Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/8e7e30-c2b8-4591-8cfe-7b8e9d335ca8/1/PX3S4OVOWSOYMwtWP5OjZ1j90yk.roa
File: PX3S4OVOWSOYMwtWP5OjZ1j90yk.roa (raw, json)
Hash identifier: cyY+edrUHiqAkx+IQRCBNbFJ1dxT5bqsfcOgmIQ8UY0=
Subject key identifier: 3D:7D:D2:E0:E5:4E:59:23:98:33:0B:56:3F:93:A3:67:58:FD:D3:29
Certificate issuer: /CN=f7742725862b90bda4510a02e804fef3ad1142dc
Certificate serial: 01856CAF463F1B142CAABD0A41124838FDF2
Authority key identifier: F7:74:27:25:86:2B:90:BD:A4:51:0A:02:E8:04:FE:F3:AD:11:42:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93QnJYYrkL2kUQoC6AT-860RQtw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/8e7e30-c2b8-4591-8cfe-7b8e9d335ca8/1/PX3S4OVOWSOYMwtWP5OjZ1j90yk.roa
Signing time: Sun 01 Jan 2023 09:35:04 +0000
ROA not before: Sun 01 Jan 2023 09:35:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15836
IP address blocks: 5.32.168.0/21 maxlen: 24
185.46.60.0/22 maxlen: 24
212.28.64.0/19 maxlen: 24
87.255.64.0/19 maxlen: 24
217.26.160.0/20 maxlen: 24
2a03:a80::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:af:46:3f:1b:14:2c:aa:bd:0a:41:12:48:38:fd:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7742725862b90bda4510a02e804fef3ad1142dc
Validity
Not Before: Jan 1 09:35:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3d7dd2e0e54e592398330b563f93a36758fdd329
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c2:a4:4d:ef:99:3c:85:75:b8:e9:dd:f9:91:
8b:a7:fb:e8:43:1d:b5:58:95:f1:21:38:9d:fe:e9:
97:23:1a:7f:6f:e1:9b:b7:82:1f:b8:55:4b:0f:13:
43:e7:fa:e8:03:85:5a:10:a1:aa:ef:a5:0d:a7:7e:
92:5c:50:f8:4e:65:b5:59:9c:80:6f:48:2f:3c:54:
40:14:d4:5e:5f:d3:09:c6:78:34:76:e1:53:9d:f7:
95:01:67:fa:6d:fc:b2:66:99:5d:d4:34:31:07:4d:
88:c4:fc:8e:5d:0e:94:11:75:0d:01:3a:a8:e5:f9:
83:66:7f:22:12:1a:a1:aa:05:e4:d0:a7:f7:41:a0:
34:cb:c6:18:ac:ba:1b:89:ec:64:c1:aa:da:13:ae:
01:6f:61:78:ec:29:d1:ca:33:d3:03:7e:14:39:2c:
b8:41:8d:65:fa:0d:6e:fc:ac:65:3e:bb:98:3d:79:
29:01:c2:eb:59:f6:dd:07:59:df:91:37:22:ea:db:
7c:57:c3:a7:e8:df:8a:7b:6c:9d:52:4f:1c:e4:ae:
f2:27:92:23:75:6d:51:45:6f:ca:33:9e:65:5e:5e:
a5:8e:2d:9e:20:45:52:29:04:e3:dc:41:ea:84:03:
fe:28:5e:17:e3:b4:38:c5:24:e2:b5:99:3a:3e:af:
74:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:7D:D2:E0:E5:4E:59:23:98:33:0B:56:3F:93:A3:67:58:FD:D3:29
X509v3 Authority Key Identifier:
keyid:F7:74:27:25:86:2B:90:BD:A4:51:0A:02:E8:04:FE:F3:AD:11:42:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93QnJYYrkL2kUQoC6AT-860RQtw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8e7e30-c2b8-4591-8cfe-7b8e9d335ca8/1/PX3S4OVOWSOYMwtWP5OjZ1j90yk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8e7e30-c2b8-4591-8cfe-7b8e9d335ca8/1/93QnJYYrkL2kUQoC6AT-860RQtw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.32.168.0/21
