Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/sdCUgRe1LIM7IrNN11QKF78P_gc.roa
File: sdCUgRe1LIM7IrNN11QKF78P_gc.roa (raw, json)
Hash identifier: 7vnx4JY3G+4bt8kZ8bbVLNybBwoS3yaRJssLck+iVcI=
Subject key identifier: B1:D0:94:81:17:B5:2C:83:3B:22:B3:4D:D7:54:0A:17:BF:0F:FE:07
Certificate issuer: /CN=5c75114adc2cf8edea505957e79e89044266c24e
Certificate serial: 0185711E58E53ECAAF41D6469FAB5D9C4EDF
Authority key identifier: 5C:75:11:4A:DC:2C:F8:ED:EA:50:59:57:E7:9E:89:04:42:66:C2:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XHURStws-O3qUFlX556JBEJmwk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/sdCUgRe1LIM7IrNN11QKF78P_gc.roa
Signing time: Mon 02 Jan 2023 06:14:52 +0000
ROA not before: Mon 02 Jan 2023 06:14:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197988
IP address blocks: 95.183.48.0/20 maxlen: 20
95.183.58.0/24 maxlen: 24
46.28.200.0/21 maxlen: 24
2a0c:2240::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:1e:58:e5:3e:ca:af:41:d6:46:9f:ab:5d:9c:4e:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c75114adc2cf8edea505957e79e89044266c24e
Validity
Not Before: Jan 2 06:14:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b1d0948117b52c833b22b34dd7540a17bf0ffe07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:d4:e6:fc:85:bc:8a:16:31:90:7d:b2:cb:87:
84:63:13:b3:70:f3:c9:b0:e4:b5:2e:8a:c1:6b:a2:
d4:83:7a:02:2a:12:9c:ec:0d:a7:73:6b:86:a1:07:
5c:22:9e:60:7b:74:ef:32:70:8e:cd:3a:d7:a4:fb:
94:7b:30:03:a1:ba:c0:2c:d9:e9:8a:96:ea:f4:0c:
79:be:3d:f5:2c:de:ed:1e:6e:1a:76:bb:e0:c5:8a:
51:1f:e2:98:a4:f4:10:d7:ae:b6:55:8a:c0:49:bc:
51:a9:d5:cf:56:08:35:57:bd:8b:ec:a3:3e:67:ec:
f9:d4:d8:c1:be:97:7e:49:97:f3:2f:94:e6:2f:ef:
02:48:9c:be:6d:f8:ea:34:1b:94:37:4d:48:02:41:
7a:eb:4e:ee:9d:88:90:a9:21:29:14:27:f7:1b:dd:
e9:cb:15:e4:e2:50:48:9e:2e:db:3b:8a:d4:02:4b:
f9:8e:78:2a:55:ab:52:27:dd:93:5b:24:f0:fc:4f:
98:47:82:6c:be:32:53:62:2c:95:cf:03:ee:3e:f5:
81:c5:32:af:46:3a:66:21:3c:ad:af:82:c6:82:a7:
ef:79:5c:d9:f2:36:ed:5f:ff:33:eb:93:b1:1b:05:
6d:2d:8c:76:09:d4:63:51:33:ff:5e:3e:15:90:68:
c5:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:D0:94:81:17:B5:2C:83:3B:22:B3:4D:D7:54:0A:17:BF:0F:FE:07
X509v3 Authority Key Identifier:
keyid:5C:75:11:4A:DC:2C:F8:ED:EA:50:59:57:E7:9E:89:04:42:66:C2:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XHURStws-O3qUFlX556JBEJmwk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/sdCUgRe1LIM7IrNN11QKF78P_gc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.28.200.0/21
95.183.48.0/20
IPv6:
2a0c:2240::/48
Signature Algorithm: sha256WithRSAEncryption
