Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/e1f09a-b49f-4f69-8eb9-5cac94b836b6/1/voBMSWQf-u9XqxLXB1ViKxd0008.roa
File: voBMSWQf-u9XqxLXB1ViKxd0008.roa (raw, json)
Hash identifier: jSwj0mxD2PyUqM7ZYW2Y+zB7ugUX9+x3q0l4cY+kEz0=
Subject key identifier: BE:80:4C:49:64:1F:FA:EF:57:AB:12:D7:07:55:62:2B:17:74:D3:4F
Certificate issuer: /CN=f35f3f2ebf80c77669250a759be1e5c91e388435
Certificate serial: 01856EAFE61E9284E5172C8F9B5558E36C83
Authority key identifier: F3:5F:3F:2E:BF:80:C7:76:69:25:0A:75:9B:E1:E5:C9:1E:38:84:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/818_Lr-Ax3ZpJQp1m-HlyR44hDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/e1f09a-b49f-4f69-8eb9-5cac94b836b6/1/voBMSWQf-u9XqxLXB1ViKxd0008.roa
Signing time: Sun 01 Jan 2023 18:54:59 +0000
ROA not before: Sun 01 Jan 2023 18:54:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20504
IP address blocks: 217.118.160.0/24 maxlen: 24
217.118.160.0/20 maxlen: 20
217.118.166.0/24 maxlen: 24
217.118.162.0/24 maxlen: 24
217.118.167.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:af:e6:1e:92:84:e5:17:2c:8f:9b:55:58:e3:6c:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f35f3f2ebf80c77669250a759be1e5c91e388435
Validity
Not Before: Jan 1 18:54:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=be804c49641ffaef57ab12d70755622b1774d34f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:46:c8:34:8d:98:be:7f:5c:20:97:b6:b2:ad:
ce:5b:13:de:96:e6:1f:5d:0c:3d:d5:4d:85:a2:5b:
4f:45:d2:66:7b:92:29:53:13:0c:5c:af:2d:c2:51:
bc:46:d6:df:4a:36:fe:9b:99:7c:f0:41:9f:87:4b:
3f:c7:62:95:16:c3:03:cb:43:ca:47:0e:d3:0f:01:
55:72:64:29:e2:3a:b9:6d:af:6f:da:57:dd:bc:03:
81:41:b1:f5:50:c8:3c:af:d7:29:9d:e4:07:c3:51:
81:94:ca:cc:97:a1:bf:49:19:2d:18:60:eb:09:57:
bc:54:5e:b5:38:44:28:12:60:e9:22:5d:a2:03:1c:
1b:92:8a:91:54:b8:9e:ba:cd:f3:6f:bc:ec:7f:c9:
7b:0b:51:43:f1:4e:d6:61:6f:ba:05:a8:e6:15:c8:
4e:7f:39:6a:0e:4e:96:1e:d4:68:45:a9:db:f6:41:
11:9c:de:c0:37:20:f6:66:a5:2b:df:ab:d8:57:96:
1f:c3:25:a8:75:54:66:64:1e:7c:45:dd:18:bd:db:
ac:d8:28:6c:47:51:af:c8:f2:4d:0e:c0:05:a1:5e:
c6:f2:a0:da:b9:29:61:ed:84:ba:19:22:33:7c:64:
0d:36:fd:c0:5a:45:91:09:72:72:01:37:97:39:6c:
29:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:80:4C:49:64:1F:FA:EF:57:AB:12:D7:07:55:62:2B:17:74:D3:4F
X509v3 Authority Key Identifier:
keyid:F3:5F:3F:2E:BF:80:C7:76:69:25:0A:75:9B:E1:E5:C9:1E:38:84:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/818_Lr-Ax3ZpJQp1m-HlyR44hDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e1f09a-b49f-4f69-8eb9-5cac94b836b6/1/voBMSWQf-u9XqxLXB1ViKxd0008.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e1f09a-b49f-4f69-8eb9-5cac94b836b6/1/818_Lr-Ax3ZpJQp1m-HlyR44hDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.118.160.0/20
