Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/635511-71f3-4f57-9139-7da3cd253bf6/1/2dzDO9cMRylzNEUSHsXG1iSXD9U.roa
File: 2dzDO9cMRylzNEUSHsXG1iSXD9U.roa (raw, json)
Hash identifier: yzcGAih06Lpo7XoCcHvYXZpCuvX6sy0fjESIgpCCnlA=
Subject key identifier: D9:DC:C3:3B:D7:0C:47:29:73:34:45:12:1E:C5:C6:D6:24:97:0F:D5
Certificate issuer: /CN=e7478550068bf78220408c25d612bc2fb02460c1
Certificate serial: 018881563A251531FE5E32BE72ADFD0E8B6D
Authority key identifier: E7:47:85:50:06:8B:F7:82:20:40:8C:25:D6:12:BC:2F:B0:24:60:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/50eFUAaL94IgQIwl1hK8L7AkYME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/635511-71f3-4f57-9139-7da3cd253bf6/1/2dzDO9cMRylzNEUSHsXG1iSXD9U.roa
Signing time: Sat 03 Jun 2023 12:58:11 +0000
ROA not before: Sat 03 Jun 2023 12:58:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16253
IP address blocks: 217.142.64.0/18 maxlen: 18
217.142.0.0/18 maxlen: 18
2a03:f0c0::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:81:56:3a:25:15:31:fe:5e:32:be:72:ad:fd:0e:8b:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7478550068bf78220408c25d612bc2fb02460c1
Validity
Not Before: Jun 3 12:58:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d9dcc33bd70c4729733445121ec5c6d624970fd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0f:f7:c6:2e:a4:86:4f:59:9d:6d:e9:f4:be:
86:30:d6:63:44:d5:d9:ee:9d:4f:9c:eb:83:ce:27:
9e:b2:c0:55:22:b8:e1:7b:dd:13:31:11:78:2d:ee:
a5:f0:cf:28:f0:5e:76:e8:67:e0:72:e0:86:8b:a2:
d9:e3:05:dd:ab:78:85:35:38:6c:00:37:18:c2:e5:
aa:1e:f8:8f:c5:35:2e:94:87:63:4a:61:10:b8:17:
c3:9c:8c:c7:93:0f:f0:85:d6:8d:17:06:1b:a2:0f:
30:3d:12:fc:64:ad:c0:cf:5e:ed:ab:dd:01:d3:cf:
5d:f4:1a:1a:8d:0f:bd:b1:cf:a5:dd:8b:b1:4a:a1:
51:4d:5b:08:24:fe:07:39:68:fc:4f:69:66:2d:1b:
51:59:4e:e1:39:a8:d7:54:2d:30:28:d8:47:20:b4:
64:16:92:93:41:f5:4e:7f:6f:a2:02:b7:8b:e3:7d:
97:6f:d9:99:e8:a3:4c:1a:d3:d9:10:75:29:45:c3:
33:7c:81:64:9e:0a:81:3a:8a:64:31:76:a7:3b:31:
85:a6:0c:a1:a3:2f:fc:92:9c:cb:5f:13:d1:da:5c:
83:e5:e9:e0:47:cd:00:52:82:1a:e3:90:8b:99:94:
0e:9c:57:13:3f:da:51:01:3f:c8:df:46:a5:fb:f5:
94:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:DC:C3:3B:D7:0C:47:29:73:34:45:12:1E:C5:C6:D6:24:97:0F:D5
X509v3 Authority Key Identifier:
keyid:E7:47:85:50:06:8B:F7:82:20:40:8C:25:D6:12:BC:2F:B0:24:60:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/50eFUAaL94IgQIwl1hK8L7AkYME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/635511-71f3-4f57-9139-7da3cd253bf6/1/2dzDO9cMRylzNEUSHsXG1iSXD9U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/635511-71f3-4f57-9139-7da3cd253bf6/1/50eFUAaL94IgQIwl1hK8L7AkYME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.142.0.0/17
