Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/SYWGNh6i62oo-97XKOXU7tMlK8s.roa
File: SYWGNh6i62oo-97XKOXU7tMlK8s.roa (raw, json)
Hash identifier: dAq33SzXf93Z8uCIR/hozhT3W0OxckGZPP+ZF32O5C4=
Subject key identifier: 49:85:86:36:1E:A2:EB:6A:28:FB:DE:D7:28:E5:D4:EE:D3:25:2B:CB
Certificate issuer: /CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Certificate serial: 018793DCEC03A6834B3E4ADD385073FE24AC
Authority key identifier: 27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/SYWGNh6i62oo-97XKOXU7tMlK8s.roa
Signing time: Tue 18 Apr 2023 10:15:41 +0000
ROA not before: Tue 18 Apr 2023 10:15:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49666
IP address blocks: 2.188.0.0/24 maxlen: 24
2.188.1.0/24 maxlen: 24
2.188.0.0/16 maxlen: 24
2.188.9.0/24 maxlen: 24
2.188.7.0/24 maxlen: 24
2.188.17.0/24 maxlen: 24
2.188.12.0/22 maxlen: 22
2.188.22.0/24 maxlen: 24
2.188.23.0/24 maxlen: 24
2.188.30.0/24 maxlen: 24
2.188.28.0/24 maxlen: 24
2.176.0.0/17 maxlen: 17
217.218.67.0/24 maxlen: 24
2.188.64.0/21 maxlen: 21
2.176.128.0/17 maxlen: 17
2.188.76.0/24 maxlen: 24
195.146.63.0/24 maxlen: 24
2.185.0.0/16 maxlen: 16
78.38.245.0/24 maxlen: 24
78.38.253.0/24 maxlen: 24
2.189.3.0/24 maxlen: 24
2.189.1.0/24 maxlen: 24
2.189.0.0/16 maxlen: 24
2.188.179.0/24 maxlen: 24
2.188.186.0/24 maxlen: 24
2.188.181.0/24 maxlen: 24
2.188.185.0/24 maxlen: 24
2.188.184.0/24 maxlen: 24
2.188.187.0/24 maxlen: 24
2.177.0.0/16 maxlen: 16
2.189.72.0/24 maxlen: 24
2.189.44.0/24 maxlen: 24
2.189.63.0/24 maxlen: 24
2001:4188:2::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:93:dc:ec:03:a6:83:4b:3e:4a:dd:38:50:73:fe:24:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Validity
Not Before: Apr 18 10:15:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=498586361ea2eb6a28fbded728e5d4eed3252bcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:cb:d9:76:5d:dc:3e:f9:fc:93:06:f5:7a:3b:
13:aa:28:e2:32:35:f6:20:ee:99:7b:5e:bd:6b:4a:
46:e8:dd:7d:aa:81:41:3e:14:29:be:e6:dc:61:2f:
7d:9b:d1:60:c4:28:f3:a8:dd:55:13:31:cb:09:98:
ab:6d:82:5d:53:7e:1c:1f:e6:80:72:c9:a9:b2:8a:
e0:a3:e4:a1:f0:ea:66:2b:27:7f:1c:02:11:93:53:
42:d9:30:81:d3:72:3e:b7:73:7b:e5:bd:4b:28:7c:
94:69:fa:6d:9c:e5:61:67:da:3f:c0:ec:d5:b7:36:
de:db:4b:24:d0:fd:99:31:c6:a8:8f:aa:b6:6e:bd:
1f:77:ce:72:67:57:05:b4:4a:60:80:8b:5a:74:92:
47:27:20:83:7e:c5:46:3c:9c:52:47:d1:e3:69:6e:
6c:e9:56:26:82:94:05:20:9c:9f:47:b9:c7:a0:7b:
18:41:7e:69:3b:aa:b9:71:aa:78:f9:48:32:4f:62:
12:e5:9c:eb:35:1f:93:a7:c5:89:f1:b7:e0:ca:20:
b2:45:17:1c:b9:cc:a2:58:1c:6c:f3:e5:f4:9d:b1:
3e:80:18:f8:dd:5c:0c:17:f9:86:04:90:6a:d8:d2:
29:08:a5:9d:b8:1d:25:fb:f0:81:b3:d7:b6:61:36:
9b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:85:86:36:1E:A2:EB:6A:28:FB:DE:D7:28:E5:D4:EE:D3:25:2B:CB
X509v3 Authority Key Identifier:
