Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/149c01-840d-45f6-823f-e2f0e1c26105/1/3HvZdWyEV9c-8t_bxgz_kDjRSI8.roa
File: 3HvZdWyEV9c-8t_bxgz_kDjRSI8.roa (raw, json)
Hash identifier: 1wZzbtBzW+50MEmvp5Ll+XpxoRk8IkdMda818VNt8Kw=
Subject key identifier: DC:7B:D9:75:6C:84:57:D7:3E:F2:DF:DB:C6:0C:FF:90:38:D1:48:8F
Certificate issuer: /CN=b3a758904c75856e3585a4433ae5ec57fef1a3c7
Certificate serial: 01856E26557D2639424B6C96FFAE44B199F6
Authority key identifier: B3:A7:58:90:4C:75:85:6E:35:85:A4:43:3A:E5:EC:57:FE:F1:A3:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s6dYkEx1hW41haRDOuXsV_7xo8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/149c01-840d-45f6-823f-e2f0e1c26105/1/3HvZdWyEV9c-8t_bxgz_kDjRSI8.roa
Signing time: Sun 01 Jan 2023 16:24:44 +0000
ROA not before: Sun 01 Jan 2023 16:24:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12662
IP address blocks: 192.162.132.0/22 maxlen: 22
192.162.132.0/23 maxlen: 23
192.162.132.0/24 maxlen: 24
192.162.135.0/24 maxlen: 24
192.162.134.0/24 maxlen: 24
192.162.134.0/23 maxlen: 23
192.162.133.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:26:55:7d:26:39:42:4b:6c:96:ff:ae:44:b1:99:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3a758904c75856e3585a4433ae5ec57fef1a3c7
Validity
Not Before: Jan 1 16:24:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dc7bd9756c8457d73ef2dfdbc60cff9038d1488f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:74:8c:97:6a:92:a9:23:e3:6c:ee:d3:e7:17:
3f:de:1d:0a:a1:b8:61:16:62:48:2e:bd:49:c1:ac:
27:3f:34:16:2c:65:49:d0:01:df:36:96:c1:63:dc:
3a:1c:f4:da:17:0a:6e:b1:64:f8:79:4e:8a:6c:5c:
28:76:6c:57:49:db:55:ca:d1:76:4c:32:07:f2:8c:
a2:c9:65:f3:7f:2b:c3:75:4f:78:54:f9:a0:af:a8:
f5:4f:88:57:82:4d:f0:a0:0f:0c:90:4c:46:dd:77:
32:d1:82:e1:c2:0d:7c:4f:6e:30:e7:d6:cb:61:ca:
d8:a5:a9:aa:2a:b8:1a:5a:03:e4:72:c8:32:cd:c9:
37:5a:80:11:b0:9e:f7:3e:cb:be:76:e8:85:b1:65:
95:0f:31:9e:87:b1:b4:ec:dc:97:a1:fb:e4:59:36:
ab:b7:ae:5e:f7:91:a4:d3:63:28:92:5b:d9:8c:95:
21:76:1d:dc:ea:a0:6e:a4:0a:f3:a2:4f:21:2d:5d:
e5:4a:4b:89:b6:6e:ba:52:cf:e2:fa:62:b9:fd:b0:
1e:d6:c5:81:ad:16:19:0e:b8:30:92:f7:4d:c0:ac:
4d:13:8f:18:0e:41:40:89:40:11:54:e9:80:fd:73:
e8:83:3e:f6:c8:35:eb:de:2d:50:d9:87:95:5f:c3:
fc:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:7B:D9:75:6C:84:57:D7:3E:F2:DF:DB:C6:0C:FF:90:38:D1:48:8F
X509v3 Authority Key Identifier:
keyid:B3:A7:58:90:4C:75:85:6E:35:85:A4:43:3A:E5:EC:57:FE:F1:A3:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s6dYkEx1hW41haRDOuXsV_7xo8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/149c01-840d-45f6-823f-e2f0e1c26105/1/3HvZdWyEV9c-8t_bxgz_kDjRSI8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/149c01-840d-45f6-823f-e2f0e1c26105/1/s6dYkEx1hW41haRDOuXsV_7xo8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.162.132.0/22
