Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/T_aTBAyW4vteXPasWR35mfuLvp0.roa
File: T_aTBAyW4vteXPasWR35mfuLvp0.roa (raw, json)
Hash identifier: 2CZObGo5xXXIVoirFbB4Vx/fDHNBCH+fHdL7bI9N9d0=
Subject key identifier: 4F:F6:93:04:0C:96:E2:FB:5E:5C:F6:AC:59:1D:F9:99:FB:8B:BE:9D
Certificate issuer: /CN=64fa66fb84a781a0584fd0d1c2df39bda4760519
Certificate serial: 01865701AC1008E88C0F1321D4C8522F8BD7
Authority key identifier: 64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/T_aTBAyW4vteXPasWR35mfuLvp0.roa
Signing time: Wed 15 Feb 2023 21:36:12 +0000
ROA not before: Wed 15 Feb 2023 21:36:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 393427
IP address blocks: 37.156.174.0/24 maxlen: 24
188.208.16.0/24 maxlen: 24
89.43.35.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:57:01:ac:10:08:e8:8c:0f:13:21:d4:c8:52:2f:8b:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64fa66fb84a781a0584fd0d1c2df39bda4760519
Validity
Not Before: Feb 15 21:36:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4ff693040c96e2fb5e5cf6ac591df999fb8bbe9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:12:7c:0b:ed:c7:15:bb:7d:39:15:54:17:d8:
52:ed:16:d9:c6:8c:c8:17:03:9e:10:ed:a9:bf:b0:
68:6d:56:6d:88:0a:6a:a1:dd:5e:87:90:d0:de:fb:
52:d6:8d:26:bc:a6:41:fd:3c:f1:2e:08:e9:23:33:
d2:9c:4d:c0:68:56:fd:7a:4f:73:bf:bb:3c:7f:7a:
1b:4e:03:df:ba:65:88:0a:9d:50:99:29:ff:25:10:
a5:84:81:dd:d6:68:30:02:4f:ff:4c:43:93:e0:ae:
71:c6:43:72:cb:2b:65:63:70:66:7e:eb:54:90:bd:
74:e7:96:99:4f:44:d8:42:26:b9:b3:ad:6f:5f:35:
71:a9:3f:44:fb:80:da:76:19:0b:e5:10:1e:01:83:
5a:ef:4d:d9:2e:4a:50:d4:e1:cb:4c:55:bb:5f:aa:
5e:16:14:79:eb:41:74:75:f1:11:16:7a:10:12:53:
18:95:37:ac:5b:1f:b0:30:9d:b4:e3:f4:d4:26:9d:
a6:e1:52:cb:da:8a:eb:a7:43:40:2f:08:01:3b:4b:
dc:85:10:4d:b0:c2:b9:88:13:cd:a4:3d:6d:83:d7:
28:64:02:2d:95:ef:e5:84:ef:12:8d:4d:0b:90:3c:
57:32:b1:3a:ce:75:87:53:1b:71:39:36:53:e8:d8:
41:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:F6:93:04:0C:96:E2:FB:5E:5C:F6:AC:59:1D:F9:99:FB:8B:BE:9D
X509v3 Authority Key Identifier:
keyid:64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/T_aTBAyW4vteXPasWR35mfuLvp0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.156.174.0/24
89.43.35.0/24
188.208.16.0/24
Signature Algorithm: sha256WithRSAEncryption
20:10:01:de:e2:78:00:d9:09:f6:31:e3:90:78:68:8b:d4:da:
fa:d9:5c:b9:5b:81:05:fb:1d:bb:25:78:92:15:1a:9c:0f:c7:
78:0d:3d:40:82:4b:0e:f6:fb:9f:4f:bd:30:ff:30:81:9c:df:
60:8b:06:9e:95:72:6f:29:04:5f:d4:4e:db:65:0b:91:2d:33:
82:1a:53:e5:ee:3d:75:74:be:7a:97:fe:06:a7:9b:ca:e5:ca:
cb:7c:5a:b2:20:bf:20:fe:6b:ff:35:04:52:ee:64:08:13:32:
61:de:96:b8:b9:83:16:ee:13:d7:2f:18:3d:a2:c1:2c:55:d4:
f1:bb:c4:88:55:a6:c9:6b:f3:9d:dd:06:ab:84:ec:c6:3f:3a:
e9:c8:21:a2:2c:e9:b3:f8:32:76:54:fe:bb:2b:38:de:46:18:
50:16:a9:8e:50:76:7f:99:6b:23:91:75:cf:26:74:d8:5c:45:
07:86:42:73:9e:9e:83:f8:32:29:41:b3:c3:43:fb:76:8c:b7:
c5:c7:94:35:2b:6f:75:5c:62:eb:7b:5d:dd:d4:91:7e:d9:9b:
0d:be:6e:97:67:5d:ee:79:27:d3:8e:25:eb:17:c1:41:84:01:
c2:78:bf:26:3a:82:89:bd:e6:fe:4e:b6:8f:25:5f:43:8a:2a:
c4:9c:73:ee
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYZXAawQCOiMDxMh1MhSL4vXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0ZmE2NmZiODRhNzgxYTA1ODRmZDBkMWMyZGYzOWJkYTQ3
NjA1MTkwHhcNMjMwMjE1MjEzNjEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZmY2OTMwNDBjOTZlMmZiNWU1Y2Y2YWM1OTFkZjk5OWZiOGJiZTlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBJ8C+3HFbt9ORVUF9hS7RbZxozI
FwOeEO2pv7BobVZtiApqod1eh5DQ3vtS1o0mvKZB/TzxLgjpIzPSnE3AaFb9ek9z
v7s8f3obTgPfumWICp1QmSn/JRClhIHd1mgwAk//TEOT4K5xxkNyyytlY3BmfutU
kL1055aZT0TYQia5s61vXzVxqT9E+4DadhkL5RAeAYNa703ZLkpQ1OHLTFW7X6pe
FhR560F0dfERFnoQElMYlTesWx+wMJ204/TUJp2m4VLL2orrp0NALwgBO0vchRBN
sMK5iBPNpD1tg9coZAItle/lhO8SjU0LkDxXMrE6znWHUxtxOTZT6NhBnwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFE/2kwQMluL7Xlz2rFkd+Zn7i76dMB8GA1UdIwQY
MBaAFGT6ZvuEp4GgWE/Q0cLfOb2kdgUZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlBwbS00U25nYUJZVDlEUnd0ODV2YVIyQlJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi82NjNiNGQtYjgwZS00OTQ2LTg0YzQt
NzQwOGViOGJjNTg2LzEvVF9hVEJBeVc0dnRlWFBhc1dSMzVtZnVMdnAwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi82NjNiNGQtYjgwZS00OTQ2LTg0YzQtNzQwOGViOGJjNTg2
LzEvWlBwbS00U25nYUJZVDlEUnd0ODV2YVIyQlJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAJZyuAwQA
WSsjAwQAvNAQMA0GCSqGSIb3DQEBCwUAA4IBAQAgEAHe4ngA2Qn2MeOQeGiL1Nr6
2Vy5W4EF+x27JXiSFRqcD8d4DT1AgksO9vufT70w/zCBnN9giwaelXJvKQRf1E7b
ZQuRLTOCGlPl7j11dL56l/4Gp5vK5crLfFqyIL8g/mv/NQRS7mQIEzJh3pa4uYMW
7hPXLxg9osEsVdTxu8SIVabJa/Od3QarhOzGPzrpyCGiLOmz+DJ2VP67KzjeRhhQ
FqmOUHZ/mWsjkXXPJnTYXEUHhkJznp6D+DIpQbPDQ/t2jLfFx5Q1K291XGLre13d
1JF+2ZsNvm6XZ13ueSfTjiXrF8FBhAHCeL8mOoKJveb+TraPJV9DiirEnHPu
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:02 2023 by rpki-client on console-fra.rpki-client.org