Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/ogd4elnxZtcJZmviiPYxDEoC7oM.roa
File: ogd4elnxZtcJZmviiPYxDEoC7oM.roa (raw, json)
Hash identifier: +ySX2dTzcqiFhLfkILw5RXTKfVfy6VE7GkeS9sGVvr4=
Subject key identifier: A2:07:78:7A:59:F1:66:D7:09:66:6B:E2:88:F6:31:0C:4A:02:EE:83
Certificate issuer: /CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
Certificate serial: 01857082A77F9BC70991B907DB97080DBD22
Authority key identifier: D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/ogd4elnxZtcJZmviiPYxDEoC7oM.roa
Signing time: Mon 02 Jan 2023 03:24:48 +0000
ROA not before: Mon 02 Jan 2023 03:24:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3329
IP address blocks: 82.198.32.0/20 maxlen: 24
82.198.32.0/19 maxlen: 24
212.22.32.0/20 maxlen: 24
82.198.48.0/20 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:82:a7:7f:9b:c7:09:91:b9:07:db:97:08:0d:bd:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
Validity
Not Before: Jan 2 03:24:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a207787a59f166d709666be288f6310c4a02ee83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4e:43:c2:72:11:f8:91:23:1d:f1:f0:46:cb:
9d:52:6d:e1:79:a8:db:d4:a2:a8:fc:c8:50:3c:d3:
5b:ae:af:3a:ba:4d:50:25:5b:a7:e8:98:de:cf:3b:
f1:ab:70:da:1f:5d:fe:be:e5:ca:af:d7:95:35:01:
a0:07:f3:cf:64:be:3b:62:41:2d:71:bd:81:61:e5:
d6:30:9e:4d:07:42:4b:b4:13:2e:b0:e7:fa:84:e7:
8f:c0:18:91:5a:f4:c6:af:24:8b:4a:ec:65:c5:be:
9d:4a:7a:86:40:3c:59:60:ec:47:2a:03:eb:ab:f9:
2b:e3:d6:08:85:b8:cd:52:26:13:65:95:01:f7:21:
48:8d:d2:4c:bc:db:4e:12:77:58:42:79:d5:16:07:
2f:b8:8a:c0:b9:2f:1c:35:c8:f1:f3:7c:be:1a:2a:
3a:68:8f:92:17:a9:06:80:77:9a:01:25:eb:fc:c2:
47:bf:3f:19:bb:3b:82:66:11:b7:d1:12:8b:07:13:
fe:2a:b8:81:bd:5e:6b:9b:10:b9:18:b4:76:19:99:
67:f5:ca:b9:72:33:00:97:59:61:7d:17:0d:35:8d:
44:f1:5a:45:90:fb:bb:4d:a4:87:79:a1:15:c8:1b:
d9:9a:57:a5:77:48:96:5e:16:49:08:fd:3b:2e:0a:
10:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:07:78:7A:59:F1:66:D7:09:66:6B:E2:88:F6:31:0C:4A:02:EE:83
X509v3 Authority Key Identifier:
keyid:D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/ogd4elnxZtcJZmviiPYxDEoC7oM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.198.32.0/19
212.22.32.0/20
Signature Algorithm: sha256WithRSAEncryption
2c:79:10:0c:c2:48:33:af:9d:5c:ff:05:19:7b:8d:92:9f:0e:
9a:56:2f:b9:e7:88:4d:28:67:0a:d3:34:8f:e0:dd:73:2a:42:
72:01:28:00:fb:25:64:85:11:2d:5c:ff:70:27:91:7c:e4:e6:
