Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/BxX_FN5yxlu_rBTPsZD5cJnOVH0.roa
File: BxX_FN5yxlu_rBTPsZD5cJnOVH0.roa (raw, json)
Hash identifier: lNgKI5nQwTplgcgd+FWgCz0qRHRHdJDWDHAsPAAF9Ek=
Subject key identifier: 07:15:FF:14:DE:72:C6:5B:BF:AC:14:CF:B1:90:F9:70:99:CE:54:7D
Certificate issuer: /CN=e30f8894f308172ace92fbe6052eec23853eadad
Certificate serial: 018B56720967BA33F16C92572EF0D22F5FAE
Authority key identifier: E3:0F:88:94:F3:08:17:2A:CE:92:FB:E6:05:2E:EC:23:85:3E:AD:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4w-IlPMIFyrOkvvmBS7sI4U-ra0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/BxX_FN5yxlu_rBTPsZD5cJnOVH0.roa
Signing time: Sun 22 Oct 2023 08:13:15 +0000
ROA not before: Sun 22 Oct 2023 08:13:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3920
IP address blocks: 117.55.202.0/24 maxlen: 24
117.55.203.0/24 maxlen: 24
212.237.231.0/24 maxlen: 24
2a13:adc0:1::/48 maxlen: 48
2a13:adc0::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:56:72:09:67:ba:33:f1:6c:92:57:2e:f0:d2:2f:5f:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e30f8894f308172ace92fbe6052eec23853eadad
Validity
Not Before: Oct 22 08:13:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0715ff14de72c65bbfac14cfb190f97099ce547d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:0e:b1:c1:f6:8c:b5:c3:1f:95:58:09:7c:27:
08:88:4e:a7:c2:60:aa:53:4e:74:3a:de:d9:1a:b7:
8f:ec:53:df:57:47:ce:7a:94:1f:5a:c7:09:f9:37:
16:3b:15:bb:d4:cc:64:62:cc:b0:d2:6c:7a:f8:23:
02:d9:f7:cb:fb:16:8e:77:85:fc:18:9d:62:5c:c9:
6a:48:40:93:06:7f:c6:35:11:bb:95:01:fe:f1:24:
57:ea:88:53:5c:97:fb:78:53:0a:c8:45:af:5a:4f:
df:65:f4:d2:d5:5b:31:31:8d:18:bc:20:bb:20:fc:
e0:46:22:8e:65:c7:ae:48:44:50:28:b6:61:c4:14:
19:1f:70:06:2b:59:d0:a6:4a:81:ef:6f:b2:2f:7e:
f2:02:6b:a9:58:5c:d7:1f:ef:92:da:e4:42:d9:f6:
25:50:ac:84:c8:14:3d:48:e4:2c:24:8a:98:fd:27:
7a:b9:ee:31:a5:dd:fb:09:52:eb:32:0f:12:ef:eb:
2b:a8:ce:71:f6:b0:ef:d0:c0:17:d8:f2:7e:19:99:
6f:f6:dd:37:eb:6b:93:c3:fd:43:f1:88:76:34:ec:
f5:17:4d:1f:f9:04:69:3c:ea:9c:92:f2:27:72:e7:
14:a1:d1:5b:88:32:42:bb:11:9f:1d:15:95:59:0f:
02:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:15:FF:14:DE:72:C6:5B:BF:AC:14:CF:B1:90:F9:70:99:CE:54:7D
X509v3 Authority Key Identifier:
keyid:E3:0F:88:94:F3:08:17:2A:CE:92:FB:E6:05:2E:EC:23:85:3E:AD:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4w-IlPMIFyrOkvvmBS7sI4U-ra0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/BxX_FN5yxlu_rBTPsZD5cJnOVH0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/4w-IlPMIFyrOkvvmBS7sI4U-ra0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
117.55.202.0/23
212.237.231.0/24
