Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/064e35-8814-43f6-b48b-a26de313b34d/1/g53pXZFjSXlpdJQDh1aQQSJpsUA.roa
File: g53pXZFjSXlpdJQDh1aQQSJpsUA.roa (raw, json)
Hash identifier: Y3NGeHJ2IAmUxctuZ+LoZ46qTs1TH2fKgjLOuqA92hE=
Subject key identifier: 83:9D:E9:5D:91:63:49:79:69:74:94:03:87:56:90:41:22:69:B1:40
Certificate issuer: /CN=2d86956ccd7e3abb4291dd54dbd8b4342bf957cc
Certificate serial: 0189ABBE4062713081C4CD7E1027592A7F5D
Authority key identifier: 2D:86:95:6C:CD:7E:3A:BB:42:91:DD:54:DB:D8:B4:34:2B:F9:57:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LYaVbM1-OrtCkd1U29i0NCv5V8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/064e35-8814-43f6-b48b-a26de313b34d/1/g53pXZFjSXlpdJQDh1aQQSJpsUA.roa
Signing time: Mon 31 Jul 2023 11:38:39 +0000
ROA not before: Mon 31 Jul 2023 11:38:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41714
IP address blocks: 185.163.148.0/22 maxlen: 24
185.163.148.0/23 maxlen: 24
93.157.80.0/21 maxlen: 24
146.185.56.0/21 maxlen: 24
185.225.172.0/22 maxlen: 24
193.37.130.0/24 maxlen: 24
193.37.128.0/23 maxlen: 24
2a06:e300::/29 maxlen: 36
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ab:be:40:62:71:30:81:c4:cd:7e:10:27:59:2a:7f:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d86956ccd7e3abb4291dd54dbd8b4342bf957cc
Validity
Not Before: Jul 31 11:38:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=839de95d9163497969749403875690412269b140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:fc:c3:1a:34:f2:b6:9d:06:42:ff:f0:5d:67:
4a:91:64:a4:b7:a6:87:ec:29:1e:b9:8a:92:63:69:
7c:a8:0a:48:23:5f:50:db:73:f5:27:d1:5c:71:88:
9a:6c:00:aa:bc:2e:0d:db:7e:24:13:04:69:95:1c:
18:93:e1:15:ac:38:3c:62:28:f8:85:44:bd:b8:fe:
a1:19:51:11:d1:ac:18:cf:93:5e:3d:7a:f4:08:99:
07:46:a9:65:79:f3:2d:86:7a:de:d5:b8:36:1b:2d:
77:68:ee:88:ef:5b:8b:47:b6:7b:86:c2:3a:6d:59:
9e:9d:d2:dd:95:cd:76:98:09:35:9e:88:c9:3c:2e:
e2:98:ae:3f:2b:a1:46:89:34:f8:60:77:74:97:71:
25:55:e8:cf:bd:06:f7:8e:06:54:68:47:7c:6c:ad:
71:55:5a:f3:a5:f9:44:8c:91:08:f2:df:3c:9f:6b:
8c:af:00:4a:df:6e:15:b6:40:e2:41:3c:d0:54:cd:
73:f6:f1:f6:04:34:70:c7:60:83:60:d2:b3:57:88:
ad:12:18:64:79:bf:e9:4d:f6:e4:d6:4b:f5:34:22:
65:46:46:bc:e3:39:18:73:68:85:68:6f:36:f9:a8:
1d:57:13:04:30:a0:e4:d0:1a:de:6e:fc:48:61:a9:
e3:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:9D:E9:5D:91:63:49:79:69:74:94:03:87:56:90:41:22:69:B1:40
X509v3 Authority Key Identifier:
keyid:2D:86:95:6C:CD:7E:3A:BB:42:91:DD:54:DB:D8:B4:34:2B:F9:57:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LYaVbM1-OrtCkd1U29i0NCv5V8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/064e35-8814-43f6-b48b-a26de313b34d/1/g53pXZFjSXlpdJQDh1aQQSJpsUA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/064e35-8814-43f6-b48b-a26de313b34d/1/LYaVbM1-OrtCkd1U29i0NCv5V8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.157.80.0/21
