Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/bf0162-fcba-4085-b4f1-d699ddc9d09c/1/7Af3h3aRoSVbBEicBM5g4Gif6fM.roa
File: 7Af3h3aRoSVbBEicBM5g4Gif6fM.roa (raw, json)
Hash identifier: uK0V6EFHPDVgL+qH6ez84I/4fijdhz9902FxubfitX0=
Subject key identifier: EC:07:F7:87:76:91:A1:25:5B:04:48:9C:04:CE:60:E0:68:9F:E9:F3
Certificate issuer: /CN=830555f011be5e241eb0b425de5fd86cc6834a54
Certificate serial: 018B8F3AC87771C31FBC574F0B94C53E761E
Authority key identifier: 83:05:55:F0:11:BE:5E:24:1E:B0:B4:25:DE:5F:D8:6C:C6:83:4A:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gwVV8BG-XiQesLQl3l_YbMaDSlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/bf0162-fcba-4085-b4f1-d699ddc9d09c/1/7Af3h3aRoSVbBEicBM5g4Gif6fM.roa
Signing time: Thu 02 Nov 2023 08:51:16 +0000
ROA not before: Thu 02 Nov 2023 08:51:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199803
IP address blocks: 188.92.43.0/24 maxlen: 24
188.92.44.0/24 maxlen: 24
188.92.40.0/24 maxlen: 24
188.92.41.0/24 maxlen: 24
188.92.42.0/24 maxlen: 24
188.92.46.0/24 maxlen: 24
188.92.47.0/24 maxlen: 24
188.92.45.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:8f:3a:c8:77:71:c3:1f:bc:57:4f:0b:94:c5:3e:76:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=830555f011be5e241eb0b425de5fd86cc6834a54
Validity
Not Before: Nov 2 08:51:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ec07f7877691a1255b04489c04ce60e0689fe9f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:95:66:bb:06:eb:12:a1:a0:81:dd:5e:f3:dd:
29:e9:58:1d:1c:53:ba:47:fe:71:b2:6f:52:d1:36:
43:79:8a:1a:75:7b:bd:ca:5b:76:24:b7:bd:77:df:
18:37:1f:ca:d9:5b:9a:2c:51:3b:22:25:1e:fe:3c:
32:62:12:1e:b2:91:23:76:ee:2e:6a:a3:c4:d1:e6:
a1:65:f3:9e:58:ab:4b:31:92:a0:89:a0:23:e2:8a:
70:8a:42:a8:ef:22:39:9f:ec:1d:93:eb:19:61:90:
62:93:5c:62:b0:c5:f1:8b:7d:b0:5f:53:ef:83:a0:
ba:cf:4d:be:96:d0:ce:b5:1c:a0:3f:f2:7c:e3:fc:
cd:e6:15:30:fc:e6:73:d0:13:9d:fe:77:07:20:11:
5e:60:73:ef:24:35:e5:d7:9f:25:45:82:e6:c9:ae:
e7:96:90:22:e1:bb:07:2d:d6:17:4f:1a:7f:a6:cd:
71:03:2b:6c:bf:df:da:d0:f5:26:17:b9:ad:0b:c8:
e3:95:e9:69:ab:d2:82:2b:e0:47:d3:03:bc:1f:c3:
5d:a9:8f:95:38:db:9e:88:b3:27:c0:3c:7e:ac:68:
5e:c5:c2:7e:b4:96:be:fa:a5:92:c8:e0:6e:fa:a5:
c8:86:75:36:f4:4d:65:eb:ac:f0:0d:88:71:ab:a8:
e6:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:07:F7:87:76:91:A1:25:5B:04:48:9C:04:CE:60:E0:68:9F:E9:F3
X509v3 Authority Key Identifier:
keyid:83:05:55:F0:11:BE:5E:24:1E:B0:B4:25:DE:5F:D8:6C:C6:83:4A:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwVV8BG-XiQesLQl3l_YbMaDSlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/bf0162-fcba-4085-b4f1-d699ddc9d09c/1/7Af3h3aRoSVbBEicBM5g4Gif6fM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/bf0162-fcba-4085-b4f1-d699ddc9d09c/1/gwVV8BG-XiQesLQl3l_YbMaDSlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.92.40.0/21
