Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/cd7526-61ad-46cc-8784-3d63557301c0/1/Ps26MTaNNs0pBVXAV0rfUBMUTXA.roa
File: Ps26MTaNNs0pBVXAV0rfUBMUTXA.roa (raw, json)
Hash identifier: jFrG7j4QF9c6K663qHuXjhxe8hgr20/tMFxKS6fJI3U=
Subject key identifier: 3E:CD:BA:31:36:8D:36:CD:29:05:55:C0:57:4A:DF:50:13:14:4D:70
Certificate issuer: /CN=e5d90d7f03512f6dbd0645dfe274368e2d844c23
Certificate serial: 01856F3003326238E0F98CEA18E4001BEBDE
Authority key identifier: E5:D9:0D:7F:03:51:2F:6D:BD:06:45:DF:E2:74:36:8E:2D:84:4C:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5dkNfwNRL229BkXf4nQ2ji2ETCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/cd7526-61ad-46cc-8784-3d63557301c0/1/Ps26MTaNNs0pBVXAV0rfUBMUTXA.roa
Signing time: Sun 01 Jan 2023 21:14:55 +0000
ROA not before: Sun 01 Jan 2023 21:14:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200059
IP address blocks: 185.40.80.0/22 maxlen: 32
2a00:fc20::/32 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:30:03:32:62:38:e0:f9:8c:ea:18:e4:00:1b:eb:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5d90d7f03512f6dbd0645dfe274368e2d844c23
Validity
Not Before: Jan 1 21:14:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3ecdba31368d36cd290555c0574adf5013144d70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:30:cb:4a:b0:ff:fc:2d:20:b5:a6:f4:49:06:
18:56:50:b8:10:c7:65:12:6a:cc:e9:0e:c3:8b:75:
08:6e:3f:4c:ae:97:67:61:db:25:f2:99:f0:36:88:
85:36:63:f7:3e:a3:b1:c3:76:30:6a:83:14:10:82:
e5:a3:b8:80:8d:3b:de:b8:a5:83:56:f6:b3:4c:1d:
e1:8d:19:44:9c:c5:08:e4:52:15:46:5f:bc:fa:7e:
f5:ad:70:a5:34:b9:d3:b3:8c:c6:2a:b5:94:0f:82:
d6:17:87:b3:fa:1d:a9:d2:de:e4:b4:30:9a:40:4f:
71:6d:a8:52:a6:ce:84:76:f8:03:63:6e:ba:5a:7a:
a2:fe:8c:05:8b:8d:2f:a3:1a:c4:6e:f5:5a:aa:3e:
24:5d:ec:5f:29:d3:52:f5:fa:d1:37:1a:97:a0:0a:
1f:cb:bb:c5:de:1d:da:f8:0b:3e:61:51:4e:c0:f5:
ad:17:b0:0a:a6:2d:a3:69:b0:4f:92:49:4e:64:38:
1b:76:b1:b7:89:29:e2:cb:52:cd:88:b6:b2:50:cb:
66:33:6b:4b:c9:52:65:00:02:86:1a:2c:44:1f:ac:
bf:63:18:3b:88:a8:3e:89:6d:18:ad:e6:21:15:36:
29:43:5c:8c:d5:b9:10:99:64:4c:61:e4:f3:03:78:
a6:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:CD:BA:31:36:8D:36:CD:29:05:55:C0:57:4A:DF:50:13:14:4D:70
X509v3 Authority Key Identifier:
keyid:E5:D9:0D:7F:03:51:2F:6D:BD:06:45:DF:E2:74:36:8E:2D:84:4C:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5dkNfwNRL229BkXf4nQ2ji2ETCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/cd7526-61ad-46cc-8784-3d63557301c0/1/Ps26MTaNNs0pBVXAV0rfUBMUTXA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/cd7526-61ad-46cc-8784-3d63557301c0/1/5dkNfwNRL229BkXf4nQ2ji2ETCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.40.80.0/22
