Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/Sd6FywGE_NYd7XtPHz_wso_3m3Q.roa
File: Sd6FywGE_NYd7XtPHz_wso_3m3Q.roa (raw, json)
Hash identifier: zrDiFdGBWIurTo4+UNmFuVWZNHIygjHSfr3nuF/Cpao=
Subject key identifier: 49:DE:85:CB:01:84:FC:D6:1D:ED:7B:4F:1F:3F:F0:B2:8F:F7:9B:74
Certificate issuer: /CN=4c2b89c3c57a3e296aa4061e962840be7ae8f018
Certificate serial: 018BFB05C6795B60D49A2047834311FD7A6E
Authority key identifier: 4C:2B:89:C3:C5:7A:3E:29:6A:A4:06:1E:96:28:40:BE:7A:E8:F0:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TCuJw8V6PilqpAYelihAvnro8Bg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/Sd6FywGE_NYd7XtPHz_wso_3m3Q.roa
Signing time: Thu 23 Nov 2023 07:12:21 +0000
ROA not before: Thu 23 Nov 2023 07:12:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9123
IP address blocks: 185.154.192.0/24 maxlen: 24
185.154.194.0/24 maxlen: 24
185.154.195.0/24 maxlen: 24
185.154.193.0/24 maxlen: 24
85.234.106.0/24 maxlen: 24
85.234.107.0/24 maxlen: 24
85.234.110.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:fb:05:c6:79:5b:60:d4:9a:20:47:83:43:11:fd:7a:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c2b89c3c57a3e296aa4061e962840be7ae8f018
Validity
Not Before: Nov 23 07:12:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=49de85cb0184fcd61ded7b4f1f3ff0b28ff79b74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:bd:e0:12:d5:87:ef:2f:e7:4b:64:8b:c1:dc:
35:13:59:ab:ba:f7:99:da:96:7f:d0:94:ad:54:e7:
a2:5e:87:e7:cd:b2:f6:ac:9b:c5:26:24:c3:b0:67:
6b:b1:a7:ce:30:d0:e7:ea:23:1b:4f:b7:e6:77:e4:
d0:96:59:ba:0d:91:c6:d7:e0:64:d2:0a:20:0a:23:
6f:e5:a5:d5:33:2a:06:d2:37:e8:6b:c0:2d:00:cf:
53:ae:10:7e:23:61:d8:f1:81:9a:f4:45:3f:8c:b4:
d1:85:d8:ca:c3:8e:3b:d8:ac:23:77:4f:ad:96:3c:
2a:dd:07:c5:97:30:cd:dd:9b:58:aa:b0:58:94:df:
d3:0b:ed:b3:90:25:59:c0:8b:5f:d3:bf:fd:a9:8c:
ed:5d:0e:6c:38:c5:c5:6d:d3:44:11:e3:d1:e3:e8:
f6:b8:45:f7:51:74:fe:9f:6a:53:2d:ea:aa:1c:8b:
76:2d:98:aa:92:e1:c9:12:94:7a:ee:2c:7d:52:ee:
25:36:aa:d4:71:fc:76:24:5e:34:e4:da:74:35:52:
86:bb:72:dd:56:fa:d1:6e:23:32:4c:ed:0e:2d:a9:
62:fb:9d:29:58:e7:4f:14:d6:36:16:55:a7:ae:72:
ce:b0:4e:7a:5f:a4:19:96:09:21:65:6e:92:82:01:
76:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:DE:85:CB:01:84:FC:D6:1D:ED:7B:4F:1F:3F:F0:B2:8F:F7:9B:74
X509v3 Authority Key Identifier:
keyid:4C:2B:89:C3:C5:7A:3E:29:6A:A4:06:1E:96:28:40:BE:7A:E8:F0:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TCuJw8V6PilqpAYelihAvnro8Bg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/Sd6FywGE_NYd7XtPHz_wso_3m3Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/TCuJw8V6PilqpAYelihAvnro8Bg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.234.106.0/23
