Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/w1vsYIvXGBGahgQ9mtxoOZrzzHE.roa
File: w1vsYIvXGBGahgQ9mtxoOZrzzHE.roa (raw, json)
Hash identifier: zA8d/EGQLcLNm02F8t9PhobFfS9hHMP3j4UntEvZ6YE=
Subject key identifier: C3:5B:EC:60:8B:D7:18:11:9A:86:04:3D:9A:DC:68:39:9A:F3:CC:71
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01856D81E44EBEB0FCD09340E214362BA6E6
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/w1vsYIvXGBGahgQ9mtxoOZrzzHE.roa
Signing time: Sun 01 Jan 2023 13:25:07 +0000
ROA not before: Sun 01 Jan 2023 13:25:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39368
IP address blocks: 185.218.139.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 17 Jan 2023 12:49:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:81:e4:4e:be:b0:fc:d0:93:40:e2:14:36:2b:a6:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 1 13:25:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c35bec608bd718119a86043d9adc68399af3cc71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:15:ff:67:2a:56:07:05:86:e1:8e:ea:42:76:
35:2a:da:fc:8c:9a:80:56:6e:ea:3d:b9:0e:c3:19:
06:9c:41:27:4e:0d:9e:74:3a:9e:4c:98:7e:08:04:
4e:ba:6f:fc:86:07:f3:bc:48:e7:75:10:6f:ce:26:
b8:dc:1a:f1:5d:7e:21:ed:c1:22:a7:7a:0c:7e:a5:
15:d4:13:50:df:b7:18:fd:d5:c0:7c:85:f7:3b:e6:
4d:35:07:e8:f2:0c:35:b0:a8:c7:24:9e:53:a9:4c:
b9:84:57:02:b5:ce:64:4a:09:7c:17:2c:23:59:21:
c3:ad:1e:6c:3d:e3:d6:db:05:76:7a:52:b0:b9:86:
2a:b1:6e:cf:e6:a1:1c:d1:e1:5b:56:4b:d5:6a:37:
be:8d:88:99:dd:e3:bb:44:7a:bc:07:c2:9e:de:dd:
ea:9c:f6:f0:e2:01:c3:00:a7:b9:90:bc:84:44:0c:
af:d7:20:97:22:c1:2c:71:68:9d:c7:18:64:83:23:
23:33:79:b8:8a:c8:22:24:1f:6d:b3:b4:af:93:f4:
ba:a7:a8:10:1e:2a:37:a0:e5:5b:da:67:17:fa:4f:
a0:db:8d:42:bc:61:5e:6e:88:bd:7b:b0:ba:41:6d:
fd:7c:9e:e4:da:a4:6c:fa:8b:3b:a0:c8:67:d3:c3:
03:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:5B:EC:60:8B:D7:18:11:9A:86:04:3D:9A:DC:68:39:9A:F3:CC:71
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/w1vsYIvXGBGahgQ9mtxoOZrzzHE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.218.139.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:d5:5a:71:d3:9c:66:2c:08:5d:3d:1a:28:25:6e:15:ec:f0:
a9:55:31:50:d1:d8:90:0b:e6:88:20:88:ef:0c:ad:67:99:a0:
5d:2c:04:71:fd:ff:0e:8f:3d:af:0d:b6:09:72:18:8f:d2:23:
39:7d:ab:b3:0b:26:c3:35:cc:71:d9:72:25:2a:fa:4c:5b:59:
f5:7c:1c:9e:d5:15:1e:36:bf:d3:8e:4a:ee:e3:66:43:0d:5c:
e9:73:6f:f0:d2:17:ef:ec:77:31:da:4e:67:aa:9d:7d:e1:8c:
64:dc:12:5c:3b:4e:5e:0d:0d:d9:f6:5c:dd:8c:9e:1a:c0:ea:
e7:56:a3:06:5d:cf:43:ba:d5:8e:64:5c:d2:a8:41:a8:ec:51:
d3:90:58:22:fb:60:ed:50:c7:9b:5a:d4:e3:f8:70:4c:cb:41:
b7:44:b0:a0:91:c8:82:80:85:62:f4:6c:16:56:6a:5e:e6:01:
ed:3e:1a:6a:d0:e0:2c:b3:43:3f:f3:3f:28:6d:7e:8f:4e:b4:
6c:01:5c:2e:2c:4a:5f:ee:7b:32:e0:94:6a:1a:4d:f0:1a:6e:
72:53:c5:50:59:21:af:07:15:ee:69:d5:08:e0:2f:8e:26:94:
47:d0:cb:19:13:71:18:66:a5:5b:5f:2f:1f:12:57:e9:b7:eb:
0e:33:3e:5c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtgeROvrD80JNA4hQ2K6bmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjMwMTAxMTMyNTA3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMzViZWM2MDhiZDcxODExOWE4NjA0M2Q5YWRjNjgzOTlhZjNjYzcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjRX/ZypWBwWG4Y7qQnY1Ktr8jJqA
Vm7qPbkOwxkGnEEnTg2edDqeTJh+CAROum/8hgfzvEjndRBvzia43BrxXX4h7cEi
p3oMfqUV1BNQ37cY/dXAfIX3O+ZNNQfo8gw1sKjHJJ5TqUy5hFcCtc5kSgl8Fywj
WSHDrR5sPePW2wV2elKwuYYqsW7P5qEc0eFbVkvVaje+jYiZ3eO7RHq8B8Ke3t3q
nPbw4gHDAKe5kLyERAyv1yCXIsEscWidxxhkgyMjM3m4isgiJB9ts7Svk/S6p6gQ
Hio3oOVb2mcX+k+g241CvGFeboi9e7C6QW39fJ7k2qRs+os7oMhn08MDkQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMNb7GCL1xgRmoYEPZrcaDma88xxMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvdzF2c1lJdlhHQkdhaGdROW10eG9PWnJ6ekhFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudqLMA0G
CSqGSIb3DQEBCwUAA4IBAQCw1Vpx05xmLAhdPRooJW4V7PCpVTFQ0diQC+aIIIjv
DK1nmaBdLARx/f8Ojz2vDbYJchiP0iM5fauzCybDNcxx2XIlKvpMW1n1fBye1RUe
Nr/Tjkru42ZDDVzpc2/w0hfv7Hcx2k5nqp194Yxk3BJcO05eDQ3Z9lzdjJ4awOrn
VqMGXc9DutWOZFzSqEGo7FHTkFgi+2DtUMebWtTj+HBMy0G3RLCgkciCgIVi9GwW
Vmpe5gHtPhpq0OAss0M/8z8obX6PTrRsAVwuLEpf7nsy4JRqGk3wGm5yU8VQWSGv
BxXuadUI4C+OJpRH0MsZE3EYZqVbXy8fElfpt+sOMz5c
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:21 2024 by rpki-client on console-fra.rpki-client.org