Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/ysQChX67F-G_pzgm5q5D0cFQ28o.roa
File: ysQChX67F-G_pzgm5q5D0cFQ28o.roa (raw, json)
Hash identifier: hxNlNnKf1XqnSwK4WJLXQzu2bkhT0cxB0Gz/AdqtjVM=
Subject key identifier: CA:C4:02:85:7E:BB:17:E1:BF:A7:38:26:E6:AE:43:D1:C1:50:DB:CA
Certificate issuer: /CN=4a4ad03a0f592bb9c97c3052a690125d846415a4
Certificate serial: 018A027B39D9780041EF179D721D2C1F1745
Authority key identifier: 4A:4A:D0:3A:0F:59:2B:B9:C9:7C:30:52:A6:90:12:5D:84:64:15:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SkrQOg9ZK7nJfDBSppASXYRkFaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/ysQChX67F-G_pzgm5q5D0cFQ28o.roa
Signing time: Thu 17 Aug 2023 07:52:24 +0000
ROA not before: Thu 17 Aug 2023 07:52:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58293
IP address blocks: 185.195.48.0/24 maxlen: 24
185.195.50.0/24 maxlen: 24
185.195.49.0/24 maxlen: 24
185.195.51.0/24 maxlen: 24
45.11.201.0/24 maxlen: 24
193.162.40.0/24 maxlen: 24
45.81.100.0/22 maxlen: 24
2a07:a5c0::/36 maxlen: 36
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:02:7b:39:d9:78:00:41:ef:17:9d:72:1d:2c:1f:17:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a4ad03a0f592bb9c97c3052a690125d846415a4
Validity
Not Before: Aug 17 07:52:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cac402857ebb17e1bfa73826e6ae43d1c150dbca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:b0:e8:be:86:51:06:be:46:b0:1d:32:b7:62:
da:69:22:4a:06:f3:97:68:2a:3d:5d:88:b0:6e:5f:
a2:fc:c5:04:5d:3f:ab:79:76:74:71:65:e2:0e:f2:
4e:11:bf:58:3e:fa:8e:21:92:12:9f:1a:bb:0b:a1:
ec:52:06:fb:77:8c:15:93:a9:03:ef:49:d3:2b:aa:
ea:d4:37:14:fc:2e:f9:90:37:75:85:a7:3e:d2:e7:
f1:73:bf:98:7b:da:ed:03:8b:03:23:16:8f:4c:5c:
9f:0a:63:9a:02:c2:c3:2e:c3:fe:83:f6:da:cc:c5:
30:23:0b:d3:43:7b:6f:c1:a4:e0:5c:d1:35:62:41:
b6:78:ba:83:43:49:16:35:69:8a:c9:0b:4f:7b:fc:
0c:ad:ab:10:9c:c0:8e:ad:bb:60:b8:7b:e6:15:2d:
bd:3c:fc:76:77:b9:8d:2e:f9:81:e2:67:69:2f:fe:
c3:ba:d0:cb:c2:5b:c6:1e:b9:a0:50:90:89:a2:07:
54:9b:2e:ba:29:c3:6f:2c:a0:c8:e0:9a:0b:48:a5:
86:0f:b1:e6:17:4f:b7:a3:d9:53:f2:73:15:db:3d:
2d:de:66:01:7c:96:e6:03:f7:11:bd:54:4e:39:0a:
7e:08:1d:ef:01:da:5d:c7:2f:36:2e:96:e1:ae:a5:
84:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:C4:02:85:7E:BB:17:E1:BF:A7:38:26:E6:AE:43:D1:C1:50:DB:CA
X509v3 Authority Key Identifier:
keyid:4A:4A:D0:3A:0F:59:2B:B9:C9:7C:30:52:A6:90:12:5D:84:64:15:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SkrQOg9ZK7nJfDBSppASXYRkFaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/ysQChX67F-G_pzgm5q5D0cFQ28o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/SkrQOg9ZK7nJfDBSppASXYRkFaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.201.0/24
