Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/sw1UU6bM36esk8hHbd7wEJ06_Fs.roa
File: sw1UU6bM36esk8hHbd7wEJ06_Fs.roa (raw, json)
Hash identifier: MjRdA/twg2fev6AU5xyDvpOg8FoKI4BzJxgwSwRh3X4=
Subject key identifier: B3:0D:54:53:A6:CC:DF:A7:AC:93:C8:47:6D:DE:F0:10:9D:3A:FC:5B
Certificate issuer: /CN=d5f065c8bdb78ff294f7c5454971dbfabfb6c184
Certificate serial: 01878F6AEA9758103037D8495D14C6E0080A
Authority key identifier: D5:F0:65:C8:BD:B7:8F:F2:94:F7:C5:45:49:71:DB:FA:BF:B6:C1:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/sw1UU6bM36esk8hHbd7wEJ06_Fs.roa
Signing time: Mon 17 Apr 2023 13:32:41 +0000
ROA not before: Mon 17 Apr 2023 13:32:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 193.178.115.0/24 maxlen: 24
193.178.31.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:8f:6a:ea:97:58:10:30:37:d8:49:5d:14:c6:e0:08:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5f065c8bdb78ff294f7c5454971dbfabfb6c184
Validity
Not Before: Apr 17 13:32:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b30d5453a6ccdfa7ac93c8476ddef0109d3afc5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a7:e7:fc:ba:c1:0a:46:e8:a4:2a:70:b9:b6:
95:f3:73:c3:93:a1:b5:05:58:59:01:8b:14:f5:4c:
ad:00:5c:9f:87:69:f0:1d:c5:f1:66:9d:d1:84:52:
24:db:9a:42:62:54:c1:89:d3:bd:31:71:57:18:35:
19:f3:a3:84:7d:86:1c:0c:2d:de:09:bd:9c:ee:c6:
09:5b:e7:df:ee:ca:f9:ba:c6:4c:3b:1f:65:7a:26:
42:0c:2e:50:87:70:5f:f6:f5:4b:88:05:ab:17:ec:
e1:dc:55:5d:5f:61:67:14:b9:6a:9f:65:dd:b4:b6:
0e:52:0d:43:e5:43:72:30:b0:65:a0:70:c2:a3:34:
26:4c:74:54:e7:9a:b0:5a:51:10:97:20:66:d3:49:
c5:e9:3e:dc:91:59:68:ff:3e:54:6b:0c:20:79:57:
07:22:fd:9c:ae:84:dc:09:3f:16:8c:fe:44:ad:e1:
44:6b:36:b4:08:66:8e:7a:8e:df:b6:42:d8:d3:eb:
3e:32:a8:af:e1:a8:66:45:cc:89:79:e2:fc:5d:41:
25:f3:b7:03:7f:2f:a2:f3:fa:60:7e:4a:4b:65:ec:
7b:3a:75:0e:3b:ac:73:88:63:3d:6f:28:da:2a:70:
e8:a8:32:8b:d4:70:8d:a7:02:0f:7a:e3:b9:3a:88:
a6:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:0D:54:53:A6:CC:DF:A7:AC:93:C8:47:6D:DE:F0:10:9D:3A:FC:5B
X509v3 Authority Key Identifier:
keyid:D5:F0:65:C8:BD:B7:8F:F2:94:F7:C5:45:49:71:DB:FA:BF:B6:C1:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/sw1UU6bM36esk8hHbd7wEJ06_Fs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.178.31.0/24
193.178.115.0/24
Signature Algorithm: sha256WithRSAEncryption
46:8a:26:34:ea:f7:9f:ae:05:a8:35:a7:08:46:f2:59:23:5c:
0d:0d:16:7d:ae:3c:1a:79:0a:82:b8:2d:f2:0d:fb:1d:97:6e:
