Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/XGWzV2_7pYxhfBGjXQxz0F9k0t8.roa
File: XGWzV2_7pYxhfBGjXQxz0F9k0t8.roa (raw, json)
Hash identifier: pGc7LFFwnBPVs73GnYZpUKnsvypnzbLOdwZSGUhWSWI=
Subject key identifier: 5C:65:B3:57:6F:FB:A5:8C:61:7C:11:A3:5D:0C:73:D0:5F:64:D2:DF
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 01863C34A770C907BD09D24F2216D0F36554
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/XGWzV2_7pYxhfBGjXQxz0F9k0t8.roa
Signing time: Fri 10 Feb 2023 16:42:09 +0000
ROA not before: Fri 10 Feb 2023 16:42:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200482
IP address blocks: 178.239.200.0/24 maxlen: 24
62.197.132.0/24 maxlen: 24
62.197.128.0/24 maxlen: 24
223.27.114.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:3c:34:a7:70:c9:07:bd:09:d2:4f:22:16:d0:f3:65:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Feb 10 16:42:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5c65b3576ffba58c617c11a35d0c73d05f64d2df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:12:99:8a:53:8c:43:4f:44:51:99:3d:aa:ca:
79:02:ed:18:73:13:f6:e1:74:6c:57:36:fa:18:98:
7b:43:14:13:92:96:9e:42:91:9b:1a:33:bf:86:bd:
33:0b:f8:4a:ef:b9:c7:6c:f9:cf:cf:b4:1f:b4:20:
fd:a7:4a:84:0a:f9:c2:1b:4f:96:b2:fe:ca:73:3d:
81:85:80:5f:97:4a:62:1b:8c:a8:a1:8c:d6:23:d1:
f7:2f:59:b9:59:c9:62:fa:bd:cf:a8:42:64:26:25:
9b:a9:83:42:d6:46:c1:1c:a6:4a:e5:ae:8b:fd:30:
37:e5:45:7e:5c:5a:66:b4:16:fc:c4:ee:15:20:83:
85:c9:a8:bc:e6:c8:65:ae:7e:d3:d2:31:c6:4b:3d:
26:47:39:40:a0:43:52:60:bb:9d:d7:4f:82:64:7f:
bb:06:62:11:c5:24:6e:48:64:5d:95:e9:2e:57:01:
9d:e8:68:31:56:81:b8:ff:1b:9b:ac:c8:42:87:8a:
3e:8b:0e:bb:36:3b:05:b9:ac:eb:5e:fb:1b:d0:da:
c0:68:12:66:15:dd:cb:63:7d:52:50:b6:85:27:1b:
53:65:24:ff:54:46:74:28:48:8c:ea:a9:4c:d7:06:
42:6c:f8:34:58:a4:2d:b5:91:21:23:9c:e7:05:0c:
16:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:65:B3:57:6F:FB:A5:8C:61:7C:11:A3:5D:0C:73:D0:5F:64:D2:DF
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/XGWzV2_7pYxhfBGjXQxz0F9k0t8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.197.128.0/24
62.197.132.0/24
178.239.200.0/24
223.27.114.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:c4:22:df:a2:0f:b4:b2:e3:04:47:b6:b4:eb:d8:d0:67:31:
a1:98:3e:dd:4f:00:56:a5:f2:15:0c:42:1c:62:e9:e7:63:50:
e8:06:a9:e7:35:bb:a9:2b:76:83:83:16:d1:6c:c7:a0:b7:9e:
fc:19:ac:8e:63:2d:26:e4:b5:72:c8:a6:90:ca:b0:e1:f8:5f:
ae:5a:05:16:ba:6e:29:f2:10:15:79:65:38:96:e2:69:43:15:
09:08:83:c7:66:8a:2b:b1:d4:b2:9c:bf:0a:67:cf:35:05:19:
08:72:6c:03:b1:04:e1:47:e6:4e:91:cf:e1:fa:8b:72:52:ca:
fb:eb:d8:9c:f9:ac:95:0a:45:19:82:f9:39:23:de:78:d9:50:
78:19:07:37:32:b8:ea:b5:76:e3:15:ca:d1:7e:21:83:8d:5b:
62:65:e5:e9:6e:f5:62:e6:60:eb:9e:ac:47:52:71:7b:b6:1b:
d3:c4:1f:77:50:72:50:6a:d8:f7:f7:13:8d:c6:56:62:42:d0:
07:a6:fa:28:78:a7:4b:c6:23:5d:42:f0:b2:bc:59:e3:fd:c5:
d8:0b:22:d0:ec:c1:b6:b2:37:a8:33:e7:c5:b4:dd:b9:ae:50:
ea:09:2f:72:aa:25:18:01:f0:bc:a6:d9:3a:88:64:66:85:f1:
56:7a:ef:ca
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYY8NKdwyQe9CdJPIhbQ82VUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw
NWIwZTIwHhcNMjMwMjEwMTY0MjA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YzY1YjM1NzZmZmJhNThjNjE3YzExYTM1ZDBjNzNkMDVmNjRkMmRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhKZilOMQ09EUZk9qsp5Au0YcxP2
4XRsVzb6GJh7QxQTkpaeQpGbGjO/hr0zC/hK77nHbPnPz7QftCD9p0qECvnCG0+W
sv7Kcz2BhYBfl0piG4yooYzWI9H3L1m5Wcli+r3PqEJkJiWbqYNC1kbBHKZK5a6L
/TA35UV+XFpmtBb8xO4VIIOFyai85shlrn7T0jHGSz0mRzlAoENSYLud10+CZH+7
BmIRxSRuSGRdlekuVwGd6GgxVoG4/xubrMhCh4o+iw67NjsFuazrXvsb0NrAaBJm
Fd3LY31SULaFJxtTZST/VEZ0KEiM6qlM1wZCbPg0WKQttZEhI5znBQwWUQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFFxls1dv+6WMYXwRo10Mc9BfZNLfMB8GA1UdIwQY
MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt
MmNjZWRiOTY2YTU4LzEvWEdXelYyXzdwWXhoZkJHalhReHowRjlrMHQ4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4
LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAPsWAAwQA
PsWEAwQAsu/IAwQA3xtyMA0GCSqGSIb3DQEBCwUAA4IBAQBrxCLfog+0suMER7a0
69jQZzGhmD7dTwBWpfIVDEIcYunnY1DoBqnnNbupK3aDgxbRbMegt578GayOYy0m
5LVyyKaQyrDh+F+uWgUWum4p8hAVeWU4luJpQxUJCIPHZoorsdSynL8KZ881BRkI
cmwDsQThR+ZOkc/h+otyUsr769ic+ayVCkUZgvk5I9542VB4GQc3MrjqtXbjFcrR
fiGDjVtiZeXpbvVi5mDrnqxHUnF7thvTxB93UHJQatj39xONxlZiQtAHpvooeKdL
xiNdQvCyvFnj/cXYCyLQ7MG2sjeoM+fFtN25rlDqCS9yqiUYAfC8ptk6iGRmhfFW
eu/K
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:55 2023 by rpki-client on console-ams.rpki-client.org