45.81.100.0/22
185.195.48.0/22
193.162.40.0/24
IPv6:
2a07:a5c0::/36
Signature Algorithm: sha256WithRSAEncryption
7e:e3:39:91:9f:18:df:f0:42:db:3a:eb:a5:fe:e3:97:b5:23:
48:d1:0e:47:8b:8c:63:81:23:27:6f:e7:0a:53:84:50:61:f5:
d6:b6:37:3b:41:cf:60:64:fb:41:85:93:d7:d8:bc:70:3f:e9:
d1:c9:db:a3:44:13:40:36:aa:61:9a:70:f2:ca:1b:eb:b6:32:
de:1b:85:4f:85:92:d5:08:23:81:95:b3:f9:0f:0b:ef:10:00:
6c:e5:f9:5b:29:a7:a5:8d:46:36:80:dc:69:f5:29:0b:20:17:
37:e9:ab:93:bb:99:ed:a6:e7:0d:0b:27:db:ce:42:9f:3a:f1:
ae:be:f7:1a:cd:16:2a:c7:71:70:80:31:52:56:a4:03:aa:5a:
87:ee:62:cf:b7:86:6a:34:ed:68:e3:3d:8e:0a:00:d4:c5:8e:
08:2c:24:e1:63:8d:f2:8d:64:e7:ae:9d:34:26:cf:94:a2:60:
a8:84:11:cc:16:23:6f:c2:56:a8:9c:3c:86:14:ae:91:8c:77:
aa:33:cf:07:28:3c:85:68:7f:e3:e2:13:6f:17:ef:6e:26:0a:
a3:cd:56:71:57:fa:6f:0b:81:eb:24:78:81:fe:88:fb:05:45:
27:29:56:6a:20:23:e7:3a:90:c8:e8:7e:0c:15:c7:47:fb:bc:
04:a6:d4:0b
-----BEGIN CERTIFICATE-----
MIIFHzCCBAegAwIBAgISAYoCeznZeABB7xedch0sHxdFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNGFkMDNhMGY1OTJiYjljOTdjMzA1MmE2OTAxMjVkODQ2
NDE1YTQwHhcNMjMwODE3MDc1MjI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYWM0MDI4NTdlYmIxN2UxYmZhNzM4MjZlNmFlNDNkMWMxNTBkYmNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6bDovoZRBr5GsB0yt2LaaSJKBvOX
aCo9XYiwbl+i/MUEXT+reXZ0cWXiDvJOEb9YPvqOIZISnxq7C6HsUgb7d4wVk6kD
70nTK6rq1DcU/C75kDd1hac+0ufxc7+Ye9rtA4sDIxaPTFyfCmOaAsLDLsP+g/ba
zMUwIwvTQ3tvwaTgXNE1YkG2eLqDQ0kWNWmKyQtPe/wMrasQnMCOrbtguHvmFS29
PPx2d7mNLvmB4mdpL/7DutDLwlvGHrmgUJCJogdUmy66KcNvLKDI4JoLSKWGD7Hm
F0+3o9lT8nMV2z0t3mYBfJbmA/cRvVROOQp+CB3vAdpdxy82LpbhrqWEWwIDAQAB
o4ICKzCCAicwHQYDVR0OBBYEFMrEAoV+uxfhv6c4JuauQ9HBUNvKMB8GA1UdIwQY
MBaAFEpK0DoPWSu5yXwwUqaQEl2EZBWkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2tyUU9nOVpLN25KZkRCU3BwQVNYWVJrRmFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8xNjc5MDMtZjQyNi00YmYwLTkyMzMt
YTlhYzY2YmU0OGY3LzEveXNRQ2hYNjdGLUdfcHpnbTVxNUQwY0ZRMjhvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC8xNjc5MDMtZjQyNi00YmYwLTkyMzMtYTlhYzY2YmU0OGY3
LzEvU2tyUU9nOVpLN25KZkRCU3BwQVNYWVJrRmFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAeBAIAATAYAwQALQvJAwQC
LVFkAwQCucMwAwQAwaIoMA4EAgACMAgDBgQqB6XAADANBgkqhkiG9w0BAQsFAAOC
AQEAfuM5kZ8Y3/BC2zrrpf7jl7UjSNEOR4uMY4EjJ2/nClOEUGH11rY3O0HPYGT7
QYWT19i8cD/p0cnbo0QTQDaqYZpw8sob67Yy3huFT4WS1QgjgZWz+Q8L7xAAbOX5
WymnpY1GNoDcafUpCyAXN+mrk7uZ7abnDQsn285Cnzrxrr73Gs0WKsdxcIAxUlak
A6pah+5iz7eGajTtaOM9jgoA1MWOCCwk4WON8o1k566dNCbPlKJgqIQRzBYjb8JW
qJw8hhSukYx3qjPPByg8hWh/4+ITbxfvbiYKo81WcVf6bwuB6yR4gf6I+wVFJylW
aiAj5zqQyOh+DBXHR/u8BKbUCw==
-----END CERTIFICATE-----
Generated at Mon Jan 1 04:56:28 2024 by rpki-client on console-fra.rpki-client.org