Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/SVeHFaxN9PRVuDu7wU_e4NgNlro.roa
File: SVeHFaxN9PRVuDu7wU_e4NgNlro.roa (raw, json)
Hash identifier: iWjc3ZMf7wuA/z0FP82IAHY6EnqWga1aS97nOpZuIsc=
Subject key identifier: 49:57:87:15:AC:4D:F4:F4:55:B8:3B:BB:C1:4F:DE:E0:D8:0D:96:BA
Certificate issuer: /CN=c8003c979603f7cea12aca01ebc2057c36fd7f30
Certificate serial: 0188DD22C9B31C62C253A30EAF690A40125E
Authority key identifier: C8:00:3C:97:96:03:F7:CE:A1:2A:CA:01:EB:C2:05:7C:36:FD:7F:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yAA8l5YD986hKsoB68IFfDb9fzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/SVeHFaxN9PRVuDu7wU_e4NgNlro.roa
Signing time: Wed 21 Jun 2023 08:47:04 +0000
ROA not before: Wed 21 Jun 2023 08:47:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 19905
IP address blocks: 94.143.208.0/21 maxlen: 24
185.63.20.0/22 maxlen: 24
185.61.224.0/22 maxlen: 24
62.112.224.0/19 maxlen: 24
2a00:1558::/32 maxlen: 48
2a02:27c8::/32 maxlen: 48
Validation: Failed, certificate revoked on Wed 05 Jul 2023 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:dd:22:c9:b3:1c:62:c2:53:a3:0e:af:69:0a:40:12:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8003c979603f7cea12aca01ebc2057c36fd7f30
Validity
Not Before: Jun 21 08:47:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=49578715ac4df4f455b83bbbc14fdee0d80d96ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:75:88:b8:d6:90:7d:fe:42:42:1a:3c:34:5c:
da:2c:ef:44:93:ca:e5:35:22:80:b1:b0:1a:66:53:
fd:b7:fd:de:0e:cc:c6:ed:5c:40:b2:21:c6:72:4c:
c0:24:f3:34:bf:af:10:7f:3a:7e:3f:59:f7:bc:58:
6b:dc:7b:66:ca:e3:91:66:35:1d:7f:c9:22:8f:ab:
86:bd:da:53:cf:ac:ec:62:c1:1b:2c:ab:27:af:9a:
b9:14:b9:2c:31:ba:01:88:cf:a3:b3:1c:56:7d:d9:
53:33:cb:52:61:fc:13:8b:0f:41:34:de:3e:c3:a4:
e5:14:fb:1f:83:5f:cd:a3:42:a1:8d:73:9c:86:4c:
30:23:d3:78:e3:ae:b1:d1:b2:20:ea:c3:ba:f9:42:
11:f7:02:b9:ec:11:13:d1:b1:2b:d3:e0:c0:23:fd:
a9:a8:df:3a:e9:bb:c4:e2:43:91:82:d9:6e:be:20:
59:13:08:3b:82:bc:3b:6e:a6:c8:82:b2:94:ed:b9:
c2:86:77:32:da:d3:f8:c4:bc:a6:ba:e4:c4:48:52:
8e:cd:56:55:95:8c:59:48:f1:fa:a9:2d:f4:31:33:
f8:13:f2:5e:0a:91:65:19:cb:7f:0d:66:2a:9b:07:
58:c0:88:da:b3:d9:96:f3:fd:26:c2:59:b3:81:46:
a5:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:57:87:15:AC:4D:F4:F4:55:B8:3B:BB:C1:4F:DE:E0:D8:0D:96:BA
X509v3 Authority Key Identifier:
keyid:C8:00:3C:97:96:03:F7:CE:A1:2A:CA:01:EB:C2:05:7C:36:FD:7F:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yAA8l5YD986hKsoB68IFfDb9fzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/SVeHFaxN9PRVuDu7wU_e4NgNlro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/yAA8l5YD986hKsoB68IFfDb9fzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.112.224.0/19
94.143.208.0/21
