Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/323ec7-582d-4c12-b723-297c4b33d541/1/A1gXfF-gNdoMGR4Et5m4VEtvtW0.roa
File: A1gXfF-gNdoMGR4Et5m4VEtvtW0.roa (raw, json)
Hash identifier: ydOB31mvXBiFdNEvYAWMqDZvn21LyYGYnwpX04J7mQ0=
Subject key identifier: 03:58:17:7C:5F:A0:35:DA:0C:19:1E:04:B7:99:B8:54:4B:6F:B5:6D
Certificate issuer: /CN=d305f8c033cc4c096c3953585c2689c9a75d3f18
Certificate serial: 01856BEEECE76C1DE19D260707F12CDCC06E
Authority key identifier: D3:05:F8:C0:33:CC:4C:09:6C:39:53:58:5C:26:89:C9:A7:5D:3F:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0wX4wDPMTAlsOVNYXCaJyaddPxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/323ec7-582d-4c12-b723-297c4b33d541/1/A1gXfF-gNdoMGR4Et5m4VEtvtW0.roa
Signing time: Sun 01 Jan 2023 06:04:58 +0000
ROA not before: Sun 01 Jan 2023 06:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 28773
IP address blocks: 195.78.38.0/23 maxlen: 23
188.190.160.0/19 maxlen: 19
2001:67c:2ee4::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:ee:ec:e7:6c:1d:e1:9d:26:07:07:f1:2c:dc:c0:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d305f8c033cc4c096c3953585c2689c9a75d3f18
Validity
Not Before: Jan 1 06:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0358177c5fa035da0c191e04b799b8544b6fb56d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:82:b5:f0:9d:4d:8c:1e:70:70:79:d9:be:1e:
9d:c9:3e:4b:79:ef:6c:68:ab:44:f7:55:0d:7e:bf:
1c:cc:64:f7:47:b2:07:99:4d:89:38:dc:da:fe:5c:
40:bd:72:5a:4f:40:04:b6:eb:40:34:5a:c3:85:20:
3c:8c:de:ba:e9:7c:72:0f:84:b1:9c:00:59:1d:2c:
85:fa:a7:93:60:02:96:f7:df:36:7a:04:77:13:bd:
8d:15:a7:ed:f3:ce:9b:7a:2c:d0:3a:8d:c3:dc:cd:
33:d3:0e:73:12:a4:f0:32:28:7a:77:52:8d:dc:1d:
6b:e4:2d:ab:40:bc:bb:f7:ce:28:33:e4:82:cd:60:
f6:23:b9:85:ed:d0:34:fa:92:24:92:56:f3:af:3e:
62:40:30:20:1f:97:7b:8a:a0:f6:42:05:17:4f:6a:
97:fb:1f:1e:d3:16:12:78:02:55:2d:81:80:8b:f3:
65:9a:ff:7b:4f:23:37:ff:73:a2:bc:e4:c2:0b:9a:
41:2f:6e:9c:79:c9:1f:e3:5d:d6:d9:de:a3:38:6f:
d9:8f:ed:35:ae:76:b6:54:73:ff:cc:a6:ca:bd:dc:
f0:f9:f3:49:01:8e:4f:9d:33:db:b6:8d:a7:47:f3:
7e:a0:11:c1:e6:2c:2d:d8:d6:a1:e5:e3:c2:c0:8a:
50:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:58:17:7C:5F:A0:35:DA:0C:19:1E:04:B7:99:B8:54:4B:6F:B5:6D
X509v3 Authority Key Identifier:
keyid:D3:05:F8:C0:33:CC:4C:09:6C:39:53:58:5C:26:89:C9:A7:5D:3F:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0wX4wDPMTAlsOVNYXCaJyaddPxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/323ec7-582d-4c12-b723-297c4b33d541/1/A1gXfF-gNdoMGR4Et5m4VEtvtW0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/323ec7-582d-4c12-b723-297c4b33d541/1/0wX4wDPMTAlsOVNYXCaJyaddPxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.190.160.0/19
