Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/791640-c1ef-466a-96ae-0b07204bfb33/1/bEprxS840Uo33KlD9tLjMfYqlL4.roa
File: bEprxS840Uo33KlD9tLjMfYqlL4.roa (raw, json)
Hash identifier: U+3pv5+YQjThmpYIkXKf4j+obA5Wbph+SJi2VFjJbN4=
Subject key identifier: 6C:4A:6B:C5:2F:38:D1:4A:37:DC:A9:43:F6:D2:E3:31:F6:2A:94:BE
Certificate issuer: /CN=dfb543d0fc797d172aaa9c3d77f943265b3989ad
Certificate serial: 0185704BEA93667CDE412ED277EB41505E63
Authority key identifier: DF:B5:43:D0:FC:79:7D:17:2A:AA:9C:3D:77:F9:43:26:5B:39:89:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/37VD0Px5fRcqqpw9d_lDJls5ia0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/791640-c1ef-466a-96ae-0b07204bfb33/1/bEprxS840Uo33KlD9tLjMfYqlL4.roa
Signing time: Mon 02 Jan 2023 02:25:01 +0000
ROA not before: Mon 02 Jan 2023 02:25:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207788
IP address blocks: 195.47.212.0/24 maxlen: 24
195.47.210.0/24 maxlen: 24
195.43.159.0/24 maxlen: 24
195.47.216.0/24 maxlen: 24
2a0f:b6c0::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:4b:ea:93:66:7c:de:41:2e:d2:77:eb:41:50:5e:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfb543d0fc797d172aaa9c3d77f943265b3989ad
Validity
Not Before: Jan 2 02:25:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6c4a6bc52f38d14a37dca943f6d2e331f62a94be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5d:ae:ce:a2:3f:a7:b2:cc:58:53:9c:a0:be:
5e:4b:e9:b5:5c:3d:94:05:5a:f1:5a:03:14:d2:e9:
a9:c8:95:7a:18:41:84:eb:ea:77:d7:04:9f:5f:2a:
87:b5:49:3e:ce:d4:6e:1e:b3:84:9f:a3:bb:33:2b:
03:6e:a2:88:31:95:2b:f9:ad:07:50:ac:7e:1d:ef:
ca:01:76:72:ef:7c:83:30:8d:33:3f:bd:4d:5a:88:
e0:83:ef:ef:6e:f7:d8:d4:05:db:3a:eb:fe:41:01:
a7:63:e0:b8:64:8b:38:e0:9a:89:92:66:88:d9:47:
bd:dc:50:24:b5:87:ed:89:bc:78:b7:42:22:2f:b4:
4b:78:1e:c9:d6:14:76:40:6a:18:9b:ff:5e:f5:b1:
99:03:24:3c:79:c6:88:79:95:d0:ae:f7:87:99:bb:
21:ba:56:68:0a:60:8a:23:e1:03:b0:44:34:ca:74:
7c:12:87:c8:95:e7:a1:3a:e9:32:64:f4:5b:aa:4d:
76:24:55:80:c7:e1:ff:6c:2e:28:53:5b:51:47:94:
19:03:87:23:a0:19:0b:e4:08:fe:1b:a9:4e:36:02:
ca:89:60:7f:51:4c:92:ab:a5:c9:c3:7f:b4:f9:4f:
81:d3:ab:09:01:02:59:2f:20:91:ec:db:fa:94:59:
d5:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:4A:6B:C5:2F:38:D1:4A:37:DC:A9:43:F6:D2:E3:31:F6:2A:94:BE
X509v3 Authority Key Identifier:
keyid:DF:B5:43:D0:FC:79:7D:17:2A:AA:9C:3D:77:F9:43:26:5B:39:89:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/37VD0Px5fRcqqpw9d_lDJls5ia0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/791640-c1ef-466a-96ae-0b07204bfb33/1/bEprxS840Uo33KlD9tLjMfYqlL4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/791640-c1ef-466a-96ae-0b07204bfb33/1/37VD0Px5fRcqqpw9d_lDJls5ia0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.43.159.0/24
