Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/957bb3-2de5-45cf-acf3-c3a02d7c0697/1/AtvFCfR48tMtZa5c6JSEnFc5I8Y.roa
File: AtvFCfR48tMtZa5c6JSEnFc5I8Y.roa (raw, json)
Hash identifier: WIUZTkxl9qlrYhjChLkgu5fP/InmAij/6GVH4yfjHaw=
Subject key identifier: 02:DB:C5:09:F4:78:F2:D3:2D:65:AE:5C:E8:94:84:9C:57:39:23:C6
Certificate issuer: /CN=8756d27768e11d94a0bbcdfb3fbcd740d45a00f4
Certificate serial: 018BFE08A63A49BEF23E2FE4C2C68DDB224E
Authority key identifier: 87:56:D2:77:68:E1:1D:94:A0:BB:CD:FB:3F:BC:D7:40:D4:5A:00:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h1bSd2jhHZSgu837P7zXQNRaAPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/957bb3-2de5-45cf-acf3-c3a02d7c0697/1/AtvFCfR48tMtZa5c6JSEnFc5I8Y.roa
Signing time: Thu 23 Nov 2023 21:14:21 +0000
ROA not before: Thu 23 Nov 2023 21:14:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16589
IP address blocks: 82.146.16.0/22 maxlen: 24
84.238.132.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:fe:08:a6:3a:49:be:f2:3e:2f:e4:c2:c6:8d:db:22:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8756d27768e11d94a0bbcdfb3fbcd740d45a00f4
Validity
Not Before: Nov 23 21:14:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=02dbc509f478f2d32d65ae5ce894849c573923c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ab:65:4a:e5:84:7d:c2:13:a2:15:43:cb:33:
89:f3:d3:eb:c3:87:93:ac:7c:d2:27:e2:2f:6f:46:
7f:4c:80:98:53:77:a9:b3:86:62:55:a5:e8:4c:ae:
c0:39:30:40:7d:b4:d9:5f:c4:cd:2d:8f:33:9f:d6:
4e:c1:52:6a:1b:86:e1:49:28:6e:ec:68:a5:4f:41:
2e:80:76:1c:7b:78:9b:b2:ee:27:4a:f4:07:73:1d:
c3:78:57:8b:1d:80:3b:85:7c:bc:f9:ab:d5:f6:69:
e7:c9:98:cd:4f:ef:23:0d:a3:b8:e8:7b:95:81:9f:
25:27:a0:20:2e:25:2c:72:2f:a3:fb:dc:bb:71:6a:
8f:b4:85:c5:dd:9b:6f:fe:7d:3c:f1:39:fe:23:84:
59:16:31:43:8a:f3:d0:7a:17:9f:6c:d4:45:79:9b:
c3:af:c0:89:64:36:95:58:64:45:33:16:ab:39:f1:
d1:a4:05:fd:2d:74:cd:ba:4c:f9:8a:ef:7b:04:97:
a0:c3:47:8b:19:00:de:7a:f9:ec:ee:bc:2e:02:fe:
37:30:c0:4d:c5:52:f4:d6:a0:9d:cd:29:4f:5e:9f:
38:82:14:bf:c1:c0:5f:a6:28:75:2e:23:a2:b3:43:
1c:a1:7b:99:b7:cf:0a:6e:ef:ac:fb:3a:3a:c4:f9:
9b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:DB:C5:09:F4:78:F2:D3:2D:65:AE:5C:E8:94:84:9C:57:39:23:C6
X509v3 Authority Key Identifier:
keyid:87:56:D2:77:68:E1:1D:94:A0:BB:CD:FB:3F:BC:D7:40:D4:5A:00:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h1bSd2jhHZSgu837P7zXQNRaAPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/957bb3-2de5-45cf-acf3-c3a02d7c0697/1/AtvFCfR48tMtZa5c6JSEnFc5I8Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/957bb3-2de5-45cf-acf3-c3a02d7c0697/1/h1bSd2jhHZSgu837P7zXQNRaAPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.146.16.0/22
