Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/112ce7-7415-4c5d-a890-ec95148fd236/1/gYX3-RccgR_4LLSwDYEhdKLUlik.roa
File: gYX3-RccgR_4LLSwDYEhdKLUlik.roa (raw, json)
Hash identifier: trg1Xr7/GQYa50Uphhedf40HexlUeRF6t4ms2yOs80w=
Subject key identifier: 81:85:F7:F9:17:1C:81:1F:F8:2C:B4:B0:0D:81:21:74:A2:D4:96:29
Certificate issuer: /CN=331706b915bab8dac2b5547fbc87adeb61e6aede
Certificate serial: 0188233F94C5CCE8DC8C53C1123C7F896373
Authority key identifier: 33:17:06:B9:15:BA:B8:DA:C2:B5:54:7F:BC:87:AD:EB:61:E6:AE:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MxcGuRW6uNrCtVR_vIet62Hmrt4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/112ce7-7415-4c5d-a890-ec95148fd236/1/gYX3-RccgR_4LLSwDYEhdKLUlik.roa
Signing time: Tue 16 May 2023 06:29:09 +0000
ROA not before: Tue 16 May 2023 06:29:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24989
IP address blocks: 185.7.71.0/24 maxlen: 24
89.110.128.0/18 maxlen: 18
2a05:c700::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:23:3f:94:c5:cc:e8:dc:8c:53:c1:12:3c:7f:89:63:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=331706b915bab8dac2b5547fbc87adeb61e6aede
Validity
Not Before: May 16 06:29:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8185f7f9171c811ff82cb4b00d812174a2d49629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c6:52:49:ee:69:9f:5e:7c:5d:55:56:1d:72:
0e:8f:fa:f8:de:54:fe:4e:a1:e0:9a:63:1f:83:5d:
34:d7:fe:b5:e8:83:58:3f:ae:ca:56:24:22:30:ea:
af:a3:ff:2e:45:c0:3d:5f:2d:a1:8d:4d:22:33:65:
01:6b:a7:00:31:b3:30:ac:a1:41:fa:34:6e:2a:c7:
7d:b1:44:fe:85:91:d0:0e:15:0b:36:14:66:cc:8a:
ed:0d:62:c3:88:99:90:ea:ec:da:6c:a6:c4:5c:4b:
97:75:92:95:88:f6:ef:ae:6a:0b:61:b4:00:3c:d9:
cb:78:f0:b0:4a:87:c5:d1:8f:31:42:11:6f:58:0c:
39:38:bc:1a:b6:2e:95:ae:9e:43:1e:41:7f:40:5c:
2d:0e:93:85:93:65:9f:a0:15:67:ba:87:f7:c3:48:
ed:d8:98:a6:c3:ff:50:b1:bf:9c:1f:4a:21:39:e5:
a9:49:bb:4a:40:19:d3:8a:37:2c:a1:37:d3:5c:ce:
a6:02:0e:bc:ff:1f:23:8c:99:f8:71:99:09:72:90:
12:e6:ae:6f:50:8e:99:35:36:af:b7:ee:a9:05:1a:
61:e9:2a:69:07:47:d9:58:3f:46:09:29:f6:ce:d1:
00:2d:12:a1:28:9b:1b:d1:12:c5:07:89:9b:ec:cd:
86:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:85:F7:F9:17:1C:81:1F:F8:2C:B4:B0:0D:81:21:74:A2:D4:96:29
X509v3 Authority Key Identifier:
keyid:33:17:06:B9:15:BA:B8:DA:C2:B5:54:7F:BC:87:AD:EB:61:E6:AE:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MxcGuRW6uNrCtVR_vIet62Hmrt4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/112ce7-7415-4c5d-a890-ec95148fd236/1/gYX3-RccgR_4LLSwDYEhdKLUlik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/112ce7-7415-4c5d-a890-ec95148fd236/1/MxcGuRW6uNrCtVR_vIet62Hmrt4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.110.128.0/18
