Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/12wvGr3eEgas-EzacWknvMs-jsU.roa
File: 12wvGr3eEgas-EzacWknvMs-jsU.roa (raw, json)
Hash identifier: 0I0EFjZmbOc9Ry7Uaatt7khLD27tcrNwlEAqTQj8UvM=
Subject key identifier: D7:6C:2F:1A:BD:DE:12:06:AC:F8:4C:DA:71:69:27:BC:CB:3E:8E:C5
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 018A5ABA791E043754A72DDADB6BD298A72C
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/12wvGr3eEgas-EzacWknvMs-jsU.roa
Signing time: Sun 03 Sep 2023 11:08:04 +0000
ROA not before: Sun 03 Sep 2023 11:08:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 272939
IP address blocks: 171.22.166.0/24 maxlen: 24
171.22.166.0/23 maxlen: 23
171.22.167.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:5a:ba:79:1e:04:37:54:a7:2d:da:db:6b:d2:98:a7:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Sep 3 11:08:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d76c2f1abdde1206acf84cda716927bccb3e8ec5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:36:7a:fa:12:06:a5:56:f0:38:e7:b9:8b:01:
5a:44:cf:01:a9:43:23:ac:ce:74:d8:6d:c5:22:3d:
71:87:4e:d5:b7:e8:8f:99:f5:19:91:8e:59:fd:14:
4b:89:aa:07:0b:53:66:91:77:20:28:2d:59:fb:f0:
b7:e7:4c:8b:72:6d:0d:8d:f4:1a:c3:be:88:b6:68:
82:56:9f:74:48:db:27:04:99:71:f8:6c:21:15:10:
e0:cd:a5:03:fe:ef:52:79:23:48:82:3b:85:d6:0f:
25:d5:9a:40:70:d7:88:b7:ff:83:d9:70:ea:ca:da:
c7:41:16:df:a3:6a:03:c7:87:e8:1f:ae:27:00:8d:
e5:ee:dd:4e:ac:a5:ba:b3:d0:46:0a:a5:63:2f:b5:
43:0f:a1:a7:3a:f8:02:8e:33:ce:af:2f:a9:11:70:
e5:22:38:74:06:77:61:cd:7f:77:9a:10:2f:ad:a0:
35:3d:97:dc:88:32:cf:e2:61:55:6d:0f:3e:90:55:
9b:0a:bb:36:92:b4:27:15:15:44:1b:9b:46:6f:a0:
6f:e1:3d:14:33:65:ff:63:6f:41:69:47:6d:af:77:
a6:83:1a:f2:43:ff:19:a2:64:45:b8:c8:68:0f:fd:
6d:79:38:cc:5c:88:9c:db:e2:ec:9f:fe:a9:47:ba:
f1:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:6C:2F:1A:BD:DE:12:06:AC:F8:4C:DA:71:69:27:BC:CB:3E:8E:C5
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/12wvGr3eEgas-EzacWknvMs-jsU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.22.166.0/23
Signature Algorithm: sha256WithRSAEncryption
c0:9e:d4:ee:09:56:94:a4:7a:00:ad:23:9b:28:af:59:13:9c:
52:9a:fd:fa:d5:13:8a:f8:d4:d3:32:53:00:8f:67:b4:35:66:
49:1b:fd:28:52:90:a1:9b:10:05:4b:af:7f:72:6a:d2:db:f4:
bd:1a:e8:4f:c1:55:d7:51:c6:3f:21:47:12:da:ec:5f:12:1e:
1e:dd:23:06:2a:1b:95:e9:c7:d7:bd:ec:88:fd:14:19:8e:f4:
89:34:35:ca:9c:2c:19:a1:81:ea:9b:61:17:be:ea:98:4f:69:
5e:b7:5e:57:0b:44:66:16:de:9e:9f:97:0b:06:fc:3a:47:16:
c8:a0:71:ac:8e:ee:5c:33:e9:61:10:e7:5c:3c:ac:3e:2e:ef:
25:1e:11:a3:f2:94:7d:84:a9:be:39:6f:da:d6:6f:f9:1d:02:
db:57:1d:27:69:97:bd:46:ab:da:d5:01:08:80:60:5c:60:c8:
f6:9d:54:69:cd:a2:17:bf:81:2d:7b:eb:4c:f9:3a:fc:fc:9e:
ab:a7:79:ac:04:f6:36:29:dc:8b:aa:a4:f2:47:c4:99:1d:4b:
30:e5:52:06:31:30:da:fe:39:1f:6b:e5:2e:83:5b:15:6f:b8:
05:cc:fb:78:46:e1:6c:ca:f4:e5:48:f8:c5:be:da:76:71:09:
fd:93:77:8f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYpaunkeBDdUpy3a22vSmKcsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MzRjNDlmY2ZhOGE0NTA0MWQ5NWVkNGQ4ZDRmYzY5Yzcy
N2E0NjcwHhcNMjMwOTAzMTEwODA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNzZjMmYxYWJkZGUxMjA2YWNmODRjZGE3MTY5MjdiY2NiM2U4ZWM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjZ6+hIGpVbwOOe5iwFaRM8BqUMj
rM502G3FIj1xh07Vt+iPmfUZkY5Z/RRLiaoHC1NmkXcgKC1Z+/C350yLcm0NjfQa
w76ItmiCVp90SNsnBJlx+GwhFRDgzaUD/u9SeSNIgjuF1g8l1ZpAcNeIt/+D2XDq
ytrHQRbfo2oDx4foH64nAI3l7t1OrKW6s9BGCqVjL7VDD6GnOvgCjjPOry+pEXDl
Ijh0BndhzX93mhAvraA1PZfciDLP4mFVbQ8+kFWbCrs2krQnFRVEG5tGb6Bv4T0U
M2X/Y29BaUdtr3emgxryQ/8ZomRFuMhoD/1teTjMXIic2+Lsn/6pR7rxGQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNdsLxq93hIGrPhM2nFpJ7zLPo7FMB8GA1UdIwQY
MBaAFAU0xJ/PqKRQQdle1NjU/GnHJ6RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYt
Y2Q3ZTA2Y2JiNTMxLzEvMTJ3dkdyM2VFZ2FzLUV6YWNXa252TXMtanNVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYtY2Q3ZTA2Y2JiNTMx
LzEvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqxamMA0G
CSqGSIb3DQEBCwUAA4IBAQDAntTuCVaUpHoArSObKK9ZE5xSmv361ROK+NTTMlMA
j2e0NWZJG/0oUpChmxAFS69/cmrS2/S9GuhPwVXXUcY/IUcS2uxfEh4e3SMGKhuV
6cfXveyI/RQZjvSJNDXKnCwZoYHqm2EXvuqYT2let15XC0RmFt6en5cLBvw6RxbI
oHGsju5cM+lhEOdcPKw+Lu8lHhGj8pR9hKm+OW/a1m/5HQLbVx0naZe9Rqva1QEI
gGBcYMj2nVRpzaIXv4Ete+tM+Tr8/J6rp3msBPY2KdyLqqTyR8SZHUsw5VIGMTDa
/jkfa+Uug1sVb7gFzPt4RuFsyvTlSPjFvtp2cQn9k3eP
-----END CERTIFICATE-----
Generated at Mon Jan 1 17:14:08 2024 by rpki-client on console-ams.rpki-client.org