Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/gVORr8rg3DFLv7qtd2xyI8tRxD4.roa
File: gVORr8rg3DFLv7qtd2xyI8tRxD4.roa (raw, json)
Hash identifier: NSaHijFfNWoRhDMPWXa77h1/xLZYQ7f3LKv8IyGRw1Y=
Subject key identifier: 81:53:91:AF:CA:E0:DC:31:4B:BF:BA:AD:77:6C:72:23:CB:51:C4:3E
Certificate issuer: /CN=2d676a61dcf4d222ba66cda19430f61e611d8aae
Certificate serial: 0186A62DDE04F361532E90215DE2E5C8CAAE
Authority key identifier: 2D:67:6A:61:DC:F4:D2:22:BA:66:CD:A1:94:30:F6:1E:61:1D:8A:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LWdqYdz00iK6Zs2hlDD2HmEdiq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/gVORr8rg3DFLv7qtd2xyI8tRxD4.roa
Signing time: Fri 03 Mar 2023 06:34:29 +0000
ROA not before: Fri 03 Mar 2023 06:34:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 396982
IP address blocks: 185.235.236.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:a6:2d:de:04:f3:61:53:2e:90:21:5d:e2:e5:c8:ca:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d676a61dcf4d222ba66cda19430f61e611d8aae
Validity
Not Before: Mar 3 06:34:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=815391afcae0dc314bbfbaad776c7223cb51c43e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:80:bb:78:f3:83:3c:3f:fb:08:06:ec:05:68:
d9:58:73:d5:8b:3d:93:f1:6e:76:ee:17:97:a8:a8:
ab:71:b2:15:70:f3:d0:37:f1:5c:5a:89:cf:ff:67:
d5:39:a7:b8:a4:05:cd:16:00:00:37:7b:19:76:3d:
c7:a9:e1:32:99:60:c4:1f:df:7d:17:11:36:95:f3:
5b:d9:10:8a:81:98:f6:fb:f9:35:28:63:72:60:81:
c7:73:93:02:f2:23:32:84:9a:b2:c7:a0:fa:9b:ac:
61:f2:8a:19:bb:e0:c6:69:70:62:0e:5f:c1:57:48:
c7:43:76:63:a8:d4:5f:60:24:a6:3f:cc:49:8d:b1:
66:3f:69:c5:93:fe:98:b3:2a:c0:c9:f2:35:01:72:
72:3d:36:08:27:72:61:9a:51:9a:5c:c6:27:5f:20:
17:95:53:66:0c:fe:e5:eb:84:94:75:7f:52:8e:86:
03:3d:48:a0:7b:0c:58:af:14:6e:31:c6:51:cb:94:
0a:6d:3a:b2:a6:fa:df:5e:e6:b1:ca:5c:b1:db:fd:
03:00:8b:8a:f0:2c:c6:92:34:c2:39:9c:74:51:6b:
b8:cf:e5:2b:57:5c:41:19:1c:98:26:d5:95:8b:fc:
d2:d7:f8:d0:62:91:39:58:a2:48:32:e5:89:2b:a5:
53:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:53:91:AF:CA:E0:DC:31:4B:BF:BA:AD:77:6C:72:23:CB:51:C4:3E
X509v3 Authority Key Identifier:
keyid:2D:67:6A:61:DC:F4:D2:22:BA:66:CD:A1:94:30:F6:1E:61:1D:8A:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LWdqYdz00iK6Zs2hlDD2HmEdiq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/gVORr8rg3DFLv7qtd2xyI8tRxD4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/LWdqYdz00iK6Zs2hlDD2HmEdiq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.235.236.0/22
Signature Algorithm: sha256WithRSAEncryption
