Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/08e15b-4a24-4ce0-9454-f87a322a7776/1/7tfPBp3YTLXT5ns3IR919ENDWyw.roa
File: 7tfPBp3YTLXT5ns3IR919ENDWyw.roa (raw, json)
Hash identifier: iavsSMmR78i/vxj64TH6B0hek9syjw0KhWPGj+au4r4=
Subject key identifier: EE:D7:CF:06:9D:D8:4C:B5:D3:E6:7B:37:21:1F:75:F4:43:43:5B:2C
Certificate issuer: /CN=1bd21dfb24f7d8ce2311ba4076775474bd50be64
Certificate serial: 01884917ECDCCD495D6E64AD1A463C065787
Authority key identifier: 1B:D2:1D:FB:24:F7:D8:CE:23:11:BA:40:76:77:54:74:BD:50:BE:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G9Id-yT32M4jEbpAdndUdL1QvmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/08e15b-4a24-4ce0-9454-f87a322a7776/1/7tfPBp3YTLXT5ns3IR919ENDWyw.roa
Signing time: Tue 23 May 2023 14:51:24 +0000
ROA not before: Tue 23 May 2023 14:51:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7155
IP address blocks: 185.17.44.0/22 maxlen: 22
130.255.20.0/24 maxlen: 24
130.255.27.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:49:17:ec:dc:cd:49:5d:6e:64:ad:1a:46:3c:06:57:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bd21dfb24f7d8ce2311ba4076775474bd50be64
Validity
Not Before: May 23 14:51:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eed7cf069dd84cb5d3e67b37211f75f443435b2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:18:1b:76:90:a1:90:0e:4e:d1:7a:1a:85:cc:
97:44:46:69:cf:a2:fd:0a:b1:fa:83:69:d4:32:54:
6c:25:73:44:4a:23:80:bb:d3:4c:e3:81:99:db:d4:
2e:bb:18:71:08:a1:d1:a8:12:7f:2b:a9:82:6e:88:
55:62:1f:ad:d1:e0:4c:49:58:ef:5c:77:18:64:35:
59:09:1a:52:ac:68:0d:6f:bb:97:44:af:1a:f3:f1:
3c:78:5e:b1:2b:29:1d:0d:02:2a:82:fd:c3:77:3c:
f2:15:bb:db:97:16:e1:d9:b7:61:af:09:0c:1d:1c:
fd:5e:bd:88:39:f1:e5:fa:80:29:b5:c5:01:a4:74:
e3:91:bd:f1:9e:5b:c3:0e:b3:77:be:b4:14:b3:13:
ed:7e:64:e0:44:db:78:f3:57:ed:25:47:86:27:a4:
3e:fb:83:08:92:65:19:cb:11:d2:09:d9:19:7d:36:
5e:64:5c:8a:ad:7d:a2:4c:20:ce:3a:38:52:06:4c:
11:2a:42:01:e5:98:62:aa:25:77:80:af:66:a6:fc:
df:4e:09:96:69:ca:5f:73:7e:77:e8:c4:9d:c6:f2:
e6:b8:50:b7:cc:34:cd:1d:10:69:38:1e:0e:6f:be:
34:66:3a:d5:81:55:8c:a6:6a:43:31:0d:a4:da:63:
a5:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:D7:CF:06:9D:D8:4C:B5:D3:E6:7B:37:21:1F:75:F4:43:43:5B:2C
X509v3 Authority Key Identifier:
keyid:1B:D2:1D:FB:24:F7:D8:CE:23:11:BA:40:76:77:54:74:BD:50:BE:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G9Id-yT32M4jEbpAdndUdL1QvmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/08e15b-4a24-4ce0-9454-f87a322a7776/1/7tfPBp3YTLXT5ns3IR919ENDWyw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/08e15b-4a24-4ce0-9454-f87a322a7776/1/G9Id-yT32M4jEbpAdndUdL1QvmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.255.20.0/24