195.78.38.0/23
IPv6:
2001:67c:2ee4::/48
Signature Algorithm: sha256WithRSAEncryption
35:25:32:7a:5d:ab:29:f4:21:83:0c:49:9e:e1:99:7d:d2:59:
de:67:28:02:dc:41:3d:d9:49:5c:64:68:5f:53:e8:1a:a7:98:
ae:92:bd:25:c4:c2:67:d6:53:52:40:47:07:70:bf:78:2b:fb:
23:35:8a:42:7b:36:39:a0:ec:d3:cf:4f:5b:b2:f0:97:94:ed:
6e:f1:ce:44:aa:45:3e:7c:16:d2:d7:3a:65:bc:aa:5f:4f:1b:
2e:18:44:30:b8:36:49:4c:5a:c8:4b:4c:4c:41:db:9d:54:a2:
86:7a:8c:1a:93:84:44:27:55:42:9a:bc:93:72:f0:b1:a8:d7:
3c:17:84:e0:a9:0e:c5:be:65:bf:ce:31:e1:e5:77:5f:3c:dc:
66:e6:1d:07:6a:40:04:7b:ed:9a:07:ee:f5:78:2d:c6:3f:65:
58:bc:0f:a3:38:90:e2:60:3d:f3:1f:72:f7:12:08:73:0d:fa:
a2:8f:f4:ff:2f:99:77:46:75:a4:16:d8:13:82:e0:e4:84:68:
ad:26:73:b9:d4:49:19:6f:c3:e0:40:e7:6b:94:2e:51:a2:14:
03:25:45:c0:e5:be:0d:ea:28:52:a3:29:d1:b4:8b:62:40:ae:
7a:24:86:38:f2:db:d3:12:1f:01:70:a6:4f:a9:3a:e3:fb:23:
d0:19:c6:94
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAYVr7uznbB3hnSYHB/Es3MBuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzMDVmOGMwMzNjYzRjMDk2YzM5NTM1ODVjMjY4OWM5YTc1
ZDNmMTgwHhcNMjMwMTAxMDYwNDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMzU4MTc3YzVmYTAzNWRhMGMxOTFlMDRiNzk5Yjg1NDRiNmZiNTZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4K18J1NjB5wcHnZvh6dyT5Lee9s
aKtE91UNfr8czGT3R7IHmU2JONza/lxAvXJaT0AEtutANFrDhSA8jN666XxyD4Sx
nABZHSyF+qeTYAKW9982egR3E72NFaft886beizQOo3D3M0z0w5zEqTwMih6d1KN
3B1r5C2rQLy7984oM+SCzWD2I7mF7dA0+pIkklbzrz5iQDAgH5d7iqD2QgUXT2qX
+x8e0xYSeAJVLYGAi/Nlmv97TyM3/3OivOTCC5pBL26ceckf413W2d6jOG/Zj+01
rna2VHP/zKbKvdzw+fNJAY5PnTPbto2nR/N+oBHB5iwt2Nah5ePCwIpQXQIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFANYF3xfoDXaDBkeBLeZuFRLb7VtMB8GA1UdIwQY
MBaAFNMF+MAzzEwJbDlTWFwmicmnXT8YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHdYNHdEUE1UQWxzT1ZOWVhDYUp5YWRkUHhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8zMjNlYzctNTgyZC00YzEyLWI3MjMt
Mjk3YzRiMzNkNTQxLzEvQTFnWGZGLWdOZG9NR1I0RXQ1bTRWRXR2dFcwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy8zMjNlYzctNTgyZC00YzEyLWI3MjMtMjk3YzRiMzNkNTQx
LzEvMHdYNHdEUE1UQWxzT1ZOWVhDYUp5YWRkUHhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQFvL6gAwQB
w04mMA8EAgACMAkDBwAgAQZ8LuQwDQYJKoZIhvcNAQELBQADggEBADUlMnpdqyn0
IYMMSZ7hmX3SWd5nKALcQT3ZSVxkaF9T6BqnmK6SvSXEwmfWU1JARwdwv3gr+yM1
ikJ7Njmg7NPPT1uy8JeU7W7xzkSqRT58FtLXOmW8ql9PGy4YRDC4NklMWshLTExB
251UooZ6jBqThEQnVUKavJNy8LGo1zwXhOCpDsW+Zb/OMeHld1883GbmHQdqQAR7
7ZoH7vV4LcY/ZVi8D6M4kOJgPfMfcvcSCHMN+qKP9P8vmXdGdaQW2BOC4OSEaK0m
c7nUSRlvw+BA52uULlGiFAMlRcDlvg3qKFKjKdG0i2JArnokhjjy29MSHwFwpk+p
OuP7I9AZxpQ=
-----END CERTIFICATE-----
Generated at Mon Jan 1 13:23:56 2024 by rpki-client on console-fra.rpki-client.org