IPv6:
2a13:adc0::/47
Signature Algorithm: sha256WithRSAEncryption
3a:b2:e2:96:e2:f4:92:1d:1e:52:e5:66:30:50:39:7a:a2:41:
ab:7c:d1:99:a4:6a:73:a6:91:1c:2d:2f:0a:63:16:b6:78:34:
25:5d:cf:bb:19:64:ac:d4:b3:6c:69:b4:d7:e1:f2:f4:74:69:
fe:bb:aa:f0:c5:51:1a:18:e0:bd:10:4f:c9:20:76:fb:ff:2e:
d7:8f:94:63:10:bc:57:1d:bf:b6:49:46:04:8f:6a:fe:ce:69:
c6:6c:7d:f7:59:9e:4d:d3:20:b8:d2:13:aa:6f:0b:45:7c:45:
bb:b9:df:c8:a3:5b:5d:47:51:f2:ab:12:24:e9:d9:92:29:19:
4b:b3:1b:df:ec:77:35:f6:b1:38:3c:2e:4f:d7:2c:fe:7c:e9:
4b:f7:d0:92:b6:07:50:c2:b9:20:82:8c:5c:89:f0:a3:64:4b:
35:68:d3:72:16:68:68:16:f4:73:3a:7e:56:fa:33:76:4d:89:
2b:3b:0a:93:c7:39:7e:4c:c7:8a:c6:75:90:63:30:03:c8:40:
bc:95:76:21:c0:3d:f3:0b:48:64:10:f1:eb:72:eb:ea:d4:b4:
18:48:ae:ab:56:41:5a:49:e1:38:12:8a:7a:22:a6:6c:48:cc:
2a:02:af:cf:25:14:85:b7:b0:fa:a8:1b:21:66:ef:c5:a2:0e:
89:ce:7d:b2
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAYtWcglnujPxbJJXLvDSL1+uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzMGY4ODk0ZjMwODE3MmFjZTkyZmJlNjA1MmVlYzIzODUz
ZWFkYWQwHhcNMjMxMDIyMDgxMzE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNzE1ZmYxNGRlNzJjNjViYmZhYzE0Y2ZiMTkwZjk3MDk5Y2U1NDdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAng6xwfaMtcMflVgJfCcIiE6nwmCq
U050Ot7ZGreP7FPfV0fOepQfWscJ+TcWOxW71MxkYsyw0mx6+CMC2ffL+xaOd4X8
GJ1iXMlqSECTBn/GNRG7lQH+8SRX6ohTXJf7eFMKyEWvWk/fZfTS1VsxMY0YvCC7
IPzgRiKOZceuSERQKLZhxBQZH3AGK1nQpkqB72+yL37yAmupWFzXH++S2uRC2fYl
UKyEyBQ9SOQsJIqY/Sd6ue4xpd37CVLrMg8S7+srqM5x9rDv0MAX2PJ+GZlv9t03
62uTw/1D8Yh2NOz1F00f+QRpPOqckvIncucUodFbiDJCuxGfHRWVWQ8C0QIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFAcV/xTecsZbv6wUz7GQ+XCZzlR9MB8GA1UdIwQY
MBaAFOMPiJTzCBcqzpL75gUu7COFPq2tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHctSWxQTUlGeXJPa3Z2bUJTN3NJNFUtcmEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS81ODc0NjAtZWFiNy00MGQ5LWE1MTIt
M2U2NjBkMDI1MmRiLzEvQnhYX0ZONXl4bHVfckJUUHNaRDVjSm5PVkgwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS81ODc0NjAtZWFiNy00MGQ5LWE1MTItM2U2NjBkMDI1MmRi
LzEvNHctSWxQTUlGeXJPa3Z2bUJTN3NJNFUtcmEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQBdTfKAwQA
1O3nMA8EAgACMAkDBwEqE63AAAAwDQYJKoZIhvcNAQELBQADggEBADqy4pbi9JId
HlLlZjBQOXqiQat80ZmkanOmkRwtLwpjFrZ4NCVdz7sZZKzUs2xptNfh8vR0af67
qvDFURoY4L0QT8kgdvv/LtePlGMQvFcdv7ZJRgSPav7OacZsffdZnk3TILjSE6pv
C0V8Rbu538ijW11HUfKrEiTp2ZIpGUuzG9/sdzX2sTg8Lk/XLP586Uv30JK2B1DC
uSCCjFyJ8KNkSzVo03IWaGgW9HM6flb6M3ZNiSs7CpPHOX5Mx4rGdZBjMAPIQLyV
diHAPfMLSGQQ8ety6+rUtBhIrqtWQVpJ4TgSinoipmxIzCoCr88lFIW3sPqoGyFm
78WiDonOfbI=
-----END CERTIFICATE-----
Generated at Tue Jan 2 14:36:52 2024 by rpki-client on console-fra.rpki-client.org