Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/71dee2-e1c1-40ce-b311-3f33866192d0/1/VUKAoIW422eWwfFDGWexYBuAfng.roa
File: VUKAoIW422eWwfFDGWexYBuAfng.roa (raw, json)
Hash identifier: KOyfGFuoEsRlPERQlZfiGG/mLH95Lu60GixBZy5KpEQ=
Subject key identifier: 55:42:80:A0:85:B8:DB:67:96:C1:F1:43:19:67:B1:60:1B:80:7E:78
Certificate issuer: /CN=12ee6257d0c3a2b930561af2522d9e5af7f9cbc7
Certificate serial: 01856F824E8464B4ED404F4A8F70856B9AC0
Authority key identifier: 12:EE:62:57:D0:C3:A2:B9:30:56:1A:F2:52:2D:9E:5A:F7:F9:CB:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eu5iV9DDorkwVhryUi2eWvf5y8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/71dee2-e1c1-40ce-b311-3f33866192d0/1/VUKAoIW422eWwfFDGWexYBuAfng.roa
Signing time: Sun 01 Jan 2023 22:44:48 +0000
ROA not before: Sun 01 Jan 2023 22:44:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204135
IP address blocks: 185.235.37.0/24 maxlen: 24
185.235.36.0/22 maxlen: 22
185.235.36.0/24 maxlen: 24
185.235.38.0/24 maxlen: 24
2a0e:1700::/32 maxlen: 32
2a0e:1701::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:82:4e:84:64:b4:ed:40:4f:4a:8f:70:85:6b:9a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12ee6257d0c3a2b930561af2522d9e5af7f9cbc7
Validity
Not Before: Jan 1 22:44:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=554280a085b8db6796c1f1431967b1601b807e78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f3:30:9a:1d:00:f4:1b:5e:9a:2c:fc:d9:a3:
d5:b2:8f:81:7a:61:cc:c6:15:83:46:54:b4:52:0d:
5f:ed:7d:1e:cd:86:9c:6f:93:42:6f:30:8b:c5:f2:
4c:60:cf:b4:40:b0:cc:4e:2e:21:18:86:1c:01:68:
f2:6e:25:7a:a6:28:2d:c6:fd:48:05:a5:bc:be:e4:
8f:65:a4:3d:70:fd:86:06:43:2b:4d:85:fc:46:79:
5d:98:08:7a:1d:ff:e7:f4:57:5b:5d:c2:0d:26:68:
b8:47:26:bb:82:cf:8f:3d:0f:6a:78:4e:14:5a:d1:
88:5c:b1:22:29:6c:fb:ad:3b:ba:9b:a0:ef:8d:59:
65:84:0c:78:d6:62:90:da:c4:07:2e:3e:cf:55:8f:
34:90:83:ea:d2:3a:20:71:3c:b8:16:68:17:66:5d:
ad:31:90:65:56:c1:f8:90:25:57:94:68:54:ec:59:
d3:cd:58:7c:ba:dd:21:af:30:8d:ef:15:a7:0a:73:
56:b6:3e:68:92:58:fc:75:d7:5a:d7:59:17:b5:e2:
ba:fe:67:be:eb:63:2a:9f:ba:dd:83:1b:0a:b2:08:
53:ae:78:5b:15:02:86:f2:c3:75:13:57:2f:79:2a:
3e:d1:16:fe:42:68:5e:9b:43:b0:72:37:b8:59:80:
0a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:42:80:A0:85:B8:DB:67:96:C1:F1:43:19:67:B1:60:1B:80:7E:78
X509v3 Authority Key Identifier:
keyid:12:EE:62:57:D0:C3:A2:B9:30:56:1A:F2:52:2D:9E:5A:F7:F9:CB:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eu5iV9DDorkwVhryUi2eWvf5y8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/71dee2-e1c1-40ce-b311-3f33866192d0/1/VUKAoIW422eWwfFDGWexYBuAfng.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/71dee2-e1c1-40ce-b311-3f33866192d0/1/Eu5iV9DDorkwVhryUi2eWvf5y8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.235.36.0/22
