Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/inX_gaUiZbfFmku9TCGdqYwdzo4.roa
File: inX_gaUiZbfFmku9TCGdqYwdzo4.roa (raw, json)
Hash identifier: 1Scfuc+acy+iZDx9qvc5PFKJ6ZCW3Bivu7+N3g2AHEc=
Subject key identifier: 8A:75:FF:81:A5:22:65:B7:C5:9A:4B:BD:4C:21:9D:A9:8C:1D:CE:8E
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 0187473436F8C52207E2AF4EED43B2BEECF6
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/inX_gaUiZbfFmku9TCGdqYwdzo4.roa
Signing time: Mon 03 Apr 2023 13:00:16 +0000
ROA not before: Mon 03 Apr 2023 13:00:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34358
IP address blocks: 85.121.136.0/23 maxlen: 23
217.156.44.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:47:34:36:f8:c5:22:07:e2:af:4e:ed:43:b2:be:ec:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Apr 3 13:00:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8a75ff81a52265b7c59a4bbd4c219da98c1dce8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:28:41:dd:3d:f3:d1:1d:c0:4d:e2:20:a2:d7:
b1:cd:68:55:76:48:59:e3:57:0f:ac:47:53:a7:d7:
a5:8c:83:73:65:5f:56:b0:08:82:19:b1:a8:70:e4:
75:d0:0d:8e:12:be:54:0e:64:f3:6a:9f:28:03:ba:
3b:df:a4:f1:47:57:ff:0c:3e:26:9f:32:e7:c0:ad:
4f:d2:0c:a3:fb:ce:50:e2:ed:6c:11:92:a0:eb:1d:
59:e5:81:32:90:9f:75:39:a9:be:94:dd:f3:88:bd:
22:51:3d:a6:46:a7:78:df:02:04:aa:57:3d:e2:87:
b9:a6:53:3e:6a:82:90:d6:fa:b8:7e:84:38:85:f9:
04:fb:4d:4f:6a:34:bf:0c:46:49:42:70:5d:94:29:
d6:74:40:cd:37:67:b5:07:68:40:0a:69:86:66:33:
2f:05:3b:ef:a4:62:0a:ec:f9:43:56:a9:05:29:af:
e9:6d:df:42:54:85:90:76:d3:01:df:ff:b2:e0:f6:
c4:99:9a:97:dc:36:38:97:9a:04:f0:68:66:22:6e:
3e:7d:98:78:38:d6:9d:73:03:d9:e3:cc:92:6e:bb:
6d:cd:4e:66:c7:3a:ff:6d:ef:ac:c2:ca:1e:f0:ea:
a2:04:04:e4:42:f3:ca:be:87:7f:b9:70:2f:fc:3a:
80:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:75:FF:81:A5:22:65:B7:C5:9A:4B:BD:4C:21:9D:A9:8C:1D:CE:8E
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/inX_gaUiZbfFmku9TCGdqYwdzo4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.121.136.0/23
217.156.44.0/23
Signature Algorithm: sha256WithRSAEncryption
ac:b1:5f:f5:ef:0f:a7:d7:55:bc:71:8e:90:73:22:ed:87:73:
55:1d:2a:75:82:89:20:f2:cc:fa:cf:23:f9:62:44:72:61:a6:
9f:1d:62:53:81:c4:9d:4f:f8:91:11:6d:84:37:17:2d:18:e0:
93:86:78:eb:b0:49:30:e5:bd:07:ac:53:de:fc:6b:b3:a5:88:
ea:50:63:82:8e:b3:5e:90:9d:c9:bd:ae:71:8e:ed:0c:83:15:
10:2e:df:fd:5d:2c:28:49:ba:59:cb:d6:f1:8a:10:a7:8c:54:
c4:45:1b:19:ed:b2:26:bd:3c:51:1b:ca:c4:5d:db:18:9f:d9:
2e:c6:eb:31:15:db:ec:31:2a:71:30:67:f8:38:9f:6d:5f:5e:
4b:af:04:70:ab:2b:1f:f2:55:82:13:7c:a3:51:73:e5:6a:ed:
69:a0:9c:93:89:a2:3e:90:a3:35:81:41:67:fa:6c:b5:32:ae:
86:13:ee:e8:5d:fb:35:6c:fa:57:10:3c:87:e2:27:ae:9f:fd:
a4:48:b5:13:c0:65:5a:cf:db:02:bd:d5:0e:39:a2:3c:bc:64:
85:b0:30:01:6d:41:c4:4a:19:92:65:8f:22:bc:1a:89:07:d1:
db:b3:40:2a:f6:f1:4b:df:6f:ff:c8:29:7b:0a:49:d7:e9:37:
31:5d:77:e7
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYdHNDb4xSIH4q9O7UOyvuz2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh
MTU3MjIwHhcNMjMwNDAzMTMwMDE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YTc1ZmY4MWE1MjI2NWI3YzU5YTRiYmQ0YzIxOWRhOThjMWRjZThlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtihB3T3z0R3ATeIgotexzWhVdkhZ
41cPrEdTp9eljINzZV9WsAiCGbGocOR10A2OEr5UDmTzap8oA7o736TxR1f/DD4m
nzLnwK1P0gyj+85Q4u1sEZKg6x1Z5YEykJ91Oam+lN3ziL0iUT2mRqd43wIEqlc9
4oe5plM+aoKQ1vq4foQ4hfkE+01PajS/DEZJQnBdlCnWdEDNN2e1B2hACmmGZjMv
BTvvpGIK7PlDVqkFKa/pbd9CVIWQdtMB3/+y4PbEmZqX3DY4l5oE8GhmIm4+fZh4
ONadcwPZ48ySbrttzU5mxzr/be+swsoe8OqiBATkQvPKvod/uXAv/DqAEwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFIp1/4GlImW3xZpLvUwhnamMHc6OMB8GA1UdIwQY
MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt
ZjUyYzQ3YzIyNWRiLzEvaW5YX2dhVWlaYmZGbWt1OVRDR2RxWXdkem80LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi
LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBVXmIAwQB
2ZwsMA0GCSqGSIb3DQEBCwUAA4IBAQCssV/17w+n11W8cY6QcyLth3NVHSp1gokg
8sz6zyP5YkRyYaafHWJTgcSdT/iREW2ENxctGOCThnjrsEkw5b0HrFPe/GuzpYjq
UGOCjrNekJ3Jva5xju0MgxUQLt/9XSwoSbpZy9bxihCnjFTERRsZ7bImvTxRG8rE
XdsYn9kuxusxFdvsMSpxMGf4OJ9tX15LrwRwqysf8lWCE3yjUXPlau1poJyTiaI+
kKM1gUFn+my1Mq6GE+7oXfs1bPpXEDyH4ieun/2kSLUTwGVaz9sCvdUOOaI8vGSF
sDABbUHEShmSZY8ivBqJB9Hbs0Aq9vFL32//yCl7CknX6TcxXXfn
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:17 2023 by rpki-client on console-ams.rpki-client.org