keyid:27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/SYWGNh6i62oo-97XKOXU7tMlK8s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.176.0.0/15
2.185.0.0/16
2.188.0.0/15
78.38.245.0/24
78.38.253.0/24
195.146.63.0/24
217.218.67.0/24
IPv6:
2001:4188:2::/48
Signature Algorithm: sha256WithRSAEncryption
47:1e:55:cd:ce:d5:32:cb:f2:0b:0d:51:d2:b1:17:4c:0f:3d:
a1:26:aa:a6:07:4d:21:07:06:f3:62:18:16:26:48:23:d3:54:
a2:7e:0e:de:e0:88:00:ca:a2:de:34:6f:c3:a9:b0:0f:cc:1d:
ef:59:e9:0b:b5:f5:65:85:ad:ff:2c:21:c7:82:5c:93:43:8a:
f5:a1:af:a5:c4:5e:d3:cf:ec:dc:33:fb:7d:cd:89:d3:3f:be:
0d:10:d6:1f:9b:32:db:15:be:7f:95:d2:3b:74:8e:d1:65:13:
8b:70:06:53:be:c8:2b:9f:a4:04:8e:32:76:04:f1:f9:c7:03:
84:ab:b0:9f:98:e5:53:b5:a9:79:3d:cc:31:6c:89:64:a4:b0:
64:14:2d:8b:9d:16:26:83:fb:d8:27:9f:7a:30:4c:2e:67:c2:
99:97:0f:13:a3:0e:ab:4e:75:2b:77:05:93:e5:df:5e:21:b4:
00:08:c6:a1:62:ea:35:21:f5:d2:5f:ef:60:a5:d9:e6:f3:f9:
0d:a9:d0:7c:31:3e:f1:b6:6b:c8:a4:d9:81:fb:e6:98:4f:9f:
ea:0d:5d:45:1e:75:76:72:06:e5:50:46:6b:a2:c1:0b:70:8d:
63:69:8d:b8:f3:3a:c7:40:02:a0:e1:84:a7:7e:8d:10:f0:34:
58:43:ba:ec
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgISAYeT3OwDpoNLPkrdOFBz/iSsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3YTM5ZTQ3OTRjMzQ2MTJlN2YyMjU2OWIxYTZhODE3MTAy
NjBhZTUwHhcNMjMwNDE4MTAxNTQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OTg1ODYzNjFlYTJlYjZhMjhmYmRlZDcyOGU1ZDRlZWQzMjUyYmNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMvZdl3cPvn8kwb1ejsTqijiMjX2
IO6Ze169a0pG6N19qoFBPhQpvubcYS99m9FgxCjzqN1VEzHLCZirbYJdU34cH+aA
csmpsorgo+Sh8OpmKyd/HAIRk1NC2TCB03I+t3N75b1LKHyUafptnOVhZ9o/wOzV
tzbe20sk0P2ZMcaoj6q2br0fd85yZ1cFtEpggItadJJHJyCDfsVGPJxSR9HjaW5s
6VYmgpQFIJyfR7nHoHsYQX5pO6q5cap4+UgyT2IS5ZzrNR+Tp8WJ8bfgyiCyRRcc
ucyiWBxs8+X0nbE+gBj43VwMF/mGBJBq2NIpCKWduB0l+/CBs9e2YTabVQIDAQAB
o4ICOzCCAjcwHQYDVR0OBBYEFEmFhjYeoutqKPve1yjl1O7TJSvLMB8GA1UdIwQY
MBaAFCejnkeUw0YS5/IlabGmqBcQJgrlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjZPZVI1VERSaExuOGlWcHNhYW9GeEFtQ3VVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8zOGZjMzMtMDZjMS00MDA2LTllMjMt
Zjc0ZDk1MTg1NzZjLzEvU1lXR05oNmk2Mm9vLTk3WEtPWFU3dE1sSzhzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC8zOGZjMzMtMDZjMS00MDA2LTllMjMtZjc0ZDk1MTg1NzZj
LzEvSjZPZVI1VERSaExuOGlWcHNhYW9GeEFtQ3VVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFEGCCsGAQUFBwEHAQH/BEIwQDAtBAIAATAnAwMBArADAwAC
uQMDAQK8AwQATib1AwQATib9AwQAw5I/AwQA2dpDMA8EAgACMAkDBwAgAUGIAAIw
DQYJKoZIhvcNAQELBQADggEBAEceVc3O1TLL8gsNUdKxF0wPPaEmqqYHTSEHBvNi
GBYmSCPTVKJ+Dt7giADKot40b8OpsA/MHe9Z6Qu19WWFrf8sIceCXJNDivWhr6XE
XtPP7Nwz+33NidM/vg0Q1h+bMtsVvn+V0jt0jtFlE4twBlO+yCufpASOMnYE8fnH
A4SrsJ+Y5VO1qXk9zDFsiWSksGQULYudFiaD+9gnn3owTC5nwpmXDxOjDqtOdSt3
BZPl314htAAIxqFi6jUh9dJf72Cl2ebz+Q2p0HwxPvG2a8ik2YH75phPn+oNXUUe
dXZyBuVQRmuiwQtwjWNpjbjzOsdAAqDhhKd+jRDwNFhDuuw=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:45 2023 by rpki-client on console-ams.rpki-client.org