Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/2b07a4-5c00-4140-9896-62dc447fe438/1/r4BqF-MGtKAh6qajdKJEUQ71ads.roa
File: r4BqF-MGtKAh6qajdKJEUQ71ads.roa (raw, json)
Hash identifier: GWwnpNdiLlRFudq9Z4VwgcN2+wFlabSvOG5PjFXZEhk=
Subject key identifier: AF:80:6A:17:E3:06:B4:A0:21:EA:A6:A3:74:A2:44:51:0E:F5:69:DB
Certificate issuer: /CN=d8215b57d33cb2f34c17c0e8103bb051ff801ebf
Certificate serial: 01877AD2653543BF74D5DDEA9645EEC4214D
Authority key identifier: D8:21:5B:57:D3:3C:B2:F3:4C:17:C0:E8:10:3B:B0:51:FF:80:1E:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2CFbV9M8svNMF8DoEDuwUf-AHr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/2b07a4-5c00-4140-9896-62dc447fe438/1/r4BqF-MGtKAh6qajdKJEUQ71ads.roa
Signing time: Thu 13 Apr 2023 13:33:41 +0000
ROA not before: Thu 13 Apr 2023 13:33:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29672
IP address blocks: 217.21.224.0/20 maxlen: 20
217.21.237.0/24 maxlen: 24
2a03:c780::/29 maxlen: 29
2a03:c780::/32 maxlen: 32
2a03:c780:6::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:7a:d2:65:35:43:bf:74:d5:dd:ea:96:45:ee:c4:21:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8215b57d33cb2f34c17c0e8103bb051ff801ebf
Validity
Not Before: Apr 13 13:33:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=af806a17e306b4a021eaa6a374a244510ef569db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:35:a7:dd:3b:fb:e1:99:0e:5c:0d:d2:9a:21:
48:38:dd:d3:fb:2a:f9:c8:2c:16:6c:5a:cb:e5:e2:
1e:0d:ac:9f:88:ce:1c:cc:16:77:e9:be:d0:33:5c:
a5:c5:60:f6:de:a1:f8:b8:ca:bb:11:79:c8:7d:96:
29:ef:2d:00:7b:de:c3:f7:c7:94:82:c8:dd:33:1a:
34:9f:38:cf:2c:60:d4:55:93:49:cd:b8:f0:0d:0a:
20:48:20:7a:a6:cd:13:c2:65:8d:ca:c6:9c:fc:c6:
20:3e:ec:54:de:8a:16:cd:0b:3f:da:94:f8:39:94:
6c:0b:e0:98:c7:e7:2c:41:10:f6:82:57:3c:50:af:
25:6a:b9:da:9b:1e:e5:8b:5d:66:c1:df:12:95:41:
8e:b1:ab:b0:46:70:67:7a:9a:7b:f6:d8:a2:5b:49:
24:ae:9a:fd:bf:1a:c3:25:7d:9d:66:48:67:e3:23:
08:ff:73:68:b6:f8:55:a2:7e:88:ed:a7:2a:5c:2d:
2f:d0:91:69:7a:ab:32:bb:ae:75:40:61:3d:d9:45:
d8:25:aa:7b:d5:bd:b1:03:78:4e:1a:b6:77:d6:bf:
cd:05:46:04:2d:5d:ae:9b:a5:3e:8b:c8:2d:33:ba:
fb:87:7c:59:5e:e6:a4:19:f9:b3:be:90:bd:c4:61:
4c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:80:6A:17:E3:06:B4:A0:21:EA:A6:A3:74:A2:44:51:0E:F5:69:DB
X509v3 Authority Key Identifier:
keyid:D8:21:5B:57:D3:3C:B2:F3:4C:17:C0:E8:10:3B:B0:51:FF:80:1E:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2CFbV9M8svNMF8DoEDuwUf-AHr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b07a4-5c00-4140-9896-62dc447fe438/1/r4BqF-MGtKAh6qajdKJEUQ71ads.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b07a4-5c00-4140-9896-62dc447fe438/1/2CFbV9M8svNMF8DoEDuwUf-AHr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.21.224.0/20
