Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/77c532-59c9-412a-aea8-02bd3dcae4ad/1/Bjt7Z_rEX4ezcyFNf20lgWx__UA.roa
File: Bjt7Z_rEX4ezcyFNf20lgWx__UA.roa (raw, json)
Hash identifier: TTm8P9ug/hEbg5fYUmqrf0Uy0qjFWWSHGkZ4chYfneo=
Subject key identifier: 06:3B:7B:67:FA:C4:5F:87:B3:73:21:4D:7F:6D:25:81:6C:7F:FD:40
Certificate issuer: /CN=634d6eec403eff86b40f9c598091dd4302a9a721
Certificate serial: 018A21C87652F9FB92C8DC00C3B14565E52C
Authority key identifier: 63:4D:6E:EC:40:3E:FF:86:B4:0F:9C:59:80:91:DD:43:02:A9:A7:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y01u7EA-_4a0D5xZgJHdQwKppyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/77c532-59c9-412a-aea8-02bd3dcae4ad/1/Bjt7Z_rEX4ezcyFNf20lgWx__UA.roa
Signing time: Wed 23 Aug 2023 09:45:00 +0000
ROA not before: Wed 23 Aug 2023 09:45:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44477
IP address blocks: 185.216.13.0/24 maxlen: 24
2a13:6300::/32 maxlen: 32
2a13:6303::/32 maxlen: 32
2a13:6301::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:21:c8:76:52:f9:fb:92:c8:dc:00:c3:b1:45:65:e5:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=634d6eec403eff86b40f9c598091dd4302a9a721
Validity
Not Before: Aug 23 09:45:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=063b7b67fac45f87b373214d7f6d25816c7ffd40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:89:24:6b:38:99:d0:bf:f4:fc:86:95:80:b9:
4f:e0:9c:00:c4:f3:57:49:29:7d:4b:71:e9:22:a0:
27:36:f5:39:be:ba:b9:7d:1a:49:90:25:1f:ad:33:
c0:a3:5a:d2:48:a4:19:66:c7:e9:6b:f2:9f:4b:04:
e9:0b:85:96:bd:35:70:d5:ba:36:12:fa:cf:b0:63:
21:48:35:25:78:6b:b5:99:36:35:38:93:4b:fa:3f:
02:85:9b:f0:3d:63:92:23:35:3c:b3:f7:02:93:9b:
46:a5:c5:91:c3:77:b1:81:28:62:c4:0d:62:00:84:
3f:34:43:43:81:6d:64:14:18:df:a9:0c:c2:49:70:
a5:cc:b5:d5:be:13:e4:89:71:13:ec:7a:ac:51:1a:
74:55:9a:51:7e:52:63:d3:55:61:39:5b:3f:2a:db:
16:19:66:6b:78:66:bf:78:23:a9:93:f2:d7:44:13:
6e:fe:8e:43:97:6e:d2:14:61:ce:58:f5:be:b1:01:
b9:a4:9b:a2:18:b6:5f:d0:ac:68:d5:3a:a4:4c:2b:
6d:56:71:40:81:e7:ef:a1:8b:ef:03:9e:12:47:b0:
a5:83:6a:0d:61:d1:9f:00:50:4c:bd:42:bc:e1:69:
3e:a6:68:6e:f0:f3:3c:06:79:6e:42:20:d3:73:c3:
1a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:3B:7B:67:FA:C4:5F:87:B3:73:21:4D:7F:6D:25:81:6C:7F:FD:40
X509v3 Authority Key Identifier:
keyid:63:4D:6E:EC:40:3E:FF:86:B4:0F:9C:59:80:91:DD:43:02:A9:A7:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y01u7EA-_4a0D5xZgJHdQwKppyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/77c532-59c9-412a-aea8-02bd3dcae4ad/1/Bjt7Z_rEX4ezcyFNf20lgWx__UA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/77c532-59c9-412a-aea8-02bd3dcae4ad/1/Y01u7EA-_4a0D5xZgJHdQwKppyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.216.13.0/24
