Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/47645f-3cd0-4b36-8c53-1850fff04425/1/SWUeQ8jVt7KsHa5QoboCcyNIvtk.roa
File: SWUeQ8jVt7KsHa5QoboCcyNIvtk.roa (raw, json)
Hash identifier: ZJsHvSLbC+/ERU5xJFED+5OQ6XvamiHE+FCp56/18n0=
Subject key identifier: 49:65:1E:43:C8:D5:B7:B2:AC:1D:AE:50:A1:BA:02:73:23:48:BE:D9
Certificate issuer: /CN=53585138107965c389f367b55abd792b531eb9ca
Certificate serial: 018BAF5D6DEFD3D40ECD55B105EDC8194484
Authority key identifier: 53:58:51:38:10:79:65:C3:89:F3:67:B5:5A:BD:79:2B:53:1E:B9:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1hROBB5ZcOJ82e1Wr15K1Meuco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/47645f-3cd0-4b36-8c53-1850fff04425/1/SWUeQ8jVt7KsHa5QoboCcyNIvtk.roa
Signing time: Wed 08 Nov 2023 14:36:57 +0000
ROA not before: Wed 08 Nov 2023 14:36:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12552
IP address blocks: 80.242.20.0/24 maxlen: 24
80.242.31.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:af:5d:6d:ef:d3:d4:0e:cd:55:b1:05:ed:c8:19:44:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53585138107965c389f367b55abd792b531eb9ca
Validity
Not Before: Nov 8 14:36:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=49651e43c8d5b7b2ac1dae50a1ba02732348bed9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2b:39:8e:9a:85:28:af:3d:b6:89:e2:47:41:
0c:45:6c:15:2a:a9:48:81:d3:52:6c:58:6d:58:4e:
a2:0c:d0:7f:da:4f:54:11:d3:e8:60:b7:38:ee:c1:
20:e5:54:ec:05:a9:ee:8b:a8:d1:aa:90:53:38:22:
17:35:e2:19:8b:9e:37:78:48:96:37:40:4d:bb:3a:
ea:4d:50:6b:ad:4e:39:b8:2e:e2:88:c7:63:c5:cf:
09:45:dc:fd:64:3a:08:ac:cd:7c:7c:59:a4:cb:4c:
55:26:f3:fc:92:a3:35:c6:fe:b1:e5:5d:3d:7d:2d:
0c:86:d7:91:52:99:d3:db:f2:4e:b5:e5:24:18:47:
a5:da:c0:b1:04:9f:ca:37:0f:3f:9f:1a:75:8a:33:
c4:c4:7c:c5:ba:2f:54:00:f4:8b:2f:5d:db:ba:20:
a7:55:1d:71:58:dd:0b:9b:77:e2:c2:be:83:95:b9:
9a:7b:33:e5:ed:8d:97:96:62:7f:2c:9c:74:79:09:
cc:2f:1d:18:b2:8e:9b:6c:a0:62:d3:9e:bf:bb:b8:
c4:f8:1f:8c:9e:16:6d:a2:20:f3:52:f3:1a:2a:3c:
94:03:1a:e9:31:eb:aa:fa:58:db:e8:76:af:ab:54:
4f:af:53:24:6a:54:1c:82:c1:ef:a1:4c:04:cf:48:
8e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:65:1E:43:C8:D5:B7:B2:AC:1D:AE:50:A1:BA:02:73:23:48:BE:D9
X509v3 Authority Key Identifier:
keyid:53:58:51:38:10:79:65:C3:89:F3:67:B5:5A:BD:79:2B:53:1E:B9:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1hROBB5ZcOJ82e1Wr15K1Meuco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/47645f-3cd0-4b36-8c53-1850fff04425/1/SWUeQ8jVt7KsHa5QoboCcyNIvtk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/47645f-3cd0-4b36-8c53-1850fff04425/1/U1hROBB5ZcOJ82e1Wr15K1Meuco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.242.20.0/24
