Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/9c1362-46fd-489a-bb95-669a8feb7147/1/ssiXdNSpVksMZ7C7P6EfgoMkgjI.roa
File: ssiXdNSpVksMZ7C7P6EfgoMkgjI.roa (raw, json)
Hash identifier: ZrYRmVA5TlEfx64LKzEViC9n8d4hzDwPxJHx4dABJ1Q=
Subject key identifier: B2:C8:97:74:D4:A9:56:4B:0C:67:B0:BB:3F:A1:1F:82:83:24:82:32
Certificate issuer: /CN=4812ff485ffd794a6948078afe4e076afe617635
Certificate serial: 018D8E442AF9AB0C2E450ECC089216F79B54
Authority key identifier: 48:12:FF:48:5F:FD:79:4A:69:48:07:8A:FE:4E:07:6A:FE:61:76:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SBL_SF_9eUppSAeK_k4Hav5hdjU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/9c1362-46fd-489a-bb95-669a8feb7147/1/ssiXdNSpVksMZ7C7P6EfgoMkgjI.roa
Signing time: Fri 09 Feb 2024 14:27:28 +0000
ROA not before: Fri 09 Feb 2024 14:27:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56559
IP address blocks: 147.78.96.0/22 maxlen: 24
185.149.188.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 11:49:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:8e:44:2a:f9:ab:0c:2e:45:0e:cc:08:92:16:f7:9b:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4812ff485ffd794a6948078afe4e076afe617635
Validity
Not Before: Feb 9 14:27:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b2c89774d4a9564b0c67b0bb3fa11f8283248232
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:31:4f:87:c0:65:f8:ad:2e:59:ff:3e:12:98:
30:78:39:87:14:dd:11:65:44:f5:74:bd:08:18:ca:
53:58:57:5a:7d:11:43:35:49:7a:67:36:35:a2:56:
69:d4:7f:a0:2d:df:99:58:5e:97:97:ca:c1:f3:71:
65:8a:d8:5b:56:29:2f:c2:f2:76:d9:fd:7e:e3:16:
4c:91:3e:59:78:8e:47:d8:e3:bd:7b:3b:83:76:ac:
76:d0:23:bb:db:f2:fa:2d:78:a8:df:a2:73:de:1f:
ae:aa:52:0a:8f:18:2f:5b:cf:4e:f0:0a:f5:95:cf:
fe:7c:94:b3:90:4c:9f:8e:fe:3b:fa:8f:93:ac:04:
1e:71:ec:68:b1:2e:8f:8c:e1:18:56:97:6f:d5:1d:
79:b6:93:90:e9:56:33:dc:5f:58:d5:6b:27:7d:29:
ae:ca:e6:9b:88:68:3f:80:c3:92:4f:1c:c5:30:55:
bf:78:d4:88:43:b2:e3:3d:04:b9:de:34:a2:c6:05:
61:ba:aa:2e:db:e8:75:72:af:72:67:43:ad:f1:4a:
b7:be:b5:5b:9d:17:b6:04:9f:8f:61:51:a9:de:5a:
b0:f9:8f:58:6c:83:03:e5:e3:ca:42:4b:73:1b:21:
d6:b4:22:2e:22:03:e3:46:fa:46:ed:a8:df:4b:91:
85:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:C8:97:74:D4:A9:56:4B:0C:67:B0:BB:3F:A1:1F:82:83:24:82:32
X509v3 Authority Key Identifier:
keyid:48:12:FF:48:5F:FD:79:4A:69:48:07:8A:FE:4E:07:6A:FE:61:76:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SBL_SF_9eUppSAeK_k4Hav5hdjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/9c1362-46fd-489a-bb95-669a8feb7147/1/ssiXdNSpVksMZ7C7P6EfgoMkgjI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/9c1362-46fd-489a-bb95-669a8feb7147/1/SBL_SF_9eUppSAeK_k4Hav5hdjU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.96.0/22
