Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/v_Bu9nILRkurku67-rHAcwPFjC4.roa
File: v_Bu9nILRkurku67-rHAcwPFjC4.roa (raw, json)
Hash identifier: /Kx4po98TskvGboOLUObOE1464mIyk6b7iKMTb7hn6s=
Subject key identifier: BF:F0:6E:F6:72:0B:46:4B:AB:92:EE:BB:FA:B1:C0:73:03:C5:8C:2E
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 018B3B5288D54621151B321B4D8325FE9F73
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/v_Bu9nILRkurku67-rHAcwPFjC4.roa
Signing time: Tue 17 Oct 2023 01:49:06 +0000
ROA not before: Tue 17 Oct 2023 01:49:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 22773
IP address blocks: 159.255.32.0/21 maxlen: 24
188.253.8.0/22 maxlen: 24
188.253.12.0/22 maxlen: 22
82.115.0.0/21 maxlen: 24
188.214.236.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:3b:52:88:d5:46:21:15:1b:32:1b:4d:83:25:fe:9f:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Oct 17 01:49:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bff06ef6720b464bab92eebbfab1c07303c58c2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:89:41:49:2e:48:da:8e:0e:41:98:28:3f:66:
38:a5:c1:cc:15:8f:12:8e:67:c6:32:5c:13:46:dc:
3a:bf:e8:e0:2c:c3:37:73:bf:d0:36:a0:7e:d9:8f:
30:51:6f:87:fb:89:48:c7:13:9a:d7:31:5d:1d:be:
00:53:8e:44:3e:17:e9:f2:b2:f5:94:8c:fc:de:b2:
d3:c9:ac:41:dd:c8:f4:0d:b3:f9:33:30:b5:dd:d0:
d1:a9:c0:77:fe:5d:ec:ba:2c:bb:e5:55:39:b3:53:
81:d0:74:fa:d6:4a:03:7a:00:e2:6c:06:32:11:42:
a4:81:24:cd:d8:0e:ad:59:7e:69:e6:5c:57:85:f9:
4c:53:f0:12:7d:e0:6d:46:df:9c:64:74:a2:92:55:
d0:ff:ff:02:c0:8a:d7:27:2c:0c:80:de:66:12:a2:
0d:73:41:2f:56:ca:63:9a:74:98:ed:c2:89:ac:cc:
e2:dc:e0:45:9f:f4:29:30:a7:96:05:80:28:b7:6a:
d9:4d:08:d9:06:5c:34:be:04:ae:14:6b:72:79:af:
bc:43:c6:93:96:80:46:d8:7f:61:73:b3:44:e6:bf:
4d:ff:df:57:61:ad:78:cd:2e:56:55:1e:3e:83:9d:
2c:00:59:d3:89:ad:7b:97:a9:3a:09:bd:e6:19:cb:
0b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:F0:6E:F6:72:0B:46:4B:AB:92:EE:BB:FA:B1:C0:73:03:C5:8C:2E
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/v_Bu9nILRkurku67-rHAcwPFjC4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.115.0.0/21
159.255.32.0/21
188.214.236.0/22
188.253.8.0/21
Signature Algorithm: sha256WithRSAEncryption
15:dc:dd:f1:2a:d5:6a:c7:32:a5:87:c9:4e:3a:cb:35:79:21:
77:fc:c4:4d:96:98:1e:cd:a6:d3:0b:c3:3e:89:7e:14:59:fa:
e8:25:a6:32:80:9b:a2:50:cf:1e:eb:41:d1:81:f8:14:a3:7c:
88:ac:4c:0e:6f:f6:07:4b:30:65:d4:2d:a1:16:80:f7:be:55:
7f:35:8b:eb:07:28:76:f1:82:7e:d3:c0:9a:68:3a:7a:3e:2a:
63:c3:d0:d7:5d:8a:67:15:8d:66:ce:64:1a:5c:c9:50:18:11:
e2:b6:50:b2:c7:2b:88:81:f6:1b:1f:fa:16:2c:4a:30:66:68:
e8:90:56:e3:54:20:f2:29:f8:c0:f6:59:c9:7d:38:c9:9e:c9:
70:87:a3:f4:cd:cf:0f:ca:d5:4f:00:73:cf:6e:ed:8b:4d:ec:
ef:aa:ca:50:d0:7f:15:a5:d5:4c:da:7d:cf:4d:2c:40:7b:54:
38:bc:4d:d6:f6:8c:8a:42:ce:75:80:ae:f6:68:9c:7e:48:d0:
2a:75:54:99:0c:1d:03:71:2a:2a:a8:de:92:64:fa:43:64:d4:
53:8a:a2:11:db:9c:72:27:d7:da:46:fe:7f:61:ee:0b:7f:4e:
c3:96:89:3f:00:a8:ed:6e:fb:85:cc:1a:b0:c6:63:d7:14:b5:
6e:f5:99:2a
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYs7UojVRiEVGzIbTYMl/p9zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYzNkYWExYjE0ODUwZjJlNjFjNTkyYjIxOTE5MTVhNWU2
NWE0NzgwHhcNMjMxMDE3MDE0OTA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZmYwNmVmNjcyMGI0NjRiYWI5MmVlYmJmYWIxYzA3MzAzYzU4YzJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiolBSS5I2o4OQZgoP2Y4pcHMFY8S
jmfGMlwTRtw6v+jgLMM3c7/QNqB+2Y8wUW+H+4lIxxOa1zFdHb4AU45EPhfp8rL1
lIz83rLTyaxB3cj0DbP5MzC13dDRqcB3/l3suiy75VU5s1OB0HT61koDegDibAYy
EUKkgSTN2A6tWX5p5lxXhflMU/ASfeBtRt+cZHSiklXQ//8CwIrXJywMgN5mEqIN
c0EvVspjmnSY7cKJrMzi3OBFn/QpMKeWBYAot2rZTQjZBlw0vgSuFGtyea+8Q8aT
loBG2H9hc7NE5r9N/99XYa14zS5WVR4+g50sAFnTia17l6k6Cb3mGcsLqQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFL/wbvZyC0ZLq5Luu/qxwHMDxYwuMB8GA1UdIwQY
MBaAFCrD2qGxSFDy5hxZKyGRkVpeZaR4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUt
ZmUwNjU5MTc2YTU2LzEvdl9CdTluSUxSa3Vya3U2Ny1ySEFjd1BGakM0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUtZmUwNjU5MTc2YTU2
LzEvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQDUnMAAwQD
n/8gAwQCvNbsAwQDvP0IMA0GCSqGSIb3DQEBCwUAA4IBAQAV3N3xKtVqxzKlh8lO
Oss1eSF3/MRNlpgezabTC8M+iX4UWfroJaYygJuiUM8e60HRgfgUo3yIrEwOb/YH
SzBl1C2hFoD3vlV/NYvrByh28YJ+08CaaDp6Pipjw9DXXYpnFY1mzmQaXMlQGBHi
tlCyxyuIgfYbH/oWLEowZmjokFbjVCDyKfjA9lnJfTjJnslwh6P0zc8PytVPAHPP
bu2LTezvqspQ0H8VpdVM2n3PTSxAe1Q4vE3W9oyKQs51gK72aJx+SNAqdVSZDB0D
cSoqqN6SZPpDZNRTiqIR25xyJ9faRv5/Ye4Lf07Dlok/AKjtbvuFzBqwxmPXFLVu
9Zkq
-----END CERTIFICATE-----
Generated at Tue Oct 24 22:46:35 2023 by rpki-client on console-ams.rpki-client.org