Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/B6_geupOyC0mGxa8djR_glOMvec.roa
File: B6_geupOyC0mGxa8djR_glOMvec.roa (raw, json)
Hash identifier: IB1XfW6H4CiCytmCXN9mrs1iJzk8tqhGNLQp8fWciAk=
Subject key identifier: 07:AF:E0:7A:EA:4E:C8:2D:26:1B:16:BC:76:34:7F:82:53:8C:BD:E7
Certificate issuer: /CN=8c7f325f9aaeb93a83c39e78145c41937d586b77
Certificate serial: 01856F42BC0662F7553113FFF4B19B8DB40D
Authority key identifier: 8C:7F:32:5F:9A:AE:B9:3A:83:C3:9E:78:14:5C:41:93:7D:58:6B:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jH8yX5quuTqDw554FFxBk31Ya3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/B6_geupOyC0mGxa8djR_glOMvec.roa
Signing time: Sun 01 Jan 2023 21:35:22 +0000
ROA not before: Sun 01 Jan 2023 21:35:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35699
IP address blocks: 82.199.40.0/24 maxlen: 24
82.199.43.0/24 maxlen: 24
193.42.28.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:bc:06:62:f7:55:31:13:ff:f4:b1:9b:8d:b4:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c7f325f9aaeb93a83c39e78145c41937d586b77
Validity
Not Before: Jan 1 21:35:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=07afe07aea4ec82d261b16bc76347f82538cbde7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f7:cd:c9:39:61:f6:d9:1c:9c:52:cf:e1:7c:
ba:c2:60:3b:01:46:51:94:df:0a:78:1b:5c:c7:7c:
7d:c8:d1:66:43:8a:00:c7:b2:45:cd:b7:b4:b6:e6:
90:ec:b3:b5:31:09:4e:c0:22:2b:ee:5b:42:7e:de:
d9:ab:6d:c4:40:3b:95:5f:2a:a6:d8:de:21:bb:50:
4b:bf:c9:0a:30:28:8d:16:22:01:9d:aa:73:5a:d5:
87:7c:88:06:70:b6:3b:65:59:b3:ab:76:c0:10:ea:
e2:9a:86:75:96:29:b4:14:1f:46:86:9f:80:ba:4a:
b8:72:a7:d0:c9:16:02:8e:7d:63:ae:f7:1c:01:fb:
05:fa:58:11:ea:18:8b:bd:4a:09:57:96:7d:23:11:
7a:79:ed:01:d4:4d:63:01:c6:0f:cf:57:eb:29:b1:
dc:a2:58:96:3e:77:2b:b4:f3:f6:f3:f8:eb:db:a5:
39:33:ec:6b:a7:95:ac:6c:5d:5c:bf:11:74:18:30:
d2:da:3a:f4:4d:10:ae:9c:cd:db:cc:95:4a:b4:d1:
3e:fa:70:5c:fc:73:e4:86:3d:68:f2:ae:9d:e5:a3:
19:71:59:2e:a6:8b:d5:94:86:13:52:83:dd:f9:4c:
28:ee:f0:c0:29:c5:32:69:d8:c8:88:b9:db:9b:0f:
fe:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:AF:E0:7A:EA:4E:C8:2D:26:1B:16:BC:76:34:7F:82:53:8C:BD:E7
X509v3 Authority Key Identifier:
keyid:8C:7F:32:5F:9A:AE:B9:3A:83:C3:9E:78:14:5C:41:93:7D:58:6B:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jH8yX5quuTqDw554FFxBk31Ya3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/B6_geupOyC0mGxa8djR_glOMvec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/jH8yX5quuTqDw554FFxBk31Ya3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.199.40.0/24
82.199.43.0/24
