Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/62764b-9aa6-4f12-a71c-6bac34987019/1/kGYtsuFHD2JSi7VE-jmlT6UBiY8.roa
File: kGYtsuFHD2JSi7VE-jmlT6UBiY8.roa (raw, json)
Hash identifier: U6FE7S1Ol+5D6uib3IIz96eVlzPvDwVcW2dIgnO1M2w=
Subject key identifier: 90:66:2D:B2:E1:47:0F:62:52:8B:B5:44:FA:39:A5:4F:A5:01:89:8F
Certificate issuer: /CN=35c96065093998ba42cfba11bf0d17d3ac403d40
Certificate serial: 0189AD699EBDAF6B98E30E838D5AA15064CD
Authority key identifier: 35:C9:60:65:09:39:98:BA:42:CF:BA:11:BF:0D:17:D3:AC:40:3D:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NclgZQk5mLpCz7oRvw0X06xAPUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/62764b-9aa6-4f12-a71c-6bac34987019/1/kGYtsuFHD2JSi7VE-jmlT6UBiY8.roa
Signing time: Mon 31 Jul 2023 19:25:27 +0000
ROA not before: Mon 31 Jul 2023 19:25:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 393427
IP address blocks: 116.50.16.0/21 maxlen: 24
83.142.200.0/21 maxlen: 24
198.14.16.0/20 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ad:69:9e:bd:af:6b:98:e3:0e:83:8d:5a:a1:50:64:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35c96065093998ba42cfba11bf0d17d3ac403d40
Validity
Not Before: Jul 31 19:25:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=90662db2e1470f62528bb544fa39a54fa501898f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:7c:ea:79:8d:67:54:3e:8b:58:3e:0c:84:8f:
97:19:c8:e5:8a:41:f1:95:b0:87:65:45:21:b1:05:
c3:14:bb:e7:23:ac:c4:82:70:0b:75:88:6f:34:de:
57:8c:c5:a2:87:aa:59:63:7f:31:a4:27:88:d6:5a:
06:db:c2:f9:12:df:fd:fb:0b:99:d3:ff:f7:6f:9e:
a3:ff:de:5a:bb:a1:4c:0b:96:32:70:72:79:3c:81:
67:f2:4c:d7:e5:ae:56:88:ba:6e:c6:49:f2:a7:f5:
44:72:fe:c5:fb:d9:df:a6:ca:aa:33:57:fd:34:b5:
9b:84:de:8a:8b:d9:1b:5d:7d:6e:61:ec:d5:a3:1d:
3f:e0:11:9c:34:61:f1:e2:aa:d6:23:7e:72:55:5c:
13:ff:2c:5d:a0:4c:71:56:43:28:77:e7:f7:b2:ec:
34:32:26:76:6f:82:9e:6b:83:d6:0d:b6:16:fb:3a:
27:c6:54:89:3b:1c:5e:31:54:bb:42:d6:57:4d:61:
7c:63:9d:90:ac:d7:18:26:15:1a:d8:87:85:14:3d:
f6:33:2e:c4:4a:d6:73:79:5c:73:0f:23:e6:e9:40:
36:0a:da:c7:5a:9b:02:75:4f:90:7e:43:8b:0e:68:
7b:9d:d3:95:f0:03:4c:5c:34:5d:5d:34:89:a9:55:
b5:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:66:2D:B2:E1:47:0F:62:52:8B:B5:44:FA:39:A5:4F:A5:01:89:8F
X509v3 Authority Key Identifier:
keyid:35:C9:60:65:09:39:98:BA:42:CF:BA:11:BF:0D:17:D3:AC:40:3D:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NclgZQk5mLpCz7oRvw0X06xAPUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/62764b-9aa6-4f12-a71c-6bac34987019/1/kGYtsuFHD2JSi7VE-jmlT6UBiY8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/62764b-9aa6-4f12-a71c-6bac34987019/1/NclgZQk5mLpCz7oRvw0X06xAPUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.142.200.0/21