87.255.64.0/19
185.46.60.0/22
212.28.64.0/19
217.26.160.0/20
IPv6:
2a03:a80::/32
Signature Algorithm: sha256WithRSAEncryption
03:5d:16:64:1e:f3:e2:05:ca:78:dd:df:68:6b:2c:e4:1c:d5:
92:a8:d0:90:7d:c1:43:59:ba:12:a2:e2:38:68:83:78:57:5c:
c6:b6:39:6d:98:b5:c0:c6:7a:53:02:32:af:9f:0a:3e:63:8f:
a4:17:b6:67:15:cc:d8:fb:4a:65:cd:bc:43:8d:9e:ca:4e:d9:
48:df:36:b7:60:e2:90:70:a3:44:26:d2:54:44:9f:ba:5d:71:
3e:69:82:04:b3:db:f7:9a:c8:b2:45:d4:56:3c:61:a8:d4:13:
00:b3:de:ef:b8:fd:bf:1b:4d:71:53:fc:8a:69:9a:85:d8:39:
71:c9:e3:4a:47:af:a7:93:42:d3:33:c6:da:96:a3:2e:45:e7:
d7:04:69:05:1d:06:06:a7:fd:81:89:a2:6c:6c:43:01:4b:39:
3f:8b:70:a1:94:27:88:51:fa:0e:aa:68:d1:96:74:06:4f:be:
3c:a0:bc:a5:8a:21:1b:86:9c:48:68:db:59:a7:03:6b:e3:3f:
73:6b:f0:0a:b2:5b:3a:11:a3:91:09:4c:fa:22:2b:d8:bc:1b:
a1:13:bf:4c:56:e0:0a:b3:df:2b:29:2f:ed:b3:12:8a:d2:db:
4c:96:1b:3d:1a:6e:26:a3:99:c9:22:6f:bb:64:d9:82:50:d8:
9d:ac:26:59
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgISAYVsr0Y/GxQsqr0KQRJIOP3yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3NzQyNzI1ODYyYjkwYmRhNDUxMGEwMmU4MDRmZWYzYWQx
MTQyZGMwHhcNMjMwMTAxMDkzNTA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZDdkZDJlMGU1NGU1OTIzOTgzMzBiNTYzZjkzYTM2NzU4ZmRkMzI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcKkTe+ZPIV1uOnd+ZGLp/voQx21
WJXxITid/umXIxp/b+Gbt4IfuFVLDxND5/roA4VaEKGq76UNp36SXFD4TmW1WZyA
b0gvPFRAFNReX9MJxng0duFTnfeVAWf6bfyyZpld1DQxB02IxPyOXQ6UEXUNATqo
5fmDZn8iEhqhqgXk0Kf3QaA0y8YYrLobiexkwaraE64Bb2F47CnRyjPTA34UOSy4
QY1l+g1u/KxlPruYPXkpAcLrWfbdB1nfkTci6tt8V8On6N+Ke2ydUk8c5K7yJ5Ij
dW1RRW/KM55lXl6lji2eIEVSKQTj3EHqhAP+KF4X47Q4xSTitZk6Pq90JQIDAQAB
o4ICMDCCAiwwHQYDVR0OBBYEFD190uDlTlkjmDMLVj+To2dY/dMpMB8GA1UdIwQY
MBaAFPd0JyWGK5C9pFEKAugE/vOtEULcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTNRbkpZWXJrTDJrVVFvQzZBVC04NjBSUXR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni84ZTdlMzAtYzJiOC00NTkxLThjZmUt
N2I4ZTlkMzM1Y2E4LzEvUFgzUzRPVk9XU09ZTXd0V1A1T2paMWo5MHlrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni84ZTdlMzAtYzJiOC00NTkxLThjZmUtN2I4ZTlkMzM1Y2E4
LzEvOTNRbkpZWXJrTDJrVVFvQzZBVC04NjBSUXR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQDBSCoAwQF
V/9AAwQCuS48AwQF1BxAAwQE2RqgMA0EAgACMAcDBQAqAwqAMA0GCSqGSIb3DQEB
CwUAA4IBAQADXRZkHvPiBcp43d9oayzkHNWSqNCQfcFDWboSouI4aIN4V1zGtjlt
mLXAxnpTAjKvnwo+Y4+kF7ZnFczY+0plzbxDjZ7KTtlI3za3YOKQcKNEJtJURJ+6
XXE+aYIEs9v3msiyRdRWPGGo1BMAs97vuP2/G01xU/yKaZqF2DlxyeNKR6+nk0LT
M8balqMuRefXBGkFHQYGp/2BiaJsbEMBSzk/i3ChlCeIUfoOqmjRlnQGT748oLyl
iiEbhpxIaNtZpwNr4z9za/AKsls6EaORCUz6IivYvBuhE79MVuAKs98rKS/tsxKK
0ttMlhs9Gm4mo5nJIm+7ZNmCUNidrCZZ
-----END CERTIFICATE-----
Generated at Mon Jan 1 23:37:26 2024 by rpki-client on console-fra.rpki-client.org