Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/519634-923d-4f98-838a-7e38dbd5664f/1/cX3uiglHjwiezQoaeq69jcTKK_8.roa
File: cX3uiglHjwiezQoaeq69jcTKK_8.roa (raw, json)
Hash identifier: rXnpGFZqcsXJ+ouO62LKkDRvoSv7ZSwnby0SB8/pI00=
Subject key identifier: 71:7D:EE:8A:09:47:8F:08:9E:CD:0A:1A:7A:AE:BD:8D:C4:CA:2B:FF
Certificate issuer: /CN=167d54d8cb6a8309c512605657c2563e3a1aaa69
Certificate serial: 0187FF3FE1DCEF0C88C27D388EE5EA3F82AF
Authority key identifier: 16:7D:54:D8:CB:6A:83:09:C5:12:60:56:57:C2:56:3E:3A:1A:AA:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fn1U2MtqgwnFEmBWV8JWPjoaqmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/519634-923d-4f98-838a-7e38dbd5664f/1/cX3uiglHjwiezQoaeq69jcTKK_8.roa
Signing time: Tue 09 May 2023 06:43:09 +0000
ROA not before: Tue 09 May 2023 06:43:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203503
IP address blocks: 185.132.91.0/24 maxlen: 24
185.132.89.0/24 maxlen: 24
185.132.88.0/24 maxlen: 24
2a06:e144::/30 maxlen: 30
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:ff:3f:e1:dc:ef:0c:88:c2:7d:38:8e:e5:ea:3f:82:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=167d54d8cb6a8309c512605657c2563e3a1aaa69
Validity
Not Before: May 9 06:43:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=717dee8a09478f089ecd0a1a7aaebd8dc4ca2bff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b2:24:32:76:c5:36:2a:64:0e:c2:0a:d9:88:
d3:3f:cb:4a:5f:3a:e1:cb:c6:65:09:a7:1d:ec:a5:
6f:af:97:38:89:2f:bd:e4:83:98:4c:d5:53:bd:a1:
ed:bd:fb:f3:ba:90:c0:b6:dc:98:6e:ac:f8:8d:f8:
55:ce:b9:ef:e6:11:4e:ef:23:4a:6d:4f:2f:05:db:
fe:fe:27:45:2d:6e:07:61:af:54:e5:12:56:84:b3:
b8:b3:e1:da:03:5a:a3:ed:f4:88:fa:71:54:94:85:
54:db:06:ba:a2:4c:7b:b6:82:44:90:c7:a8:d0:a0:
5f:89:29:ab:f0:ab:9b:a8:d8:99:61:71:e4:94:74:
50:eb:c9:86:b8:da:71:0b:67:61:d4:e0:7e:fa:8b:
22:a9:93:43:e1:71:e7:f6:d0:b5:2c:b6:78:b9:ba:
5f:d0:8b:e0:e5:26:24:3d:b6:76:45:20:35:75:44:
2e:c6:f0:4e:57:b4:73:f0:47:eb:de:23:36:3d:9f:
ab:92:00:54:fd:2d:ec:6e:75:ee:30:09:4b:da:e6:
3c:c1:53:e9:4c:54:10:32:db:a8:15:5c:ae:af:c5:
d6:16:7b:d8:c7:81:4f:95:34:06:34:ba:4a:33:f9:
19:8f:cb:16:55:23:e5:dc:d9:f8:08:47:e6:74:1b:
04:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:7D:EE:8A:09:47:8F:08:9E:CD:0A:1A:7A:AE:BD:8D:C4:CA:2B:FF
X509v3 Authority Key Identifier:
keyid:16:7D:54:D8:CB:6A:83:09:C5:12:60:56:57:C2:56:3E:3A:1A:AA:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fn1U2MtqgwnFEmBWV8JWPjoaqmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/519634-923d-4f98-838a-7e38dbd5664f/1/cX3uiglHjwiezQoaeq69jcTKK_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/519634-923d-4f98-838a-7e38dbd5664f/1/Fn1U2MtqgwnFEmBWV8JWPjoaqmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.132.88.0/23
