Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/oeMp2yWHa37o_thlZ1boD-xbhF4.roa
File: oeMp2yWHa37o_thlZ1boD-xbhF4.roa (raw, json)
Hash identifier: jAiVmCsQT2NgyvqXf0fPclhuGYl0sarzxUCxc1K7AWc=
Subject key identifier: A1:E3:29:DB:25:87:6B:7E:E8:FE:D8:65:67:56:E8:0F:EC:5B:84:5E
Certificate issuer: /CN=dc4e453affe895b6452b84027437c5c00fd37067
Certificate serial: 018573039A518DF8374B7D8E627D803AD8FA
Authority key identifier: DC:4E:45:3A:FF:E8:95:B6:45:2B:84:02:74:37:C5:C0:0F:D3:70:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3E5FOv_olbZFK4QCdDfFwA_TcGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/oeMp2yWHa37o_thlZ1boD-xbhF4.roa
Signing time: Mon 02 Jan 2023 15:04:54 +0000
ROA not before: Mon 02 Jan 2023 15:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44451
IP address blocks: 93.92.8.0/21 maxlen: 21
94.247.48.0/21 maxlen: 21
37.46.16.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:03:9a:51:8d:f8:37:4b:7d:8e:62:7d:80:3a:d8:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc4e453affe895b6452b84027437c5c00fd37067
Validity
Not Before: Jan 2 15:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a1e329db25876b7ee8fed8656756e80fec5b845e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:12:61:0d:f2:91:15:54:9e:43:74:c3:70:3a:
be:58:2d:f6:db:dd:d5:53:a2:91:4c:a2:5b:50:28:
05:7b:e3:df:49:05:38:2f:44:e0:68:b2:0a:fc:37:
43:8c:b3:cb:6a:2f:b5:39:ac:8a:1e:f8:c8:a4:41:
98:e1:ac:49:a7:80:ae:3f:1a:3a:3e:bf:1c:0b:97:
cf:97:98:b6:6f:0e:f3:a5:d3:f1:be:83:1a:cc:89:
3c:95:b6:97:d6:4d:b6:d5:0a:20:e4:53:17:e6:8c:
89:51:d4:d2:56:44:3d:1f:4c:4c:a7:e6:63:f8:5f:
76:44:aa:95:76:4c:71:c6:79:8b:90:b2:33:e8:f0:
56:29:f7:eb:21:ab:ae:03:52:83:84:3f:d2:71:ac:
78:66:2c:67:71:64:ac:b8:63:3c:5a:3d:b8:2a:90:
df:d0:d1:52:3e:36:f2:d4:0c:c2:24:f8:02:66:5e:
fa:ac:84:e1:14:31:5f:df:59:ea:b6:5f:ed:24:75:
18:af:f5:d7:60:9a:e4:83:e0:c5:f3:bf:43:d9:da:
85:68:eb:5f:1f:d8:47:1a:60:7c:e3:aa:fe:23:48:
33:fe:56:fe:c3:5a:20:05:92:bc:39:d2:74:8e:83:
4d:0c:27:db:f2:08:21:21:73:13:00:e1:e5:3b:3d:
a3:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:E3:29:DB:25:87:6B:7E:E8:FE:D8:65:67:56:E8:0F:EC:5B:84:5E
X509v3 Authority Key Identifier:
keyid:DC:4E:45:3A:FF:E8:95:B6:45:2B:84:02:74:37:C5:C0:0F:D3:70:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3E5FOv_olbZFK4QCdDfFwA_TcGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/oeMp2yWHa37o_thlZ1boD-xbhF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/3E5FOv_olbZFK4QCdDfFwA_TcGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.46.16.0/21
93.92.8.0/21
94.247.48.0/21
