Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/OBIuk2Suuo8ze8faSvtlQqJukh4.roa
File: OBIuk2Suuo8ze8faSvtlQqJukh4.roa (raw, json)
Hash identifier: xBiJv1n3CxrWZXevN1Xf3XrDHoRO/6foeUf6f3CGa7w=
Subject key identifier: 38:12:2E:93:64:AE:BA:8F:33:7B:C7:DA:4A:FB:65:42:A2:6E:92:1E
Certificate issuer: /CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea
Certificate serial: 018D31A73B3AC8B55C8B00D20A6836982FD3
Authority key identifier: D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/OBIuk2Suuo8ze8faSvtlQqJukh4.roa
Signing time: Mon 22 Jan 2024 14:50:59 +0000
ROA not before: Mon 22 Jan 2024 14:50:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25369
IP address blocks: 185.136.32.0/22 maxlen: 32
217.144.176.0/22 maxlen: 32
Validation: Failed, certificate revoked on Tue 30 Jan 2024 12:53:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:31:a7:3b:3a:c8:b5:5c:8b:00:d2:0a:68:36:98:2f:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea
Validity
Not Before: Jan 22 14:50:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=38122e9364aeba8f337bc7da4afb6542a26e921e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6a:3b:fd:55:eb:d0:e2:95:a2:f3:29:83:f9:
8c:26:46:77:50:c1:33:06:eb:58:ed:02:85:1e:8c:
47:4d:7a:60:0d:6c:bb:af:e1:85:be:21:f9:c2:ed:
fe:10:56:ec:77:22:05:2c:80:08:a2:1d:24:09:45:
68:fe:4d:d7:8f:63:7d:bd:5c:11:3f:72:77:d9:74:
5a:72:2b:81:3f:5b:df:9c:40:3c:9d:c5:3c:0e:08:
24:59:bc:cb:c6:27:8f:89:e6:c6:f8:09:af:69:c5:
ed:42:aa:fd:00:b8:c3:9a:32:68:d8:72:61:29:6c:
77:e8:ab:a3:58:b6:68:69:d3:35:e3:56:8b:24:cd:
66:57:bf:0c:92:91:0b:5e:b7:b0:2a:fa:56:02:40:
c1:16:09:b4:b4:21:ae:25:b3:84:b7:af:a8:0d:35:
d3:30:b5:cf:ab:75:4b:24:d0:64:ec:86:40:92:3c:
06:21:36:f9:e5:97:79:63:1e:08:28:df:c3:3b:60:
fd:68:7d:c5:a8:88:e0:18:2a:3f:65:6b:99:f9:0e:
c9:d8:e8:f9:8e:73:48:55:17:fd:e7:d7:98:a6:0c:
b6:df:36:21:48:91:9e:95:eb:2e:f8:d5:03:7c:25:
88:fe:99:a6:03:ef:4c:d1:bc:76:00:69:28:be:12:
d3:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:12:2E:93:64:AE:BA:8F:33:7B:C7:DA:4A:FB:65:42:A2:6E:92:1E
X509v3 Authority Key Identifier:
keyid:D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/OBIuk2Suuo8ze8faSvtlQqJukh4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.136.32.0/22
217.144.176.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:84:1d:de:15:fe:cc:c3:2c:ca:28:b9:7f:65:2c:68:69:3a:
4b:ab:d2:80:22:20:fc:d1:c3:17:24:dd:46:79:83:84:1d:b4:
8b:6d:ef:fb:e9:7d:32:43:d6:9e:62:14:5c:3e:fa:ba:d1:29:
d3:d0:57:2c:d1:19:a4:64:14:2c:10:60:58:9c:70:ea:8f:96:
69:9c:9d:89:66:2e:c2:d5:8e:3e:04:b1:d4:c3:85:9a:79:33:
95:7c:b6:81:c3:df:66:32:bd:c1:dd:2a:c8:d7:02:f4:71:dd:
c1:49:c4:29:aa:46:d3:bc:47:58:94:95:72:39:2c:77:81:a5:
fa:8f:ee:cf:82:85:01:ad:e9:32:ce:63:f3:f1:b8:5d:11:eb:
34:8d:c6:e1:6b:0c:4d:25:f9:48:c9:90:9a:08:a0:77:30:da:
54:6b:4f:da:56:15:46:eb:59:09:0e:ee:bc:87:45:75:26:2a:
7b:4b:51:c9:c0:0c:85:a6:3a:17:d5:da:72:cb:da:44:47:54:
d4:ac:b0:35:e6:38:c2:df:28:59:c7:50:b3:3c:cf:35:aa:7e:
24:89:24:0b:a8:ad:ae:4b:0e:1a:f3:94:9a:99:e4:64:c7:5a:
b0:76:53:87:1f:56:74:4d:dc:8c:54:68:2f:ed:a9:21:ed:b9:
dd:06:57:a2
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAY0xpzs6yLVciwDSCmg2mC/TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzZTk3MDMzYTM2YWE5YmNjMGMyZjE2N2U2MjBkN2NhMTQ5
M2NiZWEwHhcNMjQwMTIyMTQ1MDU5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzODEyMmU5MzY0YWViYThmMzM3YmM3ZGE0YWZiNjU0MmEyNmU5MjFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWo7/VXr0OKVovMpg/mMJkZ3UMEz
ButY7QKFHoxHTXpgDWy7r+GFviH5wu3+EFbsdyIFLIAIoh0kCUVo/k3Xj2N9vVwR
P3J32XRaciuBP1vfnEA8ncU8DggkWbzLxiePiebG+AmvacXtQqr9ALjDmjJo2HJh
KWx36KujWLZoadM141aLJM1mV78MkpELXrewKvpWAkDBFgm0tCGuJbOEt6+oDTXT
MLXPq3VLJNBk7IZAkjwGITb55Zd5Yx4IKN/DO2D9aH3FqIjgGCo/ZWuZ+Q7J2Oj5
jnNIVRf959eYpgy23zYhSJGelesu+NUDfCWI/pmmA+9M0bx2AGkovhLTEwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFDgSLpNkrrqPM3vH2kr7ZUKibpIeMB8GA1UdIwQY
MBaAFNPpcDOjaqm8wMLxZ+Yg18oUk8vqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS81YTMyMGItZTk0Zi00MWM5LTgyZjMt
ZGJmOWQ0MWYxNzk4LzEvT0JJdWsyU3V1bzh6ZThmYVN2dGxRcUp1a2g0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS81YTMyMGItZTk0Zi00MWM5LTgyZjMtZGJmOWQ0MWYxNzk4
LzEvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCuYggAwQC
2ZCwMA0GCSqGSIb3DQEBCwUAA4IBAQCPhB3eFf7MwyzKKLl/ZSxoaTpLq9KAIiD8
0cMXJN1GeYOEHbSLbe/76X0yQ9aeYhRcPvq60SnT0Fcs0RmkZBQsEGBYnHDqj5Zp
nJ2JZi7C1Y4+BLHUw4WaeTOVfLaBw99mMr3B3SrI1wL0cd3BScQpqkbTvEdYlJVy
OSx3gaX6j+7PgoUBrekyzmPz8bhdEes0jcbhawxNJflIyZCaCKB3MNpUa0/aVhVG
61kJDu68h0V1Jip7S1HJwAyFpjoX1dpyy9pER1TUrLA15jjC3yhZx1CzPM81qn4k
iSQLqK2uSw4a85SameRkx1qwdlOHH1Z0TdyMVGgv7akh7bndBlei
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:08 2024 by rpki-client on console-ams.rpki-client.org