193.42.28.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:4e:f6:05:39:e3:cd:64:82:2d:6b:bd:86:9d:24:13:6e:19:
09:8e:5f:51:f7:6e:4b:9e:6c:0a:dd:78:9a:c7:36:ce:1d:bb:
aa:fd:2a:b4:81:c3:70:d4:0f:b0:5d:68:c8:49:8a:73:12:0a:
c6:34:85:6b:cc:7c:89:aa:a9:45:90:70:16:fe:ec:da:97:a2:
52:c3:1f:6e:6b:12:e5:ef:fd:17:62:df:c3:24:0d:20:de:40:
73:7e:51:ee:80:7d:66:f6:70:37:f9:11:4d:b3:2f:64:da:ce:
50:4f:1c:ad:94:5d:cb:02:6b:60:13:cf:80:6a:24:4b:fc:0c:
0e:a8:52:cc:7e:75:99:ec:80:37:eb:5d:82:dc:59:51:90:2e:
d3:ee:1d:2b:83:45:b8:60:60:39:3a:07:3e:89:29:2b:46:5b:
49:bc:ce:e6:c6:45:be:b7:c6:00:bc:09:eb:f5:a4:2c:16:17:
98:13:7b:cf:56:b8:da:f9:35:f5:9a:c4:9f:7b:ec:a8:38:e5:
f1:a3:49:09:07:60:ba:aa:05:ed:39:fb:98:c5:0c:c6:79:ff:
e7:f9:df:d8:fa:66:d3:2d:e5:ec:bf:28:23:3e:f4:38:5b:16:
7e:89:44:1b:65:8b:a2:25:d0:4c:2b:ea:85:27:bb:54:15:bb:
4f:d1:ec:12
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYVvQrwGYvdVMRP/9LGbjbQNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjN2YzMjVmOWFhZWI5M2E4M2MzOWU3ODE0NWM0MTkzN2Q1
ODZiNzcwHhcNMjMwMTAxMjEzNTIyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwN2FmZTA3YWVhNGVjODJkMjYxYjE2YmM3NjM0N2Y4MjUzOGNiZGU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlffNyTlh9tkcnFLP4Xy6wmA7AUZR
lN8KeBtcx3x9yNFmQ4oAx7JFzbe0tuaQ7LO1MQlOwCIr7ltCft7Zq23EQDuVXyqm
2N4hu1BLv8kKMCiNFiIBnapzWtWHfIgGcLY7ZVmzq3bAEOrimoZ1lim0FB9Ghp+A
ukq4cqfQyRYCjn1jrvccAfsF+lgR6hiLvUoJV5Z9IxF6ee0B1E1jAcYPz1frKbHc
oliWPncrtPP28/jr26U5M+xrp5WsbF1cvxF0GDDS2jr0TRCunM3bzJVKtNE++nBc
/HPkhj1o8q6d5aMZcVkupovVlIYTUoPd+Uwo7vDAKcUyadjIiLnbmw/+TwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFAev4HrqTsgtJhsWvHY0f4JTjL3nMB8GA1UdIwQY
MBaAFIx/Ml+arrk6g8OeeBRcQZN9WGt3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakg4eVg1cXV1VHFEdzU1NEZGeEJrMzFZYTNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9hNGMyOTQtNmI1Mi00ODRlLTgyNjUt
ZmMyZjVmYTc3NTU1LzEvQjZfZ2V1cE95QzBtR3hhOGRqUl9nbE9NdmVjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9hNGMyOTQtNmI1Mi00ODRlLTgyNjUtZmMyZjVmYTc3NTU1
LzEvakg4eVg1cXV1VHFEdzU1NEZGeEJrMzFZYTNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAUscoAwQA
UscrAwQCwSocMA0GCSqGSIb3DQEBCwUAA4IBAQBdTvYFOePNZIIta72GnSQTbhkJ
jl9R925LnmwK3XiaxzbOHbuq/Sq0gcNw1A+wXWjISYpzEgrGNIVrzHyJqqlFkHAW
/uzal6JSwx9uaxLl7/0XYt/DJA0g3kBzflHugH1m9nA3+RFNsy9k2s5QTxytlF3L
AmtgE8+AaiRL/AwOqFLMfnWZ7IA3612C3FlRkC7T7h0rg0W4YGA5Ogc+iSkrRltJ
vM7mxkW+t8YAvAnr9aQsFheYE3vPVrja+TX1msSfe+yoOOXxo0kJB2C6qgXtOfuY
xQzGef/n+d/Y+mbTLeXsvygjPvQ4WxZ+iUQbZYuiJdBMK+qFJ7tUFbtP0ewS
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:58 2023 by rpki-client on console-fra.rpki-client.org