Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/vnQ30J3MjBTbVkbTukBFP_UcvFM.roa
File: vnQ30J3MjBTbVkbTukBFP_UcvFM.roa (raw, json)
Hash identifier: q3y8OHPu7s07uK/4WYzNITbrWFfiGCOneoKftzeGPgQ=
Subject key identifier: BE:74:37:D0:9D:CC:8C:14:DB:56:46:D3:BA:40:45:3F:F5:1C:BC:53
Certificate issuer: /CN=3aba1172472ea80265d12982967de0a8b0bc5901
Certificate serial: 018CC492471DBB54A411416FC786247668E4
Authority key identifier: 3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/vnQ30J3MjBTbVkbTukBFP_UcvFM.roa
Signing time: Mon 01 Jan 2024 10:29:29 +0000
ROA not before: Mon 01 Jan 2024 10:29:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210876
IP address blocks: 193.57.164.0/23 maxlen: 23
193.57.164.0/24 maxlen: 24
185.204.102.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 13 Apr 2024 20:23:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:47:1d:bb:54:a4:11:41:6f:c7:86:24:76:68:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aba1172472ea80265d12982967de0a8b0bc5901
Validity
Not Before: Jan 1 10:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=be7437d09dcc8c14db5646d3ba40453ff51cbc53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:74:db:69:69:89:3f:32:5e:d1:ed:ee:20:80:
bd:b7:3e:c7:5c:cc:31:16:4a:d4:16:0d:cc:09:f9:
28:3a:e1:e1:13:cc:e6:fe:9f:a3:4c:7c:66:02:56:
50:dd:2c:d5:e3:47:34:4d:1c:c2:70:fd:69:bf:51:
80:21:de:2a:89:77:21:d5:19:f4:9a:5a:d0:8f:9f:
f6:b1:23:19:4d:74:b1:bc:c1:40:09:d7:50:3f:86:
5d:e3:5f:56:c1:84:e9:bb:80:bd:53:3a:e7:75:20:
94:af:c6:d7:95:e0:0b:23:e4:c2:86:ae:27:88:d0:
04:50:80:e9:98:17:e8:c1:95:1d:f4:d0:69:15:e7:
6d:fb:05:a7:5d:09:4c:74:d2:ba:91:23:a9:42:35:
55:39:c0:8f:ba:25:ec:5e:53:88:63:c7:51:01:55:
a0:2d:31:3f:de:1a:b8:11:d4:87:b5:82:ea:28:95:
55:80:10:c6:2a:56:d7:8a:c8:b0:5f:9d:7b:93:2e:
c7:90:22:b6:58:b0:c5:90:ae:e8:71:03:80:ce:b5:
b9:78:01:50:04:cc:e0:27:56:7b:67:7c:1c:a9:c0:
32:b9:4a:53:68:be:6c:8f:11:29:14:8e:47:1e:36:
d8:ca:73:1f:0f:3d:31:22:5a:34:9c:46:c6:17:f8:
6a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:74:37:D0:9D:CC:8C:14:DB:56:46:D3:BA:40:45:3F:F5:1C:BC:53
X509v3 Authority Key Identifier:
keyid:3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/vnQ30J3MjBTbVkbTukBFP_UcvFM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.204.102.0/24
193.57.164.0/23
Signature Algorithm: sha256WithRSAEncryption
38:a3:9c:75:4f:55:0d:87:66:a6:5e:9b:c3:da:f5:27:a5:91:
93:2f:d4:d5:9b:cb:65:00:7a:56:3c:84:08:de:c5:8d:a1:51:
3d:90:0d:0a:8e:9d:93:53:cf:9b:10:c6:39:76:83:1f:f9:25:
11:06:00:a2:8f:0e:b9:15:aa:89:fe:b5:44:b5:ef:4c:a0:cb:
15:37:b5:4c:e2:d9:6f:3f:a9:57:76:87:70:09:0c:2e:ac:9b:
43:9e:25:7e:c7:b4:f0:67:5e:4d:b5:c1:94:18:a5:74:0d:7b:
bb:19:f0:78:99:3b:9c:10:e5:26:7c:32:cb:47:81:e6:2d:3b:
de:08:98:91:55:b8:3e:52:e4:d2:dd:b5:2c:d0:4f:05:52:43:
48:0d:4e:f2:32:f7:6e:e8:b9:9b:6e:fa:e0:65:8e:46:dc:88:
bb:17:61:8e:a2:71:d3:6c:ae:dd:c1:f5:89:51:31:b4:18:91:
54:16:5d:22:af:65:5a:2b:5b:b1:99:5f:37:c7:12:f3:d9:14:
7b:50:71:db:f3:de:67:a3:37:7f:a9:2d:cd:cd:92:2e:4d:61:
f0:90:8f:1b:0a:3b:ec:aa:6c:2b:01:8a:10:ce:bf:90:5c:55:
0d:d3:9a:b4:d0:0b:36:2a:c4:1e:70:35:ea:74:b7:15:8f:97:
d1:72:89:46
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzEkkcdu1SkEUFvx4YkdmjkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhYmExMTcyNDcyZWE4MDI2NWQxMjk4Mjk2N2RlMGE4YjBi
YzU5MDEwHhcNMjQwMTAxMTAyOTI5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZTc0MzdkMDlkY2M4YzE0ZGI1NjQ2ZDNiYTQwNDUzZmY1MWNiYzUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnTbaWmJPzJe0e3uIIC9tz7HXMwx
FkrUFg3MCfkoOuHhE8zm/p+jTHxmAlZQ3SzV40c0TRzCcP1pv1GAId4qiXch1Rn0
mlrQj5/2sSMZTXSxvMFACddQP4Zd419WwYTpu4C9UzrndSCUr8bXleALI+TChq4n
iNAEUIDpmBfowZUd9NBpFedt+wWnXQlMdNK6kSOpQjVVOcCPuiXsXlOIY8dRAVWg
LTE/3hq4EdSHtYLqKJVVgBDGKlbXisiwX517ky7HkCK2WLDFkK7ocQOAzrW5eAFQ
BMzgJ1Z7Z3wcqcAyuUpTaL5sjxEpFI5HHjbYynMfDz0xIlo0nEbGF/hqawIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFL50N9CdzIwU21ZG07pART/1HLxTMB8GA1UdIwQY
MBaAFDq6EXJHLqgCZdEpgpZ94KiwvFkBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3JvUmNrY3VxQUpsMFNtQ2xuM2dxTEM4V1FFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My83YjFjNTUtZGRkMC00MjgxLTgzNzgt
NGRkMDQzNDZhYmMzLzEvdm5RMzBKM01qQlRiVmtiVHVrQkZQX1VjdkZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My83YjFjNTUtZGRkMC00MjgxLTgzNzgtNGRkMDQzNDZhYmMz
LzEvT3JvUmNrY3VxQUpsMFNtQ2xuM2dxTEM4V1FFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAucxmAwQB
wTmkMA0GCSqGSIb3DQEBCwUAA4IBAQA4o5x1T1UNh2amXpvD2vUnpZGTL9TVm8tl
AHpWPIQI3sWNoVE9kA0Kjp2TU8+bEMY5doMf+SURBgCijw65FaqJ/rVEte9MoMsV
N7VM4tlvP6lXdodwCQwurJtDniV+x7TwZ15NtcGUGKV0DXu7GfB4mTucEOUmfDLL
R4HmLTveCJiRVbg+UuTS3bUs0E8FUkNIDU7yMvdu6LmbbvrgZY5G3Ii7F2GOonHT
bK7dwfWJUTG0GJFUFl0ir2VaK1uxmV83xxLz2RR7UHHb895nozd/qS3NzZIuTWHw
kI8bCjvsqmwrAYoQzr+QXFUN05q00As2KsQecDXqdLcVj5fRcolG
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:04 2024 by rpki-client on console-ams.rpki-client.org