185.132.91.0/24
IPv6:
2a06:e144::/30
Signature Algorithm: sha256WithRSAEncryption
0d:59:59:84:92:ff:fd:c4:7b:35:71:3e:56:71:ea:f1:95:e4:
b4:4e:db:69:d1:d2:03:25:b3:9c:b2:ef:75:80:45:1d:56:3d:
a6:e9:9b:ec:ba:ce:be:b9:17:56:da:83:80:43:31:71:e5:34:
00:47:90:f9:e9:2e:9a:6f:84:80:57:cd:73:4c:35:11:1e:69:
9a:e5:17:eb:9d:cd:75:cb:1d:77:24:0e:4b:0d:8b:71:07:07:
f4:03:5b:9c:aa:de:f0:d5:6c:9f:8f:4d:0a:61:36:cc:da:a2:
f8:0c:79:82:34:11:fc:33:5d:5b:2a:3c:d5:45:a2:fb:57:c9:
5f:b8:94:2b:de:f1:6b:2c:b8:bc:d1:d5:a2:ca:8e:7e:eb:0a:
93:2c:33:03:1a:bc:aa:17:84:2a:a2:b9:ab:0a:ab:4d:94:37:
04:df:11:04:e1:91:1a:3e:8b:c3:20:54:a5:d1:90:59:54:a8:
65:c3:4a:73:26:de:2c:1e:14:b7:ef:6c:14:6f:dd:bc:f0:78:
44:22:3c:37:bc:27:e3:b7:b5:fb:34:7b:2e:26:a0:51:8a:35:
cd:05:d1:75:ed:62:d5:84:9a:26:0e:9d:ad:ce:90:13:58:f6:
e7:a6:43:71:c4:ff:a1:26:d5:17:f5:40:44:75:ad:13:ee:cd:
73:6d:af:4f
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYf/P+Hc7wyIwn04juXqP4KvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2N2Q1NGQ4Y2I2YTgzMDljNTEyNjA1NjU3YzI1NjNlM2Ex
YWFhNjkwHhcNMjMwNTA5MDY0MzA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MTdkZWU4YTA5NDc4ZjA4OWVjZDBhMWE3YWFlYmQ4ZGM0Y2EyYmZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbIkMnbFNipkDsIK2YjTP8tKXzrh
y8ZlCacd7KVvr5c4iS+95IOYTNVTvaHtvfvzupDAttyYbqz4jfhVzrnv5hFO7yNK
bU8vBdv+/idFLW4HYa9U5RJWhLO4s+HaA1qj7fSI+nFUlIVU2wa6okx7toJEkMeo
0KBfiSmr8KubqNiZYXHklHRQ68mGuNpxC2dh1OB++osiqZND4XHn9tC1LLZ4ubpf
0Ivg5SYkPbZ2RSA1dUQuxvBOV7Rz8Efr3iM2PZ+rkgBU/S3sbnXuMAlL2uY8wVPp
TFQQMtuoFVyur8XWFnvYx4FPlTQGNLpKM/kZj8sWVSPl3Nn4CEfmdBsE+wIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFHF97ooJR48Ins0KGnquvY3Eyiv/MB8GA1UdIwQY
MBaAFBZ9VNjLaoMJxRJgVlfCVj46GqppMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRm4xVTJNdHFnd25GRW1CV1Y4SldQam9hcW1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS81MTk2MzQtOTIzZC00Zjk4LTgzOGEt
N2UzOGRiZDU2NjRmLzEvY1gzdWlnbEhqd2llelFvYWVxNjlqY1RLS184LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS81MTk2MzQtOTIzZC00Zjk4LTgzOGEtN2UzOGRiZDU2NjRm
LzEvRm4xVTJNdHFnd25GRW1CV1Y4SldQam9hcW1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQBuYRYAwQA
uYRbMA0EAgACMAcDBQIqBuFEMA0GCSqGSIb3DQEBCwUAA4IBAQANWVmEkv/9xHs1
cT5WcerxleS0Tttp0dIDJbOcsu91gEUdVj2m6Zvsus6+uRdW2oOAQzFx5TQAR5D5
6S6ab4SAV81zTDURHmma5Rfrnc11yx13JA5LDYtxBwf0A1ucqt7w1Wyfj00KYTbM
2qL4DHmCNBH8M11bKjzVRaL7V8lfuJQr3vFrLLi80dWiyo5+6wqTLDMDGryqF4Qq
ormrCqtNlDcE3xEE4ZEaPovDIFSl0ZBZVKhlw0pzJt4sHhS372wUb9288HhEIjw3
vCfjt7X7NHsuJqBRijXNBdF17WLVhJomDp2tzpATWPbnpkNxxP+hJtUX9UBEda0T
7s1zba9P
-----END CERTIFICATE-----
Generated at Tue Oct 24 08:01:02 2023 by rpki-client on console-fra.rpki-client.org