Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/308179-be69-4c10-8694-fbd399a4475e/1/hBSvRSXK4Yc3piayATYbNjl4RGM.roa
File: hBSvRSXK4Yc3piayATYbNjl4RGM.roa (raw, json)
Hash identifier: qNuOjzIMesA7iJQ14PW4yhA4Krvm4LMMeH4y5xOwmso=
Subject key identifier: 84:14:AF:45:25:CA:E1:87:37:A6:26:B2:01:36:1B:36:39:78:44:63
Certificate issuer: /CN=34d519247402bcfbdf0ece9020ad64622e9d3bae
Certificate serial: 018572BA4355E9F173C87326179E20F5DF39
Authority key identifier: 34:D5:19:24:74:02:BC:FB:DF:0E:CE:90:20:AD:64:62:2E:9D:3B:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NNUZJHQCvPvfDs6QIK1kYi6dO64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/308179-be69-4c10-8694-fbd399a4475e/1/hBSvRSXK4Yc3piayATYbNjl4RGM.roa
Signing time: Mon 02 Jan 2023 13:44:47 +0000
ROA not before: Mon 02 Jan 2023 13:44:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204144
IP address blocks: 185.236.216.0/23 maxlen: 23
185.236.218.0/23 maxlen: 23
188.114.208.0/20 maxlen: 20
185.113.76.0/22 maxlen: 22
185.113.72.0/22 maxlen: 22
185.111.164.0/22 maxlen: 22
185.112.236.0/22 maxlen: 22
185.41.204.0/23 maxlen: 23
185.163.236.0/22 maxlen: 22
185.108.212.0/22 maxlen: 22
185.107.252.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:ba:43:55:e9:f1:73:c8:73:26:17:9e:20:f5:df:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34d519247402bcfbdf0ece9020ad64622e9d3bae
Validity
Not Before: Jan 2 13:44:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8414af4525cae18737a626b201361b3639784463
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:35:2c:73:94:30:86:2b:ca:c2:b5:33:50:af:
c6:7b:e2:db:7d:47:ca:a2:31:69:42:9a:00:d4:29:
74:3b:34:c9:81:18:dc:88:59:85:7f:75:21:23:89:
c1:de:fc:9d:a2:dc:19:57:71:7e:06:83:4c:1b:f7:
c6:5c:46:94:4c:d1:85:4d:cf:9e:54:36:84:db:09:
ec:80:90:ea:08:0e:4d:dd:e3:64:af:af:f9:6d:e3:
26:fb:3e:cd:d4:ad:da:09:69:ff:8f:bb:d9:92:62:
26:44:f0:ea:17:ce:1f:9e:39:b4:82:d4:11:00:15:
21:df:f0:8f:f1:ac:7b:db:d4:64:59:20:6b:c5:c8:
c1:e2:a3:8f:7e:58:14:2d:13:93:af:3a:f4:a7:db:
a7:e4:3e:eb:3b:14:3e:ad:dd:77:c7:16:22:27:86:
90:38:b4:e5:c3:df:b9:6b:04:99:7c:21:76:14:b4:
d2:1f:dd:c5:e4:b8:1f:5c:e1:31:5a:77:ea:d3:b9:
b6:0b:e0:bd:82:d0:9d:72:89:74:9d:e9:7d:fc:ae:
36:01:ea:62:0e:35:06:0b:7e:f2:c4:a2:9c:df:2c:
6a:5c:56:f8:67:4f:2c:35:a9:95:68:98:94:59:9d:
f9:5c:c9:9d:2a:72:e3:3c:72:51:6b:f9:58:c8:89:
72:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:14:AF:45:25:CA:E1:87:37:A6:26:B2:01:36:1B:36:39:78:44:63
X509v3 Authority Key Identifier:
keyid:34:D5:19:24:74:02:BC:FB:DF:0E:CE:90:20:AD:64:62:2E:9D:3B:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NNUZJHQCvPvfDs6QIK1kYi6dO64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/308179-be69-4c10-8694-fbd399a4475e/1/hBSvRSXK4Yc3piayATYbNjl4RGM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/308179-be69-4c10-8694-fbd399a4475e/1/NNUZJHQCvPvfDs6QIK1kYi6dO64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.41.204.0/23
