Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/3BacBq57m0CxKFmm_rlMuLxippk.roa
File: 3BacBq57m0CxKFmm_rlMuLxippk.roa (raw, json)
Hash identifier: 8s721aLCeQiftw2ZjlFHtouiUxmzVmy0plodw6AXEvo=
Subject key identifier: DC:16:9C:06:AE:7B:9B:40:B1:28:59:A6:FE:B9:4C:B8:BC:62:A6:99
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 01857039A2501073A7E7C4A882804BCC31DC
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/3BacBq57m0CxKFmm_rlMuLxippk.roa
Signing time: Mon 02 Jan 2023 02:05:03 +0000
ROA not before: Mon 02 Jan 2023 02:05:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35478
IP address blocks: 195.252.180.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:39:a2:50:10:73:a7:e7:c4:a8:82:80:4b:cc:31:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Jan 2 02:05:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dc169c06ae7b9b40b12859a6feb94cb8bc62a699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:69:c3:a6:1d:5b:62:70:b9:61:90:c8:b4:b6:
85:f5:f4:88:55:e6:05:8f:ae:e7:11:f1:5a:ec:12:
67:8d:9a:37:94:fa:13:3c:fe:41:24:61:5e:c1:59:
88:41:08:3c:f4:ca:89:fd:d0:a9:31:93:d0:d6:0e:
b0:52:02:2f:9a:cc:d4:2c:a6:69:6e:ff:55:2c:f1:
2e:03:c9:19:67:9a:dd:9b:77:3b:9b:3d:03:37:e6:
31:fb:c3:e9:17:db:18:a8:3f:a8:b5:9e:52:f2:e5:
3d:46:0e:4f:19:fe:84:73:7b:ea:d9:bb:d8:5e:5a:
8b:87:62:36:88:e4:fe:eb:2a:c7:1b:0e:68:1a:e7:
a1:ff:ba:b3:da:d3:35:4c:91:13:48:dd:96:17:09:
04:2c:e7:d5:7d:d5:13:2d:bc:72:4c:57:1d:ab:b8:
ca:b6:5f:6c:d4:aa:88:a8:dd:4e:86:9f:33:46:13:
b0:7b:00:0b:2f:f7:2a:f0:cb:e2:23:9a:26:80:00:
a1:11:8c:83:67:fc:7d:6a:c7:6e:85:4a:84:c0:b8:
51:44:db:c4:24:ec:23:6d:97:2a:b1:81:5b:30:73:
93:6b:16:07:4a:17:6e:16:00:b7:e3:76:ad:2f:02:
25:65:91:75:15:a1:95:3b:b5:82:12:f3:7a:9c:cf:
d2:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:16:9C:06:AE:7B:9B:40:B1:28:59:A6:FE:B9:4C:B8:BC:62:A6:99
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/3BacBq57m0CxKFmm_rlMuLxippk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.252.180.0/22
Signature Algorithm: sha256WithRSAEncryption
87:34:01:f3:9c:1f:67:c4:bb:b8:91:e3:34:cb:bc:e8:82:95:
c9:51:b6:41:7d:4e:e3:a7:d8:a4:be:fd:f3:7c:bf:82:fc:3e:
b0:94:b2:3a:c8:d1:a9:5d:d5:bd:e9:21:8a:cd:46:a3:b0:01:
6b:e3:cd:df:85:eb:10:5b:21:11:04:31:b6:a3:93:56:08:87:
9e:29:01:15:ac:c6:a1:be:fb:83:a4:30:ae:f0:a7:dc:b3:de:
6a:36:97:a4:31:99:9a:5b:82:e4:5b:0c:34:b3:4c:83:62:68:
da:e8:31:78:2c:8d:e2:97:18:f1:18:fd:78:e5:7b:e0:5e:98:
59:b6:d8:41:07:75:1e:5c:64:7f:01:04:c3:c6:fd:cc:e0:10:
65:3c:d2:3f:ec:72:ac:59:1d:0f:d1:11:15:22:69:3a:f9:0a:
76:42:2b:e8:5b:46:ab:59:98:51:1a:8a:39:d4:5a:35:88:3e:
67:55:68:95:1c:78:31:2b:a7:6a:36:89:64:6c:76:cc:bd:30:
6b:bb:f1:eb:c4:49:86:7d:d2:f2:ae:c7:a1:a4:44:fc:7b:0f:
e1:77:82:34:11:83:f8:13:7f:be:b7:cb:32:29:86:a3:45:96:
9d:74:46:39:71:2f:4f:ed:5c:bd:12:cd:b1:eb:d0:67:35:ed:
82:8b:05:44
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwOaJQEHOn58SogoBLzDHcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3NDcwMTc1NjRjNzExYmNiZDU3NjgwYTBkZmQwMGYyYTVk
MDk5ZGIwHhcNMjMwMTAyMDIwNTAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYzE2OWMwNmFlN2I5YjQwYjEyODU5YTZmZWI5NGNiOGJjNjJhNjk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2nDph1bYnC5YZDItLaF9fSIVeYF
j67nEfFa7BJnjZo3lPoTPP5BJGFewVmIQQg89MqJ/dCpMZPQ1g6wUgIvmszULKZp
bv9VLPEuA8kZZ5rdm3c7mz0DN+Yx+8PpF9sYqD+otZ5S8uU9Rg5PGf6Ec3vq2bvY
XlqLh2I2iOT+6yrHGw5oGueh/7qz2tM1TJETSN2WFwkELOfVfdUTLbxyTFcdq7jK
tl9s1KqIqN1Ohp8zRhOwewALL/cq8MviI5omgAChEYyDZ/x9asduhUqEwLhRRNvE
JOwjbZcqsYFbMHOTaxYHShduFgC343atLwIlZZF1FaGVO7WCEvN6nM/SyQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNwWnAaue5tAsShZpv65TLi8YqaZMB8GA1UdIwQY
MBaAFNdHAXVkxxG8vVdoCg39APKl0JnbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTBjQmRXVEhFYnk5VjJnS0RmMEE4cVhRbWRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9iYTIzNjItMGNjNS00OWJkLWE1MjIt
NGYwZThjZTExYTdkLzEvM0JhY0JxNTdtMEN4S0ZtbV9ybE11THhpcHBrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9iYTIzNjItMGNjNS00OWJkLWE1MjItNGYwZThjZTExYTdk
LzEvMTBjQmRXVEhFYnk5VjJnS0RmMEE4cVhRbWRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCw/y0MA0G
CSqGSIb3DQEBCwUAA4IBAQCHNAHznB9nxLu4keM0y7zogpXJUbZBfU7jp9ikvv3z
fL+C/D6wlLI6yNGpXdW96SGKzUajsAFr483fhesQWyERBDG2o5NWCIeeKQEVrMah
vvuDpDCu8Kfcs95qNpekMZmaW4LkWww0s0yDYmja6DF4LI3ilxjxGP145XvgXphZ
tthBB3UeXGR/AQTDxv3M4BBlPNI/7HKsWR0P0REVImk6+Qp2QivoW0arWZhRGoo5
1Fo1iD5nVWiVHHgxK6dqNolkbHbMvTBru/HrxEmGfdLyrsehpET8ew/hd4I0EYP4
E3++t8syKYajRZaddEY5cS9P7Vy9Es2x69BnNe2CiwVE
-----END CERTIFICATE-----
Generated at Mon Jul 31 10:45:53 2023 by rpki-client on console-fra.rpki-client.org