Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/CtKFP4B1foXSSa5iKi7abOCWq7E.roa
File: CtKFP4B1foXSSa5iKi7abOCWq7E.roa (raw, json)
Hash identifier: rC37k8Ebl1nawFboRXpzIN1lCAxwYqoficerTk/lMzU=
Subject key identifier: 0A:D2:85:3F:80:75:7E:85:D2:49:AE:62:2A:2E:DA:6C:E0:96:AB:B1
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 0189AB586E7408D204E10C5D78BFB7F6C02D
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/CtKFP4B1foXSSa5iKi7abOCWq7E.roa
Signing time: Mon 31 Jul 2023 09:47:26 +0000
ROA not before: Mon 31 Jul 2023 09:47:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21700
IP address blocks: 194.195.48.0/20 maxlen: 20
194.233.240.0/20 maxlen: 24
194.195.16.0/20 maxlen: 24
62.138.68.0/22 maxlen: 22
62.138.76.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ab:58:6e:74:08:d2:04:e1:0c:5d:78:bf:b7:f6:c0:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Jul 31 09:47:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0ad2853f80757e85d249ae622a2eda6ce096abb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:39:b0:19:f2:04:70:d2:7a:2e:8f:fb:5a:fa:
55:66:64:16:11:47:2d:75:0d:11:f7:8b:a8:de:22:
4b:15:63:f1:d3:14:38:f6:c1:3f:a4:95:11:7c:86:
6a:23:bb:53:d9:37:87:71:45:c2:62:86:f0:e5:e5:
37:43:17:84:73:09:d0:02:1b:1b:f6:2e:af:2e:b9:
8f:56:aa:cf:92:22:b5:7b:f7:c6:99:33:29:1d:cc:
b0:d0:b8:bb:8d:e1:9e:83:59:1e:2e:24:32:1c:d8:
98:d0:c5:99:bf:b3:18:d3:93:e8:0a:2f:83:59:d7:
8f:39:ad:d6:c3:ca:1f:2f:b7:0f:74:4c:71:74:10:
cb:7b:72:3d:5e:5d:3a:41:4b:38:f5:2c:d8:96:b4:
c0:40:95:18:eb:ff:40:89:28:6a:96:8a:9e:42:69:
96:91:89:ec:33:c9:a8:a6:8f:98:ff:c4:17:b1:5b:
ce:c8:4c:b9:8e:5f:47:e0:58:2e:60:9e:4e:a2:75:
1e:b0:40:9c:cf:28:2e:18:67:1e:d2:a1:83:f4:73:
d7:de:f7:6a:eb:fb:f6:aa:52:3d:25:34:b5:5a:37:
5f:4f:5d:3c:1c:1a:bf:15:ec:b9:b0:7a:87:49:6d:
b4:66:83:ab:33:39:00:c5:e0:c6:a5:18:50:50:ed:
d2:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:D2:85:3F:80:75:7E:85:D2:49:AE:62:2A:2E:DA:6C:E0:96:AB:B1
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/CtKFP4B1foXSSa5iKi7abOCWq7E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.138.68.0/22
62.138.76.0/22
194.195.16.0/20
194.195.48.0/20
194.233.240.0/20
Signature Algorithm: sha256WithRSAEncryption
2a:60:f5:17:99:74:e0:83:84:dd:b2:8f:d9:89:ac:0d:7e:2c:
fb:8b:28:4e:09:bd:1d:14:8e:8f:99:3a:d4:a9:59:89:5f:b2:
e7:40:de:51:d1:8e:01:b7:c9:1b:cc:95:cf:91:5f:95:49:c0:
dc:6f:e0:15:ba:6e:09:91:19:6d:0f:db:c1:3c:43:76:97:d2:
3a:e0:3d:d3:1c:0d:00:53:c5:8f:ed:ed:72:41:d9:e9:ea:c7:
8a:1a:65:a3:17:56:fc:0c:52:1d:d8:6e:cd:27:d3:82:aa:09:
67:80:1c:14:ef:28:61:61:e6:9a:5f:69:d0:ae:71:d2:cb:e3:
93:f1:33:59:bf:02:22:d0:57:3d:59:01:a9:bf:68:5f:9c:3b:
cc:05:04:22:7f:44:18:a0:f1:38:30:41:a4:49:a6:d2:62:f9:
4a:6f:b8:c9:f8:56:20:33:36:66:b9:0e:4d:9f:1c:1f:bc:43:
95:a8:2d:bd:f9:60:a3:4d:5f:e4:27:9f:85:9c:7b:24:b3:6e:
c3:8c:a4:e7:cc:cf:d5:8e:a8:9d:66:8c:82:7f:5b:17:ba:7d:
cc:a5:e7:42:72:73:c5:bf:68:df:df:55:1f:82:0b:5c:cc:2e:
57:aa:bd:c8:60:d7:f8:c5:dd:a5:df:89:76:69:03:68:06:72:
1b:04:27:82
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYmrWG50CNIE4QxdeL+39sAtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3NDcwMTc1NjRjNzExYmNiZDU3NjgwYTBkZmQwMGYyYTVk
MDk5ZGIwHhcNMjMwNzMxMDk0NzI2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYWQyODUzZjgwNzU3ZTg1ZDI0OWFlNjIyYTJlZGE2Y2UwOTZhYmIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDmwGfIEcNJ6Lo/7WvpVZmQWEUct
dQ0R94uo3iJLFWPx0xQ49sE/pJURfIZqI7tT2TeHcUXCYobw5eU3QxeEcwnQAhsb
9i6vLrmPVqrPkiK1e/fGmTMpHcyw0Li7jeGeg1keLiQyHNiY0MWZv7MY05PoCi+D
WdePOa3Ww8ofL7cPdExxdBDLe3I9Xl06QUs49SzYlrTAQJUY6/9AiShqloqeQmmW
kYnsM8mopo+Y/8QXsVvOyEy5jl9H4FguYJ5OonUesECczyguGGce0qGD9HPX3vdq
6/v2qlI9JTS1WjdfT108HBq/Fey5sHqHSW20ZoOrMzkAxeDGpRhQUO3SDQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFArShT+AdX6F0kmuYiou2mzglquxMB8GA1UdIwQY
MBaAFNdHAXVkxxG8vVdoCg39APKl0JnbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTBjQmRXVEhFYnk5VjJnS0RmMEE4cVhRbWRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9iYTIzNjItMGNjNS00OWJkLWE1MjIt
NGYwZThjZTExYTdkLzEvQ3RLRlA0QjFmb1hTU2E1aUtpN2FiT0NXcTdFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9iYTIzNjItMGNjNS00OWJkLWE1MjItNGYwZThjZTExYTdk
LzEvMTBjQmRXVEhFYnk5VjJnS0RmMEE4cVhRbWRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQCPopEAwQC
PopMAwQEwsMQAwQEwsMwAwQEwunwMA0GCSqGSIb3DQEBCwUAA4IBAQAqYPUXmXTg
g4Tdso/ZiawNfiz7iyhOCb0dFI6PmTrUqVmJX7LnQN5R0Y4Bt8kbzJXPkV+VScDc
b+AVum4JkRltD9vBPEN2l9I64D3THA0AU8WP7e1yQdnp6seKGmWjF1b8DFId2G7N
J9OCqglngBwU7yhhYeaaX2nQrnHSy+OT8TNZvwIi0Fc9WQGpv2hfnDvMBQQif0QY
oPE4MEGkSabSYvlKb7jJ+FYgMzZmuQ5NnxwfvEOVqC29+WCjTV/kJ5+FnHsks27D
jKTnzM/VjqidZoyCf1sXun3MpedCcnPFv2jf31UfggtczC5Xqr3IYNf4xd2l34l2
aQNoBnIbBCeC
-----END CERTIFICATE-----
Generated at Thu Oct 5 13:07:23 2023 by rpki-client on console-ams.rpki-client.org