Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/R68x1Ctb9FmmBH5zv4Q8mT8qRoU.roa
File: R68x1Ctb9FmmBH5zv4Q8mT8qRoU.roa (raw, json)
Hash identifier: sT3D9nIq+YXnq34zguLiSXZJMJ5mdrHl0JgBgKw8l6c=
Subject key identifier: 47:AF:31:D4:2B:5B:F4:59:A6:04:7E:73:BF:84:3C:99:3F:2A:46:85
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 018B29469E76F07914DF12A1CCFFDB929B7C
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/R68x1Ctb9FmmBH5zv4Q8mT8qRoU.roa
Signing time: Fri 13 Oct 2023 13:42:55 +0000
ROA not before: Fri 13 Oct 2023 13:42:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213373
IP address blocks: 164.215.98.0/24 maxlen: 24
164.215.103.0/24 maxlen: 24
46.23.109.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:29:46:9e:76:f0:79:14:df:12:a1:cc:ff:db:92:9b:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Oct 13 13:42:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=47af31d42b5bf459a6047e73bf843c993f2a4685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:5a:f6:08:a5:49:42:68:a9:00:fd:40:e0:8d:
f6:41:76:46:6c:34:17:71:4d:1a:1a:58:cb:52:1e:
fb:24:cd:96:cb:68:98:52:33:19:c2:4e:ab:b7:67:
07:11:70:02:dd:c1:a6:fa:51:7d:c2:c8:5c:30:dd:
4c:80:0b:32:84:1f:92:b0:c6:29:04:f5:a6:00:67:
e4:1b:1b:e9:b5:da:a9:91:68:4c:23:6a:cb:2b:3a:
87:2b:cb:6f:b1:33:60:df:e5:a9:d0:ec:c4:73:83:
0b:4e:47:9a:e2:30:e1:a4:12:f8:dd:50:95:20:72:
c5:48:6d:fc:8c:37:38:63:f4:b6:1c:04:d9:3c:06:
a9:fd:73:e7:39:c4:db:32:7a:0c:b8:8a:8f:70:30:
f6:ca:c1:f7:86:46:ee:63:a2:43:2c:38:b0:2d:5f:
fa:60:c8:f9:f3:4a:5d:3a:28:d0:dc:76:03:c3:5a:
f3:90:c8:02:7b:46:8b:77:dc:22:bd:10:a6:18:a0:
46:5f:83:ec:cd:9f:29:99:9a:3b:dd:3f:6b:5a:72:
b8:fb:d3:98:0e:b3:3f:bf:71:e9:0d:a2:73:39:36:
21:ca:00:1d:d3:18:fe:b2:f2:36:71:3f:00:43:30:
aa:c9:11:07:94:1a:52:32:f0:55:03:76:61:cf:27:
fd:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:AF:31:D4:2B:5B:F4:59:A6:04:7E:73:BF:84:3C:99:3F:2A:46:85
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/R68x1Ctb9FmmBH5zv4Q8mT8qRoU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.23.109.0/24
164.215.98.0/24
164.215.103.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:bf:eb:87:24:0f:a0:3e:6d:c9:ce:4f:d3:d6:17:53:d1:14:
c6:8e:e6:03:b1:14:99:bf:09:ba:cf:93:d6:f7:a6:e0:6c:ba:
53:a1:f2:19:8c:f6:25:f2:e1:17:16:b9:43:e3:e5:14:8a:40:
64:56:a9:14:05:25:da:8f:fb:fc:ff:e2:a3:bb:11:21:ec:2b:
45:4c:f6:dd:66:d4:a0:a3:cb:71:63:02:6c:65:ab:85:1b:f5:
cf:83:23:f8:8b:93:23:e8:c0:4a:86:84:f3:48:01:d4:40:58:
dc:d6:1a:bd:42:70:c8:fc:d2:08:39:9a:8f:c0:47:93:ca:2a:
b6:2f:04:20:14:09:6d:cf:47:73:ea:76:82:b7:37:dc:14:5f:
31:b3:dd:8c:5a:ab:ce:05:b0:e6:a9:bc:7c:f3:05:80:0a:8c:
63:91:ad:a3:9e:ea:e9:ad:ba:cb:f3:e7:6d:e6:c0:bf:84:d0:
ef:99:81:69:59:da:98:ca:15:dc:77:da:09:6a:9b:0b:0f:4d:
08:29:50:ea:b4:29:fc:d0:60:e4:0a:80:04:3f:89:0c:34:c1:
8c:7b:cc:82:6f:56:37:43:6c:e3:03:60:3d:fa:8f:32:ee:11:
9c:99:cf:0c:e8:86:ad:53:bd:58:8b:98:d7:73:33:33:7a:6c:
60:4f:0c:d2
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYspRp528HkU3xKhzP/bkpt8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkMDZhNDJiYjI0NDZlNTFmMTkyZWEzNzViZGY3ZWVjNWE1
MWM3N2YwHhcNMjMxMDEzMTM0MjU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0N2FmMzFkNDJiNWJmNDU5YTYwNDdlNzNiZjg0M2M5OTNmMmE0Njg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Vr2CKVJQmipAP1A4I32QXZGbDQX
cU0aGljLUh77JM2Wy2iYUjMZwk6rt2cHEXAC3cGm+lF9wshcMN1MgAsyhB+SsMYp
BPWmAGfkGxvptdqpkWhMI2rLKzqHK8tvsTNg3+Wp0OzEc4MLTkea4jDhpBL43VCV
IHLFSG38jDc4Y/S2HATZPAap/XPnOcTbMnoMuIqPcDD2ysH3hkbuY6JDLDiwLV/6
YMj580pdOijQ3HYDw1rzkMgCe0aLd9wivRCmGKBGX4PszZ8pmZo73T9rWnK4+9OY
DrM/v3HpDaJzOTYhygAd0xj+svI2cT8AQzCqyREHlBpSMvBVA3Zhzyf9HQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFEevMdQrW/RZpgR+c7+EPJk/KkaFMB8GA1UdIwQY
MBaAFH0GpCuyRG5R8ZLqN1vffuxaUcd/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUt
MmNmODA2YjJkMGYyLzEvUjY4eDFDdGI5Rm1tQkg1enY0UThtVDhxUm9VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUtMmNmODA2YjJkMGYy
LzEvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALhdtAwQA
pNdiAwQApNdnMA0GCSqGSIb3DQEBCwUAA4IBAQCjv+uHJA+gPm3Jzk/T1hdT0RTG
juYDsRSZvwm6z5PW96bgbLpTofIZjPYl8uEXFrlD4+UUikBkVqkUBSXaj/v8/+Kj
uxEh7CtFTPbdZtSgo8txYwJsZauFG/XPgyP4i5Mj6MBKhoTzSAHUQFjc1hq9QnDI
/NIIOZqPwEeTyiq2LwQgFAltz0dz6naCtzfcFF8xs92MWqvOBbDmqbx88wWACoxj
ka2jnurprbrL8+dt5sC/hNDvmYFpWdqYyhXcd9oJapsLD00IKVDqtCn80GDkCoAE
P4kMNMGMe8yCb1Y3Q2zjA2A9+o8y7hGcmc8M6IatU71Yi5jXczMzemxgTwzS
Generated at Fri Dec 8 12:35:31 2023 by rpki-client on console-ams.rpki-client.org