Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/tEs00twIW52msUnxnbZwXAmpDeY.roa
File: tEs00twIW52msUnxnbZwXAmpDeY.roa (raw, json)
Hash identifier: pTQYv3Aq0EB2ZblhGKPM3Da6QTWFBgi1jPQdfltn5sI=
Subject key identifier: B4:4B:34:D2:DC:08:5B:9D:A6:B1:49:F1:9D:B6:70:5C:09:A9:0D:E6
Certificate issuer: /CN=f84128146b7bec8bd1185bbe0c3b9340aaf5b714
Certificate serial: 01856B8A2D5BF4D7E97BB2CAFC183E6D817E
Authority key identifier: F8:41:28:14:6B:7B:EC:8B:D1:18:5B:BE:0C:3B:93:40:AA:F5:B7:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-EEoFGt77IvRGFu-DDuTQKr1txQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/tEs00twIW52msUnxnbZwXAmpDeY.roa
Signing time: Sun 01 Jan 2023 04:14:55 +0000
ROA not before: Sun 01 Jan 2023 04:14:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202103
IP address blocks: 176.39.0.0/19 maxlen: 20
92.52.128.0/18 maxlen: 20
31.134.64.0/19 maxlen: 20
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:8a:2d:5b:f4:d7:e9:7b:b2:ca:fc:18:3e:6d:81:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f84128146b7bec8bd1185bbe0c3b9340aaf5b714
Validity
Not Before: Jan 1 04:14:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b44b34d2dc085b9da6b149f19db6705c09a90de6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ac:ae:5a:6f:42:09:a1:50:73:4c:69:28:15:
9d:09:b6:ba:50:93:4d:82:44:6f:16:fa:62:2c:e2:
95:da:d0:9a:a1:fc:9f:d5:b1:23:a9:68:da:30:01:
bc:28:1a:20:93:16:d0:3b:e5:a1:ba:51:8d:38:30:
cd:c3:4a:c4:78:d8:34:a9:50:86:e4:1c:0d:f0:94:
7f:2b:87:5f:55:fa:2a:7c:87:53:c6:3b:81:d1:e5:
e3:74:f0:09:ac:56:32:87:3a:2e:c9:e5:04:fa:a0:
fe:f4:b0:a6:2b:9c:3f:74:fd:bf:68:82:e6:eb:89:
a6:42:e8:13:e4:86:c0:8c:8f:42:1b:60:52:a4:ff:
cd:54:18:7d:33:9b:c4:d2:74:59:71:ab:36:d3:0d:
bf:1a:50:04:26:ef:5c:a1:08:bb:16:09:d1:b7:55:
65:7f:ee:52:55:29:1b:cc:63:0b:79:0c:e7:b0:31:
e6:ad:7c:68:88:b4:e5:7b:53:d8:cd:7e:2a:45:33:
24:97:55:fe:10:cf:b4:e0:75:7a:3e:e2:8e:00:0e:
e2:2d:ab:a9:a6:4c:82:b7:c8:bf:37:f5:b9:25:34:
78:b8:a5:da:77:ad:9f:53:3c:af:e8:4d:f4:31:09:
ea:9b:5d:08:0b:96:2a:56:b2:67:17:3f:a2:a3:67:
8f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:4B:34:D2:DC:08:5B:9D:A6:B1:49:F1:9D:B6:70:5C:09:A9:0D:E6
X509v3 Authority Key Identifier:
keyid:F8:41:28:14:6B:7B:EC:8B:D1:18:5B:BE:0C:3B:93:40:AA:F5:B7:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-EEoFGt77IvRGFu-DDuTQKr1txQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/tEs00twIW52msUnxnbZwXAmpDeY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/1-EEoFGt77IvRGFu-DDuTQKr1txQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.134.64.0/19
92.52.128.0/18
176.39.0.0/19
