Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/8zYXcWnl6kPAPvzIEUleQQQ8FO8.roa
File: 8zYXcWnl6kPAPvzIEUleQQQ8FO8.roa (raw, json)
Hash identifier: hXfOYcGzkL5L6FSjeNExaTFUJPmIhcVDD1qOBF4zDHI=
Subject key identifier: F3:36:17:71:69:E5:EA:43:C0:3E:FC:C8:11:49:5E:41:04:3C:14:EF
Certificate issuer: /CN=bdb7aac7c493bc8aa7ec7059d3ec76bbfc2f23d8
Certificate serial: 01896A0BD2A699323B8741CC41791DCF6A1E
Authority key identifier: BD:B7:AA:C7:C4:93:BC:8A:A7:EC:70:59:D3:EC:76:BB:FC:2F:23:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vbeqx8STvIqn7HBZ0-x2u_wvI9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/8zYXcWnl6kPAPvzIEUleQQQ8FO8.roa
Signing time: Tue 18 Jul 2023 17:28:26 +0000
ROA not before: Tue 18 Jul 2023 17:28:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57907
IP address blocks: 212.162.156.0/22 maxlen: 22
37.152.48.0/21 maxlen: 21
2a09:d800::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:6a:0b:d2:a6:99:32:3b:87:41:cc:41:79:1d:cf:6a:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdb7aac7c493bc8aa7ec7059d3ec76bbfc2f23d8
Validity
Not Before: Jul 18 17:28:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f336177169e5ea43c03efcc811495e41043c14ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:58:dd:4f:11:12:32:cc:3b:91:30:3f:df:61:
89:e6:f2:84:71:c0:84:f9:41:60:a4:3a:4a:0d:ad:
9d:c6:5d:22:5d:23:78:99:b6:e2:0f:23:88:5a:31:
62:f4:f1:d4:77:25:95:43:ee:9b:33:7d:53:2e:b3:
6e:76:b3:3a:af:b0:61:4d:6e:89:66:7b:de:eb:2a:
d2:ff:5f:ba:dc:5a:70:84:fa:e5:37:f3:99:1e:de:
12:37:27:d6:df:26:f1:65:c1:53:33:ba:87:d0:48:
61:88:48:de:40:c0:7d:24:05:22:81:67:5a:18:d3:
c4:22:54:59:bf:a3:4a:62:f2:34:72:6b:53:7e:da:
c4:7e:cf:cb:71:bc:34:9b:0d:2d:dd:a7:72:73:80:
1e:75:ab:29:d8:4a:f5:c4:99:b8:72:48:6a:fc:d8:
a8:92:d1:32:76:43:ca:49:ea:64:f8:f5:75:16:db:
c7:35:ba:87:9d:75:c4:ec:3d:b3:b5:c4:ee:5a:e2:
31:1c:4e:3b:5d:bf:3d:db:0a:21:d7:93:59:3d:d4:
e9:97:19:b6:80:72:1b:bd:0c:95:e9:5e:fc:2a:84:
be:31:8d:19:54:4d:8d:03:60:1e:e3:c0:cb:d9:b2:
f5:69:e1:af:77:03:0f:ce:36:e7:e6:9e:55:b5:f3:
f0:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:36:17:71:69:E5:EA:43:C0:3E:FC:C8:11:49:5E:41:04:3C:14:EF
X509v3 Authority Key Identifier:
keyid:BD:B7:AA:C7:C4:93:BC:8A:A7:EC:70:59:D3:EC:76:BB:FC:2F:23:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vbeqx8STvIqn7HBZ0-x2u_wvI9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/8zYXcWnl6kPAPvzIEUleQQQ8FO8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.152.48.0/21
212.162.156.0/22
IPv6:
2a09:d800::/29
Signature Algorithm: sha256WithRSAEncryption
