Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/2a5a9c-bdf9-4ed0-ad33-f457544363ef/1/82iTNIbj-7v41wDSGGYXiEs3xCw.roa
File: 82iTNIbj-7v41wDSGGYXiEs3xCw.roa (raw, json)
Hash identifier: hcKyXW2S/u8n+va6cLffScJlW4Liz8vKzGtHmvpgCII=
Subject key identifier: F3:68:93:34:86:E3:FB:BB:F8:D7:00:D2:18:66:17:88:4B:37:C4:2C
Certificate issuer: /CN=767eb661936dc95da3ecc4ca3eaf581389c0d855
Certificate serial: 018570705DEF87A9D49591F71C63BC5A697D
Authority key identifier: 76:7E:B6:61:93:6D:C9:5D:A3:EC:C4:CA:3E:AF:58:13:89:C0:D8:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dn62YZNtyV2j7MTKPq9YE4nA2FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/2a5a9c-bdf9-4ed0-ad33-f457544363ef/1/82iTNIbj-7v41wDSGGYXiEs3xCw.roa
Signing time: Mon 02 Jan 2023 03:04:50 +0000
ROA not before: Mon 02 Jan 2023 03:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 80.73.136.0/21 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:70:5d:ef:87:a9:d4:95:91:f7:1c:63:bc:5a:69:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767eb661936dc95da3ecc4ca3eaf581389c0d855
Validity
Not Before: Jan 2 03:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f368933486e3fbbbf8d700d2186617884b37c42c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:63:be:8b:c4:e3:c9:df:1e:b9:c2:2d:96:07:
5b:10:0a:1c:91:fc:4a:dd:c9:13:70:71:f3:d6:30:
2c:d6:2a:11:75:42:6f:ea:99:24:62:a9:7f:d8:56:
ea:ec:5c:55:ea:6d:3c:ee:1b:32:6f:de:55:3e:4f:
3d:1b:5b:02:8c:c3:ca:a1:ea:7b:ea:01:51:b5:4f:
59:e2:51:68:be:10:06:f5:e1:c9:aa:fa:6a:c4:28:
b5:3f:11:7f:9c:16:88:43:10:77:2e:7d:6b:f9:04:
01:c4:c4:cf:76:e8:d3:d7:fb:20:76:52:09:11:08:
56:af:28:71:78:f7:ab:ed:e2:74:32:b0:69:4c:4a:
50:b3:ae:74:d6:71:8c:b0:ac:26:3e:df:35:4b:97:
97:94:45:16:dd:be:7e:27:8a:bd:66:43:c0:25:90:
e1:2f:d4:f8:d2:ec:10:f3:a2:01:ff:a9:22:4f:9c:
74:90:60:bb:d9:ce:b3:5c:ac:b6:78:39:6c:18:6e:
c8:cd:54:77:48:42:a0:9c:15:5e:b2:27:e7:e9:c2:
bb:e3:e6:82:a9:45:0a:95:f2:59:34:c4:01:5b:93:
00:38:7a:02:4f:a5:c0:3e:af:12:e5:5e:a5:98:f7:
2b:f8:1d:e1:82:3f:7c:19:8f:7a:94:33:b9:c4:5b:
9c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:68:93:34:86:E3:FB:BB:F8:D7:00:D2:18:66:17:88:4B:37:C4:2C
X509v3 Authority Key Identifier:
keyid:76:7E:B6:61:93:6D:C9:5D:A3:EC:C4:CA:3E:AF:58:13:89:C0:D8:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dn62YZNtyV2j7MTKPq9YE4nA2FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2a5a9c-bdf9-4ed0-ad33-f457544363ef/1/82iTNIbj-7v41wDSGGYXiEs3xCw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2a5a9c-bdf9-4ed0-ad33-f457544363ef/1/dn62YZNtyV2j7MTKPq9YE4nA2FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.73.136.0/21