IPv6:
2a13:6300::/31
2a13:6303::/32
Signature Algorithm: sha256WithRSAEncryption
bf:c9:e8:05:62:ae:14:3e:15:93:4a:41:82:d8:51:e9:fe:1d:
82:8e:f6:4c:50:0b:75:3e:57:89:b9:d9:33:db:15:c1:76:36:
62:d8:d0:21:4b:81:6a:63:d0:57:af:83:da:86:22:c7:e3:99:
0c:36:32:19:53:da:d1:56:4f:8c:78:c7:94:0e:94:e8:1e:63:
d2:2d:cd:8a:bc:43:c9:61:db:13:53:76:04:5e:9a:91:46:a9:
89:52:c7:7c:7d:45:aa:de:73:5a:8b:88:5b:d8:2c:85:76:2a:
95:06:db:a0:4e:81:88:9d:f2:15:96:00:9b:7a:8f:b2:9a:42:
c7:93:65:3b:fa:cf:3e:bc:d2:2a:6d:24:3b:0c:c9:2b:3d:e6:
1c:43:ff:8d:42:fd:b6:41:8f:31:41:cc:39:f9:6d:cf:f9:86:
a6:f6:44:04:b8:dd:2c:cc:53:08:12:a7:f8:86:92:cd:19:2d:
12:08:63:d5:81:90:7d:95:2f:05:6b:7a:fc:7a:e5:84:67:b1:
5a:b0:d4:27:9e:8c:2e:55:5b:0f:cc:59:1f:9e:27:47:bf:7f:
45:fd:e8:62:f6:fc:2f:86:ec:56:aa:b7:d3:aa:48:46:c5:1b:
f8:4c:48:fe:35:3f:f3:1a:0d:8b:a1:ae:bd:45:fc:65:1d:f9:
34:3a:8a:8d
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgISAYohyHZS+fuSyNwAw7FFZeUsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzNGQ2ZWVjNDAzZWZmODZiNDBmOWM1OTgwOTFkZDQzMDJh
OWE3MjEwHhcNMjMwODIzMDk0NTAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNjNiN2I2N2ZhYzQ1Zjg3YjM3MzIxNGQ3ZjZkMjU4MTZjN2ZmZDQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYkkaziZ0L/0/IaVgLlP4JwAxPNX
SSl9S3HpIqAnNvU5vrq5fRpJkCUfrTPAo1rSSKQZZsfpa/KfSwTpC4WWvTVw1bo2
EvrPsGMhSDUleGu1mTY1OJNL+j8ChZvwPWOSIzU8s/cCk5tGpcWRw3exgShixA1i
AIQ/NENDgW1kFBjfqQzCSXClzLXVvhPkiXET7HqsURp0VZpRflJj01VhOVs/KtsW
GWZreGa/eCOpk/LXRBNu/o5Dl27SFGHOWPW+sQG5pJuiGLZf0Kxo1TqkTCttVnFA
gefvoYvvA54SR7Clg2oNYdGfAFBMvUK84Wk+pmhu8PM8BnluQiDTc8MaAwIDAQAB
o4ICHzCCAhswHQYDVR0OBBYEFAY7e2f6xF+Hs3MhTX9tJYFsf/1AMB8GA1UdIwQY
MBaAFGNNbuxAPv+GtA+cWYCR3UMCqachMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTAxdTdFQS1fNGEwRDV4WmdKSGRRd0twcHlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi83N2M1MzItNTljOS00MTJhLWFlYTgt
MDJiZDNkY2FlNGFkLzEvQmp0N1pfckVYNGV6Y3lGTmYyMGxnV3hfX1VBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi83N2M1MzItNTljOS00MTJhLWFlYTgtMDJiZDNkY2FlNGFk
LzEvWTAxdTdFQS1fNGEwRDV4WmdKSGRRd0twcHlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAMBAIAATAGAwQAudgNMBQE
AgACMA4DBQEqE2MAAwUAKhNjAzANBgkqhkiG9w0BAQsFAAOCAQEAv8noBWKuFD4V
k0pBgthR6f4dgo72TFALdT5XibnZM9sVwXY2YtjQIUuBamPQV6+D2oYix+OZDDYy
GVPa0VZPjHjHlA6U6B5j0i3NirxDyWHbE1N2BF6akUapiVLHfH1Fqt5zWouIW9gs
hXYqlQbboE6BiJ3yFZYAm3qPsppCx5NlO/rPPrzSKm0kOwzJKz3mHEP/jUL9tkGP
MUHMOfltz/mGpvZEBLjdLMxTCBKn+IaSzRktEghj1YGQfZUvBWt6/HrlhGexWrDU
J56MLlVbD8xZH54nR79/Rf3oYvb8L4bsVqq306pIRsUb+ExI/jU/8xoNi6GuvUX8
ZR35NDqKjQ==
-----END CERTIFICATE-----
Generated at Wed Nov 1 12:49:20 2023 by rpki-client on console-fra.rpki-client.org