146.185.56.0/21
185.163.148.0/22
185.225.172.0/22
193.37.128.0-193.37.130.255
IPv6:
2a06:e300::/29
Signature Algorithm: sha256WithRSAEncryption
24:fc:a2:83:5b:d8:4b:8e:b4:4d:b1:cc:7d:7b:34:d4:1b:95:
1f:67:02:39:29:a9:8c:7c:96:1c:df:e0:fb:87:0b:b5:c8:24:
3b:42:1b:0d:55:5b:32:74:fa:e0:97:d4:a1:7c:9f:b5:d0:a4:
b2:51:78:a6:41:91:09:b1:05:95:b5:73:9c:b7:7a:36:c2:72:
68:34:16:09:d1:31:14:1e:71:b9:10:e7:c7:80:b5:e3:31:7b:
77:13:64:cb:09:fd:b6:30:12:c2:d1:89:7d:90:bf:6d:69:cc:
f9:6f:5b:fe:6d:6d:62:9a:9d:20:86:c5:ef:97:0d:47:07:96:
3d:18:43:fc:dd:f7:f5:09:19:9e:3a:4b:12:80:94:02:5c:ee:
24:9c:55:e2:d9:06:8b:36:1c:b7:85:2b:80:e7:13:ed:c1:fc:
c3:e5:bb:68:7c:9e:41:50:01:a1:50:4a:ef:d7:72:24:e4:7f:
b3:63:a1:ad:e1:f1:69:02:f4:91:52:d0:f7:3b:f0:aa:25:f2:
73:79:6b:8f:dc:bd:23:54:66:41:18:bf:50:f3:ec:6b:bd:18:
95:d1:f5:cc:30:c6:28:b1:3d:eb:95:ad:37:77:26:9c:79:ae:
c0:62:8a:a9:15:24:82:e3:bd:ac:18:89:f2:da:00:d8:9a:e6:
ee:e0:12:d5
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgISAYmrvkBicTCBxM1+ECdZKn9dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkODY5NTZjY2Q3ZTNhYmI0MjkxZGQ1NGRiZDhiNDM0MmJm
OTU3Y2MwHhcNMjMwNzMxMTEzODM5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MzlkZTk1ZDkxNjM0OTc5Njk3NDk0MDM4NzU2OTA0MTIyNjliMTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifzDGjTytp0GQv/wXWdKkWSkt6aH
7CkeuYqSY2l8qApII19Q23P1J9FccYiabACqvC4N234kEwRplRwYk+EVrDg8Yij4
hUS9uP6hGVER0awYz5NePXr0CJkHRqllefMthnre1bg2Gy13aO6I71uLR7Z7hsI6
bVmendLdlc12mAk1nojJPC7imK4/K6FGiTT4YHd0l3ElVejPvQb3jgZUaEd8bK1x
VVrzpflEjJEI8t88n2uMrwBK324VtkDiQTzQVM1z9vH2BDRwx2CDYNKzV4itEhhk
eb/pTfbk1kv1NCJlRka84zkYc2iFaG82+agdVxMEMKDk0BrebvxIYanj1QIDAQAB
o4ICODCCAjQwHQYDVR0OBBYEFIOd6V2RY0l5aXSUA4dWkEEiabFAMB8GA1UdIwQY
MBaAFC2GlWzNfjq7QpHdVNvYtDQr+VfMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFlhVmJNMS1PcnRDa2QxVTI5aTBOQ3Y1Vjh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8wNjRlMzUtODgxNC00M2Y2LWI0OGIt
YTI2ZGUzMTNiMzRkLzEvZzUzcFhaRmpTWGxwZEpRRGgxYVFRU0pwc1VBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC8wNjRlMzUtODgxNC00M2Y2LWI0OGItYTI2ZGUzMTNiMzRk
LzEvTFlhVmJNMS1PcnRDa2QxVTI5aTBOQ3Y1Vjh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME4GCCsGAQUFBwEHAQH/BD8wPTAsBAIAATAmAwQDXZ1QAwQD
krk4AwQCuaOUAwQCueGsMAwDBAfBJYADBADBJYIwDQQCAAIwBwMFAyoG4wAwDQYJ
KoZIhvcNAQELBQADggEBACT8ooNb2EuOtE2xzH17NNQblR9nAjkpqYx8lhzf4PuH
C7XIJDtCGw1VWzJ0+uCX1KF8n7XQpLJReKZBkQmxBZW1c5y3ejbCcmg0FgnRMRQe
cbkQ58eAteMxe3cTZMsJ/bYwEsLRiX2Qv21pzPlvW/5tbWKanSCGxe+XDUcHlj0Y
Q/zd9/UJGZ46SxKAlAJc7iScVeLZBos2HLeFK4DnE+3B/MPlu2h8nkFQAaFQSu/X
ciTkf7Njoa3h8WkC9JFS0Pc78Kol8nN5a4/cvSNUZkEYv1Dz7Gu9GJXR9cwwxiix
PeuVrTd3Jpx5rsBiiqkVJILjvawYifLaANia5u7gEtU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:00 2024 by rpki-client on console-fra.rpki-client.org