Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/0602d4-55a5-4f49-8cfe-bee7a1839710/1/35XDvLR_TRdHIM2V6Y7wNgUvvFU.roa
File: 35XDvLR_TRdHIM2V6Y7wNgUvvFU.roa (raw, json)
Hash identifier: qbl25Ylr4KKeaL4pOr+AzwQQSeOMdWjFTh6/MC2uAW0=
Subject key identifier: DF:95:C3:BC:B4:7F:4D:17:47:20:CD:95:E9:8E:F0:36:05:2F:BC:55
Certificate issuer: /CN=627b305ba1babef4bfec68581e4039d41b5f71f2
Certificate serial: 01856B8103262C4F9B1853110F2EF1EDA222
Authority key identifier: 62:7B:30:5B:A1:BA:BE:F4:BF:EC:68:58:1E:40:39:D4:1B:5F:71:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YnswW6G6vvS_7GhYHkA51BtfcfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/0602d4-55a5-4f49-8cfe-bee7a1839710/1/35XDvLR_TRdHIM2V6Y7wNgUvvFU.roa
Signing time: Sun 01 Jan 2023 04:04:55 +0000
ROA not before: Sun 01 Jan 2023 04:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8224
IP address blocks: 195.72.192.0/19 maxlen: 19
159.253.96.0/21 maxlen: 21
185.79.52.0/22 maxlen: 22
2a01:2d8::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:81:03:26:2c:4f:9b:18:53:11:0f:2e:f1:ed:a2:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=627b305ba1babef4bfec68581e4039d41b5f71f2
Validity
Not Before: Jan 1 04:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=df95c3bcb47f4d174720cd95e98ef036052fbc55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:8a:9c:a6:04:30:31:35:a1:29:fc:b1:01:eb:
68:58:51:14:b6:cc:e6:13:a3:6b:df:48:75:40:51:
d0:51:21:3c:f0:c4:ac:30:9c:31:df:fb:a8:9c:b6:
80:96:81:b6:24:fe:a5:1b:40:92:83:b1:5b:e3:da:
25:e7:6d:87:34:4f:4a:71:fd:a7:e7:38:dd:15:bf:
76:63:f7:db:82:41:84:da:e3:44:32:c1:76:4f:68:
e3:5a:c5:1f:78:79:15:70:a9:cb:50:08:64:de:d3:
5a:1e:4d:a1:0d:c2:c4:08:96:03:1a:6b:ec:eb:81:
d3:56:75:89:b6:03:8d:57:fc:0f:9d:23:09:0e:77:
68:6e:a0:c5:cb:aa:44:af:45:79:bc:a2:a9:80:69:
2f:f1:ed:65:c6:40:db:ff:22:36:c1:10:aa:97:83:
c0:c2:fc:41:47:aa:3d:0e:7f:b4:49:4a:74:21:5f:
c4:1a:4b:35:0b:f8:29:1c:c5:fe:ab:b0:80:c2:ff:
44:22:24:d9:9d:a5:4e:5f:58:ed:d8:cf:ca:3c:22:
7c:7f:62:0b:c5:da:a7:3d:c2:21:ed:0b:22:53:63:
39:47:7e:19:48:7c:76:9c:68:17:62:61:05:3b:81:
d5:ab:aa:6f:8c:a4:9a:87:5a:1b:bb:97:db:5f:2a:
39:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:95:C3:BC:B4:7F:4D:17:47:20:CD:95:E9:8E:F0:36:05:2F:BC:55
X509v3 Authority Key Identifier:
keyid:62:7B:30:5B:A1:BA:BE:F4:BF:EC:68:58:1E:40:39:D4:1B:5F:71:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YnswW6G6vvS_7GhYHkA51BtfcfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/0602d4-55a5-4f49-8cfe-bee7a1839710/1/35XDvLR_TRdHIM2V6Y7wNgUvvFU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/0602d4-55a5-4f49-8cfe-bee7a1839710/1/YnswW6G6vvS_7GhYHkA51BtfcfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.253.96.0/21