Signature Algorithm: sha256WithRSAEncryption
bb:e4:3b:f4:f6:15:29:4d:5b:d2:a5:52:59:04:98:ba:c4:fa:
30:d7:d5:85:8e:1a:23:25:45:2d:65:b8:06:b1:d3:01:1d:1c:
57:3a:d2:86:ae:fb:a6:dd:76:2d:b5:ac:76:fd:4d:66:15:39:
24:f6:f4:f6:3d:f1:7a:d5:fd:18:60:06:f8:eb:25:97:82:c1:
06:24:9a:1e:0d:cf:33:be:e6:5e:de:4e:6d:ce:98:5d:a5:39:
fd:26:47:fe:72:36:68:01:40:e2:40:63:c9:5e:0f:fd:02:b7:
13:83:4c:a2:a2:f9:b9:ee:74:cf:e3:0f:89:03:ef:f0:51:4a:
db:dc:eb:52:e3:c7:3e:5a:9a:1f:55:47:35:e7:ba:e3:ca:73:
11:7f:bd:f8:48:1c:cd:6f:e3:cc:09:ee:c9:d7:f5:12:56:a7:
0b:b6:7f:7f:c1:8b:73:d6:ba:8f:5e:f2:4e:1d:17:66:bc:ff:
d6:8e:09:15:c8:bc:bf:f8:f8:d4:d0:60:07:6a:a5:ec:c7:2f:
bd:b8:21:36:23:77:9f:b0:3e:e0:35:68:29:e4:34:36:a9:fe:
d9:32:19:9a:da:d6:6e:25:cc:db:f9:70:a3:a4:e7:04:8f:f9:
f3:e3:0a:6a:ca:5d:02:b2:ad:ad:9d:6f:49:3b:29:c4:42:7d:
02:ba:b2:18
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVur+YekoTlFyyPm1VY42yDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzNWYzZjJlYmY4MGM3NzY2OTI1MGE3NTliZTFlNWM5MWUz
ODg0MzUwHhcNMjMwMTAxMTg1NDU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZTgwNGM0OTY0MWZmYWVmNTdhYjEyZDcwNzU1NjIyYjE3NzRkMzRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUbINI2Yvn9cIJe2sq3OWxPeluYf
XQw91U2FoltPRdJme5IpUxMMXK8twlG8RtbfSjb+m5l88EGfh0s/x2KVFsMDy0PK
Rw7TDwFVcmQp4jq5ba9v2lfdvAOBQbH1UMg8r9cpneQHw1GBlMrMl6G/SRktGGDr
CVe8VF61OEQoEmDpIl2iAxwbkoqRVLieus3zb7zsf8l7C1FD8U7WYW+6BajmFchO
fzlqDk6WHtRoRanb9kERnN7ANyD2ZqUr36vYV5YfwyWodVRmZB58Rd0Yvdus2Chs
R1GvyPJNDsAFoV7G8qDauSlh7YS6GSIzfGQNNv3AWkWRCXJyATeXOWwpgQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFL6ATElkH/rvV6sS1wdVYisXdNNPMB8GA1UdIwQY
MBaAFPNfPy6/gMd2aSUKdZvh5ckeOIQ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODE4X0xyLUF4M1pwSlFwMW0tSGx5UjQ0aERVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9lMWYwOWEtYjQ5Zi00ZjY5LThlYjkt
NWNhYzk0YjgzNmI2LzEvdm9CTVNXUWYtdTlYcXhMWEIxVmlLeGQwMDA4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS9lMWYwOWEtYjQ5Zi00ZjY5LThlYjktNWNhYzk0YjgzNmI2
LzEvODE4X0xyLUF4M1pwSlFwMW0tSGx5UjQ0aERVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2XagMA0G
CSqGSIb3DQEBCwUAA4IBAQC75Dv09hUpTVvSpVJZBJi6xPow19WFjhojJUUtZbgG
sdMBHRxXOtKGrvum3XYttax2/U1mFTkk9vT2PfF61f0YYAb46yWXgsEGJJoeDc8z
vuZe3k5tzphdpTn9Jkf+cjZoAUDiQGPJXg/9ArcTg0yiovm57nTP4w+JA+/wUUrb
3OtS48c+WpofVUc157rjynMRf734SBzNb+PMCe7J1/USVqcLtn9/wYtz1rqPXvJO
HRdmvP/WjgkVyLy/+PjU0GAHaqXsxy+9uCE2I3efsD7gNWgp5DQ2qf7ZMhma2tZu
Jczb+XCjpOcEj/nz4wpqyl0Csq2tnW9JOynEQn0CurIY
-----END CERTIFICATE-----
Generated at Tue Jan 2 06:51:51 2024 by rpki-client on console-fra.rpki-client.org