185.61.224.0/22
185.63.20.0/22
IPv6:
2a00:1558::/32
2a02:27c8::/32
Signature Algorithm: sha256WithRSAEncryption
1b:56:d9:16:52:4f:75:aa:db:a7:e2:82:9e:67:d6:a7:09:97:
bc:a7:3d:9d:e8:15:71:3c:41:77:7f:3b:59:38:96:30:dd:31:
4c:82:0d:9d:e7:21:43:95:65:2a:7e:dd:2c:a1:10:67:f8:ab:
c1:c2:d5:09:cb:69:36:b7:c5:fa:f9:e5:72:c3:1e:46:b5:93:
c3:be:c8:0a:26:18:3c:51:c3:6f:85:8f:11:4f:ea:f6:e7:9b:
e9:76:2d:7b:84:cc:fa:1f:67:d6:47:c7:c3:a9:d2:8d:f5:38:
e3:be:7b:d4:de:8e:1f:d7:2a:6c:ad:39:ff:ca:3a:be:d4:9f:
6f:89:1f:36:5b:5a:3c:7f:29:00:e9:ce:a6:29:b3:d8:5c:91:
36:f3:26:b6:ac:da:2d:b5:36:73:01:ad:6e:60:43:57:dd:0d:
10:3d:b7:91:2d:5e:bf:6d:d2:50:4a:0f:1c:d6:50:0e:bb:96:
7d:94:4d:b7:e3:51:f1:18:d3:0d:f9:29:1d:ea:fd:25:1b:19:
02:ca:4a:9a:07:9d:e8:84:aa:bb:96:18:53:60:4b:e5:64:ee:
16:79:d4:ed:41:f8:35:ab:5f:fa:c2:55:d8:46:00:a2:d0:76:
f1:da:3f:5f:0f:a9:6c:0e:60:06:ed:53:bc:ef:89:ac:6d:94:
74:26:ce:9e
-----BEGIN CERTIFICATE-----
MIIFJTCCBA2gAwIBAgISAYjdIsmzHGLCU6MOr2kKQBJeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4MDAzYzk3OTYwM2Y3Y2VhMTJhY2EwMWViYzIwNTdjMzZm
ZDdmMzAwHhcNMjMwNjIxMDg0NzA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OTU3ODcxNWFjNGRmNGY0NTViODNiYmJjMTRmZGVlMGQ4MGQ5NmJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgnWIuNaQff5CQho8NFzaLO9Ek8rl
NSKAsbAaZlP9t/3eDszG7VxAsiHGckzAJPM0v68Qfzp+P1n3vFhr3HtmyuORZjUd
f8kij6uGvdpTz6zsYsEbLKsnr5q5FLksMboBiM+jsxxWfdlTM8tSYfwTiw9BNN4+
w6TlFPsfg1/No0KhjXOchkwwI9N4466x0bIg6sO6+UIR9wK57BET0bEr0+DAI/2p
qN866bvE4kORgtluviBZEwg7grw7bqbIgrKU7bnChncy2tP4xLymuuTESFKOzVZV
lYxZSPH6qS30MTP4E/JeCpFlGct/DWYqmwdYwIjas9mW8/0mwlmzgUalcwIDAQAB
o4ICMTCCAi0wHQYDVR0OBBYEFElXhxWsTfT0Vbg7u8FP3uDYDZa6MB8GA1UdIwQY
MBaAFMgAPJeWA/fOoSrKAevCBXw2/X8wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUFBOGw1WUQ5ODZoS3NvQjY4SUZmRGI5ZnpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8wM2NhMDEtYjk1OS00MWE2LTgxMzMt
MDcyMjg4MTJkMDE3LzEvU1ZlSEZheE45UFJWdUR1N3dVX2U0TmdObHJvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi8wM2NhMDEtYjk1OS00MWE2LTgxMzMtMDcyMjg4MTJkMDE3
LzEveUFBOGw1WUQ5ODZoS3NvQjY4SUZmRGI5ZnpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEcGCCsGAQUFBwEHAQH/BDgwNjAeBAIAATAYAwQFPnDgAwQD
Xo/QAwQCuT3gAwQCuT8UMBQEAgACMA4DBQAqABVYAwUAKgInyDANBgkqhkiG9w0B
AQsFAAOCAQEAG1bZFlJPdarbp+KCnmfWpwmXvKc9negVcTxBd387WTiWMN0xTIIN
nechQ5VlKn7dLKEQZ/irwcLVCctpNrfF+vnlcsMeRrWTw77ICiYYPFHDb4WPEU/q
9ueb6XYte4TM+h9n1kfHw6nSjfU447571N6OH9cqbK05/8o6vtSfb4kfNltaPH8p
AOnOpimz2FyRNvMmtqzaLbU2cwGtbmBDV90NED23kS1ev23SUEoPHNZQDruWfZRN
t+NR8RjTDfkpHer9JRsZAspKmged6ISqu5YYU2BL5WTuFnnU7UH4Natf+sJV2EYA
otB28do/Xw+pbA5gBu1TvO+JrG2UdCbOng==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:06 2024 by rpki-client on console-fra.rpki-client.org