IPv6:
2a00:fc20::/32
Signature Algorithm: sha256WithRSAEncryption
30:66:11:da:a0:06:8b:a1:50:33:e3:eb:d6:85:d7:6f:06:e7:
79:40:3a:4f:b1:e5:1b:20:b3:1a:7e:c1:b6:8a:92:a6:f5:0d:
44:db:39:66:46:80:4e:00:44:1a:ed:cf:8c:4c:9b:50:d4:40:
0f:74:21:9c:7e:12:53:23:c2:aa:cb:96:3a:93:f5:6a:2b:58:
db:a7:df:fa:82:b9:7a:c3:94:f0:42:3f:5e:3e:09:09:fd:83:
f2:46:a2:5f:5a:86:8c:62:e6:7c:fb:8e:77:5c:23:ba:2b:28:
8b:67:2f:cd:e5:59:49:f0:fc:50:36:02:cc:7a:3d:af:25:8f:
21:26:e3:8a:bf:ee:3d:e0:cc:be:7c:94:18:f6:53:01:32:53:
e4:27:d4:87:da:ef:4a:98:f5:49:ff:04:82:6c:4b:65:9f:04:
92:a8:75:9a:04:a6:b2:46:8a:cc:1d:06:47:16:f5:a6:b5:a9:
dc:df:82:0c:7d:02:a8:07:3c:6b:c4:e4:d5:f3:ac:70:5d:56:
59:49:23:9a:13:2a:9b:c7:35:ab:77:0a:25:c8:01:7e:ad:b7:
40:2c:80:2f:7e:83:0b:d5:e1:69:3a:91:0b:6b:8c:f9:20:28:
34:21:cc:73:8d:68:80:b0:55:0d:e0:69:9f:77:ca:61:f3:42:
57:3e:e4:92
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVvMAMyYjjg+YzqGOQAG+veMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1ZDkwZDdmMDM1MTJmNmRiZDA2NDVkZmUyNzQzNjhlMmQ4
NDRjMjMwHhcNMjMwMTAxMjExNDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZWNkYmEzMTM2OGQzNmNkMjkwNTU1YzA1NzRhZGY1MDEzMTQ0ZDcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDDLSrD//C0gtab0SQYYVlC4EMdl
EmrM6Q7Di3UIbj9MrpdnYdsl8pnwNoiFNmP3PqOxw3YwaoMUEILlo7iAjTveuKWD
VvazTB3hjRlEnMUI5FIVRl+8+n71rXClNLnTs4zGKrWUD4LWF4ez+h2p0t7ktDCa
QE9xbahSps6EdvgDY266Wnqi/owFi40voxrEbvVaqj4kXexfKdNS9frRNxqXoAof
y7vF3h3a+As+YVFOwPWtF7AKpi2jabBPkklOZDgbdrG3iSniy1LNiLayUMtmM2tL
yVJlAAKGGixEH6y/Yxg7iKg+iW0YreYhFTYpQ1yM1bkQmWRMYeTzA3imXwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFD7NujE2jTbNKQVVwFdK31ATFE1wMB8GA1UdIwQY
MBaAFOXZDX8DUS9tvQZF3+J0No4thEwjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWRrTmZ3TlJMMjI5QmtYZjRuUTJqaTJFVENNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9jZDc1MjYtNjFhZC00NmNjLTg3ODQt
M2Q2MzU1NzMwMWMwLzEvUHMyNk1UYU5OczBwQlZYQVYwcmZVQk1VVFhBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9jZDc1MjYtNjFhZC00NmNjLTg3ODQtM2Q2MzU1NzMwMWMw
LzEvNWRrTmZ3TlJMMjI5QmtYZjRuUTJqaTJFVENNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuShQMA0E
AgACMAcDBQAqAPwgMA0GCSqGSIb3DQEBCwUAA4IBAQAwZhHaoAaLoVAz4+vWhddv
Bud5QDpPseUbILMafsG2ipKm9Q1E2zlmRoBOAEQa7c+MTJtQ1EAPdCGcfhJTI8Kq
y5Y6k/VqK1jbp9/6grl6w5TwQj9ePgkJ/YPyRqJfWoaMYuZ8+453XCO6KyiLZy/N
5VlJ8PxQNgLMej2vJY8hJuOKv+494My+fJQY9lMBMlPkJ9SH2u9KmPVJ/wSCbEtl
nwSSqHWaBKayRorMHQZHFvWmtanc34IMfQKoBzxrxOTV86xwXVZZSSOaEyqbxzWr
dwolyAF+rbdALIAvfoML1eFpOpELa4z5ICg0IcxzjWiAsFUN4Gmfd8ph80JXPuSS
-----END CERTIFICATE-----
Generated at Tue Jan 2 01:50:20 2024 by rpki-client on console-fra.rpki-client.org