Signature Algorithm: sha256WithRSAEncryption
12:02:71:a1:3b:87:28:2f:f2:af:a9:35:be:8b:9e:19:08:fd:
46:05:24:5a:27:60:fb:ee:d1:7f:ea:77:94:30:c1:ca:b5:9c:
79:f9:8e:ff:65:65:fd:23:49:4b:59:9f:5f:9d:c8:6d:e3:22:
32:52:63:6a:e1:cf:f2:90:97:b6:8c:70:68:a6:7b:ea:7a:4c:
84:9b:9d:4f:f3:3b:39:bb:ef:0d:48:f8:b7:36:33:e9:f0:ee:
28:b6:28:42:47:22:9d:10:75:7d:23:84:5c:7c:7e:28:8d:f5:
62:ef:27:2e:c4:5f:3d:07:97:ba:1c:54:a7:a7:2a:6f:d0:da:
7d:a4:be:a4:d7:62:fc:b1:40:8a:57:7c:5f:8c:13:35:e4:ea:
75:3f:3d:ad:7b:6b:c6:c4:9d:04:4f:07:50:f1:36:ec:d7:39:
70:79:e6:95:20:19:b0:89:ab:56:dc:d9:5e:27:d6:f4:ba:5c:
47:ec:c6:5e:64:71:81:10:61:9a:a7:42:8f:b7:07:df:f3:9a:
ee:5e:fc:c9:90:c5:dc:38:f7:a3:3e:07:5c:b6:65:09:e1:16:
2e:f8:ba:48:f3:a6:6b:d0:e2:6c:43:6a:4e:84:bf:a6:9f:91:
b1:d6:6f:9e:98:1b:7f:b6:22:2f:b3:1f:12:e9:80:89:1d:db:
14:da:90:b5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVuJlV9JjlCS2yW/65EsZn2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzYTc1ODkwNGM3NTg1NmUzNTg1YTQ0MzNhZTVlYzU3ZmVm
MWEzYzcwHhcNMjMwMTAxMTYyNDQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYzdiZDk3NTZjODQ1N2Q3M2VmMmRmZGJjNjBjZmY5MDM4ZDE0ODhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3SMl2qSqSPjbO7T5xc/3h0Kobhh
FmJILr1JwawnPzQWLGVJ0AHfNpbBY9w6HPTaFwpusWT4eU6KbFwodmxXSdtVytF2
TDIH8oyiyWXzfyvDdU94VPmgr6j1T4hXgk3woA8MkExG3Xcy0YLhwg18T24w59bL
YcrYpamqKrgaWgPkcsgyzck3WoARsJ73Psu+duiFsWWVDzGeh7G07NyXofvkWTar
t65e95Gk02MoklvZjJUhdh3c6qBupArzok8hLV3lSkuJtm66Us/i+mK5/bAe1sWB
rRYZDrgwkvdNwKxNE48YDkFAiUARVOmA/XPogz72yDXr3i1Q2YeVX8P84wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNx72XVshFfXPvLf28YM/5A40UiPMB8GA1UdIwQY
MBaAFLOnWJBMdYVuNYWkQzrl7Ff+8aPHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczZkWWtFeDFoVzQxaGFSRE91WHNWXzd4bzhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy8xNDljMDEtODQwZC00NWY2LTgyM2Yt
ZTJmMGUxYzI2MTA1LzEvM0h2WmRXeUVWOWMtOHRfYnhnel9rRGpSU0k4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy8xNDljMDEtODQwZC00NWY2LTgyM2YtZTJmMGUxYzI2MTA1
LzEvczZkWWtFeDFoVzQxaGFSRE91WHNWXzd4bzhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwKKEMA0G
CSqGSIb3DQEBCwUAA4IBAQASAnGhO4coL/KvqTW+i54ZCP1GBSRaJ2D77tF/6neU
MMHKtZx5+Y7/ZWX9I0lLWZ9fncht4yIyUmNq4c/ykJe2jHBopnvqekyEm51P8zs5
u+8NSPi3NjPp8O4otihCRyKdEHV9I4RcfH4ojfVi7ycuxF89B5e6HFSnpypv0Np9
pL6k12L8sUCKV3xfjBM15Op1Pz2te2vGxJ0ETwdQ8Tbs1zlweeaVIBmwiatW3Nle
J9b0ulxH7MZeZHGBEGGap0KPtwff85ruXvzJkMXcOPejPgdctmUJ4RYu+LpI86Zr
0OJsQ2pOhL+mn5Gx1m+emBt/tiIvsx8S6YCJHdsU2pC1
-----END CERTIFICATE-----
Generated at Mon Jan 1 04:40:49 2024 by rpki-client on console-ams.rpki-client.org