Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/PmrOj0ojMFJUsSSp9D2_YdJ1nxI.roa
File: PmrOj0ojMFJUsSSp9D2_YdJ1nxI.roa (raw, json)
Hash identifier: 4FQ3m1a7KJ0+AnbcS8Kaywh1j0Q+auT6k7cypuxbtBQ=
Subject key identifier: 3E:6A:CE:8F:4A:23:30:52:54:B1:24:A9:F4:3D:BF:61:D2:75:9F:12
Certificate issuer: /CN=dd97c7ca05bcc3d6a2ad1ba235bed8feab694550
Certificate serial: 018A92B32B3E6C838457950829BA83502BFE
Authority key identifier: DD:97:C7:CA:05:BC:C3:D6:A2:AD:1B:A2:35:BE:D8:FE:AB:69:45:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ZfHygW8w9airRuiNb7Y_qtpRVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/PmrOj0ojMFJUsSSp9D2_YdJ1nxI.roa
Signing time: Thu 14 Sep 2023 07:58:50 +0000
ROA not before: Thu 14 Sep 2023 07:58:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 46.253.80.0/21 maxlen: 21
185.21.120.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:92:b3:2b:3e:6c:83:84:57:95:08:29:ba:83:50:2b:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd97c7ca05bcc3d6a2ad1ba235bed8feab694550
Validity
Not Before: Sep 14 07:58:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3e6ace8f4a23305254b124a9f43dbf61d2759f12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:24:71:27:b1:4b:6d:c4:be:b1:e5:c1:62:70:
6c:dd:b4:bb:df:38:16:f1:74:34:e9:56:3b:d3:25:
1a:0c:05:1d:63:9c:24:50:78:fe:8b:df:37:2c:4e:
7b:74:d1:f4:3a:76:da:04:79:b3:1f:db:98:d5:23:
c2:b7:dd:0c:9c:23:64:2b:42:61:bf:3e:f2:d2:fa:
a2:59:f8:cb:91:e2:78:ce:97:b8:1e:ee:34:7a:95:
49:7c:ac:21:a0:f4:f0:28:cb:2c:2a:37:66:30:e0:
a6:42:01:f4:90:31:fa:f6:35:34:a4:43:28:b5:2f:
c1:1a:70:71:19:17:46:06:ac:11:48:41:47:50:42:
84:89:89:07:c1:4c:ba:a9:43:c1:69:e2:36:ff:e6:
db:80:16:75:b8:9f:a8:35:46:f6:99:89:bc:81:78:
43:33:88:f5:6d:c3:d6:c7:2d:64:1c:4c:0b:3d:d5:
78:cb:5b:41:2c:13:18:3f:55:06:22:a8:13:56:ae:
9f:be:2e:50:94:b8:7d:e9:1b:67:39:ab:39:71:90:
b5:4c:c6:ad:4c:61:28:7b:d0:b5:bc:ff:46:b6:29:
00:11:78:94:ae:3f:7f:24:7b:18:b7:ee:51:6e:cf:
14:09:16:bb:5a:df:f5:bf:45:6c:ec:6d:e1:33:72:
18:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:6A:CE:8F:4A:23:30:52:54:B1:24:A9:F4:3D:BF:61:D2:75:9F:12
X509v3 Authority Key Identifier:
keyid:DD:97:C7:CA:05:BC:C3:D6:A2:AD:1B:A2:35:BE:D8:FE:AB:69:45:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ZfHygW8w9airRuiNb7Y_qtpRVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/PmrOj0ojMFJUsSSp9D2_YdJ1nxI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.253.80.0/21
185.21.120.0/22
Signature Algorithm: sha256WithRSAEncryption
c3:bc:3f:94:95:f3:76:f8:aa:f0:61:b9:54:c1:6e:33:ff:4e:
3d:dc:70:58:58:ed:97:bb:8c:7e:56:ae:af:0c:b7:62:b1:1d:
1b:a8:a6:64:a6:4d:90:34:8d:ab:e8:12:de:2c:86:4c:d7:58:
4a:62:50:65:e8:eb:54:2d:06:82:d2:7d:60:0d:fc:98:2a:9a:
10:13:35:79:38:5b:9b:f9:54:a3:16:fe:78:17:a4:fa:1d:8b:
8d:bf:f0:84:27:d9:cd:db:03:1b:1f:58:6d:e2:fe:d9:c5:d3:
d4:f5:e8:02:65:1a:20:b1:e9:dc:b5:af:d3:18:bc:d4:2c:0a:
0d:61:84:e5:88:67:23:a5:5e:5b:d0:9b:10:92:b9:89:6c:00:
87:fd:4a:db:39:f6:7e:44:4e:f5:70:68:5f:f6:66:f3:b3:a3:
cc:19:ae:05:c1:de:a2:62:f5:78:26:08:fc:03:e5:74:67:02:
e6:96:c0:11:3e:f6:de:74:11:71:f1:ed:2b:f2:77:b5:ec:ad:
5d:18:2a:f5:28:e5:19:25:b6:aa:c5:75:e4:06:8c:30:47:73:
0b:30:44:a9:ad:b1:52:31:19:b7:3f:53:b5:2b:52:7a:cc:8c:
b1:fd:51:b1:78:5c:1e:6b:05:9f:c9:7b:91:33:8e:41:f3:59:
e9:ee:73:43
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYqSsys+bIOEV5UIKbqDUCv+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkOTdjN2NhMDViY2MzZDZhMmFkMWJhMjM1YmVkOGZlYWI2
OTQ1NTAwHhcNMjMwOTE0MDc1ODUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZTZhY2U4ZjRhMjMzMDUyNTRiMTI0YTlmNDNkYmY2MWQyNzU5ZjEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSRxJ7FLbcS+seXBYnBs3bS73zgW
8XQ06VY70yUaDAUdY5wkUHj+i983LE57dNH0OnbaBHmzH9uY1SPCt90MnCNkK0Jh
vz7y0vqiWfjLkeJ4zpe4Hu40epVJfKwhoPTwKMssKjdmMOCmQgH0kDH69jU0pEMo
tS/BGnBxGRdGBqwRSEFHUEKEiYkHwUy6qUPBaeI2/+bbgBZ1uJ+oNUb2mYm8gXhD
M4j1bcPWxy1kHEwLPdV4y1tBLBMYP1UGIqgTVq6fvi5QlLh96RtnOas5cZC1TMat
TGEoe9C1vP9GtikAEXiUrj9/JHsYt+5Rbs8UCRa7Wt/1v0Vs7G3hM3IYXwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFD5qzo9KIzBSVLEkqfQ9v2HSdZ8SMB8GA1UdIwQY
MBaAFN2Xx8oFvMPWoq0bojW+2P6raUVQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1pmSHlnVzh3OWFpclJ1aU5iN1lfcXRwUlZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9lMzJhOWEtODNlMC00ZmI5LWFjNzEt
NGQ0YjE2MTQ0ZDY4LzEvUG1yT2owb2pNRkpVc1NTcDlEMl9ZZEoxbnhJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS9lMzJhOWEtODNlMC00ZmI5LWFjNzEtNGQ0YjE2MTQ0ZDY4
LzEvM1pmSHlnVzh3OWFpclJ1aU5iN1lfcXRwUlZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDLv1QAwQC
uRV4MA0GCSqGSIb3DQEBCwUAA4IBAQDDvD+UlfN2+KrwYblUwW4z/0493HBYWO2X
u4x+Vq6vDLdisR0bqKZkpk2QNI2r6BLeLIZM11hKYlBl6OtULQaC0n1gDfyYKpoQ
EzV5OFub+VSjFv54F6T6HYuNv/CEJ9nN2wMbH1ht4v7ZxdPU9egCZRogsencta/T
GLzULAoNYYTliGcjpV5b0JsQkrmJbACH/UrbOfZ+RE71cGhf9mbzs6PMGa4Fwd6i
YvV4Jgj8A+V0ZwLmlsARPvbedBFx8e0r8ne17K1dGCr1KOUZJbaqxXXkBowwR3ML
MESprbFSMRm3P1O1K1J6zIyx/VGxeFweawWfyXuRM45B81np7nND
-----END CERTIFICATE-----
Generated at Mon Nov 6 14:44:17 2023 by rpki-client on console-fra.rpki-client.org