Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/a89644-9316-4e8b-81a4-1f19a8bda3ed/1/SV2Es7WwgKuZnqJJc3OMEwCZXuI.roa
File: SV2Es7WwgKuZnqJJc3OMEwCZXuI.roa (raw, json)
Hash identifier: YTMg8Ks8wFekMUEF9EA9BMfaSUXS5VlHd+jrchP2rxA=
Subject key identifier: 49:5D:84:B3:B5:B0:80:AB:99:9E:A2:49:73:73:8C:13:00:99:5E:E2
Certificate issuer: /CN=576d59494a0a927f7a68f909ecef577cd503db1c
Certificate serial: 01856F393D82B432289DC2D4FE7559B42EE1
Authority key identifier: 57:6D:59:49:4A:0A:92:7F:7A:68:F9:09:EC:EF:57:7C:D5:03:DB:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V21ZSUoKkn96aPkJ7O9XfNUD2xw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/a89644-9316-4e8b-81a4-1f19a8bda3ed/1/SV2Es7WwgKuZnqJJc3OMEwCZXuI.roa
Signing time: Sun 01 Jan 2023 21:25:00 +0000
ROA not before: Sun 01 Jan 2023 21:25:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39072
IP address blocks: 185.145.32.0/22 maxlen: 22
194.110.165.0/24 maxlen: 24
194.110.164.0/24 maxlen: 24
194.116.202.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:39:3d:82:b4:32:28:9d:c2:d4:fe:75:59:b4:2e:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=576d59494a0a927f7a68f909ecef577cd503db1c
Validity
Not Before: Jan 1 21:25:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=495d84b3b5b080ab999ea24973738c1300995ee2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:b1:b6:ef:11:95:67:e9:41:ab:07:a6:93:c1:
68:45:29:59:9a:8f:a7:c9:2b:2d:2b:0b:eb:f8:ec:
22:78:ad:d9:cd:c2:54:36:b9:32:ae:67:31:df:7a:
70:13:eb:46:77:62:1e:f8:8d:0e:88:35:3e:8f:7e:
d4:3d:75:28:5c:a7:e2:94:8b:1d:7f:52:84:31:b9:
d9:ec:ec:26:c6:b9:12:70:71:4d:69:c4:f5:97:8b:
ce:85:e7:ba:d2:59:9e:cf:da:53:05:bb:20:3e:93:
7d:b2:56:ae:90:65:dc:46:89:ab:12:20:57:74:c3:
75:06:82:e8:e5:cb:bf:5f:16:6b:92:52:74:a7:d5:
73:e2:22:3b:9d:5a:36:00:e1:84:77:de:8a:48:73:
ed:48:15:30:4e:b7:17:13:50:f3:53:9a:45:99:1b:
02:72:07:a3:75:8a:9a:7b:fb:18:39:18:02:05:6a:
59:c8:cf:84:59:01:5a:41:a3:0f:ab:8f:ab:4e:b3:
ba:72:77:b9:9c:b0:1a:97:57:38:3c:e3:6b:bb:a8:
77:67:d7:92:54:78:8b:9d:2f:7a:e5:7c:15:93:ca:
27:7a:c6:af:52:81:fd:1e:60:7c:a8:09:03:d3:14:
22:54:66:2a:be:bf:f9:69:79:bb:3c:65:b5:37:5f:
1a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:5D:84:B3:B5:B0:80:AB:99:9E:A2:49:73:73:8C:13:00:99:5E:E2
X509v3 Authority Key Identifier:
keyid:57:6D:59:49:4A:0A:92:7F:7A:68:F9:09:EC:EF:57:7C:D5:03:DB:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V21ZSUoKkn96aPkJ7O9XfNUD2xw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a89644-9316-4e8b-81a4-1f19a8bda3ed/1/SV2Es7WwgKuZnqJJc3OMEwCZXuI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a89644-9316-4e8b-81a4-1f19a8bda3ed/1/V21ZSUoKkn96aPkJ7O9XfNUD2xw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.145.32.0/22