ed:7f:66:df:59:73:26:b4:f8:ca:66:dd:cb:1c:61:de:ab:85:
63:50:ae:e6:90:c6:3e:0f:e1:7b:b1:e6:b7:7e:8a:b9:ba:54:
80:ec:42:48:d0:5c:ac:4c:79:a2:85:e5:2e:75:19:b4:b5:08:
6f:db:cf:f9:8a:45:64:d3:f1:36:ab:e0:f3:15:52:42:53:77:
bc:7b:a7:fb:14:09:cb:9c:b1:b3:08:36:1f:9e:f2:06:4e:1b:
ee:93:07:c0:ca:e3:da:1e:7f:af:fe:d9:a6:db:e6:29:67:55:
76:e2:27:28:36:ca:12:5c:f2:3c:3d:02:f6:23:5a:1f:20:05:
f8:a7:69:b6:13:f3:27:e4:98:5d:2d:35:fa:8b:8f:91:3f:01:
dd:a2:21:d6:9e:4c:93:7a:7f:d7:25:3f:f3:45:4a:29:a3:ea:
18:ce:b5:cf:17:32:3c:fc:92:5f:ae:3c:b3:4e:2f:1c:b0:5d:
b6:45:0a:a1:67:d0:c1:c9:d9:3b:0c:ef:5d:43:d7:5c:e8:4c:
88:9f:b5:a0:26:c1:4c:49:df:7a:d4:82:08:4f:44:37:5d:4b:
99:61:bf:c0
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYePauqXWBAwN9hJXRTG4AgKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1ZjA2NWM4YmRiNzhmZjI5NGY3YzU0NTQ5NzFkYmZhYmZi
NmMxODQwHhcNMjMwNDE3MTMzMjQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMzBkNTQ1M2E2Y2NkZmE3YWM5M2M4NDc2ZGRlZjAxMDlkM2FmYzViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnafn/LrBCkbopCpwubaV83PDk6G1
BVhZAYsU9UytAFyfh2nwHcXxZp3RhFIk25pCYlTBidO9MXFXGDUZ86OEfYYcDC3e
Cb2c7sYJW+ff7sr5usZMOx9leiZCDC5Qh3Bf9vVLiAWrF+zh3FVdX2FnFLlqn2Xd
tLYOUg1D5UNyMLBloHDCozQmTHRU55qwWlEQlyBm00nF6T7ckVlo/z5UawwgeVcH
Iv2croTcCT8WjP5EreFEaza0CGaOeo7ftkLY0+s+Mqiv4ahmRcyJeeL8XUEl87cD
fy+i8/pgfkpLZex7OnUOO6xziGM9byjaKnDoqDKL1HCNpwIPeuO5OoimlwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLMNVFOmzN+nrJPIR23e8BCdOvxbMB8GA1UdIwQY
MBaAFNXwZci9t4/ylPfFRUlx2/q/tsGEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWZCbHlMMjNqX0tVOThWRlNYSGItci0yd1lRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9mMjc3ZWEtNzI2YS00MDUyLThlNWIt
MzVhNWRjMmM3OTJjLzEvc3cxVVU2Yk0zNmVzazhoSGJkN3dFSjA2X0ZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC9mMjc3ZWEtNzI2YS00MDUyLThlNWItMzVhNWRjMmM3OTJj
LzEvMWZCbHlMMjNqX0tVOThWRlNYSGItci0yd1lRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwbIfAwQA
wbJzMA0GCSqGSIb3DQEBCwUAA4IBAQBGiiY06vefrgWoNacIRvJZI1wNDRZ9rjwa
eQqCuC3yDfsdl27tf2bfWXMmtPjKZt3LHGHeq4VjUK7mkMY+D+F7sea3foq5ulSA
7EJI0FysTHmiheUudRm0tQhv28/5ikVk0/E2q+DzFVJCU3e8e6f7FAnLnLGzCDYf
nvIGThvukwfAyuPaHn+v/tmm2+YpZ1V24icoNsoSXPI8PQL2I1ofIAX4p2m2E/Mn
5JhdLTX6i4+RPwHdoiHWnkyTen/XJT/zRUopo+oYzrXPFzI8/JJfrjyzTi8csF22
RQqhZ9DBydk7DO9dQ9dc6EyIn7WgJsFMSd961IIIT0Q3XUuZYb/A
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:44 2023 by rpki-client on console-fra.rpki-client.org