Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/0005b2-d28b-4bf9-9bce-cd81fc580f47/1/IJ69SSbqHHMjF76-DuNdTevpSqo.roa
File: IJ69SSbqHHMjF76-DuNdTevpSqo.roa (raw, json)
Hash identifier: 5v+x/h5hPczw36dBBM2OOcBXepVMxdLNYpyN3wfeGuc=
Subject key identifier: 20:9E:BD:49:26:EA:1C:73:23:17:BE:BE:0E:E3:5D:4D:EB:E9:4A:AA
Certificate issuer: /CN=502718ba6839397c6c57eced6d509571eaeceddf
Certificate serial: 01857139F32A6AF43269AF4E39ED9F6153CE
Authority key identifier: 50:27:18:BA:68:39:39:7C:6C:57:EC:ED:6D:50:95:71:EA:EC:ED:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UCcYumg5OXxsV-ztbVCVcers7d8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/0005b2-d28b-4bf9-9bce-cd81fc580f47/1/IJ69SSbqHHMjF76-DuNdTevpSqo.roa
Signing time: Mon 02 Jan 2023 06:45:01 +0000
ROA not before: Mon 02 Jan 2023 06:45:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206132
IP address blocks: 185.195.166.0/24 maxlen: 24
185.195.164.0/24 maxlen: 24
185.195.164.0/23 maxlen: 23
185.195.164.0/22 maxlen: 22
185.195.165.0/24 maxlen: 24
185.195.166.0/23 maxlen: 23
185.195.167.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:39:f3:2a:6a:f4:32:69:af:4e:39:ed:9f:61:53:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=502718ba6839397c6c57eced6d509571eaeceddf
Validity
Not Before: Jan 2 06:45:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=209ebd4926ea1c732317bebe0ee35d4debe94aaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:64:18:7f:9b:a1:61:21:f6:be:8f:cb:ba:51:
f4:ef:37:2d:d4:af:1b:aa:10:45:88:14:2a:e3:1e:
09:c2:66:73:06:34:35:19:76:2d:e2:c3:51:fa:38:
8b:a6:4b:8d:74:16:f1:44:23:70:0d:02:8e:35:46:
42:9b:8b:fe:16:66:9a:45:18:f0:73:68:aa:f9:a3:
c3:3d:20:3b:ff:da:d9:a7:16:b8:6e:26:9f:c4:1f:
ce:e6:76:48:9d:10:9c:b9:9a:77:f5:9a:ad:b3:c2:
92:39:b7:cb:a3:cf:cb:82:73:87:a8:01:34:61:de:
82:05:44:a4:83:c0:a4:92:5d:ca:88:5b:c7:7a:7b:
b4:c0:a9:08:09:f1:2e:92:15:be:df:15:be:fd:b6:
b7:71:b4:a9:80:4a:96:05:39:2e:c0:bc:39:f9:60:
d8:c0:67:99:9f:95:bf:64:fe:90:81:a1:53:d0:57:
fe:f8:6f:e6:9c:fb:4d:0d:c6:e8:1b:f4:79:41:e3:
c9:c0:fa:bb:65:68:9c:23:54:2d:46:23:73:80:8e:
e1:3a:6e:80:10:72:00:d8:ab:bb:32:ac:e8:1e:d2:
70:c3:01:84:ed:10:52:b1:38:83:a6:7c:44:78:1f:
34:45:07:82:8b:b5:5e:c9:b5:90:af:35:97:04:6a:
1e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:9E:BD:49:26:EA:1C:73:23:17:BE:BE:0E:E3:5D:4D:EB:E9:4A:AA
X509v3 Authority Key Identifier:
keyid:50:27:18:BA:68:39:39:7C:6C:57:EC:ED:6D:50:95:71:EA:EC:ED:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UCcYumg5OXxsV-ztbVCVcers7d8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0005b2-d28b-4bf9-9bce-cd81fc580f47/1/IJ69SSbqHHMjF76-DuNdTevpSqo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0005b2-d28b-4bf9-9bce-cd81fc580f47/1/UCcYumg5OXxsV-ztbVCVcers7d8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.195.164.0/22
