3b:4f:5c:
eb:03:2d:ff:42:5c:80:ba:9b:a9:d3:45:fa:24:2d:91:b8:bd:
5d:52:ce:bf:ec:81:30:38:4a:0e:98:fc:be:2d:fe:e8:69:e8:
b2:bb:1c:a8:17:3f:e3:7a:d9:b2:b8:10:eb:6e:03:ac:ef:4f:
42:7f:89:a7:01:af:52:56:8f:7f:8b:d2:41:53:73:ee:f1:10:
2f:c6:40:27:d6:66:9e:76:2b:9d:a9:25:67:18:28:2e:a6:35:
58:b0:42:7d:45:45:7f:13:f4:a1:01:e9:27:74:f5:23:b8:d7:
02:ca:5e:8f:86:4c:de:e1:0a:84:0e:45:13:c0:83:61:61:22:
a1:05:39:1e
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVv+YM65VkoqLSJ5biEn/jNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NDhjZWRmMTcwMjllZDk4YTEwODExM2M2YzEwOWVjYWNj
ZDgyZWMwHhcNMjMwMTAyMDA1NTAxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYzFiYTE1MzE0M2EzZWYzNzFhODhiYTc5MjgzMDVhNTFlMDI3ZDliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAja/zbZ8CbbuMAuERDxYO0ZkyQI0D
MuwxcGgAxm5Od2hui4xBhSbZS1T4dKCyAjiuzLYP0OAWDHLNF2Y20undyVPgCZOb
wCAaH+KFKpKIxj8wIibgpRn1YY/udQQPo5AFaGdBj7Yteoy1qfTkuoCGd7urRXqR
W9H/P16EbKPZtjLSVAuxyjs/b2EvsDfk/YlAwL6rjs5XNN9gea3HP52tktlLx+cw
LLdB0jO0hWtcTUiDu5qzZxjEi08hfLYFIgeWLXUZzKjkfUwYS8cyqJuaOpO42XTW
y7ur4KSsutTdRyubY/qqmg6oJ24OKZWyjm1sLvcYqE8/4t7p24W9zbq5TwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFNwboVMUOj7zcaiLp5KDBaUeAn2bMB8GA1UdIwQY
MBaAFAVIzt8XAp7ZihCBE8bBCeyszYLsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAt
N2ZiYmFlNmY5NDM3LzEvM0J1aFV4UTZQdk54cUl1bmtvTUZwUjRDZlpzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAtN2ZiYmFlNmY5NDM3
LzEvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCXPekAwQA
2U8mMA0GCSqGSIb3DQEBCwUAA4IBAQAOvcv2B9eevWsQ6N3/h19btrhLSYzKLOnl
Nsi8KmYN96oKyHBi5+CDIFVDvlUzpLLiMSkiWjHv0rmuZgt8Ekh/TYTseax1w8Ns
dC0tDQNFTdxH11XUN4bzfoqDpYFe+T+2iAgbtpBAYojIiM40a17NfP/H0Z/nOzRp
yic7T1zrAy3/QlyAupup00X6JC2RuL1dUs6/7IEwOEoOmPy+Lf7oaeiyuxyoFz/j
etmyuBDrbgOs709Cf4mnAa9SVo9/i9JBU3Pu8RAvxkAn1maediudqSVnGCgupjVY
sEJ9RUV/E/ShAekndPUjuNcCyl6Phkze4QqEDkUTwINhYSKhBTke
-----END CERTIFICATE-----
Generated at Mon Jan 1 21:18:43 2024 by rpki-client on console-ams.rpki-client.org