Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/gZSOJ7GMd2xR362fZMspPQrzcYM.roa
File: gZSOJ7GMd2xR362fZMspPQrzcYM.roa (raw, json)
Hash identifier: GY74pVAa+B+jjQRZ2JW4PoMLRtVsjNise3/pPAv8Irw=
Subject key identifier: 81:94:8E:27:B1:8C:77:6C:51:DF:AD:9F:64:CB:29:3D:0A:F3:71:83
Certificate issuer: /CN=4a4ad03a0f592bb9c97c3052a690125d846415a4
Certificate serial: 018755C6CD52BCF78CC752101EF5C6DDFF35
Authority key identifier: 4A:4A:D0:3A:0F:59:2B:B9:C9:7C:30:52:A6:90:12:5D:84:64:15:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SkrQOg9ZK7nJfDBSppASXYRkFaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/gZSOJ7GMd2xR362fZMspPQrzcYM.roa
Signing time: Thu 06 Apr 2023 08:55:04 +0000
ROA not before: Thu 06 Apr 2023 08:55:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58293
IP address blocks: 185.195.50.0/24 maxlen: 24
185.195.49.0/24 maxlen: 24
185.195.48.0/24 maxlen: 24
185.195.51.0/24 maxlen: 24
45.81.100.0/22 maxlen: 24
2a07:a5c0::/36 maxlen: 36
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:55:c6:cd:52:bc:f7:8c:c7:52:10:1e:f5:c6:dd:ff:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a4ad03a0f592bb9c97c3052a690125d846415a4
Validity
Not Before: Apr 6 08:55:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=81948e27b18c776c51dfad9f64cb293d0af37183
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:10:2e:12:0b:d9:80:c2:ee:11:76:ce:1e:ab:
2b:ae:cf:ed:36:60:c9:97:d0:2e:6f:a6:77:dc:0e:
7f:f9:38:dc:23:cf:38:06:8d:8d:90:3c:55:ba:1e:
c0:30:7d:b9:e0:95:a9:6a:3a:04:05:e7:0c:d2:5d:
c6:cc:68:84:d4:fc:d7:9f:9f:3b:44:3a:8f:0d:20:
cf:a8:9d:55:34:cf:3c:c0:1e:f0:14:43:b2:d1:0e:
a0:60:d3:bf:1c:8f:16:79:dc:a0:a7:64:03:1b:5d:
4e:57:df:3c:7a:be:5d:88:78:0f:6e:34:0a:49:69:
08:4f:4d:28:17:53:97:bd:6c:c5:14:21:fa:02:25:
b0:a0:40:b0:9c:63:7e:34:f3:2c:ed:dd:98:09:e3:
2e:18:0c:e7:98:5a:48:c1:c7:d5:ef:0b:3c:30:26:
54:28:7b:e9:68:98:58:fd:93:b6:9f:4d:df:bf:8a:
3f:43:73:83:4a:5f:48:0c:b3:34:9f:3c:c8:18:f9:
b2:2a:4c:97:0e:f1:c5:8e:02:80:76:42:f0:5b:20:
c3:ce:58:7a:8c:a1:bb:37:97:66:24:52:2e:72:e6:
2d:7f:be:03:e2:d6:93:7a:e6:1d:16:9d:b0:71:c3:
d7:a5:12:c4:a0:6f:e0:40:8e:33:1a:20:c1:d4:bc:
a6:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:94:8E:27:B1:8C:77:6C:51:DF:AD:9F:64:CB:29:3D:0A:F3:71:83
X509v3 Authority Key Identifier:
keyid:4A:4A:D0:3A:0F:59:2B:B9:C9:7C:30:52:A6:90:12:5D:84:64:15:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SkrQOg9ZK7nJfDBSppASXYRkFaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/gZSOJ7GMd2xR362fZMspPQrzcYM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/SkrQOg9ZK7nJfDBSppASXYRkFaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.100.0/22
