Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/T3wInc2PsHx7qrpW7xHTTybKY20.roa
File: T3wInc2PsHx7qrpW7xHTTybKY20.roa (raw, json)
Hash identifier: 3ULt6lLlCiu35UkVKJ543zqFS52kcq7UeHEFO0ellV0=
Subject key identifier: 4F:7C:08:9D:CD:8F:B0:7C:7B:AA:BA:56:EF:11:D3:4F:26:CA:63:6D
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 0186E674A0DFF0981E16AD1C4E0A530F0EEE
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/T3wInc2PsHx7qrpW7xHTTybKY20.roa
Signing time: Wed 15 Mar 2023 18:07:28 +0000
ROA not before: Wed 15 Mar 2023 18:07:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39838
IP address blocks: 217.26.188.0/22 maxlen: 22
89.42.112.0/23 maxlen: 23
77.247.120.0/22 maxlen: 22
89.45.208.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:e6:74:a0:df:f0:98:1e:16:ad:1c:4e:0a:53:0f:0e:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Mar 15 18:07:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4f7c089dcd8fb07c7baaba56ef11d34f26ca636d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:13:ea:09:40:81:75:e6:ca:d5:43:9b:a1:48:
ab:d9:5e:6b:19:c6:77:a4:fc:2a:c7:d0:bf:b5:fd:
f7:d3:1e:6b:99:5f:7e:c4:54:c1:5d:27:46:73:d7:
bb:dd:96:82:99:b0:1c:d5:d3:eb:4b:76:a2:f4:ea:
b1:a4:a4:b0:6a:3a:08:58:47:42:d6:e2:74:fc:44:
16:85:39:0c:44:9c:f5:88:f4:2f:34:ae:b5:2e:ee:
b5:e6:85:42:35:d9:47:79:12:93:19:fe:63:cb:33:
00:3b:2d:7b:cb:88:82:85:6f:c9:90:7c:f0:b9:4c:
5e:b7:dc:c0:ed:a8:d7:2c:f8:fb:c4:53:7d:dd:4a:
2f:b3:0d:fd:81:e0:5f:ae:61:d7:36:2f:2e:86:8f:
0e:00:73:13:40:75:38:d7:53:d0:66:d2:e5:7d:bf:
50:4c:e7:a3:35:70:39:d5:bf:24:5a:ae:80:f4:74:
49:d8:d4:90:e0:62:31:b0:fe:2b:47:50:d5:58:9e:
08:f3:dc:cc:24:cd:ec:80:af:70:a7:41:78:56:1f:
2a:0e:6c:6a:99:3b:6c:a4:7e:7d:fc:76:3e:31:07:
29:9c:a6:c5:9a:08:ae:47:40:53:37:21:e0:a8:b5:
e4:c0:e7:8c:22:13:2f:3f:44:96:cd:c6:b6:81:70:
ab:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:7C:08:9D:CD:8F:B0:7C:7B:AA:BA:56:EF:11:D3:4F:26:CA:63:6D
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/T3wInc2PsHx7qrpW7xHTTybKY20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.247.120.0/22
89.42.112.0/23
89.45.208.0/23
217.26.188.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:65:5f:7e:94:4f:4e:ec:04:11:bc:3c:bb:f9:fa:6a:dc:66:
54:8e:d1:03:a3:90:dc:cc:97:12:ec:94:a0:84:1b:d1:89:ed:
58:73:de:79:59:7f:7d:77:b5:ed:96:9b:f6:62:52:d0:41:6a:
9c:7b:57:eb:6e:76:d7:6d:47:58:7c:e7:85:ec:7c:1e:8f:b9:
6e:e0:cd:9e:9b:c0:b9:0f:f3:3d:a4:d9:0f:37:11:f5:81:90:
7f:a8:37:93:41:99:8d:ee:9e:c4:8f:81:fc:21:75:ed:10:5b:
6a:33:46:cc:6e:da:df:4a:7b:4a:9d:8c:77:a1:46:1f:45:4d:
a5:09:06:8b:84:c7:0a:6b:78:87:7e:fc:c9:54:53:17:d0:9d:
1e:b0:86:98:37:5a:6c:8a:58:63:ae:aa:f7:16:c9:f2:e9:a9:
71:80:94:ef:78:0a:69:0c:07:67:7d:43:bc:11:5e:c5:c8:ed:
ad:1a:7b:ab:67:2e:f9:b0:47:f0:a7:68:37:ac:c5:cb:52:73:
5f:ec:e8:b0:57:72:bd:0c:27:be:19:3f:2f:2c:8c:d5:20:7b:
4a:f0:a8:8c:e3:0a:4f:47:13:2f:26:45:a3:c1:16:a2:11:a4:
48:be:11:63:8c:a2:64:8a:9b:10:ca:03:71:0b:7e:a2:e5:70:
6f:7f:e2:8e
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYbmdKDf8JgeFq0cTgpTDw7uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MzRjNDlmY2ZhOGE0NTA0MWQ5NWVkNGQ4ZDRmYzY5Yzcy
N2E0NjcwHhcNMjMwMzE1MTgwNzI4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZjdjMDg5ZGNkOGZiMDdjN2JhYWJhNTZlZjExZDM0ZjI2Y2E2MzZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxPqCUCBdebK1UOboUir2V5rGcZ3
pPwqx9C/tf330x5rmV9+xFTBXSdGc9e73ZaCmbAc1dPrS3ai9OqxpKSwajoIWEdC
1uJ0/EQWhTkMRJz1iPQvNK61Lu615oVCNdlHeRKTGf5jyzMAOy17y4iChW/JkHzw
uUxet9zA7ajXLPj7xFN93Uovsw39geBfrmHXNi8uho8OAHMTQHU411PQZtLlfb9Q
TOejNXA51b8kWq6A9HRJ2NSQ4GIxsP4rR1DVWJ4I89zMJM3sgK9wp0F4Vh8qDmxq
mTtspH59/HY+MQcpnKbFmgiuR0BTNyHgqLXkwOeMIhMvP0SWzca2gXCrGwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFE98CJ3Nj7B8e6q6Vu8R008mymNtMB8GA1UdIwQY
MBaAFAU0xJ/PqKRQQdle1NjU/GnHJ6RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYt
Y2Q3ZTA2Y2JiNTMxLzEvVDN3SW5jMlBzSHg3cXJwVzd4SFRUeWJLWTIwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYtY2Q3ZTA2Y2JiNTMx
LzEvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCTfd4AwQB
WSpwAwQBWS3QAwQC2Rq8MA0GCSqGSIb3DQEBCwUAA4IBAQAOZV9+lE9O7AQRvDy7
+fpq3GZUjtEDo5DczJcS7JSghBvRie1Yc955WX99d7Xtlpv2YlLQQWqce1frbnbX
bUdYfOeF7Hwej7lu4M2em8C5D/M9pNkPNxH1gZB/qDeTQZmN7p7Ej4H8IXXtEFtq
M0bMbtrfSntKnYx3oUYfRU2lCQaLhMcKa3iHfvzJVFMX0J0esIaYN1psilhjrqr3
Fsny6alxgJTveAppDAdnfUO8EV7FyO2tGnurZy75sEfwp2g3rMXLUnNf7OiwV3K9
DCe+GT8vLIzVIHtK8KiM4wpPRxMvJkWjwRaiEaRIvhFjjKJkipsQygNxC36i5XBv
f+KO
-----END CERTIFICATE-----
Generated at Mon Jan 1 17:25:47 2024 by rpki-client on console-fra.rpki-client.org