84.238.132.0/23
Signature Algorithm: sha256WithRSAEncryption
18:4a:87:c8:13:e8:7a:a2:c4:f0:31:2b:b0:d6:bc:f9:fa:e7:
c0:93:6f:f5:70:8d:c0:8f:1d:cc:78:1c:af:ca:cd:f1:11:7f:
03:91:a8:d1:ff:80:9b:4e:13:77:64:73:d6:2c:55:7b:e7:71:
ec:e6:13:c2:dc:bf:45:55:a2:5d:23:53:3d:54:fc:62:a0:a3:
2e:13:f4:e7:90:86:f4:ba:00:aa:3a:fd:f2:9a:e0:67:40:e5:
79:a9:52:1a:5e:da:9d:9a:d5:24:a1:c5:57:38:17:c8:69:8c:
b0:0c:39:84:ea:fe:02:73:dc:a6:24:f4:76:18:62:6c:61:5f:
a3:bb:c5:1a:9b:79:88:bc:c1:05:a1:0e:d7:a0:1f:e1:c1:24:
ab:6b:68:4b:d8:eb:cf:58:e1:2c:b6:f3:0b:70:69:24:ca:30:
06:f2:f3:88:71:c7:ff:7e:ff:f1:53:72:ab:2f:19:11:90:71:
fd:f3:cf:5d:a6:94:64:58:da:e4:4e:02:a0:0b:ee:1b:ae:45:
65:29:16:71:86:a3:c4:9f:3a:1d:b2:59:a2:4a:32:40:58:5d:
60:93:85:9d:8a:e7:75:13:1e:0e:70:ec:53:33:f1:c2:78:02:
85:00:1b:0e:58:a6:89:1e:fb:63:b4:04:9c:2e:39:7f:d1:1a:
a4:93:4b:16
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYv+CKY6Sb7yPi/kwsaN2yJOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3NTZkMjc3NjhlMTFkOTRhMGJiY2RmYjNmYmNkNzQwZDQ1
YTAwZjQwHhcNMjMxMTIzMjExNDIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMmRiYzUwOWY0NzhmMmQzMmQ2NWFlNWNlODk0ODQ5YzU3MzkyM2M2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6tlSuWEfcITohVDyzOJ89Prw4eT
rHzSJ+Ivb0Z/TICYU3eps4ZiVaXoTK7AOTBAfbTZX8TNLY8zn9ZOwVJqG4bhSShu
7GilT0EugHYce3ibsu4nSvQHcx3DeFeLHYA7hXy8+avV9mnnyZjNT+8jDaO46HuV
gZ8lJ6AgLiUsci+j+9y7cWqPtIXF3Ztv/n088Tn+I4RZFjFDivPQehefbNRFeZvD
r8CJZDaVWGRFMxarOfHRpAX9LXTNukz5iu97BJegw0eLGQDeevns7rwuAv43MMBN
xVL01qCdzSlPXp84ghS/wcBfpih1LiOis0McoXuZt88Kbu+s+zo6xPmbgQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFALbxQn0ePLTLWWuXOiUhJxXOSPGMB8GA1UdIwQY
MBaAFIdW0ndo4R2UoLvN+z+810DUWgD0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDFiU2QyamhIWlNndTgzN1A3elhRTlJhQVBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi85NTdiYjMtMmRlNS00NWNmLWFjZjMt
YzNhMDJkN2MwNjk3LzEvQXR2RkNmUjQ4dE10WmE1YzZKU0VuRmM1SThZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi85NTdiYjMtMmRlNS00NWNmLWFjZjMtYzNhMDJkN2MwNjk3
LzEvaDFiU2QyamhIWlNndTgzN1A3elhRTlJhQVBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCUpIQAwQB
VO6EMA0GCSqGSIb3DQEBCwUAA4IBAQAYSofIE+h6osTwMSuw1rz5+ufAk2/1cI3A
jx3MeByvys3xEX8DkajR/4CbThN3ZHPWLFV753Hs5hPC3L9FVaJdI1M9VPxioKMu
E/TnkIb0ugCqOv3ymuBnQOV5qVIaXtqdmtUkocVXOBfIaYywDDmE6v4Cc9ymJPR2
GGJsYV+ju8Uam3mIvMEFoQ7XoB/hwSSra2hL2OvPWOEstvMLcGkkyjAG8vOIccf/
fv/xU3KrLxkRkHH9889dppRkWNrkTgKgC+4brkVlKRZxhqPEnzodslmiSjJAWF1g
k4Wdiud1Ex4OcOxTM/HCeAKFABsOWKaJHvtjtAScLjl/0Rqkk0sW
-----END CERTIFICATE-----
Generated at Fri Dec 1 17:15:23 2023 by rpki-client on console-ams.rpki-client.org