IPv6:
2a03:f0c0::/32
Signature Algorithm: sha256WithRSAEncryption
38:4c:46:d7:41:89:85:13:ba:6d:84:7d:2d:95:b0:11:a7:fb:
3c:2d:65:76:2c:06:72:d7:b6:dd:58:65:7e:b9:ad:f5:93:6f:
e3:f4:0b:2b:35:b8:cb:6f:64:9e:71:e4:91:50:e0:70:1e:47:
80:17:41:a3:3a:00:8b:07:80:c2:96:44:23:fb:da:0a:ff:0c:
22:a2:26:70:94:8d:93:da:aa:f0:90:47:e7:1d:17:14:76:03:
58:34:40:0d:08:55:23:11:ea:b4:f8:d9:38:ef:6f:c8:48:94:
da:81:27:6e:54:ed:77:e4:2d:ed:cd:16:73:11:4f:b0:55:5c:
7a:a9:77:cd:5e:5a:8d:7e:10:f4:79:cd:bf:1e:a8:db:de:e2:
8e:31:3e:18:c4:e9:82:a0:e2:56:fe:14:b1:f3:6f:4a:de:e5:
cc:a2:e8:78:ea:e0:dc:65:2c:a3:af:9f:b0:35:64:0a:4f:71:
e3:99:e2:35:ef:34:7d:f9:d0:45:6e:de:eb:22:e1:27:40:4a:
70:98:f1:88:ce:40:05:c3:88:21:11:86:d0:d2:3f:92:9e:e0:
85:7b:cc:d4:7f:36:a8:fc:8d:18:2a:14:73:0d:a1:ad:e8:fa:
0f:2a:40:a0:c6:2d:46:70:d3:aa:d1:f5:81:83:cb:c9:bb:26:
89:8e:f2:49
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYiBVjolFTH+XjK+cq39DottMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3NDc4NTUwMDY4YmY3ODIyMDQwOGMyNWQ2MTJiYzJmYjAy
NDYwYzEwHhcNMjMwNjAzMTI1ODExWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOWRjYzMzYmQ3MGM0NzI5NzMzNDQ1MTIxZWM1YzZkNjI0OTcwZmQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArw/3xi6khk9ZnW3p9L6GMNZjRNXZ
7p1PnOuDzieessBVIrjhe90TMRF4Le6l8M8o8F526GfgcuCGi6LZ4wXdq3iFNThs
ADcYwuWqHviPxTUulIdjSmEQuBfDnIzHkw/whdaNFwYbog8wPRL8ZK3Az17tq90B
089d9BoajQ+9sc+l3YuxSqFRTVsIJP4HOWj8T2lmLRtRWU7hOajXVC0wKNhHILRk
FpKTQfVOf2+iAreL432Xb9mZ6KNMGtPZEHUpRcMzfIFkngqBOopkMXanOzGFpgyh
oy/8kpzLXxPR2lyD5engR80AUoIa45CLmZQOnFcTP9pRAT/I30al+/WU+wIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFNncwzvXDEcpczRFEh7FxtYklw/VMB8GA1UdIwQY
MBaAFOdHhVAGi/eCIECMJdYSvC+wJGDBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTBlRlVBYUw5NElnUUl3bDFoSzhMN0FrWU1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi82MzU1MTEtNzFmMy00ZjU3LTkxMzkt
N2RhM2NkMjUzYmY2LzEvMmR6RE85Y01SeWx6TkVVU0hzWEcxaVNYRDlVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi82MzU1MTEtNzFmMy00ZjU3LTkxMzktN2RhM2NkMjUzYmY2
LzEvNTBlRlVBYUw5NElnUUl3bDFoSzhMN0FrWU1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQH2Y4AMA0E
AgACMAcDBQAqA/DAMA0GCSqGSIb3DQEBCwUAA4IBAQA4TEbXQYmFE7pthH0tlbAR
p/s8LWV2LAZy17bdWGV+ua31k2/j9AsrNbjLb2SeceSRUOBwHkeAF0GjOgCLB4DC
lkQj+9oK/wwioiZwlI2T2qrwkEfnHRcUdgNYNEANCFUjEeq0+Nk472/ISJTagSdu
VO135C3tzRZzEU+wVVx6qXfNXlqNfhD0ec2/Hqjb3uKOMT4YxOmCoOJW/hSx829K
3uXMouh46uDcZSyjr5+wNWQKT3HjmeI17zR9+dBFbt7rIuEnQEpwmPGIzkAFw4gh
EYbQ0j+SnuCFe8zUfzao/I0YKhRzDaGt6PoPKkCgxi1GcNOq0fWBg8vJuyaJjvJJ
-----END CERTIFICATE-----
Generated at Mon Aug 28 15:51:20 2023 by rpki-client on console-ams.rpki-client.org