Signature Algorithm: sha256WithRSAEncryption
31:10:10:ff:28:cc:95:a2:ab:4b:e2:c3:cb:f1:af:11:60:23:
da:fe:78:12:ce:f8:11:aa:ec:57:f5:56:0e:93:87:c4:11:8f:
75:1a:1d:d7:1b:23:27:21:36:6c:2a:b4:3a:ce:76:6e:9a:bf:
51:31:50:bd:6f:d7:40:67:ff:bc:ca:66:5a:ba:15:eb:68:4b:
4c:9d:05:bb:e2:bf:c7:d7:bd:40:85:e7:03:e2:4c:3e:6e:bc:
e2:d4:20:fc:fe:b8:f0:80:27:45:72:4c:27:a1:6d:55:6c:01:
06:6b:70:f2:30:2d:c1:d6:e9:f6:ca:b4:58:c1:a2:02:37:d8:
94:22:0c:4d:f9:9a:0e:21:b6:05:ed:2d:81:6b:3d:e9:cb:b9:
5e:36:2c:d0:1e:f8:c0:d1:cd:69:b9:a1:b2:8b:ae:0c:ed:f8:
42:5e:ef:7b:90:a3:a3:2a:83:0e:db:bb:bc:66:3c:83:83:b9:
f9:17:a6:d3:d7:4e:1d:26:02:73:b1:42:e8:a4:4e:31:3a:b1:
eb:92:94:b8:61:e9:c5:8e:f2:48:d7:ad:56:19:bb:02:1e:da:
2e:a1:99:18:4e:00:95:18:ee:c8:ca:d1:3a:e5:0b:43:ea:7c:
22:ca:c1:c1:1b:ea:67:97:41:2f:7c:99:57:e2:81:8e:f2:ac:
91:a4:c5:f9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYuPOsh3ccMfvFdPC5TFPnYeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzMDU1NWYwMTFiZTVlMjQxZWIwYjQyNWRlNWZkODZjYzY4
MzRhNTQwHhcNMjMxMTAyMDg1MTE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYzA3Zjc4Nzc2OTFhMTI1NWIwNDQ4OWMwNGNlNjBlMDY4OWZlOWYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZVmuwbrEqGggd1e890p6VgdHFO6
R/5xsm9S0TZDeYoadXu9ylt2JLe9d98YNx/K2VuaLFE7IiUe/jwyYhIespEjdu4u
aqPE0eahZfOeWKtLMZKgiaAj4opwikKo7yI5n+wdk+sZYZBik1xisMXxi32wX1Pv
g6C6z02+ltDOtRygP/J84/zN5hUw/OZz0BOd/ncHIBFeYHPvJDXl158lRYLmya7n
lpAi4bsHLdYXTxp/ps1xAytsv9/a0PUmF7mtC8jjlelpq9KCK+BH0wO8H8NdqY+V
ONueiLMnwDx+rGhexcJ+tJa++qWSyOBu+qXIhnU29E1l66zwDYhxq6jm4QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOwH94d2kaElWwRInATOYOBon+nzMB8GA1UdIwQY
MBaAFIMFVfARvl4kHrC0Jd5f2GzGg0pUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3dWVjhCRy1YaVFlc0xRbDNsX1liTWFEU2xRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9iZjAxNjItZmNiYS00MDg1LWI0ZjEt
ZDY5OWRkYzlkMDljLzEvN0FmM2gzYVJvU1ZiQkVpY0JNNWc0R2lmNmZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9iZjAxNjItZmNiYS00MDg1LWI0ZjEtZDY5OWRkYzlkMDlj
LzEvZ3dWVjhCRy1YaVFlc0xRbDNsX1liTWFEU2xRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDvFwoMA0G
CSqGSIb3DQEBCwUAA4IBAQAxEBD/KMyVoqtL4sPL8a8RYCPa/ngSzvgRquxX9VYO
k4fEEY91Gh3XGyMnITZsKrQ6znZumr9RMVC9b9dAZ/+8ymZauhXraEtMnQW74r/H
171AhecD4kw+brzi1CD8/rjwgCdFckwnoW1VbAEGa3DyMC3B1un2yrRYwaICN9iU
IgxN+ZoOIbYF7S2Baz3py7leNizQHvjA0c1puaGyi64M7fhCXu97kKOjKoMO27u8
ZjyDg7n5F6bT104dJgJzsULopE4xOrHrkpS4YenFjvJI161WGbsCHtouoZkYTgCV
GO7IytE65QtD6nwiysHBG+pnl0EvfJlX4oGO8qyRpMX5
-----END CERTIFICATE-----
Generated at Tue Jan 2 06:32:54 2024 by rpki-client on console-ams.rpki-client.org