185.149.188.0/22
Signature Algorithm: sha256WithRSAEncryption
3e:76:86:a4:54:4e:ff:49:79:a0:d1:08:ec:c4:f0:ce:c4:30:
33:73:e0:40:af:7a:80:97:42:7a:5b:d1:b2:ca:e7:d6:ad:c6:
25:3f:9f:55:68:9f:6f:e2:86:e2:6b:41:7a:39:5b:d0:5a:c9:
12:29:df:b0:37:a5:a5:74:5b:2c:72:4d:53:4b:33:cb:fb:66:
5a:59:d0:c5:2d:10:c2:d3:8c:ec:48:cc:31:10:69:44:0f:c3:
80:11:ea:e0:e2:a5:09:f5:ea:82:cd:f0:27:39:d8:cf:1c:b3:
1e:e9:a7:72:a7:af:f1:85:73:0a:e4:a7:0f:e7:51:22:c8:ee:
3e:62:d3:68:e4:bc:b4:f0:48:38:02:6f:67:d6:43:ac:eb:07:
f6:e2:8d:9c:63:be:7f:0a:9a:52:91:cb:20:cf:7f:9a:6c:7b:
d1:72:4c:e8:a4:93:96:f3:bb:49:da:6c:dc:ed:86:94:8a:f7:
cd:d2:24:e8:12:7e:64:1f:fd:44:99:61:a1:a6:c8:8d:49:dc:
3d:76:2f:78:34:52:3b:59:cf:3b:e9:da:3b:e7:f5:c7:f0:42:
cb:ff:53:5b:25:a7:25:d0:08:b5:6e:31:12:9c:d3:d7:fa:98:
b3:c1:9a:b0:bb:b1:c6:fb:b7:53:7d:06:3c:e2:0d:88:06:42:
d3:2b:b6:98
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAY2ORCr5qwwuRQ7MCJIW95tUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4MTJmZjQ4NWZmZDc5NGE2OTQ4MDc4YWZlNGUwNzZhZmU2
MTc2MzUwHhcNMjQwMjA5MTQyNzI4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMmM4OTc3NGQ0YTk1NjRiMGM2N2IwYmIzZmExMWY4MjgzMjQ4MjMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDFPh8Bl+K0uWf8+EpgweDmHFN0R
ZUT1dL0IGMpTWFdafRFDNUl6ZzY1olZp1H+gLd+ZWF6Xl8rB83FlithbVikvwvJ2
2f1+4xZMkT5ZeI5H2OO9ezuDdqx20CO72/L6LXio36Jz3h+uqlIKjxgvW89O8Ar1
lc/+fJSzkEyfjv47+o+TrAQecexosS6PjOEYVpdv1R15tpOQ6VYz3F9Y1WsnfSmu
yuabiGg/gMOSTxzFMFW/eNSIQ7LjPQS53jSixgVhuqou2+h1cq9yZ0Ot8Uq3vrVb
nRe2BJ+PYVGp3lqw+Y9YbIMD5ePKQktzGyHWtCIuIgPjRvpG7ajfS5GFcQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLLIl3TUqVZLDGewuz+hH4KDJIIyMB8GA1UdIwQY
MBaAFEgS/0hf/XlKaUgHiv5OB2r+YXY1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0JMX1NGXzllVXBwU0FlS19rNEhhdjVoZGpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS85YzEzNjItNDZmZC00ODlhLWJiOTUt
NjY5YThmZWI3MTQ3LzEvc3NpWGROU3BWa3NNWjdDN1A2RWZnb01rZ2pJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS85YzEzNjItNDZmZC00ODlhLWJiOTUtNjY5YThmZWI3MTQ3
LzEvU0JMX1NGXzllVXBwU0FlS19rNEhhdjVoZGpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCk05gAwQC
uZW8MA0GCSqGSIb3DQEBCwUAA4IBAQA+doakVE7/SXmg0QjsxPDOxDAzc+BAr3qA
l0J6W9GyyufWrcYlP59VaJ9v4obia0F6OVvQWskSKd+wN6WldFssck1TSzPL+2Za
WdDFLRDC04zsSMwxEGlED8OAEerg4qUJ9eqCzfAnOdjPHLMe6adyp6/xhXMK5KcP
51EiyO4+YtNo5Ly08Eg4Am9n1kOs6wf24o2cY75/CppSkcsgz3+abHvRckzopJOW
87tJ2mzc7YaUivfN0iToEn5kH/1EmWGhpsiNSdw9di94NFI7Wc876do75/XH8ELL
/1NbJacl0Ai1bjESnNPX+pizwZqwu7HG+7dTfQY84g2IBkLTK7aY
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:52:35 2025 by rpki-client