194.110.164.0/23
194.116.202.0/23
Signature Algorithm: sha256WithRSAEncryption
6e:71:78:53:eb:cc:0b:4e:55:a0:10:df:bc:b3:92:d9:13:e7:
30:69:23:82:ac:da:00:cf:20:e2:dc:e9:48:b7:f7:14:dc:de:
86:5b:fa:fe:f1:14:2a:d8:25:ad:b5:75:0e:f4:e5:e2:83:33:
90:a6:dc:c8:f0:ea:eb:2a:ac:56:0a:a7:94:5c:9f:a2:4c:b9:
b0:38:f1:02:b5:ff:60:16:76:e5:1c:24:5f:c1:96:9b:17:30:
64:fc:18:45:a8:3f:06:73:11:c3:7f:5d:42:00:6e:3c:79:c8:
52:88:7e:96:3a:be:40:b3:0b:6c:12:03:eb:8e:48:32:50:56:
59:df:9c:32:5f:4a:1d:e1:84:4a:39:66:0f:fa:31:e4:6d:8a:
94:5e:a9:0f:04:0c:81:90:87:e0:60:49:95:8e:3b:42:90:e6:
e5:b6:0f:91:0a:87:bf:e1:87:2b:37:2e:15:1b:49:13:06:f0:
42:8b:d0:62:82:ee:77:57:bd:ee:09:4b:80:ea:ad:fd:dc:a5:
8a:1a:87:26:b9:bb:25:7e:ac:1a:e2:df:60:89:bc:d8:05:c6:
c1:a0:66:e5:77:4c:bb:dc:d2:74:12:3d:f7:ee:99:1e:d6:ca:
a6:36:57:43:f7:74:5f:28:20:cd:bb:89:84:c5:f9:96:d0:f3:
bc:a7:3a:93
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYVvOT2CtDIoncLU/nVZtC7hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3NmQ1OTQ5NGEwYTkyN2Y3YTY4ZjkwOWVjZWY1NzdjZDUw
M2RiMWMwHhcNMjMwMTAxMjEyNTAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OTVkODRiM2I1YjA4MGFiOTk5ZWEyNDk3MzczOGMxMzAwOTk1ZWUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibG27xGVZ+lBqwemk8FoRSlZmo+n
ySstKwvr+OwieK3ZzcJUNrkyrmcx33pwE+tGd2Ie+I0OiDU+j37UPXUoXKfilIsd
f1KEMbnZ7OwmxrkScHFNacT1l4vOhee60lmez9pTBbsgPpN9slaukGXcRomrEiBX
dMN1BoLo5cu/XxZrklJ0p9Vz4iI7nVo2AOGEd96KSHPtSBUwTrcXE1DzU5pFmRsC
cgejdYqae/sYORgCBWpZyM+EWQFaQaMPq4+rTrO6cne5nLAal1c4PONru6h3Z9eS
VHiLnS965XwVk8onesavUoH9HmB8qAkD0xQiVGYqvr/5aXm7PGW1N18aswIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFEldhLO1sICrmZ6iSXNzjBMAmV7iMB8GA1UdIwQY
MBaAFFdtWUlKCpJ/emj5CezvV3zVA9scMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjIxWlNVb0trbjk2YVBrSjdPOVhmTlVEMnh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9hODk2NDQtOTMxNi00ZThiLTgxYTQt
MWYxOWE4YmRhM2VkLzEvU1YyRXM3V3dnS3VabnFKSmMzT01Fd0NaWHVJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi9hODk2NDQtOTMxNi00ZThiLTgxYTQtMWYxOWE4YmRhM2Vk
LzEvVjIxWlNVb0trbjk2YVBrSjdPOVhmTlVEMnh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCuZEgAwQB
wm6kAwQBwnTKMA0GCSqGSIb3DQEBCwUAA4IBAQBucXhT68wLTlWgEN+8s5LZE+cw
aSOCrNoAzyDi3OlIt/cU3N6GW/r+8RQq2CWttXUO9OXigzOQptzI8OrrKqxWCqeU
XJ+iTLmwOPECtf9gFnblHCRfwZabFzBk/BhFqD8GcxHDf11CAG48echSiH6WOr5A
swtsEgPrjkgyUFZZ35wyX0od4YRKOWYP+jHkbYqUXqkPBAyBkIfgYEmVjjtCkObl
tg+RCoe/4YcrNy4VG0kTBvBCi9Bigu53V73uCUuA6q393KWKGocmubslfqwa4t9g
ibzYBcbBoGbld0y73NJ0Ej337pke1sqmNldD93RfKCDNu4mExfmW0PO8pzqT
-----END CERTIFICATE-----
Generated at Tue Jan 2 15:20:35 2024 by rpki-client on console-ams.rpki-client.org