Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/T_2psaowBeiBFOJjnF05r12tOH0.roa
File: T_2psaowBeiBFOJjnF05r12tOH0.roa (raw, json)
Hash identifier: 4kkxfyGehoUHOZMc8fqhhCX/NnFch54q7kCROPYOFyY=
Subject key identifier: 4F:FD:A9:B1:AA:30:05:E8:81:14:E2:63:9C:5D:39:AF:5D:AD:38:7D
Certificate issuer: /CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8
Certificate serial: 018C63BC2F0717EF440FA30726D9B6716F0B
Authority key identifier: 49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/T_2psaowBeiBFOJjnF05r12tOH0.roa
Signing time: Wed 13 Dec 2023 15:12:06 +0000
ROA not before: Wed 13 Dec 2023 15:12:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6762
IP address blocks: 146.19.189.0/24 maxlen: 24
37.72.135.0/24 maxlen: 24
195.225.98.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:63:bc:2f:07:17:ef:44:0f:a3:07:26:d9:b6:71:6f:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8
Validity
Not Before: Dec 13 15:12:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4ffda9b1aa3005e88114e2639c5d39af5dad387d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:18:6c:d3:8d:73:c7:5c:ef:17:fd:f0:02:11:
1c:73:5a:3e:1f:a2:0b:23:70:53:f1:3f:8b:7a:9d:
69:bc:b6:43:31:3d:c6:43:24:f4:85:5a:c9:86:1b:
fc:7b:fd:3f:28:d7:48:29:c9:01:b9:34:fd:c7:f1:
a3:fa:f6:61:55:ba:77:b1:27:c0:f6:4d:62:45:4f:
a0:fe:1e:68:7f:1b:30:44:30:2d:6b:b8:60:b2:f6:
c3:79:4d:b4:64:d3:07:99:32:48:0c:7c:ab:cd:77:
63:b7:a4:8d:33:89:b1:0e:d1:c7:f2:3a:94:c6:a6:
0b:d8:99:9a:df:22:81:e2:f1:d3:86:3b:0b:10:89:
59:9f:59:c6:e2:66:8a:e9:14:56:ee:e8:35:d1:72:
62:f3:e3:09:87:bd:76:66:fa:c8:83:8c:c4:40:d5:
b1:2e:90:b1:5d:49:e0:43:9e:68:7f:2d:39:d2:5b:
ff:64:94:f7:ae:72:43:bb:89:ff:3c:8b:57:1c:98:
ed:63:41:9a:97:1f:77:eb:98:0c:d4:55:55:33:ce:
b2:15:8a:c4:89:40:73:21:2a:92:ea:23:21:fe:69:
09:54:8b:1b:01:54:f6:37:5a:72:ce:11:08:5b:61:
83:ea:e1:3a:13:65:a6:f2:d0:ba:c6:e3:ac:49:17:
74:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:FD:A9:B1:AA:30:05:E8:81:14:E2:63:9C:5D:39:AF:5D:AD:38:7D
X509v3 Authority Key Identifier:
keyid:49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/T_2psaowBeiBFOJjnF05r12tOH0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.72.135.0/24
146.19.189.0/24
195.225.98.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:c0:3e:5e:04:f1:ad:51:9c:bd:d7:9b:6f:0f:f8:ef:c4:4e:
d5:41:b4:4f:5b:30:3f:6a:18:b9:2b:40:06:3a:58:9e:6e:ba:
54:04:04:bb:be:6f:ff:25:99:10:6a:3d:7d:de:20:47:7c:c8:
24:1d:dc:b8:74:4b:9c:60:eb:57:3e:49:02:74:7e:1d:6f:7b:
49:8f:a9:9c:ee:b0:2c:ab:1b:1d:13:89:03:a6:b7:97:ce:d1:
a4:2d:3f:31:46:e4:68:40:20:8a:33:aa:75:4d:62:0a:80:a7:
d0:64:59:8f:69:92:96:09:d8:b6:4b:78:7f:3d:c6:9a:73:08:
b6:4a:3f:83:cf:fd:e9:be:4b:35:57:eb:ef:ae:39:6f:99:4a:
70:5d:2f:fb:70:a4:f9:14:56:ef:ee:b2:b1:b3:ec:04:11:46:
67:ff:77:1d:a1:ed:db:3e:73:fe:54:35:e4:86:9b:87:db:db:
2a:36:80:c2:04:0a:c4:3c:b8:48:9b:b5:4e:6d:01:6f:ec:1c:
00:77:a4:1a:69:28:f0:af:2b:6f:c5:85:09:74:60:ef:83:39:
78:68:f1:a0:05:52:b2:0d:4f:c1:75:13:9c:f4:3f:cd:99:f2:
05:e6:4c:f4:fe:46:02:e0:46:13:af:3d:eb:88:25:66:52:3d:
cb:da:10:e1
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYxjvC8HF+9ED6MHJtm2cW8LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5ZTE0YmY3NmY0MmRhNGYyYWMwMDNhNmM2OWQ2MWMyMzIw
ZTJjZDgwHhcNMjMxMjEzMTUxMjA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZmZkYTliMWFhMzAwNWU4ODExNGUyNjM5YzVkMzlhZjVkYWQzODdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhBhs041zx1zvF/3wAhEcc1o+H6IL
I3BT8T+Lep1pvLZDMT3GQyT0hVrJhhv8e/0/KNdIKckBuTT9x/Gj+vZhVbp3sSfA
9k1iRU+g/h5ofxswRDAta7hgsvbDeU20ZNMHmTJIDHyrzXdjt6SNM4mxDtHH8jqU
xqYL2Jma3yKB4vHThjsLEIlZn1nG4maK6RRW7ug10XJi8+MJh712ZvrIg4zEQNWx
LpCxXUngQ55ofy050lv/ZJT3rnJDu4n/PItXHJjtY0Galx9365gM1FVVM86yFYrE
iUBzISqS6iMh/mkJVIsbAVT2N1pyzhEIW2GD6uE6E2Wm8tC6xuOsSRd0/wIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFE/9qbGqMAXogRTiY5xdOa9drTh9MB8GA1UdIwQY
MBaAFEnhS/dvQtpPKsADpsadYcIyDizYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2VGTDkyOUMyazhxd0FPbXhwMWh3aklPTE5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC81NjE2N2YtNTMyNy00Yzg4LWI0ZWEt
M2JlY2NhYWUzMzZkLzEvVF8ycHNhb3dCZWlCRk9Kam5GMDVyMTJ0T0gwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC81NjE2N2YtNTMyNy00Yzg4LWI0ZWEtM2JlY2NhYWUzMzZk
LzEvU2VGTDkyOUMyazhxd0FPbXhwMWh3aklPTE5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAJUiHAwQA
khO9AwQAw+FiMA0GCSqGSIb3DQEBCwUAA4IBAQAMwD5eBPGtUZy915tvD/jvxE7V
QbRPWzA/ahi5K0AGOliebrpUBAS7vm//JZkQaj193iBHfMgkHdy4dEucYOtXPkkC
dH4db3tJj6mc7rAsqxsdE4kDpreXztGkLT8xRuRoQCCKM6p1TWIKgKfQZFmPaZKW
Cdi2S3h/Pcaacwi2Sj+Dz/3pvks1V+vvrjlvmUpwXS/7cKT5FFbv7rKxs+wEEUZn
/3cdoe3bPnP+VDXkhpuH29sqNoDCBArEPLhIm7VObQFv7BwAd6QaaSjwrytvxYUJ
dGDvgzl4aPGgBVKyDU/BdROc9D/NmfIF5kz0/kYC4EYTrz3riCVmUj3L2hDh
-----END CERTIFICATE-----
Generated at Mon Jan 1 17:14:32 2024 by rpki-client on console-ams.rpki-client.org