Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/SQwLkEcbwNXS7JwyLExhMJprBsU.roa
File: SQwLkEcbwNXS7JwyLExhMJprBsU.roa (raw, json)
Hash identifier: o46u9EF4RF+CNZsgZoomUpDen2YNDG51KkDvBzFgXG0=
Subject key identifier: 49:0C:0B:90:47:1B:C0:D5:D2:EC:9C:32:2C:4C:61:30:9A:6B:06:C5
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 018B56DD276E2F6B1FDE1CAC60EBF9F8D151
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/SQwLkEcbwNXS7JwyLExhMJprBsU.roa
Signing time: Sun 22 Oct 2023 10:10:15 +0000
ROA not before: Sun 22 Oct 2023 10:10:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204650
IP address blocks: 185.243.49.0/24 maxlen: 24
185.243.48.0/22 maxlen: 22
185.124.172.0/22 maxlen: 24
178.239.159.0/24 maxlen: 24
185.26.34.0/23 maxlen: 24
185.124.173.0/24 maxlen: 24
185.124.175.0/24 maxlen: 24
37.32.47.0/24 maxlen: 24
2a00:7040::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:56:dd:27:6e:2f:6b:1f:de:1c:ac:60:eb:f9:f8:d1:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Oct 22 10:10:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=490c0b90471bc0d5d2ec9c322c4c61309a6b06c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:9b:b7:22:63:3c:74:19:1f:fa:35:9b:73:87:
ab:3f:35:65:e7:be:10:28:e9:b0:28:ba:3f:ce:48:
ca:bb:33:94:9a:2e:99:ae:00:de:27:71:9f:e3:3a:
71:58:29:10:85:af:2d:0c:10:70:d9:63:95:c6:40:
51:5e:75:2b:1c:fe:9b:b9:b1:06:5d:7d:49:19:c3:
b8:96:c1:fb:17:98:be:11:b9:ff:01:61:6e:e2:2d:
31:d0:12:e9:f5:64:de:a7:a7:0e:40:ad:63:06:c1:
6e:6e:4d:67:1f:8d:da:f4:55:10:ff:8c:e1:bd:67:
cd:bc:7c:8d:b7:bc:43:f5:7c:bb:f7:c6:99:0f:49:
14:06:59:8a:e5:b4:09:83:29:e0:02:29:38:ca:cf:
12:2d:be:ad:51:68:fd:02:7f:98:12:f9:d4:3b:8c:
60:95:ae:74:b7:54:73:2e:12:95:df:34:bb:04:7a:
e1:a8:59:7b:aa:2d:0a:e3:04:19:be:52:8e:3e:72:
62:27:9e:ce:7d:03:81:c9:e0:29:57:76:a2:00:8d:
b7:06:dc:ac:f9:12:fa:4e:aa:a1:4c:17:f1:9b:e0:
89:1a:45:f9:06:19:7b:bd:a0:48:65:17:ca:99:f8:
a7:3d:81:e3:fa:60:a7:18:3f:84:58:2d:2d:68:20:
05:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:0C:0B:90:47:1B:C0:D5:D2:EC:9C:32:2C:4C:61:30:9A:6B:06:C5
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/SQwLkEcbwNXS7JwyLExhMJprBsU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.32.47.0/24
178.239.159.0/24
185.26.34.0/23
185.124.172.0/22
185.243.48.0/22
IPv6:
2a00:7040::/32
Signature Algorithm: sha256WithRSAEncryption
01:ea:5c:7e:9c:f7:57:cf:c8:0d:6e:a3:79:9e:a7:9d:ba:6e:
71:88:a2:48:c2:cf:5a:46:c3:47:37:84:23:60:7d:1f:96:e0:
c0:fa:4d:7e:73:e1:16:26:65:a7:33:b2:62:b9:60:09:9d:da:
bd:14:7e:63:d4:87:52:6a:a4:f3:70:6d:fb:88:04:89:f5:5e:
a6:5a:25:83:ad:6e:34:7c:95:f6:ca:ea:1d:3e:58:4a:68:b3:
66:3c:75:af:af:7a:d3:0f:6f:a9:3d:77:25:da:52:40:3a:c0:
7c:6c:74:17:ef:30:dc:2e:7c:f6:a8:e4:b6:c6:ec:36:11:6e:
11:b8:30:88:19:b0:3a:10:ba:12:9f:db:5a:ec:0d:3d:30:00:
bc:99:8b:ba:cb:9f:d7:6a:2f:58:07:45:70:73:82:4e:01:48:
c2:4e:ff:58:e0:24:22:b2:19:03:79:f4:8e:77:17:42:1e:41:
fb:8f:e1:6c:78:3d:bd:37:37:13:63:21:50:5f:78:b6:ed:d3:
3f:48:32:e0:4f:59:e7:f1:93:68:65:76:08:71:68:b2:02:a2:
36:c6:eb:96:b6:18:c4:3e:a0:42:c7:0e:a0:7b:97:54:e4:d2:
7f:34:83:95:f7:09:cc:b0:c8:73:85:fd:26:a1:ce:b4:1f:1f:
be:60:ac:21
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgISAYtW3SduL2sf3hysYOv5+NFRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxMzUzMzM5OWY1NWViNTJlNmIyMjAwYzdjYWU0MjcyYjc0
ZDY0NjQwHhcNMjMxMDIyMTAxMDE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OTBjMGI5MDQ3MWJjMGQ1ZDJlYzljMzIyYzRjNjEzMDlhNmIwNmM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZu3ImM8dBkf+jWbc4erPzVl574Q
KOmwKLo/zkjKuzOUmi6ZrgDeJ3Gf4zpxWCkQha8tDBBw2WOVxkBRXnUrHP6bubEG
XX1JGcO4lsH7F5i+Ebn/AWFu4i0x0BLp9WTep6cOQK1jBsFubk1nH43a9FUQ/4zh
vWfNvHyNt7xD9Xy798aZD0kUBlmK5bQJgyngAik4ys8SLb6tUWj9An+YEvnUO4xg
la50t1RzLhKV3zS7BHrhqFl7qi0K4wQZvlKOPnJiJ57OfQOByeApV3aiAI23Btys
+RL6TqqhTBfxm+CJGkX5Bhl7vaBIZRfKmfinPYHj+mCnGD+EWC0taCAF3QIDAQAB
o4ICMDCCAiwwHQYDVR0OBBYEFEkMC5BHG8DV0uycMixMYTCaawbFMB8GA1UdIwQY
MBaAFPE1MzmfVetS5rIgDHyuQnK3TWRkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFRVek9aOVY2MUxtc2lBTWZLNUNjcmROWkdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi84NDRlZWItY2RmMS00N2YxLWJjZmEt
OTg5MTY2ODgxOTY5LzEvU1F3TGtFY2J3TlhTN0p3eUxFeGhNSnByQnNVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi84NDRlZWItY2RmMS00N2YxLWJjZmEtOTg5MTY2ODgxOTY5
LzEvOFRVek9aOVY2MUxtc2lBTWZLNUNjcmROWkdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQAJSAvAwQA
su+fAwQBuRoiAwQCuXysAwQCufMwMA0EAgACMAcDBQAqAHBAMA0GCSqGSIb3DQEB
CwUAA4IBAQAB6lx+nPdXz8gNbqN5nqedum5xiKJIws9aRsNHN4QjYH0fluDA+k1+
c+EWJmWnM7JiuWAJndq9FH5j1IdSaqTzcG37iASJ9V6mWiWDrW40fJX2yuodPlhK
aLNmPHWvr3rTD2+pPXcl2lJAOsB8bHQX7zDcLnz2qOS2xuw2EW4RuDCIGbA6ELoS
n9ta7A09MAC8mYu6y5/Xai9YB0Vwc4JOAUjCTv9Y4CQishkDefSOdxdCHkH7j+Fs
eD29NzcTYyFQX3i27dM/SDLgT1nn8ZNoZXYIcWiyAqI2xuuWthjEPqBCxw6ge5dU
5NJ/NIOV9wnMsMhzhf0moc60Hx++YKwh
-----END CERTIFICATE-----
Generated at Tue Oct 24 12:30:34 2023 by rpki-client on console-ams.rpki-client.org