Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/SY81Og4XXmkbc5rjRRDwAJeZ78Y.roa
File: SY81Og4XXmkbc5rjRRDwAJeZ78Y.roa (raw, json)
Hash identifier: oD1LWq9+2qyIPBF8DpQR/iVzAYuEi5pvH8OBfbsvLR8=
Subject key identifier: 49:8F:35:3A:0E:17:5E:69:1B:73:9A:E3:45:10:F0:00:97:99:EF:C6
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01856D81D8854BBFE993812A6583CF893BBB
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/SY81Og4XXmkbc5rjRRDwAJeZ78Y.roa
Signing time: Sun 01 Jan 2023 13:25:04 +0000
ROA not before: Sun 01 Jan 2023 13:25:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 22773
IP address blocks: 193.148.56.0/22 maxlen: 24
185.147.100.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:81:d8:85:4b:bf:e9:93:81:2a:65:83:cf:89:3b:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 1 13:25:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=498f353a0e175e691b739ae34510f0009799efc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c1:ee:09:74:21:17:89:e7:f1:46:0b:cc:3c:
8d:05:27:78:b1:b5:01:5a:44:dd:c0:71:cd:4a:d2:
3c:a3:28:97:86:9c:31:63:ec:f7:a1:96:79:5e:2e:
ee:00:88:1e:17:48:07:86:95:ca:80:51:0b:50:ab:
9d:5c:b0:ea:81:c2:ad:51:9e:b3:80:4e:72:bd:fa:
8c:4a:65:6b:ee:bb:fc:49:18:5c:ed:55:54:98:3e:
64:44:9d:6e:83:cf:ad:82:e5:8a:7e:7e:92:38:60:
8a:cf:73:76:80:6d:e5:2f:4d:94:d1:be:42:31:c5:
b7:7b:b0:83:b8:96:45:11:b3:5c:40:0c:d9:6e:14:
d4:b7:82:2a:7b:1d:14:66:ed:d2:d1:9b:a0:ae:57:
ce:95:5d:b6:25:bc:90:c8:1c:e2:f2:14:ad:da:89:
2b:c0:c6:43:23:1b:ec:54:28:95:c0:2a:db:fe:ab:
21:38:48:f0:c4:62:fd:83:2f:bd:fe:90:ab:21:d7:
da:58:75:50:e9:04:09:a8:24:73:70:15:07:d4:6c:
da:b8:cc:50:b2:ae:9a:2f:53:7c:18:44:68:7b:6b:
9c:8a:44:8f:ee:c1:77:a9:cb:1f:79:73:90:5c:c7:
5f:c8:40:ed:22:e3:7f:9f:b6:ce:cb:9a:89:84:e3:
11:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:8F:35:3A:0E:17:5E:69:1B:73:9A:E3:45:10:F0:00:97:99:EF:C6
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/SY81Og4XXmkbc5rjRRDwAJeZ78Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.147.100.0/22
193.148.56.0/22
Signature Algorithm: sha256WithRSAEncryption
b3:60:ca:fd:2d:69:5e:a6:66:f4:23:f0:4a:86:16:4b:08:ff:
3a:91:77:ed:80:9d:92:7a:26:c9:76:a4:8e:4a:d2:45:41:18:
2c:91:86:f6:13:ff:36:12:2a:a8:78:b9:a5:6c:06:8e:55:8c:
02:3c:78:d2:bf:8b:48:15:b0:51:15:d5:6c:63:c6:cc:8e:0b:
83:21:13:a7:d7:b4:bc:55:a5:ff:64:5b:b4:cd:e5:9b:c2:0c:
7f:f2:ed:48:e8:f6:ba:a9:00:8f:1e:30:19:e0:e8:30:18:b1:
f4:30:ce:9f:c9:36:3b:20:0c:00:a9:40:b9:c0:58:c6:20:76:
b8:86:bd:f3:60:b0:57:d6:8d:02:7d:2e:5e:95:53:03:53:ce:
82:8e:84:24:7a:03:53:90:a6:16:c0:06:9b:dd:18:81:e6:64:
1b:a7:87:20:e1:fc:36:24:9a:41:2c:f5:bb:c7:fd:55:e2:de:
89:31:53:56:5a:b6:cb:22:c2:71:c6:04:9e:52:56:94:36:c9:
f1:73:86:4f:29:62:e3:11:90:bd:12:ab:1b:eb:07:28:aa:8d:
20:d5:e3:32:91:a7:ee:b5:12:dc:e9:d7:28:6f:87:b0:3d:5a:
0f:56:7d:46:02:e8:11:28:d4:03:6b:f9:38:c4:20:ad:86:04:
4f:f5:6c:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:37 2023 by rpki-client on console-ams.rpki-client.org