Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/78bd05-6006-462f-a187-0ecf4220023e/1/Sp52FguYvttMObVSHRwY5Fr6GlU.roa
File: Sp52FguYvttMObVSHRwY5Fr6GlU.roa (raw, json)
Hash identifier: Uqx0TuqXYw/mjgUUCEmV2dxbY5fFv9v2jnnqwbVwBy8=
Subject key identifier: 4A:9E:76:16:0B:98:BE:DB:4C:39:B5:52:1D:1C:18:E4:5A:FA:1A:55
Certificate issuer: /CN=7e6750e58ca0a2b75f2c53bdf6f61ff63ec831cb
Certificate serial: 01856FCBB94394330E36FFC07F042D632B3B
Authority key identifier: 7E:67:50:E5:8C:A0:A2:B7:5F:2C:53:BD:F6:F6:1F:F6:3E:C8:31:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fmdQ5YygordfLFO99vYf9j7IMcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/78bd05-6006-462f-a187-0ecf4220023e/1/Sp52FguYvttMObVSHRwY5Fr6GlU.roa
Signing time: Mon 02 Jan 2023 00:05:00 +0000
ROA not before: Mon 02 Jan 2023 00:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29504
IP address blocks: 185.193.84.0/22 maxlen: 22
2a0a:3640::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:cb:b9:43:94:33:0e:36:ff:c0:7f:04:2d:63:2b:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e6750e58ca0a2b75f2c53bdf6f61ff63ec831cb
Validity
Not Before: Jan 2 00:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4a9e76160b98bedb4c39b5521d1c18e45afa1a55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b8:9a:69:e1:f8:72:10:68:7d:72:6a:ab:ba:
04:35:41:80:61:fe:41:52:9a:e3:9c:c4:b0:0f:d5:
40:58:7d:5d:15:89:4e:67:01:51:82:47:78:c9:5d:
2c:28:76:df:28:49:6d:4d:44:10:81:ea:60:3f:e9:
7a:22:fc:45:8b:13:9a:31:20:8e:2e:62:bf:c5:0d:
f1:c2:21:9c:73:69:4b:e0:14:f8:ec:fe:71:20:c7:
c5:ad:1f:b7:8d:eb:a8:7f:9d:22:9e:7e:30:47:8c:
5d:a1:19:0c:49:01:1a:39:6e:dd:e0:73:0f:a0:60:
84:f7:db:c2:c2:0d:19:b0:19:c7:8c:f0:19:54:af:
54:b8:d7:cb:81:e5:a2:2c:26:49:97:2a:ac:75:6d:
76:74:70:ee:31:61:8e:11:bf:eb:a6:ac:e4:80:94:
ac:2f:b0:de:88:51:c9:f6:68:32:3d:0b:13:f7:39:
82:ab:2f:19:bd:26:4d:ef:e8:e4:0c:23:64:98:39:
08:90:8e:10:9d:53:98:8a:ca:63:8e:90:3a:18:96:
e4:43:18:cb:bc:e0:64:e8:51:01:e8:c8:32:1a:4c:
1b:4e:aa:eb:71:59:37:53:b8:76:53:6f:ed:be:95:
ac:d3:a5:84:7b:22:54:bb:d9:46:e5:9e:a8:92:97:
ee:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:9E:76:16:0B:98:BE:DB:4C:39:B5:52:1D:1C:18:E4:5A:FA:1A:55
X509v3 Authority Key Identifier:
keyid:7E:67:50:E5:8C:A0:A2:B7:5F:2C:53:BD:F6:F6:1F:F6:3E:C8:31:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fmdQ5YygordfLFO99vYf9j7IMcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/78bd05-6006-462f-a187-0ecf4220023e/1/Sp52FguYvttMObVSHRwY5Fr6GlU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/78bd05-6006-462f-a187-0ecf4220023e/1/fmdQ5YygordfLFO99vYf9j7IMcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.193.84.0/22
