Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/VX4tDXJR_D11gQcincAfpNB357U.roa
File: VX4tDXJR_D11gQcincAfpNB357U.roa (raw, json)
Hash identifier: CyKW98SHUmZ1lKpaUSOr4T55KlBb1E+Wd6RSSGjdEsA=
Subject key identifier: 55:7E:2D:0D:72:51:FC:3D:75:81:07:22:9D:C0:1F:A4:D0:77:E7:B5
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 01860724B2EBB2AC58B4C6442C654CBAB139
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/VX4tDXJR_D11gQcincAfpNB357U.roa
Signing time: Tue 31 Jan 2023 09:24:50 +0000
ROA not before: Tue 31 Jan 2023 09:24:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 27882
IP address blocks: 181.41.144.0/21 maxlen: 21
181.41.145.0/24 maxlen: 24
181.41.144.0/24 maxlen: 24
181.41.150.0/24 maxlen: 24
181.41.151.0/24 maxlen: 24
181.41.149.0/24 maxlen: 24
181.41.147.0/24 maxlen: 24
181.41.148.0/24 maxlen: 24
181.41.146.0/24 maxlen: 24
181.41.156.0/22 maxlen: 22
203.88.96.0/22 maxlen: 22
203.88.97.0/24 maxlen: 24
203.88.98.0/24 maxlen: 24
203.88.96.0/24 maxlen: 24
203.88.99.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:07:24:b2:eb:b2:ac:58:b4:c6:44:2c:65:4c:ba:b1:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jan 31 09:24:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=557e2d0d7251fc3d758107229dc01fa4d077e7b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:3b:1a:5f:b4:be:35:f0:98:44:56:82:fe:3c:
79:7b:0f:80:f1:80:88:ff:8f:62:c8:62:28:06:94:
94:5f:cc:d3:1f:d1:d4:a3:72:8f:0e:5d:19:3d:4b:
a7:c5:8b:17:b5:96:19:c9:2d:78:93:5c:b7:aa:41:
a3:d0:71:86:cf:38:89:81:ad:15:1c:5a:3c:cd:60:
46:af:44:25:9f:5a:a2:47:27:83:30:b6:41:7e:da:
fb:75:4d:98:fb:21:3c:80:f8:27:91:86:b3:5e:92:
2e:5d:f5:a1:89:e8:95:b4:5f:6d:25:df:a1:7a:d1:
09:d4:30:dd:82:ad:38:f1:ab:ff:c5:53:d7:05:83:
af:cc:06:19:c0:51:fa:e5:03:36:6a:41:0c:5c:27:
da:6d:bb:a9:56:ef:dd:de:69:63:ca:c6:b5:e9:1f:
20:72:59:46:40:88:30:cf:56:f2:ca:c2:00:c9:68:
be:d2:7d:26:7d:0e:72:ca:a9:50:6f:ce:c2:75:6f:
a2:64:42:4a:2a:c5:98:e3:ac:7c:e3:17:2e:7c:ab:
98:89:54:4e:b1:97:f5:4f:91:0d:49:a1:4e:50:6b:
af:c0:1e:23:4c:f0:2b:00:b1:c1:69:95:73:93:08:
3e:66:59:05:80:b0:24:07:29:6f:1e:22:3d:4c:1b:
92:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:7E:2D:0D:72:51:FC:3D:75:81:07:22:9D:C0:1F:A4:D0:77:E7:B5
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/VX4tDXJR_D11gQcincAfpNB357U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.41.144.0/21
181.41.156.0/22
203.88.96.0/22
