Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ilxQMhhF2Jc-NG94364EekA8PaM.roa
File: ilxQMhhF2Jc-NG94364EekA8PaM.roa (raw, json)
Hash identifier: wLKrLcMXKH8Igg02tXrgQyMmUoPbeCK9woMI+La8/dw=
Subject key identifier: 8A:5C:50:32:18:45:D8:97:3E:34:6F:78:DF:AE:04:7A:40:3C:3D:A3
Certificate issuer: /CN=722a8c1d311895016108ffbd14575c77cc28773a
Certificate serial: 0186FDA6B865CC9C7ED9E6A1A2270F2AE517
Authority key identifier: 72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ilxQMhhF2Jc-NG94364EekA8PaM.roa
Signing time: Mon 20 Mar 2023 06:13:27 +0000
ROA not before: Mon 20 Mar 2023 06:13:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41280
IP address blocks: 83.222.165.0/24 maxlen: 24
83.222.164.0/24 maxlen: 24
83.222.163.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:fd:a6:b8:65:cc:9c:7e:d9:e6:a1:a2:27:0f:2a:e5:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=722a8c1d311895016108ffbd14575c77cc28773a
Validity
Not Before: Mar 20 06:13:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8a5c50321845d8973e346f78dfae047a403c3da3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:db:11:7f:52:ad:f3:90:9e:07:bd:b0:0f:04:
4f:8a:a2:3b:97:fa:7c:f3:78:64:31:ca:12:2c:99:
f4:9c:2f:39:44:b5:2a:df:1e:eb:92:93:42:0a:6b:
3f:71:c0:4d:f3:28:87:ff:a8:18:54:cf:95:19:b7:
50:7c:98:35:24:3a:fa:bb:d5:d8:d0:70:79:9f:a7:
e4:59:a7:99:7b:53:1b:45:21:43:d3:89:54:b0:1c:
d1:62:5e:b5:ca:51:0e:61:6b:d5:7d:2b:30:08:35:
63:6e:de:6f:77:79:19:8d:ba:86:73:cd:fe:c1:9a:
19:03:3d:13:51:24:a8:0c:88:b5:74:01:d6:d3:fe:
f9:06:3e:ff:3c:5c:17:7b:c8:d7:b0:b4:95:aa:a5:
23:3e:ca:8e:82:99:4f:15:ec:af:c3:3b:10:7e:ad:
b4:22:f7:39:ba:1b:12:b8:e9:bd:9d:68:dc:55:26:
b1:8a:d7:ce:8d:74:b4:dd:9f:9b:e9:90:03:37:d3:
86:4c:c9:bf:bf:05:94:a5:c4:e6:9b:f7:4a:5b:66:
2e:13:50:57:4b:7a:4e:ae:1d:13:9a:be:ac:47:b3:
b3:06:f9:fb:0b:13:86:df:b2:b7:31:91:f1:a5:ef:
b6:01:36:d5:d0:0a:8e:cb:4d:d4:5a:60:6f:f5:d9:
08:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:5C:50:32:18:45:D8:97:3E:34:6F:78:DF:AE:04:7A:40:3C:3D:A3
X509v3 Authority Key Identifier:
keyid:72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ilxQMhhF2Jc-NG94364EekA8PaM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.222.163.0-83.222.165.255
Signature Algorithm: sha256WithRSAEncryption
88:ec:b6:13:54:27:35:76:ca:15:d1:6d:40:23:d0:b8:d0:2b:
f8:f8:13:50:a0:3a:0d:59:2a:26:08:56:be:61:b2:a3:b1:87:
6f:33:55:e9:85:55:e7:fb:1f:3e:bc:ab:98:10:ed:e5:4c:1f:
a0:4e:f3:97:6c:f6:21:4f:79:f5:d5:f8:85:b0:fe:67:3c:68:
76:20:ce:a2:83:d3:da:5f:a0:cf:81:85:4a:e5:f1:a8:9b:e1:
73:85:37:54:44:8e:b2:6f:bd:51:28:37:af:49:dd:7f:cc:ba:
5b:c1:cc:cc:ce:14:59:14:09:be:3c:be:4c:72:f7:cd:e8:c7:
b9:f4:a4:a3:73:25:9c:68:15:b4:0f:c8:1b:80:a7:a1:e3:0d:
b9:d9:b4:90:85:d7:a4:57:0a:f2:87:58:fe:64:10:11:ff:2e:
4d:49:19:25:50:39:c0:00:1f:e0:a1:07:dd:b5:92:22:0c:ed:
2c:32:72:a0:2b:7e:f4:fe:e7:22:dd:33:13:3f:41:9c:98:df:
13:f7:f6:62:73:62:fb:05:f1:e8:3d:95:67:3d:4f:3c:3c:c1:
ab:d6:8b:d0:f6:3b:6c:f9:fc:76:a3:2b:52:2a:c5:85:59:2b:
f1:5d:47:e4:ed:39:96:5e:0d:52:43:06:f1:1f:f0:99:cd:a5:
41:18:87:17
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYb9prhlzJx+2eahoicPKuUXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMmE4YzFkMzExODk1MDE2MTA4ZmZiZDE0NTc1Yzc3Y2My
ODc3M2EwHhcNMjMwMzIwMDYxMzI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YTVjNTAzMjE4NDVkODk3M2UzNDZmNzhkZmFlMDQ3YTQwM2MzZGEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7NsRf1Kt85CeB72wDwRPiqI7l/p8
83hkMcoSLJn0nC85RLUq3x7rkpNCCms/ccBN8yiH/6gYVM+VGbdQfJg1JDr6u9XY
0HB5n6fkWaeZe1MbRSFD04lUsBzRYl61ylEOYWvVfSswCDVjbt5vd3kZjbqGc83+
wZoZAz0TUSSoDIi1dAHW0/75Bj7/PFwXe8jXsLSVqqUjPsqOgplPFeyvwzsQfq20
Ivc5uhsSuOm9nWjcVSaxitfOjXS03Z+b6ZADN9OGTMm/vwWUpcTmm/dKW2YuE1BX
S3pOrh0Tmr6sR7OzBvn7CxOG37K3MZHxpe+2ATbV0AqOy03UWmBv9dkIUwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFIpcUDIYRdiXPjRveN+uBHpAPD2jMB8GA1UdIwQY
MBaAFHIqjB0xGJUBYQj/vRRXXHfMKHc6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2lxTUhURVlsUUZoQ1AtOUZGZGNkOHdvZHpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9iMWY2ZWUtYzRlZi00MzU1LWFmMzYt
YTU1OGVlNjU0MzFmLzEvaWx4UU1oaEYySmMtTkc5NDM2NEVla0E4UGFNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9iMWY2ZWUtYzRlZi00MzU1LWFmMzYtYTU1OGVlNjU0MzFm
LzEvY2lxTUhURVlsUUZoQ1AtOUZGZGNkOHdvZHpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABT3qMD
BAFT3qQwDQYJKoZIhvcNAQELBQADggEBAIjsthNUJzV2yhXRbUAj0LjQK/j4E1Cg
Og1ZKiYIVr5hsqOxh28zVemFVef7Hz68q5gQ7eVMH6BO85ds9iFPefXV+IWw/mc8
aHYgzqKD09pfoM+BhUrl8aib4XOFN1REjrJvvVEoN69J3X/MulvBzMzOFFkUCb48
vkxy983ox7n0pKNzJZxoFbQPyBuAp6HjDbnZtJCF16RXCvKHWP5kEBH/Lk1JGSVQ
OcAAH+ChB921kiIM7SwycqArfvT+5yLdMxM/QZyY3xP39mJzYvsF8eg9lWc9Tzw8
wavWi9D2O2z5/HajK1IqxYVZK/FdR+TtOZZeDVJDBvEf8JnNpUEYhxc=
-----END CERTIFICATE-----
Generated at Mon Jan 1 17:26:42 2024 by rpki-client on console-fra.rpki-client.org