Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/SWSuFBJWxNEIpwvmgXW5xUE10pc.roa
File: SWSuFBJWxNEIpwvmgXW5xUE10pc.roa (raw, json)
Hash identifier: +QgtJvmKzJTb9q4PfsDsfO1fFTMmNaWRJ0HSaU77JvQ=
Subject key identifier: 49:64:AE:14:12:56:C4:D1:08:A7:0B:E6:81:75:B9:C5:41:35:D2:97
Certificate issuer: /CN=c2746ccb7e73a9cc30ef04edd7cf16cc1d946894
Certificate serial: 018B140460E9DB433B50EBB135C25CE24AAF
Authority key identifier: C2:74:6C:CB:7E:73:A9:CC:30:EF:04:ED:D7:CF:16:CC:1D:94:68:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wnRsy35zqcww7wTt188WzB2UaJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/SWSuFBJWxNEIpwvmgXW5xUE10pc.roa
Signing time: Mon 09 Oct 2023 10:38:33 +0000
ROA not before: Mon 09 Oct 2023 10:38:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25145
IP address blocks: 185.203.67.0/24 maxlen: 24
2a11:940::/29 maxlen: 29
2a10:7cc0::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:14:04:60:e9:db:43:3b:50:eb:b1:35:c2:5c:e2:4a:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2746ccb7e73a9cc30ef04edd7cf16cc1d946894
Validity
Not Before: Oct 9 10:38:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4964ae141256c4d108a70be68175b9c54135d297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:3c:ad:8b:83:f1:cb:41:47:16:8f:10:72:f8:
ab:4a:69:db:9e:ed:6d:4c:9f:f4:03:91:7a:f6:30:
a7:19:9e:24:0c:8e:d9:af:59:0d:1c:96:a5:c5:2c:
f3:f1:8b:b0:9b:6b:16:39:0a:a1:30:55:ce:6b:dd:
f1:b9:98:fd:b0:eb:cd:d1:46:87:ba:24:28:e9:5a:
d6:5b:c0:98:a3:86:88:ed:e1:d9:6c:65:98:c4:e1:
b7:67:4a:84:9d:33:62:b0:cd:f2:6b:a5:bd:b0:c8:
eb:b5:0a:c6:bb:86:e8:09:a0:cf:96:6e:10:a8:68:
40:f5:56:0b:25:3c:a6:fc:8a:7f:c2:de:55:84:4c:
ff:c9:0f:16:f6:3c:3c:a7:7a:d3:27:d9:77:54:f5:
d5:a9:c1:83:a4:bf:fa:01:c5:eb:74:f8:a3:bf:95:
f8:a6:b1:08:81:29:60:e7:2a:92:3d:5f:1d:38:0d:
04:a1:20:51:4b:73:9c:1d:59:39:fd:83:21:a4:a1:
d4:07:08:29:6a:05:7b:37:91:75:f7:46:0d:ca:55:
86:61:02:85:96:9a:8a:fd:01:de:80:e2:17:8a:8a:
9a:f3:71:40:d2:30:b4:e4:94:25:01:b5:ce:d4:51:
de:7c:7d:b6:2f:61:07:72:88:35:9f:d3:1c:d2:d0:
89:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:64:AE:14:12:56:C4:D1:08:A7:0B:E6:81:75:B9:C5:41:35:D2:97
X509v3 Authority Key Identifier:
keyid:C2:74:6C:CB:7E:73:A9:CC:30:EF:04:ED:D7:CF:16:CC:1D:94:68:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnRsy35zqcww7wTt188WzB2UaJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/SWSuFBJWxNEIpwvmgXW5xUE10pc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/wnRsy35zqcww7wTt188WzB2UaJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.203.67.0/24
IPv6:
2a10:7cc0::/29
2a11:940::/29
