Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/ooPFBLLikIev6motTOaEj5SAKk8.roa
File: ooPFBLLikIev6motTOaEj5SAKk8.roa (raw, json)
Hash identifier: 51tjyAyvyooust5vZomigWJXOOpLnOCBhbqLin4MIg8=
Subject key identifier: A2:83:C5:04:B2:E2:90:87:AF:EA:6A:2D:4C:E6:84:8F:94:80:2A:4F
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 01856ED4C4310BEAE9997C1EB8CDCCA36EE3
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/ooPFBLLikIev6motTOaEj5SAKk8.roa
Signing time: Sun 01 Jan 2023 19:35:15 +0000
ROA not before: Sun 01 Jan 2023 19:35:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39838
IP address blocks: 217.26.188.0/22 maxlen: 22
141.136.60.0/22 maxlen: 22
89.42.112.0/23 maxlen: 23
77.247.120.0/22 maxlen: 22
89.45.208.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:c4:31:0b:ea:e9:99:7c:1e:b8:cd:cc:a3:6e:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jan 1 19:35:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a283c504b2e29087afea6a2d4ce6848f94802a4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:8d:08:99:34:21:f9:62:1f:2a:4d:7a:35:54:
9b:29:02:86:8d:83:d5:a4:32:e2:4f:69:9a:44:8d:
e6:ec:4b:85:6d:27:4d:c1:44:87:47:02:ab:47:60:
43:5f:84:72:e0:54:7c:c8:5a:d4:83:5b:52:64:a9:
fe:6a:96:f2:e7:83:27:f4:6a:57:06:7f:41:bd:06:
6d:fa:84:44:8f:f0:e9:d2:54:44:10:40:33:39:90:
7c:03:c5:51:3c:a1:f8:ad:27:c8:f2:3a:d6:0d:ed:
af:12:44:23:27:11:4e:4d:65:eb:8f:56:8c:e4:a6:
47:c3:fe:f7:0d:50:f0:f2:ba:40:39:e2:c3:d3:d3:
b9:86:aa:9e:de:45:77:12:31:ae:9b:4d:97:0a:b8:
a8:7a:0b:33:e2:b8:cf:06:74:c0:72:15:4d:9a:eb:
31:bc:7d:ce:55:8b:4e:d1:09:32:8a:1b:aa:80:6a:
b1:2a:e0:a6:5c:4f:ee:ad:af:ed:a4:19:8b:9c:9f:
eb:52:56:bb:f7:6d:bb:81:bd:47:b2:f0:77:74:34:
1e:e0:6f:ac:36:69:fb:fc:e6:d7:e9:ee:e7:04:55:
d2:3f:80:1a:ec:dd:33:3d:bd:6f:2c:90:e5:53:4b:
6b:5b:1b:98:a6:08:07:70:20:59:c7:51:78:67:de:
37:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:83:C5:04:B2:E2:90:87:AF:EA:6A:2D:4C:E6:84:8F:94:80:2A:4F
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/ooPFBLLikIev6motTOaEj5SAKk8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.247.120.0/22
89.42.112.0/23
89.45.208.0/23
141.136.60.0/22
217.26.188.0/22
Signature Algorithm: sha256WithRSAEncryption
21:78:5d:0f:c4:96:05:84:c3:b5:5f:55:f3:b5:c2:64:1a:b8:
e9:77:fe:6c:7e:8e:a9:a4:b8:9e:cd:e0:46:24:61:48:eb:28:
5b:14:59:27:01:2f:f6:6c:2b:51:b7:0a:25:0f:a7:2a:1f:c6:
13:89:39:59:ed:51:e0:01:98:a8:45:d2:ad:3b:cc:4b:9b:cc:
cb:48:7b:f7:4c:7b:7a:9f:fb:f0:3c:f4:ac:d5:7d:ae:1a:c0:
99:04:ea:91:30:eb:48:fb:25:6a:14:c7:13:5e:a4:cc:9e:f1:
4c:4c:5f:c2:40:1a:fa:66:8c:9e:32:78:b9:81:2f:38:2b:7e:
fa:f2:23:5a:9f:00:d0:aa:d9:9e:e7:2c:d3:58:6d:5f:14:d6:
fe:7e:a6:6c:07:c0:8d:e4:ff:b2:66:81:8f:c9:ea:90:cd:dd:
0f:f1:a4:f8:00:9b:4c:72:ff:f7:ae:5c:e7:ef:50:b9:76:c3:
7c:1b:0d:b2:e4:1f:23:b9:d4:1f:b3:ee:e5:de:b8:bb:6c:96:
65:d7:22:35:d6:6a:29:ae:11:9a:48:f1:60:b3:e2:44:e7:98:
b0:b0:c0:f1:e7:b2:ab:1e:49:1c:9e:69:95:3d:57:14:63:27:
2b:72:1f:6b:96:d3:80:e4:d3:a8:fb:f1:f3:ba:e7:cd:b2:90:
82:dd:a1:c3
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYVu1MQxC+rpmXweuM3Mo27jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MzRjNDlmY2ZhOGE0NTA0MWQ5NWVkNGQ4ZDRmYzY5Yzcy
N2E0NjcwHhcNMjMwMTAxMTkzNTE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMjgzYzUwNGIyZTI5MDg3YWZlYTZhMmQ0Y2U2ODQ4Zjk0ODAyYTRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgY0ImTQh+WIfKk16NVSbKQKGjYPV
pDLiT2maRI3m7EuFbSdNwUSHRwKrR2BDX4Ry4FR8yFrUg1tSZKn+apby54Mn9GpX
Bn9BvQZt+oREj/Dp0lREEEAzOZB8A8VRPKH4rSfI8jrWDe2vEkQjJxFOTWXrj1aM
5KZHw/73DVDw8rpAOeLD09O5hqqe3kV3EjGum02XCrioegsz4rjPBnTAchVNmusx
vH3OVYtO0QkyihuqgGqxKuCmXE/ura/tpBmLnJ/rUla79227gb1HsvB3dDQe4G+s
Nmn7/ObX6e7nBFXSP4Aa7N0zPb1vLJDlU0trWxuYpggHcCBZx1F4Z943ewIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFKKDxQSy4pCHr+pqLUzmhI+UgCpPMB8GA1UdIwQY
MBaAFAU0xJ/PqKRQQdle1NjU/GnHJ6RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYt
Y2Q3ZTA2Y2JiNTMxLzEvb29QRkJMTGlrSWV2Nm1vdFRPYUVqNVNBS2s4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYtY2Q3ZTA2Y2JiNTMx
LzEvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQCTfd4AwQB
WSpwAwQBWS3QAwQCjYg8AwQC2Rq8MA0GCSqGSIb3DQEBCwUAA4IBAQAheF0PxJYF
hMO1X1XztcJkGrjpd/5sfo6ppLiezeBGJGFI6yhbFFknAS/2bCtRtwolD6cqH8YT
iTlZ7VHgAZioRdKtO8xLm8zLSHv3THt6n/vwPPSs1X2uGsCZBOqRMOtI+yVqFMcT
XqTMnvFMTF/CQBr6ZoyeMni5gS84K3768iNanwDQqtme5yzTWG1fFNb+fqZsB8CN
5P+yZoGPyeqQzd0P8aT4AJtMcv/3rlzn71C5dsN8Gw2y5B8judQfs+7l3ri7bJZl
1yI11moprhGaSPFgs+JE55iwsMDx57KrHkkcnmmVPVcUYycrch9rltOA5NOo+/Hz
uufNspCC3aHD
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:54 2023 by rpki-client on console-fra.rpki-client.org