Signature Algorithm: sha256WithRSAEncryption
02:d7:dc:e9:58:ef:1b:b0:c4:d4:ec:a4:91:5d:d3:dc:05:b0:
97:17:65:87:c8:1f:13:a4:ca:17:2d:45:95:35:47:73:f2:7c:
ec:48:7b:e4:92:41:49:3b:2c:09:b9:0b:2f:b0:30:73:3f:24:
6b:c7:12:e6:3a:7a:b5:d0:7a:1c:f1:ae:69:6f:bf:59:8b:c3:
b8:d9:87:95:a7:80:ee:98:0f:2a:fa:a0:12:b0:0e:5f:c4:71:
bc:78:f3:db:05:55:64:10:75:8c:d5:80:d9:25:07:83:b6:cf:
34:47:90:91:1b:0d:f4:d8:ed:af:67:0d:68:1a:2e:cc:ce:c4:
07:40:b1:e4:b5:9d:90:db:ce:21:c8:4f:f7:5f:ef:34:38:46:
59:cb:2a:39:9e:25:5b:a0:2f:ff:11:2c:bf:03:92:8f:ff:e9:
41:63:7c:ce:68:81:11:7f:94:1c:1b:98:f6:9d:63:1f:08:67:
f9:37:17:fb:2e:ef:fb:98:81:20:b0:cc:6e:df:05:37:c3:f7:
34:f8:8d:0f:90:8f:5f:1d:d8:8f:0a:1c:ba:ff:ed:47:ce:b1:
be:41:61:0b:80:e2:e9:5f:97:fa:d6:d9:9b:7e:23:80:80:e1:
16:0d:ee:d9:18:5f:da:b5:42:14:13:ee:06:ae:b4:c0:15:07:
ea:1a:46:9e
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYYHJLLrsqxYtMZELGVMurE5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MzRjNDlmY2ZhOGE0NTA0MWQ5NWVkNGQ4ZDRmYzY5Yzcy
N2E0NjcwHhcNMjMwMTMxMDkyNDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NTdlMmQwZDcyNTFmYzNkNzU4MTA3MjI5ZGMwMWZhNGQwNzdlN2I1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0zsaX7S+NfCYRFaC/jx5ew+A8YCI
/49iyGIoBpSUX8zTH9HUo3KPDl0ZPUunxYsXtZYZyS14k1y3qkGj0HGGzziJga0V
HFo8zWBGr0Qln1qiRyeDMLZBftr7dU2Y+yE8gPgnkYazXpIuXfWhieiVtF9tJd+h
etEJ1DDdgq048av/xVPXBYOvzAYZwFH65QM2akEMXCfabbupVu/d3mljysa16R8g
cllGQIgwz1byysIAyWi+0n0mfQ5yyqlQb87CdW+iZEJKKsWY46x84xcufKuYiVRO
sZf1T5ENSaFOUGuvwB4jTPArALHBaZVzkwg+ZlkFgLAkBylvHiI9TBuSRQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFFV+LQ1yUfw9dYEHIp3AH6TQd+e1MB8GA1UdIwQY
MBaAFAU0xJ/PqKRQQdle1NjU/GnHJ6RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYt
Y2Q3ZTA2Y2JiNTMxLzEvVlg0dERYSlJfRDExZ1FjaW5jQWZwTkIzNTdVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYtY2Q3ZTA2Y2JiNTMx
LzEvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDtSmQAwQC
tSmcAwQCy1hgMA0GCSqGSIb3DQEBCwUAA4IBAQAC19zpWO8bsMTU7KSRXdPcBbCX
F2WHyB8TpMoXLUWVNUdz8nzsSHvkkkFJOywJuQsvsDBzPyRrxxLmOnq10Hoc8a5p
b79Zi8O42YeVp4DumA8q+qASsA5fxHG8ePPbBVVkEHWM1YDZJQeDts80R5CRGw30
2O2vZw1oGi7MzsQHQLHktZ2Q284hyE/3X+80OEZZyyo5niVboC//ESy/A5KP/+lB
Y3zOaIERf5QcG5j2nWMfCGf5Nxf7Lu/7mIEgsMxu3wU3w/c0+I0PkI9fHdiPChy6
/+1HzrG+QWELgOLpX5f61tmbfiOAgOEWDe7ZGF/atUIUE+4GrrTAFQfqGkae
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:49 2023 by rpki-client on console-fra.rpki-client.org