Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/SNGkG4fgEocraMlVtXTjDnFq7ls.roa
File: SNGkG4fgEocraMlVtXTjDnFq7ls.roa (raw, json)
Hash identifier: 1TPZnOdy/lEOargsX+y5MUHgXjRdhYegwT4OD/p/jUg=
Subject key identifier: 48:D1:A4:1B:87:E0:12:87:2B:68:C9:55:B5:74:E3:0E:71:6A:EE:5B
Certificate issuer: /CN=3d3f87bb7f7874aa7e15cfec9bbf6aae3c9ce33a
Certificate serial: 0187D6D5FED5131D12A420DC45A0055CC7D2
Authority key identifier: 3D:3F:87:BB:7F:78:74:AA:7E:15:CF:EC:9B:BF:6A:AE:3C:9C:E3:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PT-Hu394dKp-Fc_sm79qrjyc4zo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/SNGkG4fgEocraMlVtXTjDnFq7ls.roa
Signing time: Mon 01 May 2023 10:22:41 +0000
ROA not before: Mon 01 May 2023 10:22:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57588
IP address blocks: 194.39.228.0/24 maxlen: 24
194.39.229.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:29:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:d6:d5:fe:d5:13:1d:12:a4:20:dc:45:a0:05:5c:c7:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d3f87bb7f7874aa7e15cfec9bbf6aae3c9ce33a
Validity
Not Before: May 1 10:22:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=48d1a41b87e012872b68c955b574e30e716aee5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:1a:7f:3c:75:4a:de:15:5a:37:7a:7e:a2:f2:
61:34:92:a3:c7:46:a6:15:0f:f2:5f:23:5f:33:f6:
98:67:81:c7:df:8a:7e:1c:01:d1:05:06:e6:42:fd:
fb:6f:ff:1e:3a:0c:02:d5:28:01:f5:d2:de:09:f5:
fb:39:e2:1b:bc:fe:e3:eb:92:eb:42:68:d0:34:a4:
bc:78:38:29:a1:bc:e8:8a:ac:9d:7c:0f:ba:a5:b5:
e1:68:87:c5:28:7d:ee:6e:d3:ad:dd:a7:f2:4b:08:
dc:71:4f:53:29:bc:4e:38:eb:e8:de:fb:58:23:e7:
e4:2d:f9:a0:d5:3b:88:d0:d1:09:e4:39:f4:18:1a:
5c:d6:16:e6:d7:37:d7:ba:f9:ed:5b:f7:24:d7:2a:
21:fc:0d:c9:6f:60:95:89:ed:ff:8e:97:b0:91:15:
37:ae:dd:10:28:96:00:a7:fa:81:3e:5a:a2:79:40:
1f:ee:3d:42:fb:04:ed:8b:8b:ea:d2:89:21:a5:c0:
34:78:76:52:fa:52:99:91:b2:29:dc:b9:8f:5c:2c:
7c:87:1a:33:4f:1d:3f:d4:17:5f:bc:aa:a4:3e:f1:
15:73:ac:83:af:8d:a6:08:35:c3:f4:89:6d:81:62:
5e:65:77:3e:fd:a0:7e:1f:73:87:0d:51:7b:03:d9:
e0:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:D1:A4:1B:87:E0:12:87:2B:68:C9:55:B5:74:E3:0E:71:6A:EE:5B
X509v3 Authority Key Identifier:
keyid:3D:3F:87:BB:7F:78:74:AA:7E:15:CF:EC:9B:BF:6A:AE:3C:9C:E3:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PT-Hu394dKp-Fc_sm79qrjyc4zo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/SNGkG4fgEocraMlVtXTjDnFq7ls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.39.228.0/23
Signature Algorithm: sha256WithRSAEncryption
