Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/c1615d-d56f-4ba8-b0f5-1fc42e79eb07/1/3hdH75LsxWGhzAmsNPeVw-xa_Bo.roa
File: 3hdH75LsxWGhzAmsNPeVw-xa_Bo.roa (raw, json)
Hash identifier: wUDBNeD6xeQCRd+17S25SMOUTWxVpl/D1dM4Z9Gflms=
Subject key identifier: DE:17:47:EF:92:EC:C5:61:A1:CC:09:AC:34:F7:95:C3:EC:5A:FC:1A
Certificate issuer: /CN=7ffa51abea3e1f4223f540ef0d85b8dd99ee8bf6
Certificate serial: 0185728C9913566FF61423227305F694726E
Authority key identifier: 7F:FA:51:AB:EA:3E:1F:42:23:F5:40:EF:0D:85:B8:DD:99:EE:8B:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f_pRq-o-H0Ij9UDvDYW43Znui_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/c1615d-d56f-4ba8-b0f5-1fc42e79eb07/1/3hdH75LsxWGhzAmsNPeVw-xa_Bo.roa
Signing time: Mon 02 Jan 2023 12:54:54 +0000
ROA not before: Mon 02 Jan 2023 12:54:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 217.114.33.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:8c:99:13:56:6f:f6:14:23:22:73:05:f6:94:72:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ffa51abea3e1f4223f540ef0d85b8dd99ee8bf6
Validity
Not Before: Jan 2 12:54:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=de1747ef92ecc561a1cc09ac34f795c3ec5afc1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:bf:ce:68:8f:de:d6:3c:c6:1e:61:7b:08:9c:
55:d3:e9:0a:95:40:0f:8f:fa:c0:ca:d2:65:35:cd:
3a:c0:57:c3:32:cf:cd:9b:19:d3:39:ca:ed:51:e0:
f9:b3:6b:5e:84:c5:ae:9e:b7:db:85:b0:17:f4:7c:
2a:87:72:b1:0d:47:a8:6b:ac:05:04:89:c1:27:53:
99:8c:5a:ea:b6:5a:d9:26:87:e2:b3:db:ce:38:24:
ef:99:a8:fb:93:92:b9:ac:07:dd:4b:02:7e:79:76:
7b:8a:99:4b:16:48:b6:c7:83:7a:28:61:ce:35:8b:
cf:a8:05:b4:5c:58:bf:96:a4:ed:7e:ee:d2:8a:41:
d6:ca:1d:65:f6:99:54:4e:34:4b:37:41:27:5b:e7:
32:93:7d:7e:e4:d7:93:5e:ea:2c:c0:ed:f3:8d:b9:
aa:dd:d7:49:09:9e:60:dc:33:89:12:5a:3b:97:41:
11:34:88:3d:44:6c:b7:21:32:1e:59:6a:37:4b:7a:
4e:ff:e3:7a:f0:b7:78:20:69:8e:7c:ca:25:82:66:
69:42:72:e2:88:e3:bf:cb:17:1f:ea:c7:d0:3e:e2:
ea:70:3e:59:03:95:59:81:77:e0:60:bc:d6:bc:bb:
e5:54:36:28:bc:3c:df:6d:43:5e:1e:ce:05:dd:ae:
03:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:17:47:EF:92:EC:C5:61:A1:CC:09:AC:34:F7:95:C3:EC:5A:FC:1A
X509v3 Authority Key Identifier:
keyid:7F:FA:51:AB:EA:3E:1F:42:23:F5:40:EF:0D:85:B8:DD:99:EE:8B:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f_pRq-o-H0Ij9UDvDYW43Znui_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c1615d-d56f-4ba8-b0f5-1fc42e79eb07/1/3hdH75LsxWGhzAmsNPeVw-xa_Bo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c1615d-d56f-4ba8-b0f5-1fc42e79eb07/1/f_pRq-o-H0Ij9UDvDYW43Znui_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.114.33.0/24