185.195.48.0/22
IPv6:
2a07:a5c0::/36
Signature Algorithm: sha256WithRSAEncryption
68:9a:7d:33:bc:6a:5c:a0:b8:f6:75:3f:e0:5a:ce:18:9e:2d:
bd:10:d1:e6:2a:69:47:54:b7:68:e8:0d:21:25:8f:cc:6c:5a:
08:ac:cd:fc:30:e1:e5:d4:0d:d9:78:59:ad:cb:a5:6d:1c:40:
bd:d0:44:3a:3f:64:b4:66:83:af:5a:76:1b:97:77:c9:5e:5c:
e6:07:1b:73:1a:89:db:9f:f5:41:41:16:54:9e:1d:67:5b:16:
e5:f3:93:1c:1c:a6:96:38:16:67:71:93:1b:82:f7:7d:3f:d1:
51:ea:5c:3d:ab:59:dc:67:e4:85:54:5c:2c:4d:b6:2d:a6:bc:
3b:d0:51:a7:f9:f4:e0:c5:a9:af:5e:0d:65:ef:5f:93:cb:4f:
d6:f9:a2:86:5f:56:89:77:f5:21:4b:cf:bd:da:1c:5c:4a:48:
09:0f:4a:f3:4a:55:a3:19:80:aa:e3:35:63:9f:be:73:3e:1f:
6b:38:fd:72:30:c5:db:ec:87:6c:cf:5b:2e:9d:94:f2:85:e0:
70:f0:cd:3e:1f:19:12:7a:0c:aa:14:8f:ab:a3:cb:db:bd:68:
35:1a:31:33:b7:14:cd:fb:eb:58:f0:70:21:aa:6b:08:97:de:
bb:03:c8:f6:32:38:0f:83:e5:fd:cf:f8:42:f7:06:06:5f:db:
41:8f:c6:6d
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgISAYdVxs1SvPeMx1IQHvXG3f81MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNGFkMDNhMGY1OTJiYjljOTdjMzA1MmE2OTAxMjVkODQ2
NDE1YTQwHhcNMjMwNDA2MDg1NTA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MTk0OGUyN2IxOGM3NzZjNTFkZmFkOWY2NGNiMjkzZDBhZjM3MTgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBAuEgvZgMLuEXbOHqsrrs/tNmDJ
l9Aub6Z33A5/+TjcI884Bo2NkDxVuh7AMH254JWpajoEBecM0l3GzGiE1PzXn587
RDqPDSDPqJ1VNM88wB7wFEOy0Q6gYNO/HI8Wedygp2QDG11OV988er5diHgPbjQK
SWkIT00oF1OXvWzFFCH6AiWwoECwnGN+NPMs7d2YCeMuGAznmFpIwcfV7ws8MCZU
KHvpaJhY/ZO2n03fv4o/Q3ODSl9IDLM0nzzIGPmyKkyXDvHFjgKAdkLwWyDDzlh6
jKG7N5dmJFIucuYtf74D4taTeuYdFp2wccPXpRLEoG/gQI4zGiDB1LymzQIDAQAB
o4ICHzCCAhswHQYDVR0OBBYEFIGUjiexjHdsUd+tn2TLKT0K83GDMB8GA1UdIwQY
MBaAFEpK0DoPWSu5yXwwUqaQEl2EZBWkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2tyUU9nOVpLN25KZkRCU3BwQVNYWVJrRmFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8xNjc5MDMtZjQyNi00YmYwLTkyMzMt
YTlhYzY2YmU0OGY3LzEvZ1pTT0o3R01kMnhSMzYyZlpNc3BQUXJ6Y1lNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC8xNjc5MDMtZjQyNi00YmYwLTkyMzMtYTlhYzY2YmU0OGY3
LzEvU2tyUU9nOVpLN25KZkRCU3BwQVNYWVJrRmFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQCLVFkAwQC
ucMwMA4EAgACMAgDBgQqB6XAADANBgkqhkiG9w0BAQsFAAOCAQEAaJp9M7xqXKC4
9nU/4FrOGJ4tvRDR5ippR1S3aOgNISWPzGxaCKzN/DDh5dQN2XhZrculbRxAvdBE
Oj9ktGaDr1p2G5d3yV5c5gcbcxqJ25/1QUEWVJ4dZ1sW5fOTHBymljgWZ3GTG4L3
fT/RUepcPatZ3GfkhVRcLE22Laa8O9BRp/n04MWpr14NZe9fk8tP1vmihl9WiXf1
IUvPvdocXEpICQ9K80pVoxmAquM1Y5++cz4fazj9cjDF2+yHbM9bLp2U8oXgcPDN
Ph8ZEnoMqhSPq6PL271oNRoxM7cUzfvrWPBwIaprCJfeuwPI9jI4D4Pl/c/4QvcG
Bl/bQY/GbQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:28 2023 by rpki-client on console-fra.rpki-client.org