IPv6:
2a0e:1700::/31
Signature Algorithm: sha256WithRSAEncryption
a4:39:93:1c:8e:0a:1c:9c:30:40:bf:e0:b7:d5:ba:48:b2:4d:
74:cd:06:12:9f:be:b0:11:50:a8:f4:5a:73:2a:6b:ba:9e:b8:
12:e1:d3:87:a2:b0:fa:a7:bd:7b:f3:fb:17:8d:b6:05:38:cc:
8c:df:e1:ac:39:a4:99:ea:4f:d1:40:65:56:01:99:b5:96:27:
15:7e:aa:38:0d:04:c6:a0:d4:65:9e:da:f6:f0:26:a7:fc:3b:
70:e9:63:70:29:4e:59:a0:42:f4:8c:b7:be:c5:ed:a2:90:c9:
32:1c:25:4f:3f:87:58:91:9f:71:4d:11:27:01:36:dd:a2:cf:
b8:a5:8c:1d:99:e3:86:b2:87:d4:39:99:99:2d:3e:93:95:59:
8d:83:8c:39:82:a4:54:db:b4:32:1d:69:82:a8:e6:00:ac:ea:
66:e2:de:c8:60:7b:23:b9:d4:71:49:70:ce:32:fa:f7:ec:32:
13:2b:f9:11:a4:fc:8a:02:f5:08:29:4b:f3:a1:de:ed:4d:2d:
a8:c3:52:5a:02:5f:47:1a:58:1f:01:1b:56:41:52:8d:9c:10:
f7:ed:b3:0f:be:bd:44:95:66:29:47:6e:d5:48:1d:9e:b0:2f:
c3:08:05:5e:09:1a:fb:14:e5:81:db:51:7b:62:4e:7f:88:c0:
42:60:72:79
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVvgk6EZLTtQE9Kj3CFa5rAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyZWU2MjU3ZDBjM2EyYjkzMDU2MWFmMjUyMmQ5ZTVhZjdm
OWNiYzcwHhcNMjMwMTAxMjI0NDQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NTQyODBhMDg1YjhkYjY3OTZjMWYxNDMxOTY3YjE2MDFiODA3ZTc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfMwmh0A9Btemiz82aPVso+BemHM
xhWDRlS0Ug1f7X0ezYacb5NCbzCLxfJMYM+0QLDMTi4hGIYcAWjybiV6pigtxv1I
BaW8vuSPZaQ9cP2GBkMrTYX8RnldmAh6Hf/n9FdbXcINJmi4Rya7gs+PPQ9qeE4U
WtGIXLEiKWz7rTu6m6DvjVllhAx41mKQ2sQHLj7PVY80kIPq0jogcTy4FmgXZl2t
MZBlVsH4kCVXlGhU7FnTzVh8ut0hrzCN7xWnCnNWtj5oklj8ddda11kXteK6/me+
62Mqn7rdgxsKsghTrnhbFQKG8sN1E1cveSo+0Rb+Qmhem0Owcje4WYAKZQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFFVCgKCFuNtnlsHxQxlnsWAbgH54MB8GA1UdIwQY
MBaAFBLuYlfQw6K5MFYa8lItnlr3+cvHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXU1aVY5RERvcmt3VmhyeVVpMmVXdmY1eThjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS83MWRlZTItZTFjMS00MGNlLWIzMTEt
M2YzMzg2NjE5MmQwLzEvVlVLQW9JVzQyMmVXd2ZGREdXZXhZQnVBZm5nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS83MWRlZTItZTFjMS00MGNlLWIzMTEtM2YzMzg2NjE5MmQw
LzEvRXU1aVY5RERvcmt3VmhyeVVpMmVXdmY1eThjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCueskMA0E
AgACMAcDBQEqDhcAMA0GCSqGSIb3DQEBCwUAA4IBAQCkOZMcjgocnDBAv+C31bpI
sk10zQYSn76wEVCo9FpzKmu6nrgS4dOHorD6p7178/sXjbYFOMyM3+GsOaSZ6k/R
QGVWAZm1licVfqo4DQTGoNRlntr28Can/Dtw6WNwKU5ZoEL0jLe+xe2ikMkyHCVP
P4dYkZ9xTREnATbdos+4pYwdmeOGsofUOZmZLT6TlVmNg4w5gqRU27QyHWmCqOYA
rOpm4t7IYHsjudRxSXDOMvr37DITK/kRpPyKAvUIKUvzod7tTS2ow1JaAl9HGlgf
ARtWQVKNnBD37bMPvr1ElWYpR27VSB2esC/DCAVeCRr7FOWB21F7Yk5/iMBCYHJ5
-----END CERTIFICATE-----
Generated at Mon Jan 1 23:37:17 2024 by rpki-client on console-fra.rpki-client.org