Signature Algorithm: sha256WithRSAEncryption
18:49:2f:13:68:b5:f4:f1:61:1c:f4:7b:b3:1b:9a:32:5f:94:
26:b2:8f:6f:35:d1:f2:b1:f5:01:24:f4:f7:ad:13:d6:9e:ac:
ec:50:5b:ae:a3:96:47:15:50:09:2a:50:7b:fe:cc:96:12:8c:
fd:6c:f4:e7:8a:ee:ef:82:12:39:7d:c9:f8:c6:ae:2b:bf:ef:
38:a3:57:11:11:22:4f:03:0d:96:2f:5c:6f:69:76:68:a1:e8:
70:7c:6a:c3:5a:98:49:36:9e:6a:da:01:bb:ea:4f:e5:85:06:
a5:50:e6:ab:e3:4f:0f:6d:82:7f:4d:96:7e:f9:c5:a0:b9:5d:
46:96:c1:f9:5e:38:a2:fd:70:04:73:3a:32:80:18:c8:4f:a3:
49:0d:ab:2d:9c:32:fd:db:ca:f9:2e:67:f8:e3:a5:b7:3d:7a:
53:7e:0d:7b:93:cf:1c:e7:cb:4c:a9:74:5b:78:27:72:a3:c6:
fd:9d:00:bf:26:4a:ec:5b:6f:44:3c:cd:e8:2c:1d:f6:75:79:
cd:9b:58:ca:de:98:93:c7:a9:86:e0:13:71:c2:fc:13:6e:4d:
e6:40:3c:6a:a7:79:6d:58:62:f3:ec:b1:e1:33:70:03:67:6f:
4d:78:c3:5c:25:ec:e7:5d:4a:81:58:19:3a:ed:7a:9f:5e:9c:
e0:03:26:f6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVyjJkTVm/2FCMicwX2lHJuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmZmE1MWFiZWEzZTFmNDIyM2Y1NDBlZjBkODViOGRkOTll
ZThiZjYwHhcNMjMwMTAyMTI1NDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZTE3NDdlZjkyZWNjNTYxYTFjYzA5YWMzNGY3OTVjM2VjNWFmYzFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAub/OaI/e1jzGHmF7CJxV0+kKlUAP
j/rAytJlNc06wFfDMs/NmxnTOcrtUeD5s2tehMWunrfbhbAX9Hwqh3KxDUeoa6wF
BInBJ1OZjFrqtlrZJofis9vOOCTvmaj7k5K5rAfdSwJ+eXZ7iplLFki2x4N6KGHO
NYvPqAW0XFi/lqTtfu7SikHWyh1l9plUTjRLN0EnW+cyk31+5NeTXuoswO3zjbmq
3ddJCZ5g3DOJElo7l0ERNIg9RGy3ITIeWWo3S3pO/+N68Ld4IGmOfMolgmZpQnLi
iOO/yxcf6sfQPuLqcD5ZA5VZgXfgYLzWvLvlVDYovDzfbUNeHs4F3a4DPQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFN4XR++S7MVhocwJrDT3lcPsWvwaMB8GA1UdIwQY
MBaAFH/6UavqPh9CI/VA7w2FuN2Z7ov2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZl9wUnEtby1IMElqOVVEdkRZVzQzWm51aV9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jMTYxNWQtZDU2Zi00YmE4LWIwZjUt
MWZjNDJlNzllYjA3LzEvM2hkSDc1THN4V0doekFtc05QZVZ3LXhhX0JvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9jMTYxNWQtZDU2Zi00YmE4LWIwZjUtMWZjNDJlNzllYjA3
LzEvZl9wUnEtby1IMElqOVVEdkRZVzQzWm51aV9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2XIhMA0G
CSqGSIb3DQEBCwUAA4IBAQAYSS8TaLX08WEc9HuzG5oyX5Qmso9vNdHysfUBJPT3
rRPWnqzsUFuuo5ZHFVAJKlB7/syWEoz9bPTniu7vghI5fcn4xq4rv+84o1cRESJP
Aw2WL1xvaXZooehwfGrDWphJNp5q2gG76k/lhQalUOar408PbYJ/TZZ++cWguV1G
lsH5Xjii/XAEczoygBjIT6NJDastnDL928r5Lmf446W3PXpTfg17k88c58tMqXRb
eCdyo8b9nQC/JkrsW29EPM3oLB32dXnNm1jK3piTx6mG4BNxwvwTbk3mQDxqp3lt
WGLz7LHhM3ADZ29NeMNcJeznXUqBWBk67XqfXpzgAyb2
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:28 2023 by rpki-client on console-fra.rpki-client.org