Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/PxVS2SpVKEZWiWvRezHY20Q72VA.roa
File: PxVS2SpVKEZWiWvRezHY20Q72VA.roa (raw, json)
Hash identifier: HnR6h/eoJoJFTvQ1Mph4nBoIh/DwN+aDz77x5155cN8=
Subject key identifier: 3F:15:52:D9:2A:55:28:46:56:89:6B:D1:7B:31:D8:DB:44:3B:D9:50
Certificate issuer: /CN=297364f502534e8771a0c6259794c26e26d4bca4
Certificate serial: 01856D2F272341FCBC9CB1017DA917BD02D4
Authority key identifier: 29:73:64:F5:02:53:4E:87:71:A0:C6:25:97:94:C2:6E:26:D4:BC:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXNk9QJTTodxoMYll5TCbibUvKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/PxVS2SpVKEZWiWvRezHY20Q72VA.roa
Signing time: Sun 01 Jan 2023 11:54:44 +0000
ROA not before: Sun 01 Jan 2023 11:54:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198247
IP address blocks: 141.105.160.0/23 maxlen: 23
185.26.24.0/24 maxlen: 24
185.203.228.0/24 maxlen: 24
185.203.230.0/23 maxlen: 23
185.203.229.0/24 maxlen: 24
2a02:f407:4::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:2f:27:23:41:fc:bc:9c:b1:01:7d:a9:17:bd:02:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297364f502534e8771a0c6259794c26e26d4bca4
Validity
Not Before: Jan 1 11:54:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3f1552d92a55284656896bd17b31d8db443bd950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:98:fa:98:ad:98:99:d2:06:43:90:fb:ab:8f:
d7:e7:6b:9b:e9:f7:c0:9c:f4:1c:0f:64:08:0f:ca:
96:38:98:9c:4b:f4:16:69:dd:4d:a4:d1:1d:8d:5b:
79:70:a3:71:1d:5a:d9:4a:62:ae:bb:18:95:0d:49:
c4:15:9f:37:7e:bf:13:63:5d:04:6a:56:15:71:52:
db:25:af:20:cf:2b:24:e0:67:23:f5:1c:35:aa:b6:
fa:e7:72:cf:37:cd:0b:57:0e:1a:ea:8c:d4:ed:2d:
57:f2:7a:b1:48:be:e3:9d:5a:d1:2c:cb:0a:a8:93:
c8:55:0e:07:1f:55:d3:73:c2:52:fa:60:b2:db:12:
ab:6e:fd:d9:3b:d0:18:25:ea:91:ac:f6:e3:42:b5:
fc:fd:2b:28:cf:38:27:9f:9b:ab:d8:ad:13:c4:77:
9c:e9:f7:db:38:97:e4:da:56:b3:c1:46:ad:c8:95:
e8:cf:c2:ad:94:c1:12:c2:dc:6f:36:92:71:21:bb:
00:af:77:4f:77:22:9a:69:f0:1e:c3:9f:46:66:56:
9b:16:48:ee:86:e1:6e:ab:07:2c:88:77:e4:d9:24:
b2:b6:39:cd:c7:73:37:04:8d:06:ae:36:3d:64:2d:
bd:f8:b0:8a:3c:d7:d2:d7:ee:74:2b:9a:48:46:b8:
d3:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:15:52:D9:2A:55:28:46:56:89:6B:D1:7B:31:D8:DB:44:3B:D9:50
X509v3 Authority Key Identifier:
keyid:29:73:64:F5:02:53:4E:87:71:A0:C6:25:97:94:C2:6E:26:D4:BC:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXNk9QJTTodxoMYll5TCbibUvKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/PxVS2SpVKEZWiWvRezHY20Q72VA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.105.160.0/23
185.26.24.0/24
185.203.228.0/22
IPv6:
2a02:f407:4::/48