185.107.252.0/22
185.108.212.0/22
185.111.164.0/22
185.112.236.0/22
185.113.72.0/21
185.163.236.0/22
185.236.216.0/22
188.114.208.0/20
Signature Algorithm: sha256WithRSAEncryption
12:66:e1:f3:2d:48:85:ed:6d:eb:81:ac:f4:01:4d:31:86:da:
dd:c2:3b:ab:b3:8e:e8:a1:e2:55:8a:c2:ec:b9:82:85:33:03:
1e:a6:5c:83:0d:2e:45:cc:20:b5:b9:06:f2:ef:f9:de:33:7f:
8c:7b:85:05:8b:41:1b:4a:c7:2a:ee:11:c3:1c:8a:ba:8f:82:
54:0d:54:29:9c:ef:76:25:d7:b8:a9:90:5f:2b:09:4c:5b:7a:
7b:29:6a:57:3b:f3:d1:28:68:c4:ec:8e:30:c9:11:d5:1c:e5:
64:a1:1e:27:bf:5e:1d:3b:6e:17:c6:eb:ea:ce:6f:ca:e9:01:
23:9a:76:df:37:42:ca:4c:11:bc:92:a9:bc:e7:a4:5e:8b:42:
cb:17:9a:9e:c9:07:35:10:7d:09:03:03:f3:7b:35:b2:1b:52:
f0:b5:69:c4:9a:b4:ec:f1:22:8d:e6:82:bb:66:f3:f2:ec:a0:
f9:de:79:df:05:2e:9d:eb:7a:eb:1d:80:42:c3:d6:75:74:f0:
8c:f6:10:29:1c:02:05:61:d9:f9:d3:33:22:b8:d6:ed:25:26:
45:94:c8:e0:18:64:40:dc:42:cf:c0:99:51:d2:b8:5c:e5:56:
4e:d3:ce:e3:25:37:50:bd:02:d6:f0:33:37:4c:14:f7:18:dc:
dc:cd:10:a1
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgISAYVyukNV6fFzyHMmF54g9d85MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0ZDUxOTI0NzQwMmJjZmJkZjBlY2U5MDIwYWQ2NDYyMmU5
ZDNiYWUwHhcNMjMwMTAyMTM0NDQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NDE0YWY0NTI1Y2FlMTg3MzdhNjI2YjIwMTM2MWIzNjM5Nzg0NDYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijUsc5QwhivKwrUzUK/Ge+LbfUfK
ojFpQpoA1Cl0OzTJgRjciFmFf3UhI4nB3vydotwZV3F+BoNMG/fGXEaUTNGFTc+e
VDaE2wnsgJDqCA5N3eNkr6/5beMm+z7N1K3aCWn/j7vZkmImRPDqF84fnjm0gtQR
ABUh3/CP8ax729RkWSBrxcjB4qOPflgULROTrzr0p9un5D7rOxQ+rd13xxYiJ4aQ
OLTlw9+5awSZfCF2FLTSH93F5LgfXOExWnfq07m2C+C9gtCdcol0nel9/K42Aepi
DjUGC37yxKKc3yxqXFb4Z08sNamVaJiUWZ35XMmdKnLjPHJRa/lYyIlyIwIDAQAB
o4ICOTCCAjUwHQYDVR0OBBYEFIQUr0UlyuGHN6YmsgE2GzY5eERjMB8GA1UdIwQY
MBaAFDTVGSR0Arz73w7OkCCtZGIunTuuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTk5VWkpIUUN2UHZmRHM2UUlLMWtZaTZkTzY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8zMDgxNzktYmU2OS00YzEwLTg2OTQt
ZmJkMzk5YTQ0NzVlLzEvaEJTdlJTWEs0WWMzcGlheUFUWWJOamw0UkdNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi8zMDgxNzktYmU2OS00YzEwLTg2OTQtZmJkMzk5YTQ0NzVl
LzEvTk5VWkpIUUN2UHZmRHM2UUlLMWtZaTZkTzY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQBuSnMAwQC
uWv8AwQCuWzUAwQCuW+kAwQCuXDsAwQDuXFIAwQCuaPsAwQCuezYAwQEvHLQMA0G
CSqGSIb3DQEBCwUAA4IBAQASZuHzLUiF7W3rgaz0AU0xhtrdwjurs47ooeJVisLs
uYKFMwMeplyDDS5FzCC1uQby7/neM3+Me4UFi0EbSscq7hHDHIq6j4JUDVQpnO92
Jde4qZBfKwlMW3p7KWpXO/PRKGjE7I4wyRHVHOVkoR4nv14dO24Xxuvqzm/K6QEj
mnbfN0LKTBG8kqm856Rei0LLF5qeyQc1EH0JAwPzezWyG1LwtWnEmrTs8SKN5oK7
ZvPy7KD53nnfBS6d63rrHYBCw9Z1dPCM9hApHAIFYdn50zMiuNbtJSZFlMjgGGRA
3ELPwJlR0rhc5VZO087jJTdQvQLW8DM3TBT3GNzczRCh
-----END CERTIFICATE-----
Generated at Mon Jan 1 04:40:04 2024 by rpki-client on console-ams.rpki-client.org