195.47.210.0/24
195.47.212.0/24
195.47.216.0/24
IPv6:
2a0f:b6c0::/29
Signature Algorithm: sha256WithRSAEncryption
60:29:94:f9:53:91:4e:50:b4:46:6b:6a:02:cd:7d:58:95:36:
5c:5f:8f:fb:2f:c9:df:30:90:ea:b0:09:ad:cd:4f:ff:8c:ac:
5c:9c:bf:63:92:c4:07:69:b9:e2:f0:38:ae:7a:33:26:e4:f0:
93:4a:1c:eb:f0:6c:9e:7d:03:97:76:fe:4c:82:cd:d9:b5:8d:
3c:51:3a:9a:4e:4d:6f:ec:8c:c0:23:c1:a2:42:9c:d6:b7:9b:
62:2d:a3:7a:32:47:c7:c2:bc:8f:3b:b4:ca:f3:5f:a0:36:53:
29:74:4d:b9:f3:41:11:10:8c:f1:fc:a3:9b:25:43:af:1a:08:
19:10:ea:6e:5f:a6:18:0e:73:8d:cc:c7:db:f5:b3:66:e7:65:
d4:a4:cf:e2:cd:63:eb:97:c4:4f:7a:43:dc:29:f6:3c:ba:81:
68:58:39:02:0e:a9:3c:a2:27:43:08:24:16:b4:fa:8c:13:5e:
a0:c6:97:d2:e8:3a:71:d5:8b:0a:47:d5:83:09:7a:ff:55:57:
31:bc:f3:bd:f5:b4:69:34:9d:58:d8:ba:96:2c:f6:e1:85:7f:
37:5d:c0:a6:84:b8:94:e6:d8:b1:2d:89:50:c9:70:3c:d1:36:
35:9c:d6:f9:9d:05:dc:45:7c:ce:5c:59:e2:21:82:09:4d:d7:
95:1e:ea:c9
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAYVwS+qTZnzeQS7Sd+tBUF5jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmYjU0M2QwZmM3OTdkMTcyYWFhOWMzZDc3Zjk0MzI2NWIz
OTg5YWQwHhcNMjMwMTAyMDIyNTAxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YzRhNmJjNTJmMzhkMTRhMzdkY2E5NDNmNmQyZTMzMWY2MmE5NGJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt12uzqI/p7LMWFOcoL5eS+m1XD2U
BVrxWgMU0umpyJV6GEGE6+p31wSfXyqHtUk+ztRuHrOEn6O7MysDbqKIMZUr+a0H
UKx+He/KAXZy73yDMI0zP71NWojgg+/vbvfY1AXbOuv+QQGnY+C4ZIs44JqJkmaI
2Ue93FAktYftibx4t0IiL7RLeB7J1hR2QGoYm/9e9bGZAyQ8ecaIeZXQrveHmbsh
ulZoCmCKI+EDsEQ0ynR8EofIleehOukyZPRbqk12JFWAx+H/bC4oU1tRR5QZA4cj
oBkL5Aj+G6lONgLKiWB/UUySq6XJw3+0+U+B06sJAQJZLyCR7Nv6lFnVHwIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFGxKa8UvONFKN9ypQ/bS4zH2KpS+MB8GA1UdIwQY
MBaAFN+1Q9D8eX0XKqqcPXf5QyZbOYmtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzdWRDBQeDVmUmNxcXB3OWRfbERKbHM1aWEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi83OTE2NDAtYzFlZi00NjZhLTk2YWUt
MGIwNzIwNGJmYjMzLzEvYkVwcnhTODQwVW8zM0tsRDl0TGpNZllxbEw0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi83OTE2NDAtYzFlZi00NjZhLTk2YWUtMGIwNzIwNGJmYjMz
LzEvMzdWRDBQeDVmUmNxcXB3OWRfbERKbHM1aWEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQAwyufAwQA
wy/SAwQAwy/UAwQAwy/YMA0EAgACMAcDBQMqD7bAMA0GCSqGSIb3DQEBCwUAA4IB
AQBgKZT5U5FOULRGa2oCzX1YlTZcX4/7L8nfMJDqsAmtzU//jKxcnL9jksQHabni
8DiuejMm5PCTShzr8GyefQOXdv5Mgs3ZtY08UTqaTk1v7IzAI8GiQpzWt5tiLaN6
MkfHwryPO7TK81+gNlMpdE2580EREIzx/KObJUOvGggZEOpuX6YYDnONzMfb9bNm
52XUpM/izWPrl8RPekPcKfY8uoFoWDkCDqk8oidDCCQWtPqME16gxpfS6Dpx1YsK
R9WDCXr/VVcxvPO99bRpNJ1Y2LqWLPbhhX83XcCmhLiU5tixLYlQyXA80TY1nNb5
nQXcRXzOXFniIYIJTdeVHurJ
-----END CERTIFICATE-----
Generated at Mon Jan 1 06:16:39 2024 by rpki-client on console-ams.rpki-client.org