185.7.71.0/24
IPv6:
2a05:c700::/32
Signature Algorithm: sha256WithRSAEncryption
8c:a5:69:3c:c3:fc:a6:e8:54:c3:b1:1a:66:79:a2:0a:5f:9e:
b3:f2:ab:00:10:8a:89:a4:1e:01:65:a7:ab:e0:bc:aa:7c:49:
b4:07:f8:83:64:2d:fa:37:6c:3e:77:56:0f:d8:57:a0:9d:de:
00:55:02:05:03:10:25:b5:e2:55:2b:64:7e:06:a1:a2:61:09:
25:5e:94:39:86:7f:e4:ca:b9:80:ef:e9:c8:6a:69:8c:60:ec:
82:26:f5:46:19:82:8b:41:32:84:20:0c:af:f2:8e:5a:98:33:
5a:c6:bf:e4:35:2a:db:f4:e6:1a:5e:b1:98:ec:af:71:24:06:
b5:df:d9:86:7b:4d:49:7f:3a:8f:3e:93:1e:1f:b6:f0:a4:7c:
1e:f7:f2:a3:43:38:cd:19:60:3d:b3:ab:a9:d9:26:ce:7b:c2:
88:53:d3:5c:d0:27:7f:d2:11:6f:31:48:6d:38:81:16:41:85:
52:25:c8:78:3a:31:5b:d3:4f:8f:3c:74:60:fa:c7:78:89:8e:
a6:62:a9:54:93:04:dc:55:b6:44:de:21:29:64:18:d6:65:f1:
a4:c2:5c:0a:ba:7d:bc:24:8d:65:ad:e9:57:cf:07:cd:aa:37:
34:36:1c:ea:89:c8:31:84:03:2a:4d:71:07:e0:81:85:2f:99:
3a:29:6e:d3
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYgjP5TFzOjcjFPBEjx/iWNzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzMTcwNmI5MTViYWI4ZGFjMmI1NTQ3ZmJjODdhZGViNjFl
NmFlZGUwHhcNMjMwNTE2MDYyOTA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MTg1ZjdmOTE3MWM4MTFmZjgyY2I0YjAwZDgxMjE3NGEyZDQ5NjI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMZSSe5pn158XVVWHXIOj/r43lT+
TqHgmmMfg1001/616INYP67KViQiMOqvo/8uRcA9Xy2hjU0iM2UBa6cAMbMwrKFB
+jRuKsd9sUT+hZHQDhULNhRmzIrtDWLDiJmQ6uzabKbEXEuXdZKViPbvrmoLYbQA
PNnLePCwSofF0Y8xQhFvWAw5OLwati6Vrp5DHkF/QFwtDpOFk2WfoBVnuof3w0jt
2Jimw/9Qsb+cH0ohOeWpSbtKQBnTijcsoTfTXM6mAg68/x8jjJn4cZkJcpAS5q5v
UI6ZNTavt+6pBRph6SppB0fZWD9GCSn2ztEALRKhKJsb0RLFB4mb7M2GFQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFIGF9/kXHIEf+Cy0sA2BIXSi1JYpMB8GA1UdIwQY
MBaAFDMXBrkVurjawrVUf7yHreth5q7eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXhjR3VSVzZ1TnJDdFZSX3ZJZXQ2MkhtcnQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8xMTJjZTctNzQxNS00YzVkLWE4OTAt
ZWM5NTE0OGZkMjM2LzEvZ1lYMy1SY2NnUl80TExTd0RZRWhkS0xVbGlrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC8xMTJjZTctNzQxNS00YzVkLWE4OTAtZWM5NTE0OGZkMjM2
LzEvTXhjR3VSVzZ1TnJDdFZSX3ZJZXQ2MkhtcnQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQGWW6AAwQA
uQdHMA0EAgACMAcDBQAqBccAMA0GCSqGSIb3DQEBCwUAA4IBAQCMpWk8w/ym6FTD
sRpmeaIKX56z8qsAEIqJpB4BZaer4LyqfEm0B/iDZC36N2w+d1YP2Fegnd4AVQIF
AxAlteJVK2R+BqGiYQklXpQ5hn/kyrmA7+nIammMYOyCJvVGGYKLQTKEIAyv8o5a
mDNaxr/kNSrb9OYaXrGY7K9xJAa139mGe01JfzqPPpMeH7bwpHwe9/KjQzjNGWA9
s6up2SbOe8KIU9Nc0Cd/0hFvMUhtOIEWQYVSJch4OjFb00+PPHRg+sd4iY6mYqlU
kwTcVbZE3iEpZBjWZfGkwlwKun28JI1lrelXzwfNqjc0NhzqicgxhAMqTXEH4IGF
L5k6KW7T
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:01 2024 by rpki-client on console-ams.rpki-client.org