Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/a90dbf-86d6-48ce-8a6c-86aa00e13746/1/3SYJ41YaUuMxFlRN4jkN-kZulw4.roa
File: 3SYJ41YaUuMxFlRN4jkN-kZulw4.roa (raw, json)
Hash identifier: 5Wk9rssRFd776Q66tzZiZMRKhG9up33syIbxpmx8sWo=
Subject key identifier: DD:26:09:E3:56:1A:52:E3:31:16:54:4D:E2:39:0D:FA:46:6E:97:0E
Certificate issuer: /CN=fc79488ab4e1ac0f4bd467d2b4d3621c6b18eea0
Certificate serial: 0185729F0AB4ADEADF73945C255999375EB4
Authority key identifier: FC:79:48:8A:B4:E1:AC:0F:4B:D4:67:D2:B4:D3:62:1C:6B:18:EE:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_HlIirThrA9L1GfStNNiHGsY7qA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/a90dbf-86d6-48ce-8a6c-86aa00e13746/1/3SYJ41YaUuMxFlRN4jkN-kZulw4.roa
Signing time: Mon 02 Jan 2023 13:15:03 +0000
ROA not before: Mon 02 Jan 2023 13:15:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206765
IP address blocks: 185.177.16.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:32:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:9f:0a:b4:ad:ea:df:73:94:5c:25:59:99:37:5e:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc79488ab4e1ac0f4bd467d2b4d3621c6b18eea0
Validity
Not Before: Jan 2 13:15:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dd2609e3561a52e33116544de2390dfa466e970e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:5d:ce:d8:83:5e:8a:72:b6:0a:58:3e:3b:43:
1b:4a:eb:c7:d2:df:66:d1:79:85:70:d2:85:93:37:
7e:d2:7c:f9:f3:11:65:6f:00:4e:c3:ba:b9:3a:27:
a0:34:b7:75:f4:29:21:aa:dd:f0:77:35:d7:3f:cd:
09:1d:34:8b:23:e1:4d:20:ef:b7:50:19:d5:4c:2c:
5e:5a:61:82:c2:63:fc:51:f0:84:71:eb:17:ec:6d:
3f:83:c4:77:02:bc:39:ea:e1:98:2b:0f:e2:af:58:
0f:3b:cc:a1:76:5a:44:ba:32:cb:dd:80:62:9e:77:
8e:73:04:11:cd:62:d0:a0:d4:07:5f:3c:ab:b8:77:
60:18:9f:c7:29:bc:47:e8:fd:79:7f:91:54:69:01:
83:de:65:08:a1:0b:65:d9:91:6a:f3:a8:50:c8:fe:
ba:7b:7f:95:43:8e:cc:ac:0c:a9:4c:c0:0d:d8:21:
64:8e:4d:0a:5b:ca:24:af:fc:17:b4:bf:83:ef:b4:
d9:b7:e0:62:41:09:0e:14:b0:5d:1f:e1:43:4d:4f:
f6:17:2e:bd:b5:86:f8:04:4d:95:e9:8c:0f:d0:a1:
63:13:b6:f6:87:f7:49:e3:be:0f:6c:28:cc:88:ad:
83:bd:72:dc:ae:42:f1:05:ab:ed:7d:b4:71:de:50:
b5:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:26:09:E3:56:1A:52:E3:31:16:54:4D:E2:39:0D:FA:46:6E:97:0E
X509v3 Authority Key Identifier:
keyid:FC:79:48:8A:B4:E1:AC:0F:4B:D4:67:D2:B4:D3:62:1C:6B:18:EE:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_HlIirThrA9L1GfStNNiHGsY7qA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/a90dbf-86d6-48ce-8a6c-86aa00e13746/1/3SYJ41YaUuMxFlRN4jkN-kZulw4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/a90dbf-86d6-48ce-8a6c-86aa00e13746/1/_HlIirThrA9L1GfStNNiHGsY7qA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.177.16.0/22
