Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b0587c-31e8-4a9b-af69-794c9d928cdc/1/DnicB7zLi4u8bsICT9-_zCwpts0.roa
File: DnicB7zLi4u8bsICT9-_zCwpts0.roa (raw, json)
Hash identifier: nUh137Cnw3UISvDq8ibHyNi6a9p1lq0YbHdtUGNGFuI=
Subject key identifier: 0E:78:9C:07:BC:CB:8B:8B:BC:6E:C2:02:4F:DF:BF:CC:2C:29:B6:CD
Certificate issuer: /CN=8acd2eb2f0618b72c646d997d3c95dd836bdd006
Certificate serial: 018B7FD1C5F1060AFB1422F442BEBFF3EDEB
Authority key identifier: 8A:CD:2E:B2:F0:61:8B:72:C6:46:D9:97:D3:C9:5D:D8:36:BD:D0:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/is0usvBhi3LGRtmX08ld2Da90AY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b0587c-31e8-4a9b-af69-794c9d928cdc/1/DnicB7zLi4u8bsICT9-_zCwpts0.roa
Signing time: Mon 30 Oct 2023 09:02:15 +0000
ROA not before: Mon 30 Oct 2023 09:02:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51423
IP address blocks: 213.133.224.0/21 maxlen: 21
213.133.232.0/22 maxlen: 22
213.133.236.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:7f:d1:c5:f1:06:0a:fb:14:22:f4:42:be:bf:f3:ed:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8acd2eb2f0618b72c646d997d3c95dd836bdd006
Validity
Not Before: Oct 30 09:02:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0e789c07bccb8b8bbc6ec2024fdfbfcc2c29b6cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:4d:f6:7e:d1:43:51:e3:d1:8d:0f:b5:d5:72:
23:b7:d7:fd:72:51:6b:36:a8:a5:a2:f0:3b:4e:c7:
5f:10:f2:90:06:bd:e2:27:07:74:14:c2:13:fa:89:
f5:b6:21:67:ed:44:e3:39:d9:37:b9:48:48:ab:cf:
ca:ce:cb:2c:e5:90:37:21:be:33:87:ca:b4:89:02:
e1:5a:98:3f:35:80:7f:05:23:a5:e0:16:15:b2:f5:
73:c4:72:92:c8:e0:52:17:57:67:02:ee:36:fd:e2:
7c:03:b6:ed:0c:16:78:dd:39:62:6b:3e:07:15:5b:
72:31:a2:11:66:8d:a5:1a:63:25:06:a0:0f:86:89:
f2:ef:18:bf:7b:9c:20:cd:fb:af:f1:7f:8d:55:94:
09:29:e0:ab:33:e2:42:01:1c:e1:c8:47:9c:e4:71:
83:ec:42:0e:c3:e1:91:bf:e6:24:5c:d9:c9:2a:48:
57:bd:41:f0:2c:24:de:d4:1f:4a:cd:0f:bb:5a:72:
d1:4d:ac:32:2c:9e:46:52:b2:87:87:a5:61:1e:c4:
2e:05:97:48:8d:01:4f:0a:4c:31:e4:b9:37:a2:a2:
b0:67:67:08:b6:c8:b1:f7:44:74:70:0a:b5:28:c0:
f0:ce:aa:70:63:aa:a7:4f:eb:88:51:7a:ff:de:c9:
3d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:78:9C:07:BC:CB:8B:8B:BC:6E:C2:02:4F:DF:BF:CC:2C:29:B6:CD
X509v3 Authority Key Identifier:
keyid:8A:CD:2E:B2:F0:61:8B:72:C6:46:D9:97:D3:C9:5D:D8:36:BD:D0:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/is0usvBhi3LGRtmX08ld2Da90AY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b0587c-31e8-4a9b-af69-794c9d928cdc/1/DnicB7zLi4u8bsICT9-_zCwpts0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b0587c-31e8-4a9b-af69-794c9d928cdc/1/is0usvBhi3LGRtmX08ld2Da90AY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.133.224.0/20
