Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/68239f-09a3-4108-89ba-eee50dd9193c/1/0zYNayl1LuCDOpRFZcHBRa5Uzs4.roa
File: 0zYNayl1LuCDOpRFZcHBRa5Uzs4.roa (raw, json)
Hash identifier: YtJW9dKi56eLfF6ef2RvTVXBq0srhG5k6Do2vgrDcQc=
Subject key identifier: D3:36:0D:6B:29:75:2E:E0:83:3A:94:45:65:C1:C1:45:AE:54:CE:CE
Certificate issuer: /CN=005f0d44b221f4b11c89db68969f97c3c7154906
Certificate serial: 01857139E842515D41158DE57F714ABB3762
Authority key identifier: 00:5F:0D:44:B2:21:F4:B1:1C:89:DB:68:96:9F:97:C3:C7:15:49:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AF8NRLIh9LEcidtolp-Xw8cVSQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/68239f-09a3-4108-89ba-eee50dd9193c/1/0zYNayl1LuCDOpRFZcHBRa5Uzs4.roa
Signing time: Mon 02 Jan 2023 06:44:58 +0000
ROA not before: Mon 02 Jan 2023 06:44:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203099
IP address blocks: 185.142.60.0/22 maxlen: 24
2a07:2a00::/29 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:39:e8:42:51:5d:41:15:8d:e5:7f:71:4a:bb:37:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=005f0d44b221f4b11c89db68969f97c3c7154906
Validity
Not Before: Jan 2 06:44:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d3360d6b29752ee0833a944565c1c145ae54cece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c2:a0:43:b4:c6:8b:cd:de:69:2d:95:2c:8f:
61:53:0f:c6:82:75:03:81:52:44:bc:1c:a9:80:d0:
ac:8d:4f:0b:ee:00:b3:53:66:5f:7f:1a:56:7d:ab:
d3:61:0d:4c:e1:2f:df:2b:30:0e:1d:34:38:05:2a:
d1:05:01:15:99:8d:5b:ea:29:91:25:a4:36:2f:c7:
35:69:ec:e9:8b:c1:6f:07:b5:b5:4e:f4:03:10:10:
c3:40:8e:97:e5:1f:c6:28:15:33:20:86:a8:88:ff:
13:a9:72:4a:75:12:a5:71:8b:89:2c:6d:22:b8:d9:
c7:47:b4:06:d6:f1:e2:b6:a4:dc:01:7a:33:19:35:
ff:9e:bf:b5:d1:a3:5d:72:ed:2b:6c:80:d9:a3:0e:
0c:9c:b9:b3:ee:89:9b:46:8d:2e:64:d0:d7:6c:ba:
c7:03:97:33:34:f5:0d:77:e5:fc:5e:a5:c6:38:b3:
87:a9:e2:78:67:ba:a0:45:4e:18:b0:e7:5c:54:99:
4f:85:8c:ff:af:e9:3f:14:02:ea:a8:0f:8d:7b:b3:
24:27:2d:03:88:68:8f:58:cd:65:80:ac:2a:bc:1e:
9b:03:8f:2b:1f:61:2f:c2:9e:b1:78:35:22:1e:34:
14:6b:3c:d8:f3:9d:86:49:ba:2d:4a:fa:9d:36:50:
d9:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:36:0D:6B:29:75:2E:E0:83:3A:94:45:65:C1:C1:45:AE:54:CE:CE
X509v3 Authority Key Identifier:
keyid:00:5F:0D:44:B2:21:F4:B1:1C:89:DB:68:96:9F:97:C3:C7:15:49:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AF8NRLIh9LEcidtolp-Xw8cVSQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/68239f-09a3-4108-89ba-eee50dd9193c/1/0zYNayl1LuCDOpRFZcHBRa5Uzs4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/68239f-09a3-4108-89ba-eee50dd9193c/1/AF8NRLIh9LEcidtolp-Xw8cVSQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.142.60.0/22