IPv6:
2a0a:3640::/29
Signature Algorithm: sha256WithRSAEncryption
4f:de:25:c1:f1:3f:2e:6c:dd:38:00:17:77:16:01:2a:85:cc:
9e:f8:41:4e:8f:22:14:fa:93:a3:b5:b6:83:b1:24:1c:da:d6:
ac:96:28:7c:f7:c7:dd:4d:e3:4b:a7:80:66:9f:87:30:1a:d9:
83:2c:c9:52:1a:44:a2:fd:86:31:b1:f6:aa:ff:3d:a1:90:f6:
32:a6:20:cd:13:d6:ef:0b:32:c9:ea:41:9d:50:1f:18:0c:48:
40:01:a6:22:d7:26:1b:8b:5f:ed:9c:6d:64:6b:63:d6:6c:8a:
20:3e:2a:05:c7:46:eb:cd:25:e0:ce:ab:f0:77:69:58:a0:fa:
e8:4a:e4:10:cb:58:67:19:a0:62:be:2c:42:be:c2:4f:24:10:
07:88:cc:4a:bb:81:c2:0b:d1:02:e9:ec:de:fd:c8:df:56:3a:
cf:be:90:ce:20:98:b9:86:d7:ed:8b:46:2b:1a:ee:5c:e5:2a:
ac:4f:53:85:e0:30:35:47:ca:8a:d2:f1:2c:32:27:62:a6:fc:
5a:12:ca:ea:9b:f5:37:23:00:61:24:ed:d4:3f:a7:29:82:24:
fe:fc:f1:76:a4:ec:2e:4f:f8:73:06:25:ad:79:de:5b:ea:32:
eb:e6:b6:5c:04:9a:be:7a:35:d3:1a:ad:01:1d:d2:75:d9:05:
ef:46:23:4f
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVvy7lDlDMONv/AfwQtYys7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlNjc1MGU1OGNhMGEyYjc1ZjJjNTNiZGY2ZjYxZmY2M2Vj
ODMxY2IwHhcNMjMwMTAyMDAwNTAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YTllNzYxNjBiOThiZWRiNGMzOWI1NTIxZDFjMThlNDVhZmExYTU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLiaaeH4chBofXJqq7oENUGAYf5B
UprjnMSwD9VAWH1dFYlOZwFRgkd4yV0sKHbfKEltTUQQgepgP+l6IvxFixOaMSCO
LmK/xQ3xwiGcc2lL4BT47P5xIMfFrR+3jeuof50inn4wR4xdoRkMSQEaOW7d4HMP
oGCE99vCwg0ZsBnHjPAZVK9UuNfLgeWiLCZJlyqsdW12dHDuMWGOEb/rpqzkgJSs
L7DeiFHJ9mgyPQsT9zmCqy8ZvSZN7+jkDCNkmDkIkI4QnVOYispjjpA6GJbkQxjL
vOBk6FEB6MgyGkwbTqrrcVk3U7h2U2/tvpWs06WEeyJUu9lG5Z6okpfuIwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFEqedhYLmL7bTDm1Uh0cGORa+hpVMB8GA1UdIwQY
MBaAFH5nUOWMoKK3XyxTvfb2H/Y+yDHLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZm1kUTVZeWdvcmRmTEZPOTl2WWY5ajdJTWNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS83OGJkMDUtNjAwNi00NjJmLWExODct
MGVjZjQyMjAwMjNlLzEvU3A1MkZndVl2dHRNT2JWU0hSd1k1RnI2R2xVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS83OGJkMDUtNjAwNi00NjJmLWExODctMGVjZjQyMjAwMjNl
LzEvZm1kUTVZeWdvcmRmTEZPOTl2WWY5ajdJTWNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCucFUMA0E
AgACMAcDBQMqCjZAMA0GCSqGSIb3DQEBCwUAA4IBAQBP3iXB8T8ubN04ABd3FgEq
hcye+EFOjyIU+pOjtbaDsSQc2taslih898fdTeNLp4Bmn4cwGtmDLMlSGkSi/YYx
sfaq/z2hkPYypiDNE9bvCzLJ6kGdUB8YDEhAAaYi1yYbi1/tnG1ka2PWbIogPioF
x0brzSXgzqvwd2lYoProSuQQy1hnGaBivixCvsJPJBAHiMxKu4HCC9EC6eze/cjf
VjrPvpDOIJi5htfti0YrGu5c5SqsT1OF4DA1R8qK0vEsMidipvxaEsrqm/U3IwBh
JO3UP6cpgiT+/PF2pOwuT/hzBiWted5b6jLr5rZcBJq+ejXTGq0BHdJ12QXvRiNP
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:25:33 2024 by rpki-client on console-ams.rpki-client.org