Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/3b5110-5167-48e0-8597-61d7333f8570/1/BDJLuHOeLhurBQsTF3cGKNgPr8E.roa
File: BDJLuHOeLhurBQsTF3cGKNgPr8E.roa (raw, json)
Hash identifier: CDrWKfarhpvRQR9WY8REBzYeUWLq8OQ2u+9IeihJ4Jw=
Subject key identifier: 04:32:4B:B8:73:9E:2E:1B:AB:05:0B:13:17:77:06:28:D8:0F:AF:C1
Certificate issuer: /CN=fbcd0233808570e31ffb2fcde1b877071cbc6603
Certificate serial: 01877A40D3DA8AE9498F58B91D7314DB6D55
Authority key identifier: FB:CD:02:33:80:85:70:E3:1F:FB:2F:CD:E1:B8:77:07:1C:BC:66:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/3b5110-5167-48e0-8597-61d7333f8570/1/BDJLuHOeLhurBQsTF3cGKNgPr8E.roa
Signing time: Thu 13 Apr 2023 10:54:41 +0000
ROA not before: Thu 13 Apr 2023 10:54:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207203
IP address blocks: 185.238.32.0/22 maxlen: 22
45.156.240.0/24 maxlen: 24
45.156.240.0/22 maxlen: 22
45.153.140.0/22 maxlen: 22
185.82.120.0/22 maxlen: 22
185.39.172.0/22 maxlen: 22
193.228.80.0/22 maxlen: 22
2a04:7700::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:7a:40:d3:da:8a:e9:49:8f:58:b9:1d:73:14:db:6d:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbcd0233808570e31ffb2fcde1b877071cbc6603
Validity
Not Before: Apr 13 10:54:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=04324bb8739e2e1bab050b1317770628d80fafc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:65:8d:86:ba:0c:25:f7:db:bd:58:77:25:4a:
56:ee:dc:4b:c7:28:2a:68:ed:3b:9e:6e:71:61:6e:
17:b8:13:36:8a:7d:2a:f7:38:8c:07:47:dd:39:84:
82:ea:f4:35:ff:a1:90:b2:52:b8:9d:c6:77:8c:8a:
86:0e:21:61:2a:0d:3c:75:f3:7a:6a:f9:38:50:82:
a2:0f:81:54:2d:89:5a:3e:a8:0e:e8:6d:e5:2b:ec:
a5:55:a8:d8:58:8b:ee:58:47:5f:1c:75:1d:51:4c:
b3:e2:6a:0d:2f:2d:13:46:c6:63:e5:dc:5d:e4:6c:
7c:91:e5:e3:56:93:a2:97:33:ce:06:fa:91:5a:6c:
9b:e7:71:4e:96:d6:bf:f4:98:52:4d:6b:0b:52:13:
44:f5:e6:08:d9:e2:ad:9f:64:54:a6:7d:59:e9:28:
23:90:5d:d5:af:1b:5c:95:50:68:db:eb:78:82:d8:
74:ca:40:3c:23:cd:67:2f:8a:a2:c9:18:85:97:98:
17:48:ba:af:5a:8f:23:c7:54:74:cd:4f:a9:a8:22:
a3:a1:ae:7d:75:70:c0:30:a6:ed:1a:31:45:99:4d:
26:6c:d2:e5:9e:79:9a:37:de:b4:a3:4e:40:90:52:
41:11:78:3b:d8:3b:0c:98:d9:27:8f:8f:56:0c:1d:
00:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:32:4B:B8:73:9E:2E:1B:AB:05:0B:13:17:77:06:28:D8:0F:AF:C1
X509v3 Authority Key Identifier:
keyid:FB:CD:02:33:80:85:70:E3:1F:FB:2F:CD:E1:B8:77:07:1C:BC:66:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3b5110-5167-48e0-8597-61d7333f8570/1/BDJLuHOeLhurBQsTF3cGKNgPr8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3b5110-5167-48e0-8597-61d7333f8570/1/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.140.0/22
45.156.240.0/22
185.39.172.0/22
185.82.120.0/22
185.238.32.0/22