11:03:91:ff:52:54:c0:0a:ef:b4:7b:ef:3a:27:b5:a9:29:c3:
c5:71:e9:2c:1f:2c:78:78:56:c0:d8:f1:da:21:01:5b:08:dd:
28:28:d7:6b:ae:4a:97:81:10:77:12:9d:0c:94:f7:ee:39:f1:
d7:da:42:9d:cb:5f:bb:d9:e2:ea:97:25:85:97:fd:92:fa:2b:
90:18:61:c4:d6:44:aa:0c:03:50:51:a3:d8:dc:f8:59:67:86:
b7:b4:1e:94:44:e8:32:75:01:1b:38:2e:4c:a9:52:b3:62:18:
ae:f6:db:0b:46:3a:08:63:6a:86:9f:3d:82:a5:c7:3b:d9:3e:
18:28:af:28:3a:be:81:be:cf:16:28:52:48:01:89:3f:b8:1e:
cd:36:02:b9:17:2a:db:62:57:57:a8:5e:93:b0:04:41:a3:2e:
00:d1:a4:12:78:11:26:53:cb:f5:93:73:11:7f:8c:53:05:cf:
7b:c7:0f:e4:54:03:8e:b4:95:e9:e1:76:e0:06:79:aa:04:1b:
de:24:77:e4:fc:d0:04:6a:d0:4b:3f:e7:06:21:7f:bf:77:f4:
64:18:b2:4e:5b:c8:3c:99:8f:cb:d6:78:ef:09:9b:21:23:53:
8b:ad:44:45:df:4e:4e:ce:f0:07:e4:a9:5a:ac:e8:ba:87:d2:
12:dc:df:d8
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYlqC9KmmTI7h0HMQXkdz2oeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkYjdhYWM3YzQ5M2JjOGFhN2VjNzA1OWQzZWM3NmJiZmMy
ZjIzZDgwHhcNMjMwNzE4MTcyODI2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMzM2MTc3MTY5ZTVlYTQzYzAzZWZjYzgxMTQ5NWU0MTA0M2MxNGVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFjdTxESMsw7kTA/32GJ5vKEccCE
+UFgpDpKDa2dxl0iXSN4mbbiDyOIWjFi9PHUdyWVQ+6bM31TLrNudrM6r7BhTW6J
Znve6yrS/1+63FpwhPrlN/OZHt4SNyfW3ybxZcFTM7qH0EhhiEjeQMB9JAUigWda
GNPEIlRZv6NKYvI0cmtTftrEfs/Lcbw0mw0t3adyc4Aedasp2Er1xJm4ckhq/Nio
ktEydkPKSepk+PV1FtvHNbqHnXXE7D2ztcTuWuIxHE47Xb892woh15NZPdTplxm2
gHIbvQyV6V78KoS+MY0ZVE2NA2Ae48DL2bL1aeGvdwMPzjbn5p5VtfPwxQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFPM2F3Fp5epDwD78yBFJXkEEPBTvMB8GA1UdIwQY
MBaAFL23qsfEk7yKp+xwWdPsdrv8LyPYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmJlcXg4U1R2SXFuN0hCWjAteDJ1X3d2STlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9jMDA5ODktZjY1NC00N2M0LWJiMDkt
Njk3YzBlMmMzZDM1LzEvOHpZWGNXbmw2a1BBUHZ6SUVVbGVRUVE4Rk84LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS9jMDA5ODktZjY1NC00N2M0LWJiMDktNjk3YzBlMmMzZDM1
LzEvdmJlcXg4U1R2SXFuN0hCWjAteDJ1X3d2STlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDJZgwAwQC
1KKcMA0EAgACMAcDBQMqCdgAMA0GCSqGSIb3DQEBCwUAA4IBAQARA5H/UlTACu+0
e+86J7WpKcPFceksHyx4eFbA2PHaIQFbCN0oKNdrrkqXgRB3Ep0MlPfuOfHX2kKd
y1+72eLqlyWFl/2S+iuQGGHE1kSqDANQUaPY3PhZZ4a3tB6UROgydQEbOC5MqVKz
Yhiu9tsLRjoIY2qGnz2Cpcc72T4YKK8oOr6Bvs8WKFJIAYk/uB7NNgK5FyrbYldX
qF6TsARBoy4A0aQSeBEmU8v1k3MRf4xTBc97xw/kVAOOtJXp4XbgBnmqBBveJHfk
/NAEatBLP+cGIX+/d/RkGLJOW8g8mY/L1njvCZshI1OLrURF305OzvAH5KlarOi6
h9IS3N/Y
-----END CERTIFICATE-----
Generated at Mon Jan 1 13:10:44 2024 by rpki-client on console-ams.rpki-client.org