Signature Algorithm: sha256WithRSAEncryption
27:e6:b3:7c:a2:97:77:dc:57:d3:bf:a4:e8:37:f0:eb:59:79:
6d:d9:6f:3b:ac:d8:e7:bd:3e:2e:8d:4c:90:26:d3:c5:69:6b:
56:be:d2:02:a8:44:71:d1:26:a3:c4:8b:d9:3a:ed:92:88:71:
b2:e6:32:6b:d5:19:90:b8:b5:8c:bb:b9:05:ca:9a:f3:13:49:
3b:2c:f7:6b:ca:d6:34:c6:c7:7a:86:84:77:ec:28:37:87:5c:
6b:01:b7:25:64:97:7b:ac:54:4d:0e:37:70:60:27:ba:72:0a:
d0:04:44:e4:6c:f3:d1:0c:99:1e:b0:66:00:d1:52:f4:ff:89:
07:f1:d7:9a:de:8e:64:be:77:db:9f:39:10:ff:59:0d:2e:d9:
fd:73:a2:5e:74:2e:78:26:be:c4:ea:13:88:96:55:f1:8e:4a:
b7:5b:00:9f:4a:ca:08:2e:0b:fc:94:70:21:22:88:15:16:13:
31:d9:55:34:cf:f4:a5:f4:ec:d0:67:49:b4:d7:9c:03:fc:82:
40:ba:7f:30:c6:3e:4b:ea:9a:9a:12:0c:85:19:5b:26:84:d2:
e8:b5:f1:d4:8b:bc:48:1a:bd:8e:98:88:c7:6f:89:70:df:4f:
a5:63:63:90:c6:91:0d:ee:72:28:ee:dc:56:a9:ed:2d:30:10:
61:04:2a:0c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVynwq0rerfc5RcJVmZN160MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjNzk0ODhhYjRlMWFjMGY0YmQ0NjdkMmI0ZDM2MjFjNmIx
OGVlYTAwHhcNMjMwMTAyMTMxNTAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZDI2MDllMzU2MWE1MmUzMzExNjU0NGRlMjM5MGRmYTQ2NmU5NzBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0F3O2INeinK2Clg+O0MbSuvH0t9m
0XmFcNKFkzd+0nz58xFlbwBOw7q5OiegNLd19Ckhqt3wdzXXP80JHTSLI+FNIO+3
UBnVTCxeWmGCwmP8UfCEcesX7G0/g8R3Arw56uGYKw/ir1gPO8yhdlpEujLL3YBi
nneOcwQRzWLQoNQHXzyruHdgGJ/HKbxH6P15f5FUaQGD3mUIoQtl2ZFq86hQyP66
e3+VQ47MrAypTMAN2CFkjk0KW8okr/wXtL+D77TZt+BiQQkOFLBdH+FDTU/2Fy69
tYb4BE2V6YwP0KFjE7b2h/dJ474PbCjMiK2DvXLcrkLxBavtfbRx3lC1lQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFN0mCeNWGlLjMRZUTeI5DfpGbpcOMB8GA1UdIwQY
MBaAFPx5SIq04awPS9Rn0rTTYhxrGO6gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0hsSWlyVGhyQTlMMUdmU3ROTmlIR3NZN3FBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9hOTBkYmYtODZkNi00OGNlLThhNmMt
ODZhYTAwZTEzNzQ2LzEvM1NZSjQxWWFVdU14RmxSTjRqa04ta1p1bHc0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS9hOTBkYmYtODZkNi00OGNlLThhNmMtODZhYTAwZTEzNzQ2
LzEvX0hsSWlyVGhyQTlMMUdmU3ROTmlIR3NZN3FBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCubEQMA0G
CSqGSIb3DQEBCwUAA4IBAQAn5rN8opd33FfTv6ToN/DrWXlt2W87rNjnvT4ujUyQ
JtPFaWtWvtICqERx0SajxIvZOu2SiHGy5jJr1RmQuLWMu7kFyprzE0k7LPdrytY0
xsd6hoR37Cg3h1xrAbclZJd7rFRNDjdwYCe6cgrQBETkbPPRDJkesGYA0VL0/4kH
8dea3o5kvnfbnzkQ/1kNLtn9c6JedC54Jr7E6hOIllXxjkq3WwCfSsoILgv8lHAh
IogVFhMx2VU0z/Sl9OzQZ0m015wD/IJAun8wxj5L6pqaEgyFGVsmhNLotfHUi7xI
Gr2OmIjHb4lw30+lY2OQxpEN7nIo7txWqe0tMBBhBCoM
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:55 2024 by rpki-client on console-ams.rpki-client.org