Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/pBDX_aW1fcOecx9p359BClpHS_8.roa
File: pBDX_aW1fcOecx9p359BClpHS_8.roa (raw, json)
Hash identifier: kQG+yS4TD6YKY/cZRftVB30ImnXu2Ybr6m6usqkwaQE=
Subject key identifier: A4:10:D7:FD:A5:B5:7D:C3:9E:73:1F:69:DF:9F:41:0A:5A:47:4B:FF
Certificate issuer: /CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Certificate serial: 018570FBD18EE569B0E0BEA87644517CED83
Authority key identifier: 74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/pBDX_aW1fcOecx9p359BClpHS_8.roa
Signing time: Mon 02 Jan 2023 05:37:09 +0000
ROA not before: Mon 02 Jan 2023 05:37:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3257
IP address blocks: 155.193.80.0/22 maxlen: 22
155.193.1.0/24 maxlen: 24
155.193.8.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:fb:d1:8e:e5:69:b0:e0:be:a8:76:44:51:7c:ed:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Validity
Not Before: Jan 2 05:37:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a410d7fda5b57dc39e731f69df9f410a5a474bff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:14:76:d2:e1:c9:6c:1f:67:5a:c1:94:ad:8e:
b8:33:3f:8b:68:fa:03:37:01:52:11:90:43:01:40:
1b:56:81:22:5f:16:c2:31:82:a4:9e:64:84:5a:3b:
f0:62:ed:46:7a:8c:23:fb:38:b7:8a:5c:2b:f2:3a:
a9:a2:f8:b0:42:b9:c7:5f:61:2b:32:39:ee:b6:be:
5a:9f:c5:66:36:42:e6:bc:63:64:44:7b:c3:55:ec:
2d:cd:f8:65:51:9e:d0:ae:7d:c0:0d:6c:03:b7:f4:
fb:21:6d:03:12:43:19:2e:39:d8:27:bd:a4:f7:d6:
68:fd:37:68:44:df:2c:f4:5e:c2:5e:7f:bf:64:33:
18:33:f1:5a:df:a9:67:42:dc:7c:dc:42:2b:40:e1:
c1:71:61:c0:bb:d1:b4:a0:41:ff:23:3b:31:52:5e:
ad:37:9f:f3:5b:bb:8c:7b:af:f0:22:8f:44:73:83:
4c:a5:6f:11:3a:b6:b3:b5:c6:cf:e8:54:f6:bd:cb:
aa:19:ed:4a:0e:bb:23:9c:61:44:66:39:62:14:ab:
af:36:bb:ad:b3:e8:88:b5:de:95:68:85:1d:b1:b7:
ec:64:96:79:a9:c4:c1:6b:87:c3:d0:43:89:c1:f2:
11:ba:79:27:d8:e0:8f:29:2b:9c:7f:b0:f8:43:cb:
6e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:10:D7:FD:A5:B5:7D:C3:9E:73:1F:69:DF:9F:41:0A:5A:47:4B:FF
X509v3 Authority Key Identifier:
keyid:74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/pBDX_aW1fcOecx9p359BClpHS_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.193.1.0/24
155.193.8.0/22
155.193.80.0/22
Signature Algorithm: sha256WithRSAEncryption
a0:64:79:3c:36:64:57:ea:4a:af:08:43:0b:7f:12:b9:e7:f0:
ec:b0:be:27:30:d0:ea:d1:6e:58:7b:55:ba:d2:f7:6d:97:59:
f8:65:96:91:b3:13:b9:c9:ed:05:9e:62:93:07:2f:3f:5f:9a:
83:6f:ef:00:b9:8d:f1:97:24:52:8b:8b:da:51:4f:f6:fd:c8:
24:47:a8:d2:a0:20:d7:cb:22:5b:27:ae:f4:60:1c:7b:15:61:
ca:87:a7:a4:3e:30:d8:d4:30:20:53:ab:69:3c:84:27:7a:c5:
3f:11:23:58:fd:7f:49:fd:2d:4d:0f:81:6b:58:8a:b1:58:55:
0b:5d:43:85:82:a9:86:6c:75:95:88:6f:67:83:0f:20:48:af:
cd:f3:87:f4:11:c8:d3:ce:6b:c1:06:54:73:14:4c:54:b6:96:
3d:a2:84:3c:2d:bd:97:d5:ad:5f:a7:06:fe:5d:af:b5:3b:f0:
c1:b3:a5:66:e4:57:1b:3a:87:10:88:2c:98:c4:94:55:15:b8:
0c:75:94:81:37:47:51:0b:88:82:2d:c2:b4:05:21:0f:d1:01:
eb:e5:3f:54:4c:9e:ff:22:d9:7e:a9:3a:a2:60:b6:de:0c:03:
18:dc:60:61:4d:37:dc:0d:a3:d6:e9:ef:98:38:03:dd:12:68:
3f:2a:13:7e
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYVw+9GO5Wmw4L6odkRRfO2DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0M2U0NDdlZGI4YTVlMGUxYjFkN2Y1Y2RjMjg3YzM2NGE1
ZmIwYjUwHhcNMjMwMTAyMDUzNzA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNDEwZDdmZGE1YjU3ZGMzOWU3MzFmNjlkZjlmNDEwYTVhNDc0YmZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphR20uHJbB9nWsGUrY64Mz+LaPoD
NwFSEZBDAUAbVoEiXxbCMYKknmSEWjvwYu1Geowj+zi3ilwr8jqpoviwQrnHX2Er
Mjnutr5an8VmNkLmvGNkRHvDVewtzfhlUZ7Qrn3ADWwDt/T7IW0DEkMZLjnYJ72k
99Zo/TdoRN8s9F7CXn+/ZDMYM/Fa36lnQtx83EIrQOHBcWHAu9G0oEH/IzsxUl6t
N5/zW7uMe6/wIo9Ec4NMpW8ROraztcbP6FT2vcuqGe1KDrsjnGFEZjliFKuvNrut
s+iItd6VaIUdsbfsZJZ5qcTBa4fD0EOJwfIRunkn2OCPKSucf7D4Q8tuhQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFKQQ1/2ltX3DnnMfad+fQQpaR0v/MB8GA1UdIwQY
MBaAFHQ+RH7bil4OGx1/XNwofDZKX7C1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEQ1RWZ0dUtYZzRiSFg5YzNDaDhOa3Bmc0xVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9hMWFlNzAtNzk5Ni00Njg3LWEwZDct
NWUwZjRhYjgwOWJiLzEvcEJEWF9hVzFmY09lY3g5cDM1OUJDbHBIU184LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS9hMWFlNzAtNzk5Ni00Njg3LWEwZDctNWUwZjRhYjgwOWJi
LzEvZEQ1RWZ0dUtYZzRiSFg5YzNDaDhOa3Bmc0xVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAm8EBAwQC
m8EIAwQCm8FQMA0GCSqGSIb3DQEBCwUAA4IBAQCgZHk8NmRX6kqvCEMLfxK55/Ds
sL4nMNDq0W5Ye1W60vdtl1n4ZZaRsxO5ye0FnmKTBy8/X5qDb+8AuY3xlyRSi4va
UU/2/cgkR6jSoCDXyyJbJ670YBx7FWHKh6ekPjDY1DAgU6tpPIQnesU/ESNY/X9J
/S1ND4FrWIqxWFULXUOFgqmGbHWViG9ngw8gSK/N84f0EcjTzmvBBlRzFExUtpY9
ooQ8Lb2X1a1fpwb+Xa+1O/DBs6Vm5FcbOocQiCyYxJRVFbgMdZSBN0dRC4iCLcK0
BSEP0QHr5T9UTJ7/Itl+qTqiYLbeDAMY3GBhTTfcDaPW6e+YOAPdEmg/KhN+
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:40 2023 by rpki-client on console-ams.rpki-client.org