185.79.52.0/22
195.72.192.0/19
IPv6:
2a01:2d8::/29
Signature Algorithm: sha256WithRSAEncryption
a3:b6:76:ae:f6:27:89:47:a0:2d:ea:39:81:83:f8:60:ec:c5:
8c:e6:41:06:b4:6f:59:c3:b4:e4:7a:86:ba:a3:9d:75:4e:75:
00:e8:bb:a2:1b:76:07:df:8a:f8:90:13:57:35:83:ce:79:62:
61:ba:a0:84:49:14:8e:b4:e1:f6:31:4b:c2:d2:a6:88:a6:f4:
21:9c:e9:d5:2c:7c:e2:92:f5:7f:12:81:f0:89:08:74:c9:c2:
c5:93:ce:3b:f9:dc:50:5f:db:a6:35:aa:50:67:63:7a:16:b0:
53:37:77:d5:a8:d8:a5:28:d1:ec:fd:e9:82:96:13:08:47:1c:
ec:ab:7a:c8:aa:b6:47:37:de:9d:86:fe:70:e6:4e:46:a4:2d:
96:5d:8c:1c:88:23:d5:e1:b3:4d:6a:ac:ae:67:31:62:c0:b1:
89:b3:f0:58:84:4d:72:aa:92:41:41:ee:07:0e:d4:13:69:39:
7d:2f:4f:58:d3:73:37:ed:5e:e2:b7:d7:c4:a3:04:ca:1e:36:
3e:62:2b:2d:98:c7:51:a8:e8:bd:39:db:95:e6:74:43:7b:a1:
d5:5b:fb:a4:01:45:d9:7b:71:6d:1f:ff:46:7d:5a:62:3d:4f:
38:52:a1:5a:d4:b6:02:78:ee:d7:c3:ab:e6:54:26:d0:93:a4:
56:ae:23:c2
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAYVrgQMmLE+bGFMRDy7x7aIiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyN2IzMDViYTFiYWJlZjRiZmVjNjg1ODFlNDAzOWQ0MWI1
ZjcxZjIwHhcNMjMwMTAxMDQwNDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZjk1YzNiY2I0N2Y0ZDE3NDcyMGNkOTVlOThlZjAzNjA1MmZiYzU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiYqcpgQwMTWhKfyxAetoWFEUtszm
E6Nr30h1QFHQUSE88MSsMJwx3/uonLaAloG2JP6lG0CSg7Fb49ol522HNE9Kcf2n
5zjdFb92Y/fbgkGE2uNEMsF2T2jjWsUfeHkVcKnLUAhk3tNaHk2hDcLECJYDGmvs
64HTVnWJtgONV/wPnSMJDndobqDFy6pEr0V5vKKpgGkv8e1lxkDb/yI2wRCql4PA
wvxBR6o9Dn+0SUp0IV/EGks1C/gpHMX+q7CAwv9EIiTZnaVOX1jt2M/KPCJ8f2IL
xdqnPcIh7QsiU2M5R34ZSHx2nGgXYmEFO4HVq6pvjKSah1obu5fbXyo5xwIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFN+Vw7y0f00XRyDNlemO8DYFL7xVMB8GA1UdIwQY
MBaAFGJ7MFuhur70v+xoWB5AOdQbX3HyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWW5zd1c2RzZ2dlNfN0doWUhrQTUxQnRmY2ZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8wNjAyZDQtNTVhNS00ZjQ5LThjZmUt
YmVlN2ExODM5NzEwLzEvMzVYRHZMUl9UUmRISU0yVjZZN3dOZ1V2dkZVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi8wNjAyZDQtNTVhNS00ZjQ5LThjZmUtYmVlN2ExODM5NzEw
LzEvWW5zd1c2RzZ2dlNfN0doWUhrQTUxQnRmY2ZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQDn/1gAwQC
uU80AwQFw0jAMA0EAgACMAcDBQMqAQLYMA0GCSqGSIb3DQEBCwUAA4IBAQCjtnau
9ieJR6At6jmBg/hg7MWM5kEGtG9Zw7Tkeoa6o511TnUA6LuiG3YH34r4kBNXNYPO
eWJhuqCESRSOtOH2MUvC0qaIpvQhnOnVLHzikvV/EoHwiQh0ycLFk847+dxQX9um
NapQZ2N6FrBTN3fVqNilKNHs/emClhMIRxzsq3rIqrZHN96dhv5w5k5GpC2WXYwc
iCPV4bNNaqyuZzFiwLGJs/BYhE1yqpJBQe4HDtQTaTl9L09Y03M37V7it9fEowTK
HjY+YistmMdRqOi9OduV5nRDe6HVW/ukAUXZe3FtH/9GfVpiPU84UqFa1LYCeO7X
w6vmVCbQk6RWriPC
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:04 2024 by rpki-client on console-fra.rpki-client.org