Signature Algorithm: sha256WithRSAEncryption
a1:9c:8c:14:73:0f:8e:64:0e:c6:b2:a2:d3:aa:49:59:44:c4:
11:4a:f1:9b:ba:d8:f5:04:1b:b0:9d:41:34:76:59:bd:71:4a:
a1:c3:41:b4:96:9d:ed:9c:da:12:c4:2e:a3:d3:f7:8d:22:07:
c0:1b:7a:45:75:a3:8d:8b:ce:e9:d5:46:ff:7f:40:4d:31:ae:
9a:43:cc:db:91:e7:96:ba:87:9f:4b:ef:3b:8c:b7:18:98:dc:
f2:0f:cd:5e:14:a2:02:ac:c0:df:ab:6a:a0:e1:8d:6b:a0:93:
a6:a8:a6:85:f4:ae:e6:c8:3d:cc:d7:a7:00:59:76:5d:30:8c:
c0:7f:80:a1:19:b6:5a:66:28:5c:7c:ff:a1:af:7b:1d:12:bd:
58:7b:98:e5:0d:66:96:4e:22:05:83:76:43:fd:e8:a8:8f:17:
6b:93:bd:75:ad:6b:20:f6:63:4b:cd:3c:34:86:c2:da:04:14:
6f:33:49:d6:fb:49:03:03:90:53:2c:93:55:7c:06:14:f8:3c:
c8:a8:f7:e3:74:f8:5d:57:e3:28:b9:87:a4:14:8a:b1:f2:d2:
62:2d:54:37:a2:c1:bb:ab:c2:d8:84:23:54:fb:e4:00:a8:f5:
51:3f:e8:1a:ff:35:38:90:0c:ee:a1:f4:04:15:da:be:cc:5b:
50:df:de:85
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYVzA5pRjfg3S32OYn2AOtj6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjNGU0NTNhZmZlODk1YjY0NTJiODQwMjc0MzdjNWMwMGZk
MzcwNjcwHhcNMjMwMTAyMTUwNDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMWUzMjlkYjI1ODc2YjdlZThmZWQ4NjU2NzU2ZTgwZmVjNWI4NDVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgxJhDfKRFVSeQ3TDcDq+WC32293V
U6KRTKJbUCgFe+PfSQU4L0TgaLIK/DdDjLPLai+1OayKHvjIpEGY4axJp4CuPxo6
Pr8cC5fPl5i2bw7zpdPxvoMazIk8lbaX1k221Qog5FMX5oyJUdTSVkQ9H0xMp+Zj
+F92RKqVdkxxxnmLkLIz6PBWKffrIauuA1KDhD/Scax4ZixncWSsuGM8Wj24KpDf
0NFSPjby1AzCJPgCZl76rIThFDFf31nqtl/tJHUYr/XXYJrkg+DF879D2dqFaOtf
H9hHGmB846r+I0gz/lb+w1ogBZK8OdJ0joNNDCfb8gghIXMTAOHlOz2j0QIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFKHjKdslh2t+6P7YZWdW6A/sW4ReMB8GA1UdIwQY
MBaAFNxORTr/6JW2RSuEAnQ3xcAP03BnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0U1Rk92X29sYlpGSzRRQ2REZkZ3QV9UY0djLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS81OGU2NTUtZTcxMy00NWQyLTk1OGEt
MTgyMjg2N2UxNTk2LzEvb2VNcDJ5V0hhMzdvX3RobFoxYm9ELXhiaEY0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS81OGU2NTUtZTcxMy00NWQyLTk1OGEtMTgyMjg2N2UxNTk2
LzEvM0U1Rk92X29sYlpGSzRRQ2REZkZ3QV9UY0djLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDJS4QAwQD
XVwIAwQDXvcwMA0GCSqGSIb3DQEBCwUAA4IBAQChnIwUcw+OZA7GsqLTqklZRMQR
SvGbutj1BBuwnUE0dlm9cUqhw0G0lp3tnNoSxC6j0/eNIgfAG3pFdaONi87p1Ub/
f0BNMa6aQ8zbkeeWuoefS+87jLcYmNzyD81eFKICrMDfq2qg4Y1roJOmqKaF9K7m
yD3M16cAWXZdMIzAf4ChGbZaZihcfP+hr3sdEr1Ye5jlDWaWTiIFg3ZD/eiojxdr
k711rWsg9mNLzTw0hsLaBBRvM0nW+0kDA5BTLJNVfAYU+DzIqPfjdPhdV+MouYek
FIqx8tJiLVQ3osG7q8LYhCNU++QAqPVRP+ga/zU4kAzuofQEFdq+zFtQ396F
-----END CERTIFICATE-----
Generated at Tue Jan 2 15:22:53 2024 by rpki-client on console-ams.rpki-client.org