07:2f:9a:81:c8:b3:96:96:32:4b:bb:5f:06:b6:d2:d7:47:61:
05:64:d9:2f:2c:7c:c5:de:5d:66:ac:2a:c8:80:b9:1b:c1:66:
e1:34:c4:f2:09:98:a8:5a:f7:c1:9f:3c:40:33:2b:6a:3d:cd:
f1:92:66:90:57:2e:15:b7:93:cd:39:83:b1:09:a6:c7:93:df:
89:c1:34:28:72:30:22:56:2e:31:af:1b:6d:67:e6:84:5c:bc:
58:55:c3:b5:f0:a6:bd:33:dc:21:2a:49:62:0b:ec:21:5a:2c:
ea:92:6b:90:e5:a9:57:1d:75:7d:be:07:14:ee:3b:f6:42:40:
c9:12:23:9b:18:df:61:c0:0f:ba:08:a3:f9:a5:2e:6b:3e:f9:
b0:c3:df:05:40:51:b5:32:5f:85:05:fb:4b:89:9e:4d:6a:81:
2e:20:7c:31:48:c8:ae:a4:ab:9c:00:a5:20:28:ef:04:88:b2:
4e:fc:9a:53:50:63:05:9d:59:8f:53:c5:cd:3c:ba:79:84:a5:
85:ee:37:a5:87:ba:7e:dc:c9:21:7c:f3:39:e6:c3:35:db:cc:
02:9c:b7:54:f4:f2:aa:f5:f3:e0:5d:f2:4e:23:8e:f9:e0:02:
fa:32:d9:8a:de:f9:65:ff:55:67:22:8e:20:14:48:0b:df:08:
41:5a:d1:32
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYfW1f7VEx0SpCDcRaAFXMfSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkM2Y4N2JiN2Y3ODc0YWE3ZTE1Y2ZlYzliYmY2YWFlM2M5
Y2UzM2EwHhcNMjMwNTAxMTAyMjQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OGQxYTQxYjg3ZTAxMjg3MmI2OGM5NTViNTc0ZTMwZTcxNmFlZTViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBp/PHVK3hVaN3p+ovJhNJKjx0am
FQ/yXyNfM/aYZ4HH34p+HAHRBQbmQv37b/8eOgwC1SgB9dLeCfX7OeIbvP7j65Lr
QmjQNKS8eDgpobzoiqydfA+6pbXhaIfFKH3ubtOt3afySwjccU9TKbxOOOvo3vtY
I+fkLfmg1TuI0NEJ5Dn0GBpc1hbm1zfXuvntW/ck1yoh/A3Jb2CVie3/jpewkRU3
rt0QKJYAp/qBPlqieUAf7j1C+wTti4vq0okhpcA0eHZS+lKZkbIp3LmPXCx8hxoz
Tx0/1BdfvKqkPvEVc6yDr42mCDXD9IltgWJeZXc+/aB+H3OHDVF7A9ngVQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEjRpBuH4BKHK2jJVbV04w5xau5bMB8GA1UdIwQY
MBaAFD0/h7t/eHSqfhXP7Ju/aq48nOM6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFQtSHUzOTRkS3AtRmNfc203OXFyanljNHpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC83MTAxNWEtMTFiZS00NzFlLTk1OTIt
NjJiZTUzNDI1Njc2LzEvU05Ha0c0ZmdFb2NyYU1sVnRYVGpEbkZxN2xzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC83MTAxNWEtMTFiZS00NzFlLTk1OTItNjJiZTUzNDI1Njc2
LzEvUFQtSHUzOTRkS3AtRmNfc203OXFyanljNHpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwifkMA0G
CSqGSIb3DQEBCwUAA4IBAQAHL5qByLOWljJLu18GttLXR2EFZNkvLHzF3l1mrCrI
gLkbwWbhNMTyCZioWvfBnzxAMytqPc3xkmaQVy4Vt5PNOYOxCabHk9+JwTQocjAi
Vi4xrxttZ+aEXLxYVcO18Ka9M9whKkliC+whWizqkmuQ5alXHXV9vgcU7jv2QkDJ
EiObGN9hwA+6CKP5pS5rPvmww98FQFG1Ml+FBftLiZ5NaoEuIHwxSMiupKucAKUg
KO8EiLJO/JpTUGMFnVmPU8XNPLp5hKWF7jelh7p+3MkhfPM55sM128wCnLdU9PKq
9fPgXfJOI4754AL6MtmK3vll/1VnIo4gFEgL3whBWtEy
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:13 2024 by rpki-client on console-ams.rpki-client.org