Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/c3IUQHkF7iYvTHMOP1ggTE09Zrk.roa
File: c3IUQHkF7iYvTHMOP1ggTE09Zrk.roa (raw, json)
Hash identifier: uvvO3Zzk9ORGtnRfrYetcd4A35h0EWleoaE56ycJfkA=
Subject key identifier: 73:72:14:40:79:05:EE:26:2F:4C:73:0E:3F:58:20:4C:4D:3D:66:B9
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01856F150DEB8544FE4F7B85759870D209B0
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/c3IUQHkF7iYvTHMOP1ggTE09Zrk.roa
Signing time: Sun 01 Jan 2023 20:45:28 +0000
ROA not before: Sun 01 Jan 2023 20:45:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205275
IP address blocks: 81.181.66.0/23 maxlen: 24
194.102.33.0/24 maxlen: 24
81.181.129.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:15:0d:eb:85:44:fe:4f:7b:85:75:98:70:d2:09:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 20:45:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=737214407905ee262f4c730e3f58204c4d3d66b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c2:da:1e:9a:1c:d1:35:50:cc:88:25:35:15:
87:47:dc:df:7e:ba:8b:31:de:ac:8d:16:5a:88:5c:
d4:df:ed:a0:2d:93:09:de:5b:00:98:87:33:2b:a3:
3f:6d:b4:e0:69:d1:ca:f2:4e:bd:96:81:d4:f2:3c:
84:64:c7:e7:83:3f:7b:85:44:30:de:5e:87:4d:c5:
cf:c4:90:ea:f5:0d:6f:6b:6a:f8:6d:94:b6:8b:6a:
07:f7:c7:5e:61:06:62:68:33:58:f7:86:26:5f:7d:
5f:9a:85:4d:4a:93:ce:98:73:ab:88:f5:1d:ed:21:
a0:48:ac:3a:68:06:6f:a7:4f:5a:8d:ef:b3:28:e7:
9e:5f:34:cf:15:ee:ef:ef:9b:19:88:fa:2e:ed:f4:
a3:34:df:2a:f3:f0:3f:09:5b:09:e4:c7:7b:5c:f1:
0e:8a:df:8c:ff:6d:53:39:a9:fa:42:b8:56:67:fd:
14:e6:9c:c7:aa:73:91:40:0b:38:17:44:f3:9a:7a:
1f:f7:f3:b6:58:bd:78:06:36:60:80:2b:1e:38:49:
bf:1d:bf:1d:81:3b:bf:49:3d:a6:10:f6:ed:11:79:
0a:63:e0:de:c7:69:da:a1:24:e1:c3:ad:2a:11:da:
25:60:d6:02:5e:8e:35:0c:cc:4b:b6:b9:75:53:dd:
69:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:72:14:40:79:05:EE:26:2F:4C:73:0E:3F:58:20:4C:4D:3D:66:B9
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/c3IUQHkF7iYvTHMOP1ggTE09Zrk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.181.66.0/23
81.181.129.0/24
194.102.33.0/24
Signature Algorithm: sha256WithRSAEncryption
94:73:bf:e6:c8:00:d7:59:b8:ce:8b:fa:1c:86:b3:86:0c:cb:
df:7a:97:49:4a:97:f1:1d:94:78:6a:7e:d1:bc:23:33:87:d8:
30:da:11:ee:b0:3c:5e:9d:d5:bc:df:5f:af:39:9e:70:36:60:
33:11:9e:b0:93:47:fc:b8:fe:0c:fe:7a:92:5c:71:42:2d:15:
68:e9:c1:af:b2:b8:6f:3f:5b:55:1e:bc:6f:87:60:e8:e2:ab:
6e:d3:fb:b1:e1:34:44:be:b4:9a:99:6e:f6:59:9c:03:85:ff:
59:d0:be:94:76:f1:59:a7:f5:7c:93:8a:b4:a6:73:c4:dd:95:
44:a7:7e:ca:10:c6:0b:cf:bd:0c:89:38:31:e9:f1:4d:e9:2f:
25:03:85:f1:cd:89:98:5e:9d:e8:5a:98:12:53:00:54:2c:db:
9a:7e:5b:5d:33:fc:69:22:d2:62:34:51:06:89:53:5a:43:0e:
47:0f:66:bc:87:7b:d0:b9:84:94:fc:60:07:cf:6e:f3:9c:7a:
14:79:0c:00:7f:e1:8b:0c:f3:32:76:80:6f:10:9e:35:7e:de:
da:3d:1f:47:05:84:3b:fb:e1:d2:2e:22:c4:b5:69:55:1a:58:
da:3f:18:26:e6:d4:55:80:b5:5c:57:90:38:90:1f:da:f5:64:
cc:68:bf:39
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYVvFQ3rhUT+T3uFdZhw0gmwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh
MTU3MjIwHhcNMjMwMTAxMjA0NTI4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MzcyMTQ0MDc5MDVlZTI2MmY0YzczMGUzZjU4MjA0YzRkM2Q2NmI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAksLaHpoc0TVQzIglNRWHR9zffrqL
Md6sjRZaiFzU3+2gLZMJ3lsAmIczK6M/bbTgadHK8k69loHU8jyEZMfngz97hUQw
3l6HTcXPxJDq9Q1va2r4bZS2i2oH98deYQZiaDNY94YmX31fmoVNSpPOmHOriPUd
7SGgSKw6aAZvp09aje+zKOeeXzTPFe7v75sZiPou7fSjNN8q8/A/CVsJ5Md7XPEO
it+M/21TOan6QrhWZ/0U5pzHqnORQAs4F0Tzmnof9/O2WL14BjZggCseOEm/Hb8d
gTu/ST2mEPbtEXkKY+Dex2naoSThw60qEdolYNYCXo41DMxLtrl1U91pxQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFHNyFEB5Be4mL0xzDj9YIExNPWa5MB8GA1UdIwQY
MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt
ZjUyYzQ3YzIyNWRiLzEvYzNJVVFIa0Y3aVl2VEhNT1AxZ2dURTA5WnJrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi
LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBUbVCAwQA
UbWBAwQAwmYhMA0GCSqGSIb3DQEBCwUAA4IBAQCUc7/myADXWbjOi/ochrOGDMvf
epdJSpfxHZR4an7RvCMzh9gw2hHusDxendW831+vOZ5wNmAzEZ6wk0f8uP4M/nqS
XHFCLRVo6cGvsrhvP1tVHrxvh2Do4qtu0/ux4TREvrSamW72WZwDhf9Z0L6UdvFZ
p/V8k4q0pnPE3ZVEp37KEMYLz70MiTgx6fFN6S8lA4XxzYmYXp3oWpgSUwBULNua
fltdM/xpItJiNFEGiVNaQw5HD2a8h3vQuYSU/GAHz27znHoUeQwAf+GLDPMydoBv
EJ41ft7aPR9HBYQ7++HSLiLEtWlVGljaPxgm5tRVgLVcV5A4kB/a9WTMaL85
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:16 2023 by rpki-client on console-ams.rpki-client.org