Signature Algorithm: sha256WithRSAEncryption
96:db:fd:11:46:92:a4:92:a7:15:9b:8b:9f:b4:ca:01:ec:1a:
c7:8b:ce:1a:a0:14:b4:14:fb:a3:77:0a:bb:63:5c:f1:01:37:
cc:b6:54:ca:1a:98:45:e0:12:72:03:47:81:07:d6:f4:54:64:
28:bd:e8:aa:8c:44:40:16:c0:8c:19:87:c3:6c:7f:39:b0:8d:
18:3e:02:6e:ce:0d:3f:04:d5:1e:1a:ad:70:62:99:9e:28:92:
62:0e:44:04:1b:1c:8b:77:b6:73:5c:ea:c1:91:0e:31:e1:f7:
d1:42:6b:d8:25:a2:a5:2c:6c:f8:c0:5d:76:c5:74:89:fe:c6:
f6:1f:eb:b4:16:2f:37:38:d2:c0:d8:f2:e5:17:11:6d:20:ea:
4f:fd:66:6c:f3:85:eb:e1:c3:74:29:14:73:60:e4:42:60:86:
b1:9f:84:64:07:c6:2b:1c:49:0a:76:9f:58:5a:72:26:85:e9:
54:a0:2c:1f:82:3d:a8:71:bd:7b:e7:d0:55:c4:6f:34:f9:ab:
a0:b7:c6:8d:9d:42:03:fe:97:76:f1:c0:1d:4a:33:64:3a:c2:
7a:64:f6:db:e8:a6:fe:0e:a0:0d:b7:c5:9e:fd:b8:c8:2e:82:
80:57:3d:b6:5f:ab:fb:eb:7f:1b:62:ae:3b:7d:74:9c:66:ef:
4e:aa:ce:3b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYt/0cXxBgr7FCL0Qr6/8+3rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhY2QyZWIyZjA2MThiNzJjNjQ2ZDk5N2QzYzk1ZGQ4MzZi
ZGQwMDYwHhcNMjMxMDMwMDkwMjE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZTc4OWMwN2JjY2I4YjhiYmM2ZWMyMDI0ZmRmYmZjYzJjMjliNmNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAok32ftFDUePRjQ+11XIjt9f9clFr
NqilovA7TsdfEPKQBr3iJwd0FMIT+on1tiFn7UTjOdk3uUhIq8/Kzsss5ZA3Ib4z
h8q0iQLhWpg/NYB/BSOl4BYVsvVzxHKSyOBSF1dnAu42/eJ8A7btDBZ43Tliaz4H
FVtyMaIRZo2lGmMlBqAPhony7xi/e5wgzfuv8X+NVZQJKeCrM+JCARzhyEec5HGD
7EIOw+GRv+YkXNnJKkhXvUHwLCTe1B9KzQ+7WnLRTawyLJ5GUrKHh6VhHsQuBZdI
jQFPCkwx5Lk3oqKwZ2cItsix90R0cAq1KMDwzqpwY6qnT+uIUXr/3sk9awIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFA54nAe8y4uLvG7CAk/fv8wsKbbNMB8GA1UdIwQY
MBaAFIrNLrLwYYtyxkbZl9PJXdg2vdAGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXMwdXN2QmhpM0xHUnRtWDA4bGQyRGE5MEFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iMDU4N2MtMzFlOC00YTliLWFmNjkt
Nzk0YzlkOTI4Y2RjLzEvRG5pY0I3ekxpNHU4YnNJQ1Q5LV96Q3dwdHMwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9iMDU4N2MtMzFlOC00YTliLWFmNjktNzk0YzlkOTI4Y2Rj
LzEvaXMwdXN2QmhpM0xHUnRtWDA4bGQyRGE5MEFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE1YXgMA0G
CSqGSIb3DQEBCwUAA4IBAQCW2/0RRpKkkqcVm4uftMoB7BrHi84aoBS0FPujdwq7
Y1zxATfMtlTKGphF4BJyA0eBB9b0VGQoveiqjERAFsCMGYfDbH85sI0YPgJuzg0/
BNUeGq1wYpmeKJJiDkQEGxyLd7ZzXOrBkQ4x4ffRQmvYJaKlLGz4wF12xXSJ/sb2
H+u0Fi83ONLA2PLlFxFtIOpP/WZs84Xr4cN0KRRzYORCYIaxn4RkB8YrHEkKdp9Y
WnImhelUoCwfgj2ocb1759BVxG80+augt8aNnUID/pd28cAdSjNkOsJ6ZPbb6Kb+
DqANt8We/bjILoKAVz22X6v7638bYq47fXScZu9Oqs47
-----END CERTIFICATE-----
Generated at Mon Jan 1 13:24:09 2024 by rpki-client on console-fra.rpki-client.org