Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/k6IhaYo8rSs7RCRDkcKw0xziqig.roa
File: k6IhaYo8rSs7RCRDkcKw0xziqig.roa (raw, json)
Hash identifier: CFBdqCYdGgBugJSdfcsEvYcgtpjevN0jqWcKLn5S394=
Subject key identifier: 93:A2:21:69:8A:3C:AD:2B:3B:44:24:43:91:C2:B0:D3:1C:E2:AA:28
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 01860237109ACF1C9D982F40EB1B09A16D4E
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/k6IhaYo8rSs7RCRDkcKw0xziqig.roa
Signing time: Mon 30 Jan 2023 10:26:48 +0000
ROA not before: Mon 30 Jan 2023 10:26:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208888
IP address blocks: 141.136.63.0/24 maxlen: 24
181.41.144.0/22 maxlen: 24
181.41.147.0/24 maxlen: 24
181.41.156.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:02:37:10:9a:cf:1c:9d:98:2f:40:eb:1b:09:a1:6d:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jan 30 10:26:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=93a221698a3cad2b3b44244391c2b0d31ce2aa28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1b:cc:e2:61:c7:dc:3a:37:f3:d6:86:35:35:
69:f6:15:35:a6:15:21:5e:ff:8a:64:04:1c:01:63:
42:8f:4f:76:c1:aa:bb:ac:e8:c9:72:1d:3b:22:09:
7e:e5:4c:95:aa:ac:2e:f7:99:8e:a5:19:f7:8e:38:
2e:e5:34:0c:0d:ff:27:a4:7e:11:17:e3:fb:b7:5f:
87:4b:b0:5e:45:f8:49:ee:7b:90:52:09:67:e9:8d:
15:c6:47:0f:a0:ab:b9:1a:f2:fb:5f:ed:70:fd:1c:
2c:01:e1:50:e7:e9:11:3d:91:c1:63:53:bd:3e:6e:
2c:74:fa:fa:db:d6:06:48:92:37:39:8a:8a:56:da:
c7:83:4d:8b:ae:4d:81:bc:8d:cb:5f:12:45:f3:d0:
64:f6:94:b0:f5:97:d4:79:cd:36:c6:28:c1:6d:07:
e5:48:6d:82:65:c5:c0:bc:ab:86:1e:c0:fc:89:e6:
d7:05:80:27:07:b7:4b:16:02:f2:c3:51:55:10:d7:
6d:30:40:59:01:26:25:b4:4b:d5:d5:11:8a:8e:c7:
e1:37:11:c0:af:81:ee:a2:75:b7:e5:ef:45:e1:68:
67:dd:90:53:04:35:54:cf:8a:27:62:60:dd:ce:41:
fa:69:d3:14:c0:72:52:48:81:35:6b:70:36:d2:83:
d6:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:A2:21:69:8A:3C:AD:2B:3B:44:24:43:91:C2:B0:D3:1C:E2:AA:28
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/k6IhaYo8rSs7RCRDkcKw0xziqig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.136.63.0/24
181.41.144.0/22
181.41.156.0/22
Signature Algorithm: sha256WithRSAEncryption
36:39:6b:de:2b:ed:76:ce:c5:5a:57:2c:70:93:8d:f6:6b:d4:
e4:7d:c6:5e:6c:84:50:5f:aa:eb:fc:36:2d:a2:b8:4a:d8:41:
e0:92:db:dd:d1:09:3b:7b:f9:44:43:de:12:73:e9:22:e7:40:
e0:3a:0c:05:40:66:1d:72:8a:f6:af:63:5c:3e:c6:09:75:d1:
f7:d1:4a:c3:c3:cc:cd:1f:fa:64:ae:7c:d1:d7:34:24:04:7c:
c3:03:16:51:93:37:49:73:b9:a6:4c:e7:5b:8f:4f:09:77:f0:
80:50:0d:e1:27:4e:0e:87:e2:0c:0f:1f:24:4e:d2:37:56:4d:
a7:dd:09:36:15:ef:14:6d:a8:35:9b:2e:e7:4b:d7:1d:13:f3:
c4:06:e9:ad:f8:be:19:db:54:6a:c0:8e:84:af:28:a9:be:ba:
38:38:25:4b:ac:2a:3a:7b:13:d7:96:fb:a9:aa:9e:10:f2:be:
72:82:66:6d:78:34:4f:bf:6c:92:06:46:ee:d4:da:d0:e8:cc:
25:c1:2b:7c:cd:4f:6c:be:3c:a3:4d:eb:4e:b5:54:c2:d9:84:
22:76:53:75:3b:b1:94:cd:7a:ea:b1:16:9b:c5:7f:45:eb:b9:
be:e0:53:c8:b3:d2:4c:af:8b:49:78:26:e8:05:c6:15:4c:1d:
e7:20:4f:d0
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYYCNxCazxydmC9A6xsJoW1OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MzRjNDlmY2ZhOGE0NTA0MWQ5NWVkNGQ4ZDRmYzY5Yzcy
N2E0NjcwHhcNMjMwMTMwMTAyNjQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5M2EyMjE2OThhM2NhZDJiM2I0NDI0NDM5MWMyYjBkMzFjZTJhYTI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBvM4mHH3Do389aGNTVp9hU1phUh
Xv+KZAQcAWNCj092waq7rOjJch07Igl+5UyVqqwu95mOpRn3jjgu5TQMDf8npH4R
F+P7t1+HS7BeRfhJ7nuQUgln6Y0VxkcPoKu5GvL7X+1w/RwsAeFQ5+kRPZHBY1O9
Pm4sdPr629YGSJI3OYqKVtrHg02Lrk2BvI3LXxJF89Bk9pSw9ZfUec02xijBbQfl
SG2CZcXAvKuGHsD8iebXBYAnB7dLFgLyw1FVENdtMEBZASYltEvV1RGKjsfhNxHA
r4HuonW35e9F4Whn3ZBTBDVUz4onYmDdzkH6adMUwHJSSIE1a3A20oPWUQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFJOiIWmKPK0rO0QkQ5HCsNMc4qooMB8GA1UdIwQY
MBaAFAU0xJ/PqKRQQdle1NjU/GnHJ6RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYt
Y2Q3ZTA2Y2JiNTMxLzEvazZJaGFZbzhyU3M3UkNSRGtjS3cweHppcWlnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYtY2Q3ZTA2Y2JiNTMx
LzEvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAjYg/AwQC
tSmQAwQCtSmcMA0GCSqGSIb3DQEBCwUAA4IBAQA2OWveK+12zsVaVyxwk432a9Tk
fcZebIRQX6rr/DYtorhK2EHgktvd0Qk7e/lEQ94Sc+ki50DgOgwFQGYdcor2r2Nc
PsYJddH30UrDw8zNH/pkrnzR1zQkBHzDAxZRkzdJc7mmTOdbj08Jd/CAUA3hJ04O
h+IMDx8kTtI3Vk2n3Qk2Fe8Ubag1my7nS9cdE/PEBumt+L4Z21RqwI6Eryipvro4
OCVLrCo6exPXlvupqp4Q8r5ygmZteDRPv2ySBkbu1NrQ6MwlwSt8zU9svjyjTetO
tVTC2YQidlN1O7GUzXrqsRabxX9F67m+4FPIs9JMr4tJeCboBcYVTB3nIE/Q
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:35 2023 by rpki-client on console-ams.rpki-client.org