Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/T61gpccTIPVQXuDYofv5CvTlELM.roa
File: T61gpccTIPVQXuDYofv5CvTlELM.roa (raw, json)
Hash identifier: liUWMnpcNYTkOG0joAcB/o51dtjwm2TBFEsykWusXyE=
Subject key identifier: 4F:AD:60:A5:C7:13:20:F5:50:5E:E0:D8:A1:FB:F9:0A:F4:E5:10:B3
Certificate issuer: /CN=8db34774b01979284fd9e754fea68fa3c61783d0
Certificate serial: 01866DE8C6C67BB3729C243E4FD301E5F6DB
Authority key identifier: 8D:B3:47:74:B0:19:79:28:4F:D9:E7:54:FE:A6:8F:A3:C6:17:83:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/T61gpccTIPVQXuDYofv5CvTlELM.roa
Signing time: Mon 20 Feb 2023 08:20:17 +0000
ROA not before: Mon 20 Feb 2023 08:20:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203511
IP address blocks: 193.31.116.0/24 maxlen: 24
213.226.119.0/24 maxlen: 24
176.98.41.0/24 maxlen: 24
84.54.13.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:6d:e8:c6:c6:7b:b3:72:9c:24:3e:4f:d3:01:e5:f6:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8db34774b01979284fd9e754fea68fa3c61783d0
Validity
Not Before: Feb 20 08:20:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4fad60a5c71320f5505ee0d8a1fbf90af4e510b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5b:aa:3c:66:b0:82:7c:e1:0e:dd:94:00:38:
fd:91:8b:5d:98:b3:ed:81:31:77:1d:e0:08:a1:7c:
0f:68:20:53:f1:82:f8:a2:ba:dd:56:c0:10:d1:80:
52:c0:f4:7c:26:49:00:2e:53:e7:df:9f:26:b5:d6:
cd:60:e9:04:74:ff:10:aa:3e:d8:24:29:a6:b5:dc:
4d:16:e1:d5:35:dc:e4:94:35:83:08:73:28:a9:84:
e2:11:2c:2d:b6:fe:ed:02:93:87:72:88:da:4a:80:
5f:28:d0:c7:4f:ac:6d:f0:b4:de:3b:d5:c5:ea:9d:
39:7c:1c:61:1f:44:7c:01:8e:82:44:01:d8:4e:a5:
57:46:cf:65:3a:78:11:1d:a7:1c:9a:33:f6:59:04:
c7:03:9d:48:1c:51:06:b6:fc:0a:31:d6:37:ce:50:
b8:16:f9:61:8c:95:dc:ff:97:e4:2f:b9:bf:f6:3b:
12:e1:db:59:aa:1b:b3:d2:b5:a1:cc:12:37:c1:bf:
73:6d:2e:69:26:fd:b3:34:4e:60:59:6e:9f:c5:00:
2a:6a:64:5f:13:86:86:52:8b:c2:ea:68:21:9d:71:
bc:60:20:81:58:54:c6:5d:2b:82:54:e8:69:b8:04:
c3:ee:e1:61:cf:ee:d1:58:2b:ac:e7:32:87:14:2f:
cb:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:AD:60:A5:C7:13:20:F5:50:5E:E0:D8:A1:FB:F9:0A:F4:E5:10:B3
X509v3 Authority Key Identifier:
keyid:8D:B3:47:74:B0:19:79:28:4F:D9:E7:54:FE:A6:8F:A3:C6:17:83:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/T61gpccTIPVQXuDYofv5CvTlELM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.54.13.0/24
176.98.41.0/24
193.31.116.0/24
213.226.119.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:91:9f:b0:70:03:56:d1:4a:14:61:b3:6f:63:26:f9:50:a2:
03:9c:f1:8c:8c:38:53:59:8d:dc:a1:7b:45:60:41:b6:56:73:
ee:d6:4e:b8:35:5d:32:40:06:f5:27:70:c1:a0:99:e0:25:b1:
86:e9:ab:85:c4:6e:9f:92:47:6d:4f:5c:5a:3e:67:54:74:93:
d5:c6:74:c1:e4:76:68:c2:5b:f3:99:31:a0:20:7e:79:02:85:
ab:43:11:ef:2b:e4:1b:e4:fb:37:6a:ed:04:d8:13:26:1b:17:
92:ee:a5:ed:f9:e7:cd:99:42:6e:a0:d6:21:2c:56:c5:55:2c:
a7:29:f3:ab:a8:2c:fc:7f:5b:84:fd:82:14:b2:72:ed:eb:8e:
c2:53:37:63:39:f0:86:4f:cf:1b:c4:f9:fe:72:61:91:03:c8:
37:ad:ef:c2:82:d1:7d:be:38:cc:6c:74:48:f6:b7:da:cf:a9:
68:95:74:e1:15:8d:17:a0:81:34:c7:24:1a:b4:78:63:b8:26:
c3:bf:da:8d:5c:1f:aa:1f:5b:cf:15:21:5f:c0:72:0a:32:4a:
c3:c9:63:24:3b:21:bf:28:ec:de:c9:8a:81:86:b9:cc:de:60:
4a:58:1a:34:4c:5b:d1:b2:6f:c8:5d:15:d2:5a:f3:a8:a1:d8:
8f:31:44:f6
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYZt6MbGe7NynCQ+T9MB5fbbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkYjM0Nzc0YjAxOTc5Mjg0ZmQ5ZTc1NGZlYTY4ZmEzYzYx
NzgzZDAwHhcNMjMwMjIwMDgyMDE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZmFkNjBhNWM3MTMyMGY1NTA1ZWUwZDhhMWZiZjkwYWY0ZTUxMGIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1uqPGawgnzhDt2UADj9kYtdmLPt
gTF3HeAIoXwPaCBT8YL4orrdVsAQ0YBSwPR8JkkALlPn358mtdbNYOkEdP8Qqj7Y
JCmmtdxNFuHVNdzklDWDCHMoqYTiESwttv7tApOHcojaSoBfKNDHT6xt8LTeO9XF
6p05fBxhH0R8AY6CRAHYTqVXRs9lOngRHaccmjP2WQTHA51IHFEGtvwKMdY3zlC4
FvlhjJXc/5fkL7m/9jsS4dtZqhuz0rWhzBI3wb9zbS5pJv2zNE5gWW6fxQAqamRf
E4aGUovC6mghnXG8YCCBWFTGXSuCVOhpuATD7uFhz+7RWCus5zKHFC/LCwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFE+tYKXHEyD1UF7g2KH7+Qr05RCzMB8GA1UdIwQY
MBaAFI2zR3SwGXkoT9nnVP6mj6PGF4PQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamJOSGRMQVplU2hQMmVkVV9xYVBvOFlYZzlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy83MGE4ZjEtZDhlYi00MmI1LWJkZGIt
NjI2NTUyMWY2ZGY3LzEvVDYxZ3BjY1RJUFZRWHVEWW9mdjVDdlRsRUxNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy83MGE4ZjEtZDhlYi00MmI1LWJkZGItNjI2NTUyMWY2ZGY3
LzEvamJOSGRMQVplU2hQMmVkVV9xYVBvOFlYZzlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAVDYNAwQA
sGIpAwQAwR90AwQA1eJ3MA0GCSqGSIb3DQEBCwUAA4IBAQDSkZ+wcANW0UoUYbNv
Yyb5UKIDnPGMjDhTWY3coXtFYEG2VnPu1k64NV0yQAb1J3DBoJngJbGG6auFxG6f
kkdtT1xaPmdUdJPVxnTB5HZowlvzmTGgIH55AoWrQxHvK+Qb5Ps3au0E2BMmGxeS
7qXt+efNmUJuoNYhLFbFVSynKfOrqCz8f1uE/YIUsnLt647CUzdjOfCGT88bxPn+
cmGRA8g3re/CgtF9vjjMbHRI9rfaz6lolXThFY0XoIE0xyQatHhjuCbDv9qNXB+q
H1vPFSFfwHIKMkrDyWMkOyG/KOzeyYqBhrnM3mBKWBo0TFvRsm/IXRXSWvOoodiP
MUT2
-----END CERTIFICATE-----
Generated at Tue Jan 2 09:00:05 2024 by rpki-client on console-ams.rpki-client.org