Signature Algorithm: sha256WithRSAEncryption
95:63:29:7b:18:ce:fa:f9:ed:78:93:3e:7d:3a:b9:47:d7:a3:
5f:1a:aa:ab:7b:fd:b9:4c:b7:5b:89:79:c9:02:0e:65:9d:8b:
8f:fb:7f:10:79:00:50:04:79:ee:75:15:64:31:ad:b6:a2:1b:
89:34:3b:6c:09:82:30:a3:31:1c:1d:f4:d5:4b:ba:4b:48:59:
24:74:de:d6:50:f1:0c:c9:4a:e4:99:af:6a:44:47:5e:8b:05:
2d:51:c4:69:ac:39:39:e4:29:a2:e9:2a:03:86:96:25:0f:0a:
f6:92:f2:f5:36:87:ed:23:c2:d8:b4:d5:46:a4:4d:9a:c3:3b:
ce:cc:85:7c:3f:f6:b3:0d:5f:63:96:76:54:a6:79:79:19:dd:
c7:52:1f:2e:fa:1b:3f:bb:df:65:79:c9:f7:00:8b:9b:59:e6:
17:61:d0:19:a6:79:2f:71:7e:4c:8b:37:cd:8a:cd:3e:cd:37:
3e:1f:0a:e4:2b:0f:92:fc:de:55:5e:0a:3d:da:05:ab:f6:42:
ff:97:15:6f:2b:45:e0:b0:52:f7:94:14:f9:9e:8e:96:57:cd:
fc:ae:11:14:91:ce:10:26:a7:b3:0b:e2:a3:6f:5c:75:52:df:
8b:66:50:a9:0c:e2:ac:86:a0:fc:8a:01:67:42:b8:65:0f:e0:
6e:ed:73:09
-----BEGIN CERTIFICATE-----
MIIFGjCCBAKgAwIBAgISAYVtLycjQfy8nLEBfakXvQLUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5NzM2NGY1MDI1MzRlODc3MWEwYzYyNTk3OTRjMjZlMjZk
NGJjYTQwHhcNMjMwMTAxMTE1NDQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZjE1NTJkOTJhNTUyODQ2NTY4OTZiZDE3YjMxZDhkYjQ0M2JkOTUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5j6mK2YmdIGQ5D7q4/X52ub6ffA
nPQcD2QID8qWOJicS/QWad1NpNEdjVt5cKNxHVrZSmKuuxiVDUnEFZ83fr8TY10E
alYVcVLbJa8gzysk4Gcj9Rw1qrb653LPN80LVw4a6ozU7S1X8nqxSL7jnVrRLMsK
qJPIVQ4HH1XTc8JS+mCy2xKrbv3ZO9AYJeqRrPbjQrX8/Ssozzgnn5ur2K0TxHec
6ffbOJfk2lazwUatyJXoz8KtlMESwtxvNpJxIbsAr3dPdyKaafAew59GZlabFkju
huFuqwcsiHfk2SSytjnNx3M3BI0GrjY9ZC29+LCKPNfS1+50K5pIRrjTvQIDAQAB
o4ICJjCCAiIwHQYDVR0OBBYEFD8VUtkqVShGVolr0Xsx2NtEO9lQMB8GA1UdIwQY
MBaAFClzZPUCU06HcaDGJZeUwm4m1LykMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1hOazlRSlRUb2R4b01ZbGw1VENiaWJVdktRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8wNDU4MjAtMzU0Ni00MDdjLTgzYTUt
MGEwZjNlNzhhNDkzLzEvUHhWUzJTcFZLRVpXaVd2UmV6SFkyMFE3MlZBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi8wNDU4MjAtMzU0Ni00MDdjLTgzYTUtMGEwZjNlNzhhNDkz
LzEvS1hOazlRSlRUb2R4b01ZbGw1VENiaWJVdktRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAYBAIAATASAwQBjWmgAwQA
uRoYAwQCucvkMA8EAgACMAkDBwAqAvQHAAQwDQYJKoZIhvcNAQELBQADggEBAJVj
KXsYzvr57XiTPn06uUfXo18aqqt7/blMt1uJeckCDmWdi4/7fxB5AFAEee51FWQx
rbaiG4k0O2wJgjCjMRwd9NVLuktIWSR03tZQ8QzJSuSZr2pER16LBS1RxGmsOTnk
KaLpKgOGliUPCvaS8vU2h+0jwti01UakTZrDO87MhXw/9rMNX2OWdlSmeXkZ3cdS
Hy76Gz+732V5yfcAi5tZ5hdh0BmmeS9xfkyLN82KzT7NNz4fCuQrD5L83lVeCj3a
Bav2Qv+XFW8rReCwUveUFPmejpZXzfyuERSRzhAmp7ML4qNvXHVS34tmUKkM4qyG
oPyKAWdCuGUP4G7tcwk=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:44 2024 by rpki-client on console-fra.rpki-client.org