Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/vc4MKTeHCZhdf08Ac90BW47DzPo.roa
File: vc4MKTeHCZhdf08Ac90BW47DzPo.roa (raw, json)
Hash identifier: wsuEOFEhHHHElZnW1lFrZTUBK8WsVRN1ag57QrC8zXM=
Subject key identifier: BD:CE:0C:29:37:87:09:98:5D:7F:4F:00:73:DD:01:5B:8E:C3:CC:FA
Certificate issuer: /CN=21bad74e7f6c0949a2736a57478496d7d8b450e6
Certificate serial: 0185730CD14122FA3B1EDEEE4FF3D3636EB6
Authority key identifier: 21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/vc4MKTeHCZhdf08Ac90BW47DzPo.roa
Signing time: Mon 02 Jan 2023 15:14:57 +0000
ROA not before: Mon 02 Jan 2023 15:14:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202001
IP address blocks: 147.234.34.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:0c:d1:41:22:fa:3b:1e:de:ee:4f:f3:d3:63:6e:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21bad74e7f6c0949a2736a57478496d7d8b450e6
Validity
Not Before: Jan 2 15:14:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bdce0c29378709985d7f4f0073dd015b8ec3ccfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:29:0e:e2:6a:c0:f9:b1:63:c1:5d:8e:34:e9:
e3:9d:c2:8f:4a:09:de:5b:78:fa:59:86:0b:8f:ea:
ef:02:58:fe:57:d1:c2:35:cd:d1:ff:ee:db:2b:0d:
91:20:bb:b4:86:43:a8:b3:99:6f:03:63:fc:6f:10:
e3:88:41:7a:3b:86:03:be:a3:29:31:3f:d8:3f:13:
a5:3a:9a:8a:11:e4:a8:40:8d:96:ea:f3:e4:27:56:
4a:1b:67:76:6d:68:85:30:74:67:df:4f:03:28:ed:
e0:19:2f:0b:00:0a:ab:b3:7a:4f:c2:c1:42:6a:38:
a1:7e:69:4d:0b:12:0c:08:f8:0f:36:79:e2:a7:b7:
03:07:82:d8:88:a4:80:1f:b0:84:c2:98:a1:5f:7b:
bd:8d:78:f9:ee:d7:3c:a2:3c:d5:e6:01:14:fa:e1:
5c:92:8d:7b:c9:9f:1b:d8:de:e0:53:96:53:aa:89:
73:99:95:eb:33:69:b3:13:f0:59:be:a0:90:79:86:
29:2e:a8:48:1e:4d:28:b0:ab:7e:9b:17:a5:97:89:
8e:8c:33:8e:0c:0d:ff:f5:7d:38:99:42:8f:7c:ff:
ed:20:f1:7e:ac:da:f8:2d:1b:fb:51:64:0c:5d:4f:
59:05:bf:4a:d9:c4:9a:1d:ac:35:4a:6d:e0:ec:93:
25:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:CE:0C:29:37:87:09:98:5D:7F:4F:00:73:DD:01:5B:8E:C3:CC:FA
X509v3 Authority Key Identifier:
keyid:21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/vc4MKTeHCZhdf08Ac90BW47DzPo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.234.34.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:49:1e:36:d6:ae:ba:32:43:61:95:3b:9f:0a:4f:14:06:e9:
2a:61:3f:26:02:ba:83:33:be:2c:a1:ce:02:77:59:ad:d9:5a:
3d:ef:2d:aa:6c:b0:fc:ad:43:7d:34:e3:7f:8f:d0:26:53:49:
b5:17:93:4e:6c:84:0d:5a:e3:f1:c4:98:8e:17:11:a0:c5:82:
3f:85:ec:17:66:02:bc:ad:39:4f:e2:f4:30:ab:d0:5a:04:b4:
5b:9a:96:f2:32:14:c2:d6:be:22:68:f6:4e:75:bf:90:85:fb:
d9:0f:b3:f6:c0:fd:17:ba:8e:e6:a3:b7:00:31:90:c0:46:e3:
ea:99:7a:1b:cb:bd:5b:95:2d:c8:47:00:44:bb:7f:db:bb:7e:
74:3f:49:3a:3a:f9:96:4d:43:07:3d:bd:71:3b:38:9a:03:a4:
8d:64:a0:ef:85:22:83:5f:de:83:6e:2b:cd:a7:a3:76:29:ba:
3f:b2:45:ed:7a:18:a5:92:4e:cc:1f:63:50:7c:9a:44:2b:12:
ba:ab:07:ef:64:c0:6d:cd:b0:7e:2d:95:a6:c8:ac:b3:47:70:
6b:0a:9b:47:86:9c:ae:f1:fd:cf:9b:8d:1d:f2:b6:46:06:09:
f0:e9:2e:fb:f3:3e:e1:c7:ba:62:27:17:cb:80:02:36:fd:04:
53:3e:b7:c2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVzDNFBIvo7Ht7uT/PTY262MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxYmFkNzRlN2Y2YzA5NDlhMjczNmE1NzQ3ODQ5NmQ3ZDhi
NDUwZTYwHhcNMjMwMTAyMTUxNDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZGNlMGMyOTM3ODcwOTk4NWQ3ZjRmMDA3M2RkMDE1YjhlYzNjY2ZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkykO4mrA+bFjwV2ONOnjncKPSgne
W3j6WYYLj+rvAlj+V9HCNc3R/+7bKw2RILu0hkOos5lvA2P8bxDjiEF6O4YDvqMp
MT/YPxOlOpqKEeSoQI2W6vPkJ1ZKG2d2bWiFMHRn308DKO3gGS8LAAqrs3pPwsFC
ajihfmlNCxIMCPgPNnnip7cDB4LYiKSAH7CEwpihX3u9jXj57tc8ojzV5gEU+uFc
ko17yZ8b2N7gU5ZTqolzmZXrM2mzE/BZvqCQeYYpLqhIHk0osKt+mxell4mOjDOO
DA3/9X04mUKPfP/tIPF+rNr4LRv7UWQMXU9ZBb9K2cSaHaw1Sm3g7JMl9wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFL3ODCk3hwmYXX9PAHPdAVuOw8z6MB8GA1UdIwQY
MBaAFCG6105/bAlJonNqV0eEltfYtFDmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWJyWFRuOXNDVW1pYzJwWFI0U1cxOWkwVU9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC84ZGRjMzgtN2ExYS00OTA2LWE4ZWQt
NDQzMzIyOWE4NDczLzEvdmM0TUtUZUhDWmhkZjA4QWM5MEJXNDdEelBvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC84ZGRjMzgtN2ExYS00OTA2LWE4ZWQtNDQzMzIyOWE4NDcz
LzEvSWJyWFRuOXNDVW1pYzJwWFI0U1cxOWkwVU9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk+oiMA0G
CSqGSIb3DQEBCwUAA4IBAQBNSR421q66MkNhlTufCk8UBukqYT8mArqDM74soc4C
d1mt2Vo97y2qbLD8rUN9NON/j9AmU0m1F5NObIQNWuPxxJiOFxGgxYI/hewXZgK8
rTlP4vQwq9BaBLRbmpbyMhTC1r4iaPZOdb+QhfvZD7P2wP0Xuo7mo7cAMZDARuPq
mXoby71blS3IRwBEu3/bu350P0k6OvmWTUMHPb1xOziaA6SNZKDvhSKDX96DbivN
p6N2Kbo/skXtehilkk7MH2NQfJpEKxK6qwfvZMBtzbB+LZWmyKyzR3BrCptHhpyu
8f3Pm40d8rZGBgnw6S778z7hx7piJxfLgAI2/QRTPrfC
-----END CERTIFICATE-----
Generated at Tue Jan 2 09:19:32 2024 by rpki-client on console-fra.rpki-client.org