IPv6:
2a07:2a00::/29
Signature Algorithm: sha256WithRSAEncryption
73:d6:17:a8:f9:75:1f:96:22:85:b9:ff:17:bf:1c:81:84:00:
83:d2:1c:1f:20:31:bf:21:d2:e9:8a:9a:7b:4f:c8:11:0e:cf:
bf:4a:70:91:a0:04:e3:b4:2a:d4:ba:09:e4:da:83:68:f9:cc:
95:3d:a5:0e:fb:39:8e:c4:bd:9a:1a:7f:be:01:53:91:50:76:
7a:04:13:c1:3f:d5:40:c3:a6:f7:76:11:5b:84:d7:7b:aa:d3:
db:57:7f:01:32:77:06:02:c1:9d:d6:15:8f:3e:a3:8f:40:0a:
c4:63:24:54:82:66:b0:52:5e:41:e4:e0:59:c0:ca:ea:9d:b9:
a6:55:41:d7:fc:62:9f:8c:5c:13:9a:a6:7b:3f:a4:58:5c:b7:
c1:a3:58:5a:37:74:73:fa:20:bb:4e:8c:95:b8:ac:e2:dc:5a:
47:84:0a:17:d1:dc:40:7d:5b:ee:c5:14:24:c7:72:30:a9:23:
b2:9d:87:9f:6c:37:6c:54:f5:bd:6c:08:7c:36:db:ea:cd:96:
7e:45:1c:28:4b:8c:f1:9d:ad:66:92:b5:9b:3a:49:e9:75:5e:
bd:c3:3b:00:3d:ba:96:18:97:78:6e:f7:9c:ed:06:92:38:13:
99:2b:8d:f4:e1:8d:54:1f:4c:78:f7:53:87:35:15:99:b8:c7:
1f:b5:f4:17
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVxOehCUV1BFY3lf3FKuzdiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwNWYwZDQ0YjIyMWY0YjExYzg5ZGI2ODk2OWY5N2MzYzcx
NTQ5MDYwHhcNMjMwMTAyMDY0NDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMzM2MGQ2YjI5NzUyZWUwODMzYTk0NDU2NWMxYzE0NWFlNTRjZWNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8KgQ7TGi83eaS2VLI9hUw/GgnUD
gVJEvBypgNCsjU8L7gCzU2ZffxpWfavTYQ1M4S/fKzAOHTQ4BSrRBQEVmY1b6imR
JaQ2L8c1aezpi8FvB7W1TvQDEBDDQI6X5R/GKBUzIIaoiP8TqXJKdRKlcYuJLG0i
uNnHR7QG1vHitqTcAXozGTX/nr+10aNdcu0rbIDZow4MnLmz7ombRo0uZNDXbLrH
A5czNPUNd+X8XqXGOLOHqeJ4Z7qgRU4YsOdcVJlPhYz/r+k/FALqqA+Ne7MkJy0D
iGiPWM1lgKwqvB6bA48rH2Evwp6xeDUiHjQUazzY852GSbotSvqdNlDZPwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFNM2DWspdS7ggzqURWXBwUWuVM7OMB8GA1UdIwQY
MBaAFABfDUSyIfSxHInbaJafl8PHFUkGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUY4TlJMSWg5TEVjaWR0b2xwLVh3OGNWU1FZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My82ODIzOWYtMDlhMy00MTA4LTg5YmEt
ZWVlNTBkZDkxOTNjLzEvMHpZTmF5bDFMdUNET3BSRlpjSEJSYTVVenM0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My82ODIzOWYtMDlhMy00MTA4LTg5YmEtZWVlNTBkZDkxOTNj
LzEvQUY4TlJMSWg5TEVjaWR0b2xwLVh3OGNWU1FZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuY48MA0E
AgACMAcDBQMqByoAMA0GCSqGSIb3DQEBCwUAA4IBAQBz1heo+XUfliKFuf8XvxyB
hACD0hwfIDG/IdLpipp7T8gRDs+/SnCRoATjtCrUugnk2oNo+cyVPaUO+zmOxL2a
Gn++AVORUHZ6BBPBP9VAw6b3dhFbhNd7qtPbV38BMncGAsGd1hWPPqOPQArEYyRU
gmawUl5B5OBZwMrqnbmmVUHX/GKfjFwTmqZ7P6RYXLfBo1haN3Rz+iC7ToyVuKzi
3FpHhAoX0dxAfVvuxRQkx3IwqSOynYefbDdsVPW9bAh8NtvqzZZ+RRwoS4zxna1m
krWbOknpdV69wzsAPbqWGJd4bvec7QaSOBOZK4304Y1UH0x491OHNRWZuMcftfQX
-----END CERTIFICATE-----
Generated at Tue Jan 2 09:19:53 2024 by rpki-client on console-fra.rpki-client.org