Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/sxoFbjp17CFH7_SULe1u75zSOls.roa
File: sxoFbjp17CFH7_SULe1u75zSOls.roa (raw, json)
Hash identifier: DE+mm8fIHk1IIpSZSqG/OGrngsNcXWeuQMF/aknAQ3Y=
Subject key identifier: B3:1A:05:6E:3A:75:EC:21:47:EF:F4:94:2D:ED:6E:EF:9C:D2:3A:5B
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 0185727A42C7CB3AD89A9954979F6690D1E9
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/sxoFbjp17CFH7_SULe1u75zSOls.roa
Signing time: Mon 02 Jan 2023 12:34:53 +0000
ROA not before: Mon 02 Jan 2023 12:34:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212552
IP address blocks: 212.90.102.0/23 maxlen: 24
103.75.196.0/22 maxlen: 24
82.115.16.0/24 maxlen: 24
82.115.24.0/22 maxlen: 24
82.115.20.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:7a:42:c7:cb:3a:d8:9a:99:54:97:9f:66:90:d1:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jan 2 12:34:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b31a056e3a75ec2147eff4942ded6eef9cd23a5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c6:65:10:8f:4c:7c:14:b3:f0:c6:3a:6e:91:
dc:27:07:f1:f3:21:40:ab:d6:44:1b:88:30:c0:66:
08:d1:a0:ac:d9:09:01:6a:d1:25:e9:64:bc:e0:be:
c5:b3:d0:01:ef:65:e6:8d:af:85:35:50:97:f7:63:
bc:77:f6:34:c8:3a:a8:9a:24:16:85:50:8d:9c:6b:
8f:9d:5e:03:9f:48:82:80:de:df:e7:24:97:8e:11:
ff:d3:f6:87:93:7a:7d:eb:e2:76:16:08:ac:dd:3d:
e6:5a:0a:5e:40:f9:d7:9d:37:e1:c3:7d:45:a5:e1:
f7:ed:53:65:a7:60:ba:2e:c0:cc:5e:89:e7:b0:4c:
0e:0a:d2:4f:50:b1:bd:bc:ee:6e:78:4b:42:c4:43:
dc:bd:18:08:77:35:1d:56:c6:59:b9:7a:da:58:5a:
1c:30:e7:61:fd:2e:83:c6:2d:6a:09:73:d4:89:6e:
db:45:76:58:c0:b6:23:82:2f:d9:37:db:da:5c:3b:
27:19:b4:86:da:9e:c5:7b:d8:83:a9:98:d7:11:84:
d7:28:77:c5:ce:43:bf:7c:62:ff:b0:e5:e2:a6:8c:
ea:f2:fd:58:4b:17:e7:ff:a3:4c:56:61:33:aa:b7:
ee:98:f8:f8:81:28:c6:a2:ae:c6:87:65:c1:58:f8:
6e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:1A:05:6E:3A:75:EC:21:47:EF:F4:94:2D:ED:6E:EF:9C:D2:3A:5B
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/sxoFbjp17CFH7_SULe1u75zSOls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.115.16.0/24
82.115.20.0/23
82.115.24.0/22
103.75.196.0/22
212.90.102.0/23
Signature Algorithm: sha256WithRSAEncryption
bd:ae:26:73:e9:c3:96:e4:71:69:2d:73:90:83:19:13:8b:29:
7d:ed:40:ff:18:5e:98:3c:af:27:f1:86:ac:97:a6:c8:20:22:
a9:6d:48:9b:d8:a3:46:5a:cf:cd:d2:d3:dc:1b:f3:f2:49:76:
4c:08:c5:a4:73:18:22:7f:7a:5f:27:f1:78:39:08:0a:18:c2:
a0:d3:5e:19:87:0e:81:bf:df:a0:01:08:77:f8:c1:95:22:41:
b8:ac:d2:85:99:3e:ff:7f:ea:89:f1:eb:f6:1b:17:56:27:7a:
0b:6c:d7:93:8d:52:c8:f9:08:67:94:74:bc:56:10:5f:f4:44:
80:e8:f4:5a:b4:d8:6a:f7:1c:2d:b0:e5:5a:a6:bf:e1:90:37:
14:6d:85:ee:17:3a:50:c6:43:29:e0:a1:d6:7c:f7:52:d0:96:
b5:9f:48:2c:e5:af:01:6b:1b:fe:c0:9d:56:d7:4a:ed:a3:a7:
5e:b3:77:be:b2:a0:5d:f6:7c:24:f5:36:98:fb:96:f2:46:91:
68:94:4c:ab:ef:89:a3:a2:eb:76:56:8b:e0:5e:2b:b1:df:11:
4f:cf:52:5a:ae:c1:2a:65:1d:f8:1d:e8:bb:28:78:f2:96:f5:
00:6f:72:b5:7e:49:91:e1:4c:c2:98:93:09:13:86:4a:e4:45:
fa:0d:40:6e
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYVyekLHyzrYmplUl59mkNHpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYzNkYWExYjE0ODUwZjJlNjFjNTkyYjIxOTE5MTVhNWU2
NWE0NzgwHhcNMjMwMTAyMTIzNDUzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMzFhMDU2ZTNhNzVlYzIxNDdlZmY0OTQyZGVkNmVlZjljZDIzYTViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsZlEI9MfBSz8MY6bpHcJwfx8yFA
q9ZEG4gwwGYI0aCs2QkBatEl6WS84L7Fs9AB72Xmja+FNVCX92O8d/Y0yDqomiQW
hVCNnGuPnV4Dn0iCgN7f5ySXjhH/0/aHk3p96+J2Fgis3T3mWgpeQPnXnTfhw31F
peH37VNlp2C6LsDMXonnsEwOCtJPULG9vO5ueEtCxEPcvRgIdzUdVsZZuXraWFoc
MOdh/S6Dxi1qCXPUiW7bRXZYwLYjgi/ZN9vaXDsnGbSG2p7Fe9iDqZjXEYTXKHfF
zkO/fGL/sOXipozq8v1YSxfn/6NMVmEzqrfumPj4gSjGoq7Gh2XBWPhurwIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFLMaBW46dewhR+/0lC3tbu+c0jpbMB8GA1UdIwQY
MBaAFCrD2qGxSFDy5hxZKyGRkVpeZaR4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUt
ZmUwNjU5MTc2YTU2LzEvc3hvRmJqcDE3Q0ZIN19TVUxlMXU3NXpTT2xzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUtZmUwNjU5MTc2YTU2
LzEvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAUnMQAwQB
UnMUAwQCUnMYAwQCZ0vEAwQB1FpmMA0GCSqGSIb3DQEBCwUAA4IBAQC9riZz6cOW
5HFpLXOQgxkTiyl97UD/GF6YPK8n8Yasl6bIICKpbUib2KNGWs/N0tPcG/PySXZM
CMWkcxgif3pfJ/F4OQgKGMKg014Zhw6Bv9+gAQh3+MGVIkG4rNKFmT7/f+qJ8ev2
GxdWJ3oLbNeTjVLI+QhnlHS8VhBf9ESA6PRatNhq9xwtsOVapr/hkDcUbYXuFzpQ
xkMp4KHWfPdS0Ja1n0gs5a8Baxv+wJ1W10rto6des3e+sqBd9nwk9TaY+5byRpFo
lEyr74mjout2VovgXiux3xFPz1JarsEqZR34Hei7KHjylvUAb3K1fkmR4UzCmJMJ
E4ZK5EX6DUBu
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:45 2023 by rpki-client on console-fra.rpki-client.org