27:db:8b:51:be:64:19:1e:5b:87:6a:10:74:81:06:e8:35:64:
58:3e:d3:c2:60:16:32:e7:8f:b5:e3:27:3a:94:a2:08:3b:c0:
83:19:94:ff:36:10:a6:75:85:56:f8:57:0e:fa:1e:9e:29:27:
3c:fa:ca:78:ba:7b:93:6f:7f:f6:1c:8f:bf:de:c0:6f:d9:f5:
bf:c2:b2:d0:0a:1b:c1:a9:05:b3:b5:88:60:6a:56:bf:bf:72:
9e:ee:1f:f5:b5:2d:ec:23:aa:0c:64:d5:2c:d4:3a:be:01:7d:
63:3f:f5:d8:1c:22:c1:ba:79:83:e0:d8:8e:25:27:6b:de:43:
ec:9e:9a:1a:45:c4:a4:3b:cc:ba:be:44:ea:82:dc:a0:92:28:
ce:e9:f3:3c:0a:74:16:09:e2:4c:f8:8c:49:9a:67:9a:34:82:
a0:ef:ca:43:51:55:22:2e:1d:92:ab:6d:d4:e5:b0:eb:6e:0b:
4b:36:a1:d8:b7:ad:f4:ee:1e:1c:07:44:63:8b:9a:29:b3:74:
cc:58:eb:2c:1e:55:80:d3:d4:82:d7:91:aa:60:fb:11:1c:e8:
fa:a6:94:0d:3d:00:d7:d4:18:81:95:5e:1c:43:f4:4d:77:8c:
2e:8f:61:e9:d4:92:83:8c:39:ad:b1:24:84:a2:71:e0:ad:b4:
dc:01:7b:79
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYamLd4E82FTLpAhXeLlyMquMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkNjc2YTYxZGNmNGQyMjJiYTY2Y2RhMTk0MzBmNjFlNjEx
ZDhhYWUwHhcNMjMwMzAzMDYzNDI5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MTUzOTFhZmNhZTBkYzMxNGJiZmJhYWQ3NzZjNzIyM2NiNTFjNDNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIC7ePODPD/7CAbsBWjZWHPViz2T
8W527heXqKircbIVcPPQN/FcWonP/2fVOae4pAXNFgAAN3sZdj3HqeEymWDEH999
FxE2lfNb2RCKgZj2+/k1KGNyYIHHc5MC8iMyhJqyx6D6m6xh8ooZu+DGaXBiDl/B
V0jHQ3ZjqNRfYCSmP8xJjbFmP2nFk/6YsyrAyfI1AXJyPTYIJ3JhmlGaXMYnXyAX
lVNmDP7l64SUdX9SjoYDPUigewxYrxRuMcZRy5QKbTqypvrfXuaxylyx2/0DAIuK
8CzGkjTCOZx0UWu4z+UrV1xBGRyYJtWVi/zS1/jQYpE5WKJIMuWJK6VT2QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIFTka/K4NwxS7+6rXdsciPLUcQ+MB8GA1UdIwQY
MBaAFC1namHc9NIiumbNoZQw9h5hHYquMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFdkcVlkejAwaUs2WnMyaGxERDJIbUVkaXE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9iMmM2OGUtZWIzYi00ZTAxLWI1MGEt
YTg2YTI0NjU1ODcwLzEvZ1ZPUnI4cmczREZMdjdxdGQyeHlJOHRSeEQ0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS9iMmM2OGUtZWIzYi00ZTAxLWI1MGEtYTg2YTI0NjU1ODcw
LzEvTFdkcVlkejAwaUs2WnMyaGxERDJIbUVkaXE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuevsMA0G
CSqGSIb3DQEBCwUAA4IBAQAn24tRvmQZHluHahB0gQboNWRYPtPCYBYy54+14yc6
lKIIO8CDGZT/NhCmdYVW+FcO+h6eKSc8+sp4unuTb3/2HI+/3sBv2fW/wrLQChvB
qQWztYhgala/v3Ke7h/1tS3sI6oMZNUs1Dq+AX1jP/XYHCLBunmD4NiOJSdr3kPs
npoaRcSkO8y6vkTqgtygkijO6fM8CnQWCeJM+IxJmmeaNIKg78pDUVUiLh2Sq23U
5bDrbgtLNqHYt6307h4cB0Rji5ops3TMWOssHlWA09SC15GqYPsRHOj6ppQNPQDX
1BiBlV4cQ/RNd4wuj2Hp1JKDjDmtsSSEonHgrbTcAXt5
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:33 2024 by rpki-client on console-ams.rpki-client.org