Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/8RXPvK6gT5vpGUyGwOzw9bc2iIo.roa
File: 8RXPvK6gT5vpGUyGwOzw9bc2iIo.roa (raw, json)
Hash identifier: 7cu3CWZCr4rM3VbBrRcKYYwX31TxzolmSn6VoLw6xCM=
Subject key identifier: F1:15:CF:BC:AE:A0:4F:9B:E9:19:4C:86:C0:EC:F0:F5:B7:36:88:8A
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 0187107C2F8F144589A5AA211626B71E147D
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/8RXPvK6gT5vpGUyGwOzw9bc2iIo.roa
Signing time: Thu 23 Mar 2023 21:59:46 +0000
ROA not before: Thu 23 Mar 2023 21:59:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207795
IP address blocks: 194.28.156.0/24 maxlen: 24
194.28.158.0/24 maxlen: 24
194.104.4.0/24 maxlen: 24
194.104.5.0/24 maxlen: 24
194.104.6.0/24 maxlen: 24
212.69.132.0/24 maxlen: 24
212.69.133.0/24 maxlen: 24
212.69.134.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:10:7c:2f:8f:14:45:89:a5:aa:21:16:26:b7:1e:14:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: Mar 23 21:59:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f115cfbcaea04f9be9194c86c0ecf0f5b736888a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:cc:fa:89:c8:82:89:f0:69:f6:ab:1a:47:1c:
cf:e8:3a:92:bc:cd:9d:14:90:48:29:93:ca:2e:b1:
3d:67:16:e6:9c:66:58:db:3d:59:b8:10:1a:90:b1:
f3:ef:23:1b:ea:fa:bf:39:fc:1d:12:de:12:85:19:
e2:88:42:97:67:ac:a9:0e:bf:61:d1:a7:06:18:fc:
14:e6:50:53:7d:1f:8a:f8:4c:a9:db:c2:45:f7:44:
1d:9c:29:1a:87:c4:7d:2e:cc:5e:a3:dc:fe:25:af:
b0:68:1b:c2:6a:5e:a9:fe:35:a4:f7:81:71:17:84:
71:66:11:56:4d:88:05:06:7d:8c:30:63:14:f1:0d:
26:23:0c:e1:ed:f2:df:cc:a4:fd:db:e9:46:73:d9:
3f:b0:46:19:f9:96:c6:ba:29:ed:21:4a:4d:50:0b:
8b:93:39:11:31:cf:89:37:00:48:8c:ec:44:fa:a4:
05:3d:de:4f:50:47:66:3a:4d:f9:d8:eb:e9:83:eb:
6b:11:18:48:6c:a1:a7:e9:59:b9:9b:39:94:fb:37:
cf:7e:53:71:1d:b4:92:97:7c:fa:af:71:9f:6c:01:
7e:04:73:b8:c5:8b:63:c9:dd:58:4d:ad:eb:ff:ee:
3e:89:75:34:9d:3c:96:97:48:23:9e:91:67:69:39:
e6:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:15:CF:BC:AE:A0:4F:9B:E9:19:4C:86:C0:EC:F0:F5:B7:36:88:8A
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/8RXPvK6gT5vpGUyGwOzw9bc2iIo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.28.156.0/24
194.28.158.0/24
194.104.4.0-194.104.6.255
212.69.132.0-212.69.134.255
Signature Algorithm: sha256WithRSAEncryption
16:af:c2:7f:44:d8:02:ef:7d:88:d6:d7:76:55:9b:73:47:65:
69:6e:e1:c8:eb:1f:e8:89:9b:86:ab:c0:ef:c0:96:b3:68:78:
4a:1c:53:10:fc:ee:3a:21:c9:72:0e:aa:4e:4f:9e:08:70:5d:
a3:2d:b6:e8:6c:21:bc:d0:f2:10:05:21:ea:04:58:10:96:37:
9c:c8:0d:1f:d5:63:0c:97:5a:bf:d4:52:fd:42:bf:0f:3f:5f:
02:f9:c4:0a:91:fd:58:89:65:39:89:50:42:fd:9c:9e:88:fa:
84:7d:ba:f3:49:b2:51:fe:1b:57:fc:b9:80:df:7a:0e:fd:be:
cc:30:9b:97:1f:92:6e:0d:9b:4f:14:2b:62:17:66:57:d3:ae:
3b:cd:cc:31:9b:e1:64:41:ea:42:e9:60:72:87:b5:c6:bd:75:
d6:33:35:db:a1:98:82:27:ba:16:48:7f:b2:b9:f3:91:4d:38:
1a:f0:68:fb:6d:f4:16:ba:4c:81:12:67:94:79:e1:4b:21:81:
5c:b8:a6:9d:f5:91:8c:43:4c:d5:57:c4:02:6c:38:fc:db:66:
c2:83:f6:bd:4b:bf:36:18:46:97:8f:69:1d:11:ff:c1:6b:e6:
a2:97:fa:72:5a:16:c1:a8:21:ec:88:77:6a:35:6d:1b:e0:e9:
9d:b9:0f:e4
-----BEGIN CERTIFICATE-----
MIIFHzCCBAegAwIBAgISAYcQfC+PFEWJpaohFia3HhR9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyYzJiODM0ZmJjOTFhZjBlYzZiMWQzNGZkNjQwNTRkMjI2
OWExZmQwHhcNMjMwMzIzMjE1OTQ2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMTE1Y2ZiY2FlYTA0ZjliZTkxOTRjODZjMGVjZjBmNWI3MzY4ODhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8z6iciCifBp9qsaRxzP6DqSvM2d
FJBIKZPKLrE9ZxbmnGZY2z1ZuBAakLHz7yMb6vq/OfwdEt4ShRniiEKXZ6ypDr9h
0acGGPwU5lBTfR+K+Eyp28JF90QdnCkah8R9Lsxeo9z+Ja+waBvCal6p/jWk94Fx
F4RxZhFWTYgFBn2MMGMU8Q0mIwzh7fLfzKT92+lGc9k/sEYZ+ZbGuintIUpNUAuL
kzkRMc+JNwBIjOxE+qQFPd5PUEdmOk352Ovpg+trERhIbKGn6Vm5mzmU+zfPflNx
HbSSl3z6r3GfbAF+BHO4xYtjyd1YTa3r/+4+iXU0nTyWl0gjnpFnaTnmAwIDAQAB
o4ICKzCCAicwHQYDVR0OBBYEFPEVz7yuoE+b6RlMhsDs8PW3NoiKMB8GA1UdIwQY
MBaAFOLCuDT7yRrw7GsdNP1kBU0iaaH9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHNLNE5QdkpHdkRzYXgwMF9XUUZUU0pwb2YwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8zZjI0OWItZTgzNi00MWI0LTlhM2Et
OTk0ODA2ZjA4MWYwLzEvOFJYUHZLNmdUNXZwR1V5R3dPenc5YmMyaUlvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC8zZjI0OWItZTgzNi00MWI0LTlhM2EtOTk0ODA2ZjA4MWYw
LzEvNHNLNE5QdkpHdkRzYXgwMF9XUUZUU0pwb2YwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAATAoAwQAwhycAwQA
whyeMAwDBALCaAQDBADCaAYwDAMEAtRFhAMEANRFhjANBgkqhkiG9w0BAQsFAAOC
AQEAFq/Cf0TYAu99iNbXdlWbc0dlaW7hyOsf6ImbhqvA78CWs2h4ShxTEPzuOiHJ
cg6qTk+eCHBdoy226GwhvNDyEAUh6gRYEJY3nMgNH9VjDJdav9RS/UK/Dz9fAvnE
CpH9WIllOYlQQv2cnoj6hH2680myUf4bV/y5gN96Dv2+zDCblx+Sbg2bTxQrYhdm
V9OuO83MMZvhZEHqQulgcoe1xr111jM126GYgie6Fkh/srnzkU04GvBo+230FrpM
gRJnlHnhSyGBXLimnfWRjENM1VfEAmw4/NtmwoP2vUu/NhhGl49pHRH/wWvmopf6
cloWwagh7Ih3ajVtG+DpnbkP5A==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:24 2023 by rpki-client on console-ams.rpki-client.org