Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/0QLYj7dRyIiF6V1EMjTCOT130uM.roa
File: 0QLYj7dRyIiF6V1EMjTCOT130uM.roa (raw, json)
Hash identifier: uD0kL7/l4hSqz+B9rrmNl0W1PiGONAilekKcK5nfDoQ=
Subject key identifier: D1:02:D8:8F:B7:51:C8:88:85:E9:5D:44:32:34:C2:39:3D:77:D2:E3
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018696A2EE747FAC2DB96635DBE14DC861C4
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/0QLYj7dRyIiF6V1EMjTCOT130uM.roa
Signing time: Tue 28 Feb 2023 06:08:25 +0000
ROA not before: Tue 28 Feb 2023 06:08:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 178.239.204.0/24 maxlen: 24
178.239.201.0/24 maxlen: 24
193.42.54.0/23 maxlen: 24
103.212.81.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:96:a2:ee:74:7f:ac:2d:b9:66:35:db:e1:4d:c8:61:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Feb 28 06:08:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d102d88fb751c88885e95d443234c2393d77d2e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ce:74:fe:27:11:69:35:8c:2d:53:85:d4:c7:
0c:85:19:cf:43:63:a3:df:37:40:bd:e6:4b:31:18:
2c:c0:91:91:a0:0a:2d:67:d6:9f:1b:30:b1:f6:82:
05:08:00:27:f0:52:dd:0b:dd:3e:71:a4:9a:16:fb:
65:09:71:23:e3:9f:c9:f5:b8:02:56:f5:d3:42:c3:
c0:cc:7d:a9:a4:c7:b1:f4:94:96:fa:b3:84:d5:c5:
9b:19:cf:16:da:f2:ba:b8:bc:d8:1b:99:71:45:54:
fb:d1:ef:88:91:4e:30:4f:af:96:aa:c2:ab:f8:d7:
a8:0f:06:2c:5b:60:aa:ec:72:f1:71:19:0e:a9:ea:
04:0b:74:0a:ed:ef:7c:bd:35:a7:84:f7:79:b5:80:
04:7f:b0:13:7e:a0:38:2d:24:93:25:ca:30:8c:05:
12:26:39:a6:41:1e:ed:7a:dd:b7:a2:74:d1:56:49:
76:26:dd:8b:6c:0d:7c:23:e1:c5:3a:5b:0c:22:ed:
e8:73:23:87:53:70:f0:ac:1f:8b:8c:a8:94:fb:b6:
49:34:3f:3f:f5:b5:be:de:6d:a8:7f:57:95:5e:93:
90:25:81:71:b8:85:9b:d1:db:5b:97:30:db:ae:6d:
fa:bd:2a:a3:7f:bd:35:86:2e:39:60:c4:ca:d8:f4:
df:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:02:D8:8F:B7:51:C8:88:85:E9:5D:44:32:34:C2:39:3D:77:D2:E3
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/0QLYj7dRyIiF6V1EMjTCOT130uM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.212.81.0/24
178.239.201.0/24
178.239.204.0/24
193.42.54.0/23
Signature Algorithm: sha256WithRSAEncryption
35:2f:ac:6a:b2:b2:e2:30:21:c7:3a:69:e2:a6:f2:86:43:63:
37:1c:10:ef:d3:8c:19:33:f6:00:06:63:23:16:d6:d1:ef:68:
af:84:b6:f1:4d:c0:39:c6:0a:ff:0b:c1:43:1d:7d:8d:6f:1d:
f7:03:db:d8:bc:f7:9c:b9:a1:61:8e:0c:6b:d2:e7:fd:4b:82:
28:24:32:e6:a3:6c:97:ab:39:52:d3:c6:c3:45:12:21:e4:36:
1b:ad:cf:c7:9f:b8:d9:4e:0f:91:2a:4f:9c:89:dc:47:de:c0:
32:1a:70:2a:5f:f8:6b:96:37:71:4b:13:8f:cf:ae:66:39:36:
0d:67:20:76:87:30:b8:d8:ce:26:16:66:52:ee:ff:db:47:46:
2a:30:89:1e:1c:95:d1:d3:18:90:b7:94:de:46:da:94:7e:e9:
7c:99:e7:77:3c:fe:61:c8:e7:18:fe:4c:d0:56:1a:33:e0:87:
eb:df:4e:f3:bc:17:39:b2:ba:fd:8c:cc:be:4f:d8:11:40:38:
70:99:a4:f0:21:f6:f1:b7:af:79:b3:3d:e1:83:a1:6d:59:fe:
ce:bb:c4:e2:f6:c8:01:c2:b7:f2:c3:64:3b:2b:75:ac:a8:fc:
e2:4f:67:54:5c:c2:0b:27:78:2c:37:7f:4b:a1:8d:82:42:95:
e3:99:63:4a
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYaWou50f6wtuWY12+FNyGHEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw
NWIwZTIwHhcNMjMwMjI4MDYwODI1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMTAyZDg4ZmI3NTFjODg4ODVlOTVkNDQzMjM0YzIzOTNkNzdkMmUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAss50/icRaTWMLVOF1McMhRnPQ2Oj
3zdAveZLMRgswJGRoAotZ9afGzCx9oIFCAAn8FLdC90+caSaFvtlCXEj45/J9bgC
VvXTQsPAzH2ppMex9JSW+rOE1cWbGc8W2vK6uLzYG5lxRVT70e+IkU4wT6+WqsKr
+NeoDwYsW2Cq7HLxcRkOqeoEC3QK7e98vTWnhPd5tYAEf7ATfqA4LSSTJcowjAUS
JjmmQR7tet23onTRVkl2Jt2LbA18I+HFOlsMIu3ocyOHU3DwrB+LjKiU+7ZJND8/
9bW+3m2of1eVXpOQJYFxuIWb0dtblzDbrm36vSqjf701hi45YMTK2PTfiwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFNEC2I+3UciIheldRDI0wjk9d9LjMB8GA1UdIwQY
MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt
MmNjZWRiOTY2YTU4LzEvMFFMWWo3ZFJ5SWlGNlYxRU1qVENPVDEzMHVNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4
LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAZ9RRAwQA
su/JAwQAsu/MAwQBwSo2MA0GCSqGSIb3DQEBCwUAA4IBAQA1L6xqsrLiMCHHOmni
pvKGQ2M3HBDv04wZM/YABmMjFtbR72ivhLbxTcA5xgr/C8FDHX2Nbx33A9vYvPec
uaFhjgxr0uf9S4IoJDLmo2yXqzlS08bDRRIh5DYbrc/Hn7jZTg+RKk+cidxH3sAy
GnAqX/hrljdxSxOPz65mOTYNZyB2hzC42M4mFmZS7v/bR0YqMIkeHJXR0xiQt5Te
RtqUful8med3PP5hyOcY/kzQVhoz4Ifr307zvBc5srr9jMy+T9gRQDhwmaTwIfbx
t695sz3hg6FtWf7Ou8Ti9sgBwrfyw2Q7K3WsqPziT2dUXMILJ3gsN39LoY2CQpXj
mWNK
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:53 2023 by rpki-client on console-ams.rpki-client.org