Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/TX0ULX_7zj3AOaOYKuHIrFQ_GR8.roa
File: TX0ULX_7zj3AOaOYKuHIrFQ_GR8.roa (raw, json)
Hash identifier: fMUcGydWnaPhgn5Ut1a6wlpOszRE/JDEuN/w2iJuevs=
Subject key identifier: 4D:7D:14:2D:7F:FB:CE:3D:C0:39:A3:98:2A:E1:C8:AC:54:3F:19:1F
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 018692BFC23EA3DE4878C474E48957882F2D
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/TX0ULX_7zj3AOaOYKuHIrFQ_GR8.roa
Signing time: Mon 27 Feb 2023 12:01:25 +0000
ROA not before: Mon 27 Feb 2023 12:01:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 398465
IP address blocks: 5.34.208.0/20 maxlen: 24
185.36.192.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:92:bf:c2:3e:a3:de:48:78:c4:74:e4:89:57:88:2f:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Feb 27 12:01:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4d7d142d7ffbce3dc039a3982ae1c8ac543f191f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:49:6b:f4:31:34:f5:bc:0d:a1:ea:7c:c2:61:
fe:85:f7:cb:d4:39:03:35:81:14:e4:df:67:cc:cf:
c6:ff:91:24:65:b4:f5:d5:24:6a:f9:47:61:bd:55:
da:03:b3:bb:3f:7c:a9:36:1a:a0:43:e2:31:70:ea:
11:25:22:3d:96:25:83:eb:8b:67:f4:b7:6d:46:04:
5b:9d:5b:b6:96:4b:28:47:cc:16:4d:bd:46:ef:63:
ef:06:af:75:be:69:2e:8e:3b:78:35:b7:19:02:e6:
d5:8f:6e:df:89:c1:1d:30:51:33:40:28:7a:5d:91:
07:73:bd:6a:52:5c:c8:51:7e:be:e5:64:f9:bc:f6:
8c:58:f8:52:2d:61:64:bf:ca:40:a1:76:55:7a:31:
10:4b:27:50:34:2c:7c:b8:8b:8f:f5:e9:05:c9:87:
02:6b:8c:6c:1e:38:1c:1a:bf:52:64:d8:1d:ac:e5:
35:f7:d6:15:9e:52:7e:c0:56:a8:9d:49:4e:75:89:
a7:89:5c:d7:e7:4d:ea:bf:5f:ed:0f:42:33:9a:47:
b8:08:28:c5:bc:03:6b:2d:da:bd:a4:8c:6f:12:3e:
36:26:db:da:08:b4:bb:27:f8:4f:c8:e4:a5:b4:21:
92:6f:55:1c:9c:17:1d:3d:ff:d1:c0:72:b1:2d:f7:
49:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:7D:14:2D:7F:FB:CE:3D:C0:39:A3:98:2A:E1:C8:AC:54:3F:19:1F
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/TX0ULX_7zj3AOaOYKuHIrFQ_GR8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.34.208.0/20
185.36.192.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:f2:b4:67:82:eb:a2:19:56:60:b4:76:e3:81:b8:41:c8:94:
48:bf:4a:74:f6:fd:7d:f5:6b:92:ef:80:fb:cb:89:c1:2d:2f:
1b:dc:6e:65:01:13:b1:11:23:ad:b9:e6:da:a7:1c:68:a2:a2:
00:67:61:46:4b:14:f0:56:06:6f:bc:ab:ff:f0:a6:22:b2:fe:
bd:91:77:a2:d1:11:78:d4:9d:b9:77:e9:8e:fb:94:07:99:50:
57:60:2a:5e:fd:15:83:03:65:64:3a:48:b8:02:90:39:9f:f0:
25:16:aa:23:b9:a9:6b:16:3f:98:b3:50:53:28:1a:dd:c6:d5:
37:0a:a2:c0:74:ac:a9:4a:e3:c3:70:e7:07:c7:9d:cc:08:f8:
1c:36:82:d2:6c:1e:66:dd:98:64:3f:38:39:dc:50:e6:8e:72:
40:8c:18:1b:5d:99:e3:f7:f6:b6:1e:25:d0:c5:f6:1d:6f:8b:
8e:33:b7:a7:7c:0a:3f:9b:74:cd:f7:1d:c2:7a:8f:61:48:e9:
0b:a4:d4:0f:04:1a:0b:b2:4a:9d:ac:94:4b:aa:ba:07:09:4f:
b7:52:c8:19:db:6a:55:e8:44:04:54:c2:5f:b3:13:f7:b9:b8:
32:4c:f4:9d:d2:da:28:95:98:d1:56:c6:50:18:34:d3:65:c8:
95:31:e2:73
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYaSv8I+o95IeMR05IlXiC8tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYzNkYWExYjE0ODUwZjJlNjFjNTkyYjIxOTE5MTVhNWU2
NWE0NzgwHhcNMjMwMjI3MTIwMTI1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZDdkMTQyZDdmZmJjZTNkYzAzOWEzOTgyYWUxYzhhYzU0M2YxOTFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgklr9DE09bwNoep8wmH+hffL1DkD
NYEU5N9nzM/G/5EkZbT11SRq+UdhvVXaA7O7P3ypNhqgQ+IxcOoRJSI9liWD64tn
9LdtRgRbnVu2lksoR8wWTb1G72PvBq91vmkujjt4NbcZAubVj27ficEdMFEzQCh6
XZEHc71qUlzIUX6+5WT5vPaMWPhSLWFkv8pAoXZVejEQSydQNCx8uIuP9ekFyYcC
a4xsHjgcGr9SZNgdrOU199YVnlJ+wFaonUlOdYmniVzX503qv1/tD0Izmke4CCjF
vANrLdq9pIxvEj42JtvaCLS7J/hPyOSltCGSb1UcnBcdPf/RwHKxLfdJYwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFE19FC1/+849wDmjmCrhyKxUPxkfMB8GA1UdIwQY
MBaAFCrD2qGxSFDy5hxZKyGRkVpeZaR4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUt
ZmUwNjU5MTc2YTU2LzEvVFgwVUxYXzd6ajNBT2FPWUt1SElyRlFfR1I4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUtZmUwNjU5MTc2YTU2
LzEvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEBSLQAwQC
uSTAMA0GCSqGSIb3DQEBCwUAA4IBAQB88rRnguuiGVZgtHbjgbhByJRIv0p09v19
9WuS74D7y4nBLS8b3G5lAROxESOtuebapxxooqIAZ2FGSxTwVgZvvKv/8KYisv69
kXei0RF41J25d+mO+5QHmVBXYCpe/RWDA2VkOki4ApA5n/AlFqojualrFj+Ys1BT
KBrdxtU3CqLAdKypSuPDcOcHx53MCPgcNoLSbB5m3ZhkPzg53FDmjnJAjBgbXZnj
9/a2HiXQxfYdb4uOM7enfAo/m3TN9x3Ceo9hSOkLpNQPBBoLskqdrJRLqroHCU+3
UsgZ22pV6EQEVMJfsxP3ubgyTPSd0toolZjRVsZQGDTTZciVMeJz
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:24 2023 by rpki-client on console-ams.rpki-client.org