Signature Algorithm: sha256WithRSAEncryption
6a:da:60:26:b0:02:31:f5:e0:ee:af:2d:b6:95:0e:74:35:50:
06:aa:a5:65:d8:f2:22:15:d9:52:33:0c:8d:3c:96:27:2f:f6:
35:8a:42:98:ef:d9:e6:47:b4:26:72:fc:ee:65:95:21:35:a9:
3b:77:ed:7f:5c:e4:a2:c6:52:fc:47:27:79:79:33:bd:d2:da:
32:c6:aa:c9:59:d3:95:b4:50:7c:1d:91:68:e6:8d:d9:bc:39:
db:44:da:08:e7:5f:c7:01:13:9c:3c:39:cb:ad:3b:f2:7e:ff:
4f:8f:4d:7d:dd:1f:fa:dd:3f:76:8d:82:27:32:31:2d:c3:48:
13:b0:20:78:63:eb:62:97:81:2b:31:a3:f8:fd:91:13:70:8c:
b5:9c:f3:2f:cc:90:33:78:d1:7a:e1:be:e6:c3:95:fd:70:64:
8c:b9:b0:4c:56:df:8c:14:29:78:6e:42:68:9c:4e:02:a2:46:
07:a2:a8:be:a6:f3:36:dd:4b:24:91:94:4e:7e:12:48:8b:32:
b7:d0:57:5c:3d:4d:9c:49:51:a8:80:c4:c3:74:99:15:62:24:
f9:c5:d6:74:ab:f0:1a:99:fb:58:20:d0:68:25:29:7b:4f:ea:
b5:03:2d:93:98:f3:08:ac:9a:a6:9e:4e:18:64:8d:37:b1:53:
28:ed:81:c9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxOfMqavQyaa9OOe2fYVPOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwMjcxOGJhNjgzOTM5N2M2YzU3ZWNlZDZkNTA5NTcxZWFl
Y2VkZGYwHhcNMjMwMTAyMDY0NTAxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMDllYmQ0OTI2ZWExYzczMjMxN2JlYmUwZWUzNWQ0ZGViZTk0YWFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2QYf5uhYSH2vo/LulH07zct1K8b
qhBFiBQq4x4JwmZzBjQ1GXYt4sNR+jiLpkuNdBbxRCNwDQKONUZCm4v+FmaaRRjw
c2iq+aPDPSA7/9rZpxa4biafxB/O5nZInRCcuZp39Zqts8KSObfLo8/LgnOHqAE0
Yd6CBUSkg8Ckkl3KiFvHenu0wKkICfEukhW+3xW+/ba3cbSpgEqWBTkuwLw5+WDY
wGeZn5W/ZP6QgaFT0Ff++G/mnPtNDcboG/R5QePJwPq7ZWicI1QtRiNzgI7hOm6A
EHIA2Ku7MqzoHtJwwwGE7RBSsTiDpnxEeB80RQeCi7VeybWQrzWXBGoe9wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCCevUkm6hxzIxe+vg7jXU3r6UqqMB8GA1UdIwQY
MBaAFFAnGLpoOTl8bFfs7W1QlXHq7O3fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUNjWXVtZzVPWHhzVi16dGJWQ1ZjZXJzN2Q4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8wMDA1YjItZDI4Yi00YmY5LTliY2Ut
Y2Q4MWZjNTgwZjQ3LzEvSUo2OVNTYnFISE1qRjc2LUR1TmRUZXZwU3FvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC8wMDA1YjItZDI4Yi00YmY5LTliY2UtY2Q4MWZjNTgwZjQ3
LzEvVUNjWXVtZzVPWHhzVi16dGJWQ1ZjZXJzN2Q4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCucOkMA0G
CSqGSIb3DQEBCwUAA4IBAQBq2mAmsAIx9eDury22lQ50NVAGqqVl2PIiFdlSMwyN
PJYnL/Y1ikKY79nmR7QmcvzuZZUhNak7d+1/XOSixlL8Ryd5eTO90toyxqrJWdOV
tFB8HZFo5o3ZvDnbRNoI51/HAROcPDnLrTvyfv9Pj0193R/63T92jYInMjEtw0gT
sCB4Y+til4ErMaP4/ZETcIy1nPMvzJAzeNF64b7mw5X9cGSMubBMVt+MFCl4bkJo
nE4CokYHoqi+pvM23UskkZROfhJIizK30FdcPU2cSVGogMTDdJkVYiT5xdZ0q/Aa
mftYINBoJSl7T+q1Ay2TmPMIrJqmnk4YZI03sVMo7YHJ
-----END CERTIFICATE-----
Generated at Tue Jan 2 01:49:53 2024 by rpki-client on console-fra.rpki-client.org