130.255.27.0/24
185.17.44.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:a1:f2:0c:8f:0d:f8:ec:82:28:7c:ef:4b:33:1c:80:67:ed:
3a:ce:a6:02:4c:da:e2:7d:9c:ae:98:2a:95:2e:c2:1b:f3:00:
5a:67:d3:ba:05:30:d4:b9:c6:44:48:9d:8d:4f:3d:2d:a8:7b:
54:53:11:07:96:83:33:2b:45:d7:f5:7f:3b:87:62:1c:a8:31:
1c:69:08:55:91:f3:dd:52:b6:e3:2b:a4:53:43:eb:57:db:6b:
43:1e:c9:27:cb:8a:e7:73:af:4d:d6:95:0c:97:af:b3:42:2d:
06:7b:e2:9f:13:b5:6b:32:38:a0:25:7f:e7:19:e7:a2:96:2b:
ce:4b:b5:df:88:dc:8f:02:10:c0:6f:c4:b6:45:95:a5:af:30:
5c:bb:f6:4f:85:83:35:f4:70:5b:5c:9f:74:82:72:3b:d5:8a:
8f:44:d3:6e:df:64:db:1f:36:01:5e:f8:e5:9a:e3:6a:b6:68:
52:6d:67:40:ed:40:21:fc:a0:30:61:7b:fa:e1:72:02:be:4e:
f7:3e:92:57:ba:3e:fe:16:3a:bd:b8:17:8b:cf:6b:3f:b0:6f:
87:9a:50:ca:d6:03:0a:0a:2c:ce:22:3a:4b:56:9f:53:e2:38:
c7:e8:fa:c6:6d:7a:78:8e:e8:c5:44:d4:08:87:f5:d2:47:69:
57:ac:0d:2d
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYhJF+zczUldbmStGkY8BleHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiZDIxZGZiMjRmN2Q4Y2UyMzExYmE0MDc2Nzc1NDc0YmQ1
MGJlNjQwHhcNMjMwNTIzMTQ1MTI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZWQ3Y2YwNjlkZDg0Y2I1ZDNlNjdiMzcyMTFmNzVmNDQzNDM1YjJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiBgbdpChkA5O0XoahcyXREZpz6L9
CrH6g2nUMlRsJXNESiOAu9NM44GZ29QuuxhxCKHRqBJ/K6mCbohVYh+t0eBMSVjv
XHcYZDVZCRpSrGgNb7uXRK8a8/E8eF6xKykdDQIqgv3DdzzyFbvblxbh2bdhrwkM
HRz9Xr2IOfHl+oAptcUBpHTjkb3xnlvDDrN3vrQUsxPtfmTgRNt481ftJUeGJ6Q+
+4MIkmUZyxHSCdkZfTZeZFyKrX2iTCDOOjhSBkwRKkIB5ZhiqiV3gK9mpvzfTgmW
acpfc3536MSdxvLmuFC3zDTNHRBpOB4Ob740ZjrVgVWMpmpDMQ2k2mOl4wIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFO7Xzwad2Ey10+Z7NyEfdfRDQ1ssMB8GA1UdIwQY
MBaAFBvSHfsk99jOIxG6QHZ3VHS9UL5kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzlJZC15VDMyTTRqRWJwQWRuZFVkTDFRdm1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8wOGUxNWItNGEyNC00Y2UwLTk0NTQt
Zjg3YTMyMmE3Nzc2LzEvN3RmUEJwM1lUTFhUNW5zM0lSOTE5RU5EV3l3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi8wOGUxNWItNGEyNC00Y2UwLTk0NTQtZjg3YTMyMmE3Nzc2
LzEvRzlJZC15VDMyTTRqRWJwQWRuZFVkTDFRdm1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAgv8UAwQA
gv8bAwQCuREsMA0GCSqGSIb3DQEBCwUAA4IBAQB6ofIMjw347IIofO9LMxyAZ+06
zqYCTNrifZyumCqVLsIb8wBaZ9O6BTDUucZESJ2NTz0tqHtUUxEHloMzK0XX9X87
h2IcqDEcaQhVkfPdUrbjK6RTQ+tX22tDHskny4rnc69N1pUMl6+zQi0Ge+KfE7Vr
MjigJX/nGeeilivOS7XfiNyPAhDAb8S2RZWlrzBcu/ZPhYM19HBbXJ90gnI71YqP
RNNu32TbHzYBXvjlmuNqtmhSbWdA7UAh/KAwYXv64XICvk73PpJXuj7+Fjq9uBeL
z2s/sG+HmlDK1gMKCizOIjpLVp9T4jjH6PrGbXp4jujFRNQIh/XSR2lXrA0t
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:02 2023 by rpki-client on console-ams.rpki-client.org