37:ca:ff:af:d9:b2:57:ba:84:e1:7f:fe:75:79:f4:e8:3f:c7:
4c:58:be:ab:a9:f5:65:86:8e:f5:18:0a:6b:89:aa:41:da:38:
6c:1e:d5:32:34:7b:aa:bb:09:fb:2a:ac:82:05:1e:0e:40:2e:
d6:ef:ff:15:21:bf:9d:e7:ad:2b:53:b6:c4:dd:0f:22:2e:8c:
bb:66:1d:95:0e:64:8c:46:f9:14:e6:d3:cd:a7:a2:44:2c:1d:
63:2c:73:e4:5e:25:d8:ee:3f:18:6e:d2:16:24:f8:62:8d:20:
42:1b:e7:6c:a1:b7:77:94:be:3c:9c:02:8e:78:dc:0b:e6:30:
bd:5f:9a:e7:a7:6a:1d:e8:51:b2:a6:c8:76:dc:6c:a2:1d:75:
6b:c0:b8:d3:15:ed:25:40:04:43:5e:8e:6b:0d:58:d5:49:bf:
2b:cd:d3:82:3d:b3:0d:28:e7:9c:3c:6d:df:b1:2c:af:62:57:
11:a3:6a:73:c0:2b:df:70:42:f8:1a:68:1c:d1:d5:01:3b:75:
ec:80:a0:e1:ac:75:33:2e:6d:17:68:54:f8:bd:2b:4d:19:82:
f8:11:0e:d6:22:f4:a1:e5:95:0e:cf:05:61:20:42:f1:72:17:
01:c6:a5:94:c8:ac:14:80:4e:c9:af:dd:00:ee:99:c6:5a:d1:
55:f7:2e:5c
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAYVxHljlPsqvQdZGn6tdnE7fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjNzUxMTRhZGMyY2Y4ZWRlYTUwNTk1N2U3OWU4OTA0NDI2
NmMyNGUwHhcNMjMwMTAyMDYxNDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMWQwOTQ4MTE3YjUyYzgzM2IyMmIzNGRkNzU0MGExN2JmMGZmZTA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNTm/IW8ihYxkH2yy4eEYxOzcPPJ
sOS1LorBa6LUg3oCKhKc7A2nc2uGoQdcIp5ge3TvMnCOzTrXpPuUezADobrALNnp
ipbq9Ax5vj31LN7tHm4adrvgxYpRH+KYpPQQ1662VYrASbxRqdXPVgg1V72L7KM+
Z+z51NjBvpd+SZfzL5TmL+8CSJy+bfjqNBuUN01IAkF6607unYiQqSEpFCf3G93p
yxXk4lBIni7bO4rUAkv5jngqVatSJ92TWyTw/E+YR4JsvjJTYiyVzwPuPvWBxTKv
RjpmITytr4LGgqfveVzZ8jbtX/8z65OxGwVtLYx2CdRjUTP/Xj4VkGjFTQIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFLHQlIEXtSyDOyKzTddUChe/D/4HMB8GA1UdIwQY
MBaAFFx1EUrcLPjt6lBZV+eeiQRCZsJOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEhVUlN0d3MtTzNxVUZsWDU1NkpCRUptd2s0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9jNjk3MDQtZGI3MS00YjFkLWI4YWMt
YzVkYzA5NGRmOWM0LzEvc2RDVWdSZTFMSU03SXJOTjExUUtGNzhQX2djLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9jNjk3MDQtZGI3MS00YjFkLWI4YWMtYzVkYzA5NGRmOWM0
LzEvWEhVUlN0d3MtTzNxVUZsWDU1NkpCRUptd2s0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQDLhzIAwQE
X7cwMA8EAgACMAkDBwAqDCJAAAAwDQYJKoZIhvcNAQELBQADggEBADfK/6/Zsle6
hOF//nV59Og/x0xYvqup9WWGjvUYCmuJqkHaOGwe1TI0e6q7CfsqrIIFHg5ALtbv
/xUhv53nrStTtsTdDyIujLtmHZUOZIxG+RTm082nokQsHWMsc+ReJdjuPxhu0hYk
+GKNIEIb52yht3eUvjycAo543AvmML1fmuenah3oUbKmyHbcbKIddWvAuNMV7SVA
BENejmsNWNVJvyvN04I9sw0o55w8bd+xLK9iVxGjanPAK99wQvgaaBzR1QE7deyA
oOGsdTMubRdoVPi9K00ZgvgRDtYi9KHllQ7PBWEgQvFyFwHGpZTIrBSATsmv3QDu
mcZa0VX3Llw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:13:41 2024 by rpki-client on console-ams.rpki-client.org