Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/146rL5sUmoMBI7JdIyv9IXKRmgE.roa
File: 146rL5sUmoMBI7JdIyv9IXKRmgE.roa (raw, json)
Hash identifier: Xn4y94meN0WAWkVKzaIfm6aOKpX2DYmu4csBSDq7Lt8=
Subject key identifier: D7:8E:AB:2F:9B:14:9A:83:01:23:B2:5D:23:2B:FD:21:72:91:9A:01
Certificate issuer: /CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
Certificate serial: 01857255B43F5768FEC0AD5B0A949366DB48
Authority key identifier: D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/146rL5sUmoMBI7JdIyv9IXKRmgE.roa
Signing time: Mon 02 Jan 2023 11:54:57 +0000
ROA not before: Mon 02 Jan 2023 11:54:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203598
IP address blocks: 62.228.240.0/24 maxlen: 24
93.109.225.0/24 maxlen: 24
93.109.224.0/24 maxlen: 24
87.228.203.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:55:b4:3f:57:68:fe:c0:ad:5b:0a:94:93:66:db:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
Validity
Not Before: Jan 2 11:54:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d78eab2f9b149a830123b25d232bfd2172919a01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:08:97:19:59:86:45:23:8b:6c:85:59:41:9d:
6c:6b:4d:83:fd:e0:3a:e3:dd:fa:3c:77:8c:0b:bd:
70:74:e8:03:df:98:eb:7e:87:61:e5:00:e7:84:3f:
03:b0:06:e7:3f:e1:85:7b:f2:86:ad:f4:ac:37:0e:
47:39:cb:b5:7a:17:b8:7a:0e:8e:81:94:4d:67:a7:
9a:03:f2:ef:22:3b:f6:65:2a:32:71:8a:d6:2f:c7:
e7:8a:07:96:de:90:77:20:9e:80:71:75:41:52:81:
1a:01:ac:19:db:eb:d6:27:6a:45:da:ac:c2:29:45:
b6:f6:5c:1e:b8:74:d4:9a:05:79:f1:33:6a:4d:a3:
b1:5d:c3:36:d8:a2:92:4d:a3:e6:99:56:03:d4:f5:
6a:52:95:e9:a5:01:3b:9f:59:0b:fd:4b:90:03:15:
fb:73:b9:51:87:73:96:f6:03:cd:9b:fd:03:f8:6e:
dd:1f:b8:1f:64:a8:55:32:f3:f3:52:aa:2b:9d:60:
88:61:60:09:a6:71:aa:95:ee:ba:ad:75:f6:91:0a:
9c:eb:42:ed:e8:45:92:20:61:70:21:4d:ab:1f:9d:
11:6b:95:cc:42:f8:05:5d:9e:6b:29:4b:21:6e:4b:
f1:06:63:61:88:ab:a3:da:5f:b0:5f:e5:b7:a0:db:
86:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:8E:AB:2F:9B:14:9A:83:01:23:B2:5D:23:2B:FD:21:72:91:9A:01
X509v3 Authority Key Identifier:
keyid:D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/146rL5sUmoMBI7JdIyv9IXKRmgE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.228.240.0/24
87.228.203.0/24
93.109.224.0/23
Signature Algorithm: sha256WithRSAEncryption
68:3f:a6:c1:b7:38:15:29:84:46:ad:4b:17:b9:73:dd:c3:5a:
bb:ed:23:ec:61:21:58:2f:20:57:c8:9c:e1:1d:bc:b4:86:9f:
ac:c1:24:f5:70:4c:67:68:b3:5f:36:33:bb:c2:5b:e5:0a:f2:
cd:69:6b:b5:19:36:c8:c1:0c:ec:35:f1:2e:68:ea:64:95:d6:
d4:cf:74:dd:11:72:9b:c3:36:3e:52:36:78:a5:56:08:9e:b8:
cd:6f:35:42:2a:08:c0:2b:2a:03:d8:7d:af:31:c4:55:02:83:
46:d8:ad:06:21:1b:77:b9:5e:9b:27:74:c9:ff:c2:9e:bc:38:
8e:56:87:cb:d9:05:30:4e:15:cd:c6:b6:93:af:73:06:38:4a:
12:a4:25:50:b3:68:68:db:09:32:1e:63:aa:07:de:6e:db:cd:
38:a2:a8:d2:40:75:06:03:9c:8c:59:3a:8e:90:7d:ea:e7:c4:
bf:07:80:a7:1b:25:91:ba:89:80:e1:5d:de:30:7c:62:b9:0f:
d7:99:2c:7e:91:f7:78:d0:f5:17:8a:c4:84:5d:5b:b4:a6:21:
d6:3b:8b:b7:70:41:5f:97:ac:8f:b7:74:9f:ba:00:3e:ed:8b:
33:83:1e:00:03:ba:a5:95:61:50:fb:aa:d3:16:11:8c:a4:17:
29:16:5c:1c
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYVyVbQ/V2j+wK1bCpSTZttIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0MTFhYmM0YzA0NjhhYjI4OTFlYWFjYWRiYTBkYzAzNzc5
MzZmZDUwHhcNMjMwMTAyMTE1NDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNzhlYWIyZjliMTQ5YTgzMDEyM2IyNWQyMzJiZmQyMTcyOTE5YTAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgiXGVmGRSOLbIVZQZ1sa02D/eA6
4936PHeMC71wdOgD35jrfodh5QDnhD8DsAbnP+GFe/KGrfSsNw5HOcu1ehe4eg6O
gZRNZ6eaA/LvIjv2ZSoycYrWL8fnigeW3pB3IJ6AcXVBUoEaAawZ2+vWJ2pF2qzC
KUW29lweuHTUmgV58TNqTaOxXcM22KKSTaPmmVYD1PVqUpXppQE7n1kL/UuQAxX7
c7lRh3OW9gPNm/0D+G7dH7gfZKhVMvPzUqornWCIYWAJpnGqle66rXX2kQqc60Lt
6EWSIGFwIU2rH50Ra5XMQvgFXZ5rKUshbkvxBmNhiKuj2l+wX+W3oNuG+wIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFNeOqy+bFJqDASOyXSMr/SFykZoBMB8GA1UdIwQY
MBaAFNQRq8TARoqyiR6qytug3AN3k2/VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUJHcnhNQkdpcktKSHFySzI2RGNBM2VUYjlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My82MThlNTMtYWZjNC00MGRmLTg2MTIt
YjBmNGI5YzM3ZTQ5LzEvMTQ2ckw1c1Vtb01CSTdKZEl5djlJWEtSbWdFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My82MThlNTMtYWZjNC00MGRmLTg2MTItYjBmNGI5YzM3ZTQ5
LzEvMUJHcnhNQkdpcktKSHFySzI2RGNBM2VUYjlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAPuTwAwQA
V+TLAwQBXW3gMA0GCSqGSIb3DQEBCwUAA4IBAQBoP6bBtzgVKYRGrUsXuXPdw1q7
7SPsYSFYLyBXyJzhHby0hp+swST1cExnaLNfNjO7wlvlCvLNaWu1GTbIwQzsNfEu
aOpkldbUz3TdEXKbwzY+UjZ4pVYInrjNbzVCKgjAKyoD2H2vMcRVAoNG2K0GIRt3
uV6bJ3TJ/8KevDiOVofL2QUwThXNxraTr3MGOEoSpCVQs2ho2wkyHmOqB95u2804
oqjSQHUGA5yMWTqOkH3q58S/B4CnGyWRuomA4V3eMHxiuQ/XmSx+kfd40PUXisSE
XVu0piHWO4u3cEFfl6yPt3SfugA+7Yszgx4AA7qllWFQ+6rTFhGMpBcpFlwc
-----END CERTIFICATE-----
Generated at Mon Jan 1 15:03:03 2024 by rpki-client on console-ams.rpki-client.org