80.242.31.0/24
Signature Algorithm: sha256WithRSAEncryption
76:3b:54:5b:84:c8:d7:ee:48:27:29:c9:95:40:a6:99:02:ff:
99:3e:a1:35:1e:25:b4:47:dd:30:be:e8:eb:93:1c:67:1f:db:
1d:bc:c8:4c:71:49:5e:cb:1c:c3:fe:43:5d:04:df:f3:8c:e6:
81:d1:6d:cd:b8:76:2b:e8:55:19:76:5f:51:44:80:8b:94:e1:
ff:1d:ca:9d:c5:f3:3b:0e:dc:39:aa:f8:25:28:68:25:6f:d2:
91:ba:2f:1f:a3:06:c1:ef:90:50:fb:bf:8f:d5:9a:02:03:b1:
bd:ff:56:8e:dd:ea:3d:4c:ef:1c:c0:a1:4b:6b:23:ee:07:9f:
2f:40:ce:6c:01:99:cf:94:90:09:f0:de:12:14:78:97:fc:ae:
eb:9e:18:b0:35:3e:74:10:14:73:4a:fa:18:d8:c2:30:ee:e7:
b9:72:dc:14:5b:1a:e1:ca:9e:9b:bc:1f:bc:ea:c8:85:10:6c:
8a:ae:b3:f1:54:14:3b:25:e2:62:ac:ea:72:fe:f9:48:e8:97:
c3:87:78:f5:fb:a1:8c:b8:0c:63:89:0e:15:f7:2f:3a:28:b9:
df:bf:21:c5:db:b5:75:98:72:91:47:a4:65:56:be:9d:d6:c7:
20:17:36:76:00:7c:e8:71:67:fc:f0:68:a6:64:ce:90:43:b8:
fa:7e:1e:19
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYuvXW3v09QOzVWxBe3IGUSEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzNTg1MTM4MTA3OTY1YzM4OWYzNjdiNTVhYmQ3OTJiNTMx
ZWI5Y2EwHhcNMjMxMTA4MTQzNjU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OTY1MWU0M2M4ZDViN2IyYWMxZGFlNTBhMWJhMDI3MzIzNDhiZWQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCs5jpqFKK89toniR0EMRWwVKqlI
gdNSbFhtWE6iDNB/2k9UEdPoYLc47sEg5VTsBanui6jRqpBTOCIXNeIZi543eEiW
N0BNuzrqTVBrrU45uC7iiMdjxc8JRdz9ZDoIrM18fFmky0xVJvP8kqM1xv6x5V09
fS0MhteRUpnT2/JOteUkGEel2sCxBJ/KNw8/nxp1ijPExHzFui9UAPSLL13buiCn
VR1xWN0Lm3fiwr6DlbmaezPl7Y2XlmJ/LJx0eQnMLx0Yso6bbKBi056/u7jE+B+M
nhZtoiDzUvMaKjyUAxrpMeuq+ljb6Havq1RPr1MkalQcgsHvoUwEz0iOpQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFEllHkPI1beyrB2uUKG6AnMjSL7ZMB8GA1UdIwQY
MBaAFFNYUTgQeWXDifNntVq9eStTHrnKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTFoUk9CQjVaY09KODJlMVdyMTVLMU1ldWNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy80NzY0NWYtM2NkMC00YjM2LThjNTMt
MTg1MGZmZjA0NDI1LzEvU1dVZVE4alZ0N0tzSGE1UW9ib0NjeU5JdnRrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy80NzY0NWYtM2NkMC00YjM2LThjNTMtMTg1MGZmZjA0NDI1
LzEvVTFoUk9CQjVaY09KODJlMVdyMTVLMU1ldWNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUPIUAwQA
UPIfMA0GCSqGSIb3DQEBCwUAA4IBAQB2O1RbhMjX7kgnKcmVQKaZAv+ZPqE1HiW0
R90wvujrkxxnH9sdvMhMcUleyxzD/kNdBN/zjOaB0W3NuHYr6FUZdl9RRICLlOH/
HcqdxfM7Dtw5qvglKGglb9KRui8fowbB75BQ+7+P1ZoCA7G9/1aO3eo9TO8cwKFL
ayPuB58vQM5sAZnPlJAJ8N4SFHiX/K7rnhiwNT50EBRzSvoY2MIw7ue5ctwUWxrh
yp6bvB+86siFEGyKrrPxVBQ7JeJirOpy/vlI6JfDh3j1+6GMuAxjiQ4V9y86KLnf
vyHF27V1mHKRR6RlVr6d1scgFzZ2AHzocWf88GimZM6QQ7j6fh4Z
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:56:58 2024 by rpki-client on console-ams.rpki-client.org