Signature Algorithm: sha256WithRSAEncryption
55:fd:4c:f2:6e:6e:f5:be:b7:f7:cc:63:aa:08:56:5d:50:66:
22:25:0a:e4:2e:3f:32:95:56:75:b6:fb:c6:81:bc:91:fd:8d:
a2:80:0d:10:e2:ff:38:44:77:eb:06:62:64:8a:7b:94:89:fd:
de:a8:fd:f6:e6:98:77:d1:59:ef:1d:32:37:f8:40:8e:48:4c:
b5:25:d6:cd:70:6e:16:96:6f:54:0e:45:4e:64:1b:b1:c9:90:
d7:23:73:4b:fd:2f:bb:cd:16:81:88:ea:8c:55:61:7d:bc:ea:
a4:1e:13:dc:6b:34:fa:78:e2:82:2c:b3:66:5d:14:03:ee:f7:
47:85:3c:28:b6:15:64:06:53:74:7a:bc:5f:eb:04:fa:42:5f:
c2:92:02:99:72:a2:a9:13:96:73:e4:09:5e:b6:bf:11:9a:b6:
0e:c2:99:bf:ef:20:5c:46:6e:f3:f4:51:95:6d:0d:95:e1:09:
3e:b5:08:e8:4d:2d:21:1c:e7:35:4b:cf:f0:39:33:0d:3b:bb:
3f:4e:3c:05:49:38:b3:67:a4:fd:32:b7:07:fb:0b:d3:4c:df:
5b:cf:41:55:8a:f1:5c:a7:80:e9:f6:a7:16:cd:ed:75:fb:13:
8a:69:49:21:f3:05:c7:99:b9:fc:6c:4a:72:08:a4:de:b1:b2:
54:6a:a3:1b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwcF3vh6nUlZH3HGO8Wml9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2N2ViNjYxOTM2ZGM5NWRhM2VjYzRjYTNlYWY1ODEzODlj
MGQ4NTUwHhcNMjMwMTAyMDMwNDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMzY4OTMzNDg2ZTNmYmJiZjhkNzAwZDIxODY2MTc4ODRiMzdjNDJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9WO+i8Tjyd8eucItlgdbEAockfxK
3ckTcHHz1jAs1ioRdUJv6pkkYql/2Fbq7FxV6m087hsyb95VPk89G1sCjMPKoep7
6gFRtU9Z4lFovhAG9eHJqvpqxCi1PxF/nBaIQxB3Ln1r+QQBxMTPdujT1/sgdlIJ
EQhWryhxePer7eJ0MrBpTEpQs6501nGMsKwmPt81S5eXlEUW3b5+J4q9ZkPAJZDh
L9T40uwQ86IB/6kiT5x0kGC72c6zXKy2eDlsGG7IzVR3SEKgnBVesifn6cK74+aC
qUUKlfJZNMQBW5MAOHoCT6XAPq8S5V6lmPcr+B3hgj98GY96lDO5xFucRwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPNokzSG4/u7+NcA0hhmF4hLN8QsMB8GA1UdIwQY
MBaAFHZ+tmGTbcldo+zEyj6vWBOJwNhVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZG42MllaTnR5VjJqN01US1BxOVlFNG5BMkZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8yYTVhOWMtYmRmOS00ZWQwLWFkMzMt
ZjQ1NzU0NDM2M2VmLzEvODJpVE5JYmotN3Y0MXdEU0dHWVhpRXMzeEN3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC8yYTVhOWMtYmRmOS00ZWQwLWFkMzMtZjQ1NzU0NDM2M2Vm
LzEvZG42MllaTnR5VjJqN01US1BxOVlFNG5BMkZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDUEmIMA0G
CSqGSIb3DQEBCwUAA4IBAQBV/Uzybm71vrf3zGOqCFZdUGYiJQrkLj8ylVZ1tvvG
gbyR/Y2igA0Q4v84RHfrBmJkinuUif3eqP325ph30VnvHTI3+ECOSEy1JdbNcG4W
lm9UDkVOZBuxyZDXI3NL/S+7zRaBiOqMVWF9vOqkHhPcazT6eOKCLLNmXRQD7vdH
hTwothVkBlN0erxf6wT6Ql/CkgKZcqKpE5Zz5Aletr8RmrYOwpm/7yBcRm7z9FGV
bQ2V4Qk+tQjoTS0hHOc1S8/wOTMNO7s/TjwFSTizZ6T9MrcH+wvTTN9bz0FVivFc
p4Dp9qcWze11+xOKaUkh8wXHmbn8bEpyCKTesbJUaqMb
-----END CERTIFICATE-----
Generated at Mon Jan 1 02:54:16 2024 by rpki-client on console-ams.rpki-client.org