IPv6:
2a03:c780::/29
Signature Algorithm: sha256WithRSAEncryption
08:a4:d8:5e:db:a9:89:38:58:1f:82:19:c5:3c:7a:2a:4f:84:
f5:b5:59:78:cc:84:66:e1:7e:66:0f:cd:5d:51:2f:61:2d:06:
8b:16:31:e7:d9:8d:7b:40:8a:54:3b:b1:1e:2d:9d:54:18:2e:
e5:4d:ee:83:1c:75:fa:95:af:28:03:8b:4d:85:1d:1d:ed:07:
13:61:ee:aa:77:0f:d5:f1:fd:e2:1b:53:68:e6:17:35:ad:bf:
21:b1:ee:94:39:8d:cf:73:b7:90:24:10:4d:0a:71:4a:16:06:
8b:65:22:49:fa:f9:38:b0:42:70:4f:bc:7a:fd:33:f5:e1:e4:
a2:b1:da:a8:5e:e2:cf:e2:56:61:37:22:53:c3:99:78:ae:9d:
02:01:20:77:3b:ac:fc:09:fb:08:75:bb:a8:d5:f3:a0:85:2e:
17:20:0a:46:b2:98:6e:da:5c:32:9d:79:f2:4e:7f:7d:e9:67:
85:cd:70:2b:7b:3b:57:94:81:e2:71:1a:af:f8:ee:68:86:07:
82:22:a8:ac:5a:35:72:23:2d:6b:9d:a9:aa:7b:f9:3f:dc:40:
8c:25:c4:e8:91:c2:9c:36:a1:84:d5:f5:87:61:41:69:a9:c0:
26:76:87:7d:99:1a:72:9c:17:ae:74:50:48:a7:09:6f:0b:ec:
7d:23:d3:c0
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYd60mU1Q7901d3qlkXuxCFNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4MjE1YjU3ZDMzY2IyZjM0YzE3YzBlODEwM2JiMDUxZmY4
MDFlYmYwHhcNMjMwNDEzMTMzMzQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZjgwNmExN2UzMDZiNGEwMjFlYWE2YTM3NGEyNDQ1MTBlZjU2OWRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTWn3Tv74ZkOXA3SmiFION3T+yr5
yCwWbFrL5eIeDayfiM4czBZ36b7QM1ylxWD23qH4uMq7EXnIfZYp7y0Ae97D98eU
gsjdMxo0nzjPLGDUVZNJzbjwDQogSCB6ps0TwmWNysac/MYgPuxU3ooWzQs/2pT4
OZRsC+CYx+csQRD2glc8UK8larnamx7li11mwd8SlUGOsauwRnBnepp79tiiW0kk
rpr9vxrDJX2dZkhn4yMI/3NotvhVon6I7acqXC0v0JFpeqsyu651QGE92UXYJap7
1b2xA3hOGrZ31r/NBUYELV2um6U+i8gtM7r7h3xZXuakGfmzvpC9xGFMewIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFK+AahfjBrSgIeqmo3SiRFEO9WnbMB8GA1UdIwQY
MBaAFNghW1fTPLLzTBfA6BA7sFH/gB6/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkNGYlY5TThzdk5NRjhEb0VEdXdVZi1BSHI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8yYjA3YTQtNWMwMC00MTQwLTk4OTYt
NjJkYzQ0N2ZlNDM4LzEvcjRCcUYtTUd0S0FoNnFhamRLSkVVUTcxYWRzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy8yYjA3YTQtNWMwMC00MTQwLTk4OTYtNjJkYzQ0N2ZlNDM4
LzEvMkNGYlY5TThzdk5NRjhEb0VEdXdVZi1BSHI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQE2RXgMA0E
AgACMAcDBQMqA8eAMA0GCSqGSIb3DQEBCwUAA4IBAQAIpNhe26mJOFgfghnFPHoq
T4T1tVl4zIRm4X5mD81dUS9hLQaLFjHn2Y17QIpUO7EeLZ1UGC7lTe6DHHX6la8o
A4tNhR0d7QcTYe6qdw/V8f3iG1No5hc1rb8hse6UOY3Pc7eQJBBNCnFKFgaLZSJJ
+vk4sEJwT7x6/TP14eSisdqoXuLP4lZhNyJTw5l4rp0CASB3O6z8CfsIdbuo1fOg
hS4XIApGsphu2lwynXnyTn996WeFzXAreztXlIHicRqv+O5ohgeCIqisWjVyIy1r
namqe/k/3ECMJcTokcKcNqGE1fWHYUFpqcAmdod9mRpynBeudFBIpwlvC+x9I9PA
-----END CERTIFICATE-----
Generated at Mon Jan 1 17:26:15 2024 by rpki-client on console-fra.rpki-client.org