Signature Algorithm: sha256WithRSAEncryption
35:9e:e3:20:aa:02:fd:02:a1:89:b6:96:33:04:6e:d7:21:75:
2f:b7:fe:bf:b6:51:37:23:01:66:07:27:58:19:9a:f6:50:4d:
ab:c9:56:7e:0c:6a:b7:4f:92:04:47:d0:32:d1:7f:ee:dc:af:
de:54:cf:c0:63:b2:24:4c:0d:21:d8:90:4c:01:f2:ee:34:6a:
a9:b2:60:b7:5c:c1:9b:4b:e2:23:37:24:f6:8d:e9:99:09:5a:
fd:47:ee:e2:98:29:c9:c2:21:03:b5:dc:8e:95:48:95:f4:e5:
05:82:02:4f:b6:d1:df:30:43:8f:13:d7:43:36:ad:ca:ee:f4:
a6:f8:34:48:59:e5:31:54:7d:44:22:99:0c:fc:0a:d4:0b:ba:
29:10:2d:32:0c:9c:82:a8:1d:06:dc:7b:81:40:5f:6c:10:aa:
35:48:60:8b:c8:32:ad:42:5c:67:a6:50:3b:38:78:f2:27:ef:
32:6e:85:87:ea:5e:a6:6e:c3:73:29:ac:68:3c:4e:0f:42:d1:
5b:58:7a:b2:dc:85:2f:0f:fe:aa:40:05:06:26:24:35:24:d9:
77:7d:34:4f:df:4c:89:65:0a:c0:86:55:6a:40:10:65:08:60:
01:af:06:54:91:6e:03:2d:e4:ef:ee:a6:d9:0e:6a:77:cd:98:
e6:c9:b9:bd
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgISAYsUBGDp20M7UOuxNcJc4kqvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyNzQ2Y2NiN2U3M2E5Y2MzMGVmMDRlZGQ3Y2YxNmNjMWQ5
NDY4OTQwHhcNMjMxMDA5MTAzODMzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OTY0YWUxNDEyNTZjNGQxMDhhNzBiZTY4MTc1YjljNTQxMzVkMjk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2zyti4Pxy0FHFo8QcvirSmnbnu1t
TJ/0A5F69jCnGZ4kDI7Zr1kNHJalxSzz8Yuwm2sWOQqhMFXOa93xuZj9sOvN0UaH
uiQo6VrWW8CYo4aI7eHZbGWYxOG3Z0qEnTNisM3ya6W9sMjrtQrGu4boCaDPlm4Q
qGhA9VYLJTym/Ip/wt5VhEz/yQ8W9jw8p3rTJ9l3VPXVqcGDpL/6AcXrdPijv5X4
prEIgSlg5yqSPV8dOA0EoSBRS3OcHVk5/YMhpKHUBwgpagV7N5F190YNylWGYQKF
lpqK/QHegOIXioqa83FA0jC05JQlAbXO1FHefH22L2EHcog1n9Mc0tCJCwIDAQAB
o4ICHzCCAhswHQYDVR0OBBYEFElkrhQSVsTRCKcL5oF1ucVBNdKXMB8GA1UdIwQY
MBaAFMJ0bMt+c6nMMO8E7dfPFswdlGiUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd25Sc3kzNXpxY3d3N3dUdDE4OFd6QjJVYUpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS81OTcwM2YtZjAwMy00ODQ1LTk4M2Et
OTNlOTE4ZDEwZWM1LzEvU1dTdUZCSld4TkVJcHd2bWdYVzV4VUUxMHBjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS81OTcwM2YtZjAwMy00ODQ1LTk4M2EtOTNlOTE4ZDEwZWM1
LzEvd25Sc3kzNXpxY3d3N3dUdDE4OFd6QjJVYUpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAMBAIAATAGAwQAuctDMBQE
AgACMA4DBQMqEHzAAwUDKhEJQDANBgkqhkiG9w0BAQsFAAOCAQEANZ7jIKoC/QKh
ibaWMwRu1yF1L7f+v7ZRNyMBZgcnWBma9lBNq8lWfgxqt0+SBEfQMtF/7tyv3lTP
wGOyJEwNIdiQTAHy7jRqqbJgt1zBm0viIzck9o3pmQla/Ufu4pgpycIhA7XcjpVI
lfTlBYICT7bR3zBDjxPXQzatyu70pvg0SFnlMVR9RCKZDPwK1Au6KRAtMgycgqgd
Btx7gUBfbBCqNUhgi8gyrUJcZ6ZQOzh48ifvMm6Fh+pepm7DcymsaDxOD0LRW1h6
styFLw/+qkAFBiYkNSTZd300T99MiWUKwIZVakAQZQhgAa8GVJFuAy3k7+6m2Q5q
d82Y5sm5vQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:28 2024 by rpki-client on console-fra.rpki-client.org