Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/AiBZduSYNDIzEiLAEcrhkpO03k0.roa
File: AiBZduSYNDIzEiLAEcrhkpO03k0.roa (raw, json)
Hash identifier: F7mmFY2CjLLtjS8tIzH4/Zh46fGMklbOr8BW/pvG+LM=
Subject key identifier: 02:20:59:76:E4:98:34:32:33:12:22:C0:11:CA:E1:92:93:B4:DE:4D
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 0186C71F76695AC206FE400947E8742D9A89
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/AiBZduSYNDIzEiLAEcrhkpO03k0.roa
Signing time: Thu 09 Mar 2023 16:06:13 +0000
ROA not before: Thu 09 Mar 2023 16:06:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30738
IP address blocks: 195.211.53.0/24 maxlen: 24
188.130.182.0/24 maxlen: 24
2001:1468:8000::/36 maxlen: 36
2001:1468::/32 maxlen: 33
2001:146a::/32 maxlen: 36
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c7:1f:76:69:5a:c2:06:fe:40:09:47:e8:74:2d:9a:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Mar 9 16:06:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=02205976e4983432331222c011cae19293b4de4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a0:99:b0:b3:6c:b2:52:28:82:b8:cd:a0:67:
f8:7d:9d:cb:d3:dc:fc:62:86:92:72:31:60:0f:00:
50:08:98:7a:1f:a7:ea:24:b9:e5:1c:7b:25:fa:00:
3f:72:59:18:c2:e6:bc:bf:f6:aa:31:a8:dd:8d:1f:
ce:66:87:9c:ab:83:59:6a:7b:94:19:20:b1:d6:94:
76:99:9f:36:20:76:f6:1c:bc:b7:bf:88:cd:75:a2:
11:bc:80:db:b4:f3:4d:48:ef:ff:89:22:9b:88:08:
bf:dc:c4:12:3e:54:49:53:4d:64:d3:0b:9f:1e:1e:
c4:8d:7b:be:5d:d7:5e:6c:89:2c:a8:c8:6e:0c:45:
1c:11:0e:33:0b:86:da:b9:2f:e9:79:07:e7:9e:c0:
e9:70:86:d2:e1:43:8e:83:88:2f:a6:56:33:38:ff:
f0:c8:a4:7f:cd:56:34:ee:0a:44:c9:dc:f6:b6:4b:
80:d9:2b:04:45:90:bb:73:9d:8b:b2:38:76:6e:06:
08:bd:14:11:04:97:a5:9c:33:82:77:ad:67:ee:36:
f6:31:a2:aa:e1:c0:1d:2f:24:d8:a8:1a:d5:03:2e:
9b:2a:bd:9d:a3:96:a2:e4:10:c5:4b:6f:5b:66:f4:
0b:76:56:10:f2:d5:d1:73:5b:da:f5:dd:b6:b4:14:
98:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:20:59:76:E4:98:34:32:33:12:22:C0:11:CA:E1:92:93:B4:DE:4D
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/AiBZduSYNDIzEiLAEcrhkpO03k0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.130.182.0/24
195.211.53.0/24
IPv6:
2001:1468::/32
2001:146a::/32
Signature Algorithm: sha256WithRSAEncryption
97:3d:64:39:45:51:80:02:3c:83:01:0c:58:5b:bf:35:d4:04:
41:1b:64:6d:b8:b4:39:61:ac:c0:0a:5a:f8:c5:43:35:e9:63:
a5:45:11:15:4c:be:a0:5a:67:97:4e:ab:96:73:82:67:02:e8:
3f:ee:24:aa:00:d4:fd:d9:b2:d4:f3:d2:a3:a9:c7:e5:e7:3d:
48:c0:1b:77:25:e9:69:9d:fd:03:ae:31:79:9b:07:b2:fe:94:
49:79:18:27:78:e6:84:7f:50:81:19:c0:07:5c:a5:6f:db:06:
03:82:89:cc:d4:47:40:8d:ac:ac:6b:a4:81:1c:04:5c:bc:23:
95:7c:e5:96:d7:02:0c:bb:0d:55:bc:05:86:d4:39:4c:c7:b6:
1d:e7:3f:b8:1d:f9:2d:f0:95:49:90:65:a8:34:74:e9:f7:ff:
34:ac:0b:62:b3:3e:a1:2d:54:b1:db:bc:48:65:eb:1c:db:6b:
56:38:3e:82:36:98:af:ad:62:b9:70:12:ac:ce:a5:ba:f9:4b:
e8:dd:77:2e:07:14:87:68:ee:24:3f:51:62:61:8e:37:f8:19:
21:2f:88:ed:e3:1a:d9:a0:f4:39:a4:18:29:38:38:31:8b:04:
f4:e1:7d:6c:ed:d9:dd:22:d8:85:8c:b1:86:85:4a:d9:a8:8f:
78:91:28:03
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAYbHH3ZpWsIG/kAJR+h0LZqJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4NWI4NTc3MDZkYWM1NGUyMGNhMGQxMWJkNjQxNmNiNjM0
MjAzYjQwHhcNMjMwMzA5MTYwNjEzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMjIwNTk3NmU0OTgzNDMyMzMxMjIyYzAxMWNhZTE5MjkzYjRkZTRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0aCZsLNsslIogrjNoGf4fZ3L09z8
YoaScjFgDwBQCJh6H6fqJLnlHHsl+gA/clkYwua8v/aqMajdjR/OZoecq4NZanuU
GSCx1pR2mZ82IHb2HLy3v4jNdaIRvIDbtPNNSO//iSKbiAi/3MQSPlRJU01k0wuf
Hh7EjXu+XddebIksqMhuDEUcEQ4zC4bauS/peQfnnsDpcIbS4UOOg4gvplYzOP/w
yKR/zVY07gpEydz2tkuA2SsERZC7c52Lsjh2bgYIvRQRBJelnDOCd61n7jb2MaKq
4cAdLyTYqBrVAy6bKr2do5ai5BDFS29bZvQLdlYQ8tXRc1va9d22tBSYWwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFAIgWXbkmDQyMxIiwBHK4ZKTtN5NMB8GA1UdIwQY
MBaAFIhbhXcG2sVOIMoNEb1kFstjQgO0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMt
MTY2OTljOTZkZDVlLzEvQWlCWmR1U1lOREl6RWlMQUVjcmhrcE8wM2swLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMtMTY2OTljOTZkZDVl
LzEvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjASBAIAATAMAwQAvIK2AwQA
w9M1MBQEAgACMA4DBQAgARRoAwUAIAEUajANBgkqhkiG9w0BAQsFAAOCAQEAlz1k
OUVRgAI8gwEMWFu/NdQEQRtkbbi0OWGswApa+MVDNeljpUURFUy+oFpnl06rlnOC
ZwLoP+4kqgDU/dmy1PPSo6nH5ec9SMAbdyXpaZ39A64xeZsHsv6USXkYJ3jmhH9Q
gRnAB1ylb9sGA4KJzNRHQI2srGukgRwEXLwjlXzlltcCDLsNVbwFhtQ5TMe2Hec/
uB35LfCVSZBlqDR06ff/NKwLYrM+oS1Usdu8SGXrHNtrVjg+gjaYr61iuXASrM6l
uvlL6N13LgcUh2juJD9RYmGON/gZIS+I7eMa2aD0OaQYKTg4MYsE9OF9bO3Z3SLY
hYyxhoVK2aiPeJEoAw==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:51 2023 by rpki-client on console-ams.rpki-client.org