Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/dX075S7XSt5Vs7fwAdL_avTbVok.roa
File: dX075S7XSt5Vs7fwAdL_avTbVok.roa (raw, json)
Hash identifier: bihn4QgxVHSQrTWvrCwQTMVT/LUrclh+BcBa77LDB2w=
Subject key identifier: 75:7D:3B:E5:2E:D7:4A:DE:55:B3:B7:F0:01:D2:FF:6A:F4:DB:56:89
Certificate issuer: /CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
Certificate serial: 01857082B41FF0F956A22B6FBD3DF86B6EB2
Authority key identifier: D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/dX075S7XSt5Vs7fwAdL_avTbVok.roa
Signing time: Mon 02 Jan 2023 03:24:52 +0000
ROA not before: Mon 02 Jan 2023 03:24:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211699
IP address blocks: 82.159.144.0/24 maxlen: 24
62.82.151.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:82:b4:1f:f0:f9:56:a2:2b:6f:bd:3d:f8:6b:6e:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
Validity
Not Before: Jan 2 03:24:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=757d3be52ed74ade55b3b7f001d2ff6af4db5689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:3c:50:8d:d5:2e:a2:29:24:80:ed:84:e4:80:
e0:e9:a4:a4:1f:9a:d6:b0:fa:9e:05:d8:79:ab:d5:
3e:0a:3f:4f:3c:4b:58:99:6a:d7:e3:26:54:93:2c:
97:ab:0e:1b:1f:50:33:49:84:94:23:e3:1d:85:7c:
33:57:6c:90:be:03:fc:75:f5:cd:c8:34:8d:47:82:
b3:41:9c:4e:b8:1b:96:b6:52:a9:c9:97:9c:4e:12:
01:b0:12:2a:b8:37:fc:85:ec:84:17:29:04:a6:98:
ba:ec:5d:38:a7:b3:1e:eb:a0:64:8d:f6:0f:76:0f:
0a:0f:5a:41:88:fd:42:2a:39:ea:05:df:cf:cc:a0:
ed:fd:1c:6f:0d:33:f8:ed:50:4d:8c:c9:fc:c0:e5:
f7:19:7f:df:b9:aa:68:96:00:8a:14:9e:d1:a7:61:
33:53:7d:1c:f1:bf:28:fe:64:95:64:d0:35:2e:67:
0b:2f:65:6f:63:b6:5c:17:09:fe:d5:94:0d:4a:3e:
bb:26:39:b3:a5:63:42:fb:7a:89:cb:d7:66:5d:57:
6b:6e:7c:5b:ed:7d:68:d9:1d:5f:79:8d:e8:a2:3b:
ec:35:52:0d:b6:f8:17:93:4e:eb:0e:c0:fd:37:9b:
bf:1c:24:99:84:6d:46:56:67:91:46:cc:d0:9d:fc:
65:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:7D:3B:E5:2E:D7:4A:DE:55:B3:B7:F0:01:D2:FF:6A:F4:DB:56:89
X509v3 Authority Key Identifier:
keyid:D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/dX075S7XSt5Vs7fwAdL_avTbVok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.82.151.0/24
82.159.144.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:2e:d6:ec:d9:16:7e:ea:a7:97:15:6a:55:68:ad:94:f1:56:
f6:67:38:e0:32:9a:21:0d:1c:4f:79:28:11:00:ec:f1:c8:b0:
e7:0f:f6:c3:27:f9:73:10:30:e0:57:f4:14:86:35:4d:cc:97:
