Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/rswbvTyGdKssofH2sGC2XzMFBE0.roa
File: rswbvTyGdKssofH2sGC2XzMFBE0.roa (raw, json)
Hash identifier: 2dsryJzQ1XwmcC1PttNqLsLNXdtMjTRs4Zr9v32UdC4=
Subject key identifier: AE:CC:1B:BD:3C:86:74:AB:2C:A1:F1:F6:B0:60:B6:5F:33:05:04:4D
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01856D820BB25837CCB1FAED9BDB1539F524
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/rswbvTyGdKssofH2sGC2XzMFBE0.roa
Signing time: Sun 01 Jan 2023 13:25:16 +0000
ROA not before: Sun 01 Jan 2023 13:25:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205138
IP address blocks: 193.37.45.0/24 maxlen: 24
2a00:1728:38::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:29:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:82:0b:b2:58:37:cc:b1:fa:ed:9b:db:15:39:f5:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 1 13:25:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aecc1bbd3c8674ab2ca1f1f6b060b65f3305044d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:97:f3:07:93:bf:29:8d:1c:c5:29:85:d3:e9:
32:85:3b:09:0e:e9:1e:8c:2e:1a:dc:69:eb:42:10:
ff:fe:23:f8:61:e5:0f:e4:1c:91:5c:2c:1a:18:8e:
78:eb:99:c7:ac:9e:f6:43:15:24:b3:a6:7d:93:69:
3d:1f:52:a6:0e:10:06:f3:c3:26:b9:30:10:8e:9c:
34:47:50:2b:b0:f3:7f:48:86:fb:e2:56:67:d6:2c:
1b:67:e1:3b:f5:07:c6:e7:58:3b:58:12:84:48:a4:
e1:5d:98:56:5a:c8:48:4c:f1:3c:9c:d9:e4:32:7b:
e6:35:69:72:05:5d:67:ce:da:39:e8:bd:ce:eb:d7:
8b:bd:9d:46:f2:0f:c7:62:53:cc:df:e8:d6:15:49:
f3:4f:70:c6:75:ce:ba:e0:45:d1:68:d1:2f:43:ff:
c1:33:6a:88:b0:24:a6:d2:27:4f:b2:87:76:6a:a9:
67:2c:1a:fb:1a:0e:bb:59:f8:d8:69:21:94:52:14:
76:57:a3:94:c5:b1:31:18:bc:dd:41:b3:84:ea:33:
40:9f:7c:cf:8a:74:99:8d:3e:7f:42:49:dc:81:9c:
e5:aa:3d:cc:d5:59:63:72:fe:7d:ed:eb:00:54:f9:
a2:bb:b1:3a:29:e9:34:c6:e9:f6:62:95:62:e3:a7:
67:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:CC:1B:BD:3C:86:74:AB:2C:A1:F1:F6:B0:60:B6:5F:33:05:04:4D
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/rswbvTyGdKssofH2sGC2XzMFBE0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.37.45.0/24
IPv6:
2a00:1728:38::/48
Signature Algorithm: sha256WithRSAEncryption
99:7a:10:a3:69:7f:e3:b6:06:bd:bf:aa:e3:0d:5e:88:73:e0:
4d:42:9e:83:b2:93:ca:fd:63:54:27:83:d7:71:de:2d:a5:a0:
79:ae:3b:e2:92:15:7d:e2:d4:49:08:b6:f2:46:7f:3c:21:84:
2a:89:ee:c9:14:c3:55:38:1e:fb:7f:8d:97:ae:db:70:fe:cd:
8b:ae:8e:03:3c:f0:a6:43:51:e7:ad:a7:65:87:51:05:61:7b:
fe:fa:6e:07:16:bc:3a:ec:54:ae:5b:a7:5e:d8:19:17:03:46:
d5:50:fc:20:0f:43:c6:3e:77:ed:19:1f:1f:3e:d8:37:02:a4:
24:09:0a:1b:35:7b:b1:8e:5b:e2:7d:8f:f4:b7:53:1d:51:8d:
a5:55:1b:d5:af:f4:71:43:74:46:69:57:1d:bb:4c:39:5a:77:
cf:a9:1e:27:02:fc:be:97:e8:99:e2:ec:a4:cf:dc:10:f4:2f:
3b:80:9b:2a:57:5d:3d:c0:71:6c:df:d2:c2:c6:d7:15:9a:22:
45:17:2c:bd:b8:6c:57:e3:6a:d1:df:2b:bb:30:7c:8a:b6:f3:
2d:69:2e:85:55:46:21:de:70:d4:da:73:6d:65:7f:8b:57:13:
23:fc:09:ff:c8:ab:8c:db:b6:3b:4a:77:35:1f:64:18:bd:f4:
11:cb:8e:82
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYVtgguyWDfMsfrtm9sVOfUkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjMwMTAxMTMyNTE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZWNjMWJiZDNjODY3NGFiMmNhMWYxZjZiMDYwYjY1ZjMzMDUwNDRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpfzB5O/KY0cxSmF0+kyhTsJDuke
jC4a3GnrQhD//iP4YeUP5ByRXCwaGI5465nHrJ72QxUks6Z9k2k9H1KmDhAG88Mm
uTAQjpw0R1ArsPN/SIb74lZn1iwbZ+E79QfG51g7WBKESKThXZhWWshITPE8nNnk
MnvmNWlyBV1nzto56L3O69eLvZ1G8g/HYlPM3+jWFUnzT3DGdc664EXRaNEvQ//B
M2qIsCSm0idPsod2aqlnLBr7Gg67WfjYaSGUUhR2V6OUxbExGLzdQbOE6jNAn3zP
inSZjT5/QkncgZzlqj3M1Vljcv597esAVPmiu7E6Kek0xun2YpVi46dnbQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFK7MG708hnSrLKHx9rBgtl8zBQRNMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvcnN3YnZUeUdkS3Nzb2ZIMnNHQzJYek1GQkUwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwSUtMA8E
AgACMAkDBwAqABcoADgwDQYJKoZIhvcNAQELBQADggEBAJl6EKNpf+O2Br2/quMN
Xohz4E1CnoOyk8r9Y1Qng9dx3i2loHmuO+KSFX3i1EkItvJGfzwhhCqJ7skUw1U4
Hvt/jZeu23D+zYuujgM88KZDUeetp2WHUQVhe/76bgcWvDrsVK5bp17YGRcDRtVQ
/CAPQ8Y+d+0ZHx8+2DcCpCQJChs1e7GOW+J9j/S3Ux1RjaVVG9Wv9HFDdEZpVx27
TDlad8+pHicC/L6X6Jni7KTP3BD0LzuAmypXXT3AcWzf0sLG1xWaIkUXLL24bFfj
atHfK7swfIq28y1pLoVVRiHecNTac21lf4tXEyP8Cf/Iq4zbtjtKdzUfZBi99BHL
joI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:44 2024 by rpki-client on console-ams.rpki-client.org