193.228.80.0/22
IPv6:
2a04:7700::/29
Signature Algorithm: sha256WithRSAEncryption
a6:80:22:95:08:af:d7:cb:a2:ee:81:86:ef:5b:c6:e6:78:76:
fa:c8:fa:5e:45:2e:6f:ae:34:8b:97:fb:96:ac:18:f9:b5:21:
7c:db:bc:65:ce:7e:fc:9c:1c:43:d0:52:b8:9e:3d:00:5f:94:
09:36:c8:73:11:22:65:e4:c1:30:81:39:f4:c5:8d:cf:5a:b7:
c2:8e:f7:16:90:e8:1b:d0:42:46:2c:22:cb:f4:5a:76:f3:f7:
20:e3:09:ee:20:cd:df:b3:37:70:cf:0f:fc:8f:32:46:5e:bf:
1c:09:67:3b:46:fb:a6:1c:ef:44:48:f7:04:80:07:66:13:34:
72:19:44:71:60:cf:3e:6c:08:6d:23:5b:db:bf:3f:eb:68:9c:
0e:db:15:a9:f0:3b:3f:b8:a2:fc:13:4b:b2:8c:98:a0:89:97:
18:93:9b:41:50:87:4a:5b:d3:1d:aa:86:54:f3:dd:e7:d9:a4:
a3:10:cd:4b:0c:97:0f:40:66:ed:03:d5:bd:4b:f6:71:7c:fe:
4a:23:be:14:c4:17:14:bb:35:83:88:3a:a4:ec:e5:3d:a6:77:
5f:2e:60:ba:9e:09:5a:e9:a9:13:c3:2d:b4:34:b3:8b:c4:46:
08:3c:81:a0:de:a6:a7:5e:61:98:e5:c5:5b:3d:93:99:38:d5:
88:15:1f:ff
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgISAYd6QNPaiulJj1i5HXMU221VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiY2QwMjMzODA4NTcwZTMxZmZiMmZjZGUxYjg3NzA3MWNi
YzY2MDMwHhcNMjMwNDEzMTA1NDQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNDMyNGJiODczOWUyZTFiYWIwNTBiMTMxNzc3MDYyOGQ4MGZhZmMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1GWNhroMJffbvVh3JUpW7txLxygq
aO07nm5xYW4XuBM2in0q9ziMB0fdOYSC6vQ1/6GQslK4ncZ3jIqGDiFhKg08dfN6
avk4UIKiD4FULYlaPqgO6G3lK+ylVajYWIvuWEdfHHUdUUyz4moNLy0TRsZj5dxd
5Gx8keXjVpOilzPOBvqRWmyb53FOlta/9JhSTWsLUhNE9eYI2eKtn2RUpn1Z6Sgj
kF3VrxtclVBo2+t4gth0ykA8I81nL4qiyRiFl5gXSLqvWo8jx1R0zU+pqCKjoa59
dXDAMKbtGjFFmU0mbNLlnnmaN960o05AkFJBEXg72DsMmNknj49WDB0AUQIDAQAB
o4ICODCCAjQwHQYDVR0OBBYEFAQyS7hzni4bqwULExd3BijYD6/BMB8GA1UdIwQY
MBaAFPvNAjOAhXDjH/svzeG4dwccvGYDMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS04MENNNENGY09NZi15X040YmgzQnh5OFpnTS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmQvM2I1MTEwLTUxNjctNDhlMC04NTk3
LTYxZDczMzNmODU3MC8xL0JESkx1SE9lTGh1ckJRc1RGM2NHS05nUHI4RS5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMmQvM2I1MTEwLTUxNjctNDhlMC04NTk3LTYxZDczMzNmODU3
MC8xLzEtODBDTTRDRmNPTWYteV9ONGJoM0J4eThaZ00uY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwTAYIKwYBBQUHAQcBAf8EPTA7MCoEAgABMCQDBAItmYwD
BAItnPADBAK5J6wDBAK5UngDBAK57iADBALB5FAwDQQCAAIwBwMFAyoEdwAwDQYJ
KoZIhvcNAQELBQADggEBAKaAIpUIr9fLou6Bhu9bxuZ4dvrI+l5FLm+uNIuX+5as
GPm1IXzbvGXOfvycHEPQUriePQBflAk2yHMRImXkwTCBOfTFjc9at8KO9xaQ6BvQ
QkYsIsv0Wnbz9yDjCe4gzd+zN3DPD/yPMkZevxwJZztG+6Yc70RI9wSAB2YTNHIZ
RHFgzz5sCG0jW9u/P+tonA7bFanwOz+4ovwTS7KMmKCJlxiTm0FQh0pb0x2qhlTz
3efZpKMQzUsMlw9AZu0D1b1L9nF8/kojvhTEFxS7NYOIOqTs5T2md18uYLqeCVrp
qRPDLbQ0s4vERgg8gaDepqdeYZjlxVs9k5k41YgVH/8=
-----END CERTIFICATE-----
Generated at Sun Jul 30 18:21:18 2023 by rpki-client on console-ams.rpki-client.org