54:dd:61:be:29:c5:d9:03:74:7f:07:bf:b3:a6:75:00:a7:a2:
43:54:14:cb:15:6c:c5:ff:45:d5:ec:1e:74:85:3e:6e:fe:c3:
d6:7f:af:57:58:09:5f:59:2d:e5:62:d8:73:ff:de:1b:90:26:
7d:b0:71:1f:12:a5:5a:69:65:59:93:1c:f0:34:0f:6c:a5:61:
80:1e:0f:9a:f0:cb:14:5b:3f:92:8b:79:de:f7:82:70:bb:99:
db:c2:4d:ff:7b:d5:5c:48:aa:f3:43:35:26:4e:3f:7f:1f:30:
b8:87:96:35:8d:86:f0:e7:9d:6f:ff:3f:c3:d5:e6:ba:bf:44:
e3:c9:2e:70:73:f2:94:b3:c9:52:6b:44:b0:30:3a:32:ef:b2:
05:e5:c8:82:d5:4a:99:dd:7a:87:75:d0:f0:d3:75:a4:87:9d:
1d:7a:0c:bc:60:b4:8d:20:72:66:66:6d:92:01:ab:e9:4e:6e:
43:61:2a:f7:4e:ff:7f:7e:cd:75:64:0c:90:57:e3:2e:e3:29:
5a:cd:01:e9
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVwgqd/m8cJkbkH25cIDb0iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0MzRmMTY4NjEwMjg3NmM2MjE2YmNlYTI4YTVlNTAyZWMw
ZDdiNmIwHhcNMjMwMTAyMDMyNDQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMjA3Nzg3YTU5ZjE2NmQ3MDk2NjZiZTI4OGY2MzEwYzRhMDJlZTgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvk5DwnIR+JEjHfHwRsudUm3heajb
1KKo/MhQPNNbrq86uk1QJVun6Jjezzvxq3DaH13+vuXKr9eVNQGgB/PPZL47YkEt
cb2BYeXWMJ5NB0JLtBMusOf6hOePwBiRWvTGrySLSuxlxb6dSnqGQDxZYOxHKgPr
q/kr49YIhbjNUiYTZZUB9yFIjdJMvNtOEndYQnnVFgcvuIrAuS8cNcjx83y+Gio6
aI+SF6kGgHeaASXr/MJHvz8ZuzuCZhG30RKLBxP+KriBvV5rmxC5GLR2GZln9cq5
cjMAl1lhfRcNNY1E8VpFkPu7TaSHeaEVyBvZmleld0iWXhZJCP07LgoQcwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFKIHeHpZ8WbXCWZr4oj2MQxKAu6DMB8GA1UdIwQY
MBaAFNQ08WhhAodsYha86iil5QLsDXtrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMURUeGFHRUNoMnhpRnJ6cUtLWGxBdXdOZTJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC83MjZiYjQtNWQ4Ny00MDJkLTkxY2Ut
NTcxMmQ5NWFlNjM4LzEvb2dkNGVsbnhadGNKWm12aWlQWXhERW9DN29NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC83MjZiYjQtNWQ4Ny00MDJkLTkxY2UtNTcxMmQ5NWFlNjM4
LzEvMURUeGFHRUNoMnhpRnJ6cUtLWGxBdXdOZTJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFUsYgAwQE
1BYgMA0GCSqGSIb3DQEBCwUAA4IBAQAseRAMwkgzr51c/wUZe42Snw6aVi+554hN
KGcK0zSP4N1zKkJyASgA+yVkhREtXP9wJ5F85OZU3WG+KcXZA3R/B7+zpnUAp6JD
VBTLFWzF/0XV7B50hT5u/sPWf69XWAlfWS3lYthz/94bkCZ9sHEfEqVaaWVZkxzw
NA9spWGAHg+a8MsUWz+Si3ne94Jwu5nbwk3/e9VcSKrzQzUmTj9/HzC4h5Y1jYbw
551v/z/D1ea6v0TjyS5wc/KUs8lSa0SwMDoy77IF5ciC1UqZ3XqHddDw03Wkh50d
egy8YLSNIHJmZm2SAavpTm5DYSr3Tv9/fs11ZAyQV+Mu4ylazQHp
-----END CERTIFICATE-----
Generated at Mon Jan 1 19:17:15 2024 by rpki-client on console-ams.rpki-client.org