85.234.110.0/24
185.154.192.0/22
Signature Algorithm: sha256WithRSAEncryption
a0:f1:12:10:45:22:cd:3b:91:b2:d0:4e:2d:ae:07:4d:8c:38:
c6:d6:09:58:f9:a8:93:7a:a1:7a:f5:c7:54:89:79:46:e4:9f:
77:1f:6d:e1:d0:ea:78:b5:ba:ee:53:24:ca:e1:26:d2:a2:28:
9a:63:0b:cb:06:d8:68:f1:56:0d:5c:10:42:79:4c:90:d7:6f:
56:ae:f5:63:df:b1:e3:11:35:fc:0f:d1:24:dd:c5:03:b6:2f:
93:45:8e:a3:c5:ec:6f:44:77:86:51:a5:55:d9:b6:70:91:ae:
d9:87:67:14:d4:ce:02:9e:55:65:bd:a0:4e:18:8f:43:ae:0a:
7d:be:61:f8:1e:55:93:23:04:4c:9e:cf:7d:2d:05:69:a6:c0:
88:7e:b8:14:04:a0:f8:69:4f:1c:b2:ce:ba:47:ba:d4:74:69:
07:84:70:df:48:b1:3d:1d:7c:2a:0b:4d:13:c8:ca:fa:e5:f7:
ff:09:78:f9:ba:4a:2a:50:f2:99:1f:f2:10:2c:0f:6c:bb:9e:
b6:f7:aa:c3:86:f6:37:76:ec:50:cc:0b:6e:55:2f:47:09:4d:
35:7e:d7:3d:f6:8f:5e:eb:e6:d1:f7:78:ba:9a:97:9d:39:8d:
fc:3c:ab:c7:26:b4:6d:8b:1f:26:13:09:9a:fc:48:e1:8c:2b:
af:b2:52:47
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYv7BcZ5W2DUmiBHg0MR/XpuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjMmI4OWMzYzU3YTNlMjk2YWE0MDYxZTk2Mjg0MGJlN2Fl
OGYwMTgwHhcNMjMxMTIzMDcxMjIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OWRlODVjYjAxODRmY2Q2MWRlZDdiNGYxZjNmZjBiMjhmZjc5Yjc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqr3gEtWH7y/nS2SLwdw1E1mruveZ
2pZ/0JStVOeiXofnzbL2rJvFJiTDsGdrsafOMNDn6iMbT7fmd+TQllm6DZHG1+Bk
0gogCiNv5aXVMyoG0jfoa8AtAM9TrhB+I2HY8YGa9EU/jLTRhdjKw4472Kwjd0+t
ljwq3QfFlzDN3ZtYqrBYlN/TC+2zkCVZwItf07/9qYztXQ5sOMXFbdNEEePR4+j2
uEX3UXT+n2pTLeqqHIt2LZiqkuHJEpR67ix9Uu4lNqrUcfx2JF405Np0NVKGu3Ld
VvrRbiMyTO0OLali+50pWOdPFNY2FlWnrnLOsE56X6QZlgkhZW6SggF2XwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFEnehcsBhPzWHe17Tx8/8LKP95t0MB8GA1UdIwQY
MBaAFEwricPFej4paqQGHpYoQL566PAYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEN1Snc4VjZQaWxxcEFZZWxpaEF2bnJvOEJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni83MjE1NWEtZDEwOS00YzJkLWI5NzQt
MTEyOGU1Y2U2YTViLzEvU2Q2Rnl3R0VfTllkN1h0UEh6X3dzb18zbTNRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni83MjE1NWEtZDEwOS00YzJkLWI5NzQtMTEyOGU1Y2U2YTVi
LzEvVEN1Snc4VjZQaWxxcEFZZWxpaEF2bnJvOEJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBVepqAwQA
VepuAwQCuZrAMA0GCSqGSIb3DQEBCwUAA4IBAQCg8RIQRSLNO5Gy0E4trgdNjDjG
1glY+aiTeqF69cdUiXlG5J93H23h0Op4tbruUyTK4SbSoiiaYwvLBtho8VYNXBBC
eUyQ129WrvVj37HjETX8D9Ek3cUDti+TRY6jxexvRHeGUaVV2bZwka7Zh2cU1M4C
nlVlvaBOGI9Drgp9vmH4HlWTIwRMns99LQVppsCIfrgUBKD4aU8css66R7rUdGkH
hHDfSLE9HXwqC00TyMr65ff/CXj5ukoqUPKZH/IQLA9su56296rDhvY3duxQzAtu
VS9HCU01ftc99o9e6+bR93i6mpedOY38PKvHJrRtix8mEwma/EjhjCuvslJH
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:33 2024 by rpki-client on console-ams.rpki-client.org