Signature Algorithm: sha256WithRSAEncryption
ba:1e:26:55:05:ae:6a:f4:9c:43:53:21:36:9f:67:6f:85:f3:
82:ec:ca:90:3f:c8:d1:e1:6d:20:69:20:ce:1b:08:27:20:c2:
71:55:fb:34:dd:b8:6e:82:17:cd:86:23:84:0f:ec:8d:75:a7:
1d:54:91:9e:7e:96:83:22:84:a8:1b:7d:92:d5:ce:4c:84:d8:
20:84:17:76:90:b7:14:31:22:35:a6:3c:bb:88:f4:c0:cb:71:
bc:7b:1b:e7:94:93:63:29:ae:74:6f:f2:45:80:60:c1:e8:e5:
ac:5c:b8:81:c3:4a:80:11:83:de:11:ca:cc:47:38:1a:13:b8:
0e:6d:ef:63:c1:0e:63:d4:8a:9d:a1:9c:a0:5e:f7:de:e6:26:
a0:23:f1:f3:1b:f8:97:43:a8:bc:7c:66:2b:60:0a:ae:d6:d0:
83:3a:67:da:b7:b2:29:ad:97:cd:3b:5d:c5:e9:0c:86:a0:06:
63:83:33:00:21:4e:96:1e:d8:6c:6e:8e:c5:70:c7:72:b0:96:
99:cf:e0:1a:09:a9:9b:86:a8:60:d5:54:a1:13:7c:52:ba:31:
b9:22:ae:3c:f7:d7:4d:ad:68:2e:8e:0e:75:cf:ec:f4:52:b3:
e7:08:7b:bc:69:58:2c:54:21:27:08:89:de:ad:aa:bd:ee:f6:
9b:e2:83:88
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAYVrii1b9Nfpe7LK/Bg+bYF+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4NDEyODE0NmI3YmVjOGJkMTE4NWJiZTBjM2I5MzQwYWFm
NWI3MTQwHhcNMjMwMTAxMDQxNDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNDRiMzRkMmRjMDg1YjlkYTZiMTQ5ZjE5ZGI2NzA1YzA5YTkwZGU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApayuWm9CCaFQc0xpKBWdCba6UJNN
gkRvFvpiLOKV2tCaofyf1bEjqWjaMAG8KBogkxbQO+WhulGNODDNw0rEeNg0qVCG
5BwN8JR/K4dfVfoqfIdTxjuB0eXjdPAJrFYyhzouyeUE+qD+9LCmK5w/dP2/aILm
64mmQugT5IbAjI9CG2BSpP/NVBh9M5vE0nRZcas20w2/GlAEJu9coQi7FgnRt1Vl
f+5SVSkbzGMLeQznsDHmrXxoiLTle1PYzX4qRTMkl1X+EM+04HV6PuKOAA7iLaup
pkyCt8i/N/W5JTR4uKXad62fUzyv6E30MQnqm10IC5YqVrJnFz+io2ePZwIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFLRLNNLcCFudprFJ8Z22cFwJqQ3mMB8GA1UdIwQY
MBaAFPhBKBRre+yL0Rhbvgw7k0Cq9bcUMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1FRW9GR3Q3N0l2UkdGdS1ERHVUUUtyMXR4US5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjIvZmIyNDExLTQ4NWItNDE0My05MjQx
LTEzODM5NjQwYTYwNC8xL3RFczAwdHdJVzUybXNVbnhuYlp3WEFtcERlWS5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNjIvZmIyNDExLTQ4NWItNDE0My05MjQxLTEzODM5NjQwYTYw
NC8xLzEtRUVvRkd0NzdJdlJHRnUtRER1VFFLcjF0eFEuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBIDBAUfhkAD
BAZcNIADBAWwJwAwDQYJKoZIhvcNAQELBQADggEBALoeJlUFrmr0nENTITafZ2+F
84LsypA/yNHhbSBpIM4bCCcgwnFV+zTduG6CF82GI4QP7I11px1UkZ5+loMihKgb
fZLVzkyE2CCEF3aQtxQxIjWmPLuI9MDLcbx7G+eUk2MprnRv8kWAYMHo5axcuIHD
SoARg94RysxHOBoTuA5t72PBDmPUip2hnKBe997mJqAj8fMb+JdDqLx8ZitgCq7W
0IM6Z9q3simtl807XcXpDIagBmODMwAhTpYe2GxujsVwx3KwlpnP4BoJqZuGqGDV
VKETfFK6Mbkirjz3102taC6ODnXP7PRSs+cIe7xpWCxUIScIid6tqr3u9pvig4g=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:44 2023 by rpki-client on console-ams.rpki-client.org