116.50.16.0/21
198.14.16.0/20
Signature Algorithm: sha256WithRSAEncryption
bd:08:d4:74:46:c1:2b:7b:8d:b2:84:91:da:91:84:8c:4b:a2:
3e:59:41:80:b8:9f:92:56:df:3f:fb:53:15:8b:6c:db:29:94:
79:94:de:a2:c5:4a:b3:e6:c8:27:57:86:d3:5e:3b:1e:6e:63:
65:d4:e0:60:8a:a0:90:0a:c2:59:2b:9e:0b:3b:e3:76:0c:c8:
e2:d6:8f:f4:f6:b7:f6:06:a6:ba:05:61:db:6e:4c:57:35:a1:
3d:89:cc:da:53:a7:97:9f:87:81:eb:4a:9e:af:13:8d:28:69:
e3:db:3b:1c:f3:4b:22:80:14:fd:84:6a:cd:3c:6a:51:55:f7:
45:eb:7c:b7:55:83:cd:b0:35:92:1a:29:a6:5c:fb:e2:60:90:
fe:ce:9e:dc:1e:3b:96:06:f7:4e:c3:ea:12:68:bf:56:c0:8d:
10:90:21:8a:e6:ad:57:fe:41:b1:2a:1a:ed:ac:0b:56:a5:81:
a0:5b:95:64:91:f0:2b:76:c6:02:04:e2:b7:80:d2:50:0d:6a:
d9:5c:bc:03:a8:72:2e:f1:de:48:60:97:cc:ae:91:fc:da:f1:
4d:8e:03:da:6a:36:7a:75:94:9e:84:ba:14:94:e6:16:04:f7:
67:8e:c2:82:37:cd:99:70:67:7c:d8:48:53:16:38:74:d6:a4:
42:4e:20:f0
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYmtaZ69r2uY4w6DjVqhUGTNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1Yzk2MDY1MDkzOTk4YmE0MmNmYmExMWJmMGQxN2QzYWM0
MDNkNDAwHhcNMjMwNzMxMTkyNTI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MDY2MmRiMmUxNDcwZjYyNTI4YmI1NDRmYTM5YTU0ZmE1MDE4OThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9XzqeY1nVD6LWD4MhI+XGcjlikHx
lbCHZUUhsQXDFLvnI6zEgnALdYhvNN5XjMWih6pZY38xpCeI1loG28L5Et/9+wuZ
0//3b56j/95au6FMC5YycHJ5PIFn8kzX5a5WiLpuxknyp/VEcv7F+9nfpsqqM1f9
NLWbhN6Ki9kbXX1uYezVox0/4BGcNGHx4qrWI35yVVwT/yxdoExxVkMod+f3suw0
MiZ2b4Kea4PWDbYW+zonxlSJOxxeMVS7QtZXTWF8Y52QrNcYJhUa2IeFFD32My7E
StZzeVxzDyPm6UA2CtrHWpsCdU+QfkOLDmh7ndOV8ANMXDRdXTSJqVW15wIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFJBmLbLhRw9iUou1RPo5pU+lAYmPMB8GA1UdIwQY
MBaAFDXJYGUJOZi6Qs+6Eb8NF9OsQD1AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmNsZ1pRazVtTHBDejdvUnZ3MFgwNnhBUFVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi82Mjc2NGItOWFhNi00ZjEyLWE3MWMt
NmJhYzM0OTg3MDE5LzEva0dZdHN1RkhEMkpTaTdWRS1qbWxUNlVCaVk4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi82Mjc2NGItOWFhNi00ZjEyLWE3MWMtNmJhYzM0OTg3MDE5
LzEvTmNsZ1pRazVtTHBDejdvUnZ3MFgwNnhBUFVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDU47IAwQD
dDIQAwQExg4QMA0GCSqGSIb3DQEBCwUAA4IBAQC9CNR0RsEre42yhJHakYSMS6I+
WUGAuJ+SVt8/+1MVi2zbKZR5lN6ixUqz5sgnV4bTXjsebmNl1OBgiqCQCsJZK54L
O+N2DMji1o/09rf2Bqa6BWHbbkxXNaE9iczaU6eXn4eB60qerxONKGnj2zsc80si
gBT9hGrNPGpRVfdF63y3VYPNsDWSGimmXPviYJD+zp7cHjuWBvdOw+oSaL9WwI0Q
kCGK5q1X/kGxKhrtrAtWpYGgW5VkkfArdsYCBOK3gNJQDWrZXLwDqHIu8d5IYJfM
rpH82vFNjgPaajZ6dZSehLoUlOYWBPdnjsKCN82ZcGd82EhTFjh01qRCTiDw
-----END CERTIFICATE-----
Generated at Sun Oct 1 08:39:31 2023 by rpki-client on console-fra.rpki-client.org