6c:11:3d:48:ec:e7:be:f6:94:13:57:da:9a:d3:07:c6:dd:02:
42:53:44:9b:9e:73:25:be:6f:43:5d:fc:74:41:a0:7a:f2:b6:
60:dd:72:2f:2e:7b:67:f6:8a:97:c3:65:91:5b:ed:14:98:31:
93:28:81:68:10:ad:13:d7:3b:f2:88:fa:06:47:12:c6:72:5d:
f9:2f:cf:6e:ac:66:44:b2:91:14:c2:c5:dc:8b:33:54:a2:54:
4f:1c:e5:27:cd:3f:10:da:12:58:af:39:16:f1:c7:bf:c7:d7:
45:3a:8d:23:d1:0e:f1:f7:32:34:d2:ac:86:e0:f3:2a:4c:f1:
24:5d:81:24:83:4e:09:84:8f:4e:21:f3:30:55:33:db:11:e6:
d4:89:79:94:14:9c:b0:97:a2:63:51:a1:d9:e6:4f:09:59:da:
e3:bf:9e:98:85:ab:41:ec:f7:ff:ac:3e:44:c2:59:9a:eb:fc:
8e:84:c9:22:9b:36:62:38:91:29:6c:c6:1e:2d:09:62:5a:c8:
2f:28:3c:4d
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVwgrQf8PlWoitvvT34a26yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0MzRmMTY4NjEwMjg3NmM2MjE2YmNlYTI4YTVlNTAyZWMw
ZDdiNmIwHhcNMjMwMTAyMDMyNDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NTdkM2JlNTJlZDc0YWRlNTViM2I3ZjAwMWQyZmY2YWY0ZGI1Njg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6TxQjdUuoikkgO2E5IDg6aSkH5rW
sPqeBdh5q9U+Cj9PPEtYmWrX4yZUkyyXqw4bH1AzSYSUI+MdhXwzV2yQvgP8dfXN
yDSNR4KzQZxOuBuWtlKpyZecThIBsBIquDf8heyEFykEppi67F04p7Me66BkjfYP
dg8KD1pBiP1CKjnqBd/PzKDt/RxvDTP47VBNjMn8wOX3GX/fuapolgCKFJ7Rp2Ez
U30c8b8o/mSVZNA1LmcLL2VvY7ZcFwn+1ZQNSj67JjmzpWNC+3qJy9dmXVdrbnxb
7X1o2R1feY3oojvsNVINtvgXk07rDsD9N5u/HCSZhG1GVmeRRszQnfxljwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHV9O+Uu10reVbO38AHS/2r021aJMB8GA1UdIwQY
MBaAFNQ08WhhAodsYha86iil5QLsDXtrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMURUeGFHRUNoMnhpRnJ6cUtLWGxBdXdOZTJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC83MjZiYjQtNWQ4Ny00MDJkLTkxY2Ut
NTcxMmQ5NWFlNjM4LzEvZFgwNzVTN1hTdDVWczdmd0FkTF9hdlRiVm9rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC83MjZiYjQtNWQ4Ny00MDJkLTkxY2UtNTcxMmQ5NWFlNjM4
LzEvMURUeGFHRUNoMnhpRnJ6cUtLWGxBdXdOZTJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAPlKXAwQA
Up+QMA0GCSqGSIb3DQEBCwUAA4IBAQBLLtbs2RZ+6qeXFWpVaK2U8Vb2ZzjgMpoh
DRxPeSgRAOzxyLDnD/bDJ/lzEDDgV/QUhjVNzJdsET1I7Oe+9pQTV9qa0wfG3QJC
U0SbnnMlvm9DXfx0QaB68rZg3XIvLntn9oqXw2WRW+0UmDGTKIFoEK0T1zvyiPoG
RxLGcl35L89urGZEspEUwsXcizNUolRPHOUnzT8Q2hJYrzkW8ce/x9dFOo0j0Q7x
9zI00qyG4PMqTPEkXYEkg04JhI9OIfMwVTPbEebUiXmUFJywl6JjUaHZ5k8JWdrj
v56YhatB7Pf/rD5Ewlma6/yOhMkimzZiOJEpbMYeLQliWsgvKDxN
-----END CERTIFICATE-----
Generated at Mon Jan 1 19:17:15 2024 by rpki-client on console-ams.rpki-client.org