Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/bksYfXasy5ArNqFkToJibXmK3cY.roa
File: bksYfXasy5ArNqFkToJibXmK3cY.roa (raw, json)
Hash identifier: oRnOoaqO2KwTSctpQ76NpKNVQmd+ggaqaeB3pcfSleE=
Subject key identifier: 6E:4B:18:7D:76:AC:CB:90:2B:36:A1:64:4E:82:62:6D:79:8A:DD:C6
Certificate issuer: /CN=80ad8c520bb9677461ddc4ec09b76d733b7d8370
Certificate serial: 01857169A3424328F28CF35C384195AEB50E
Authority key identifier: 80:AD:8C:52:0B:B9:67:74:61:DD:C4:EC:09:B7:6D:73:3B:7D:83:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/bksYfXasy5ArNqFkToJibXmK3cY.roa
Signing time: Mon 02 Jan 2023 07:37:06 +0000
ROA not before: Mon 02 Jan 2023 07:37:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202391
IP address blocks: 45.142.188.0/22 maxlen: 24
185.141.36.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 10 Oct 2023 09:04:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:69:a3:42:43:28:f2:8c:f3:5c:38:41:95:ae:b5:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80ad8c520bb9677461ddc4ec09b76d733b7d8370
Validity
Not Before: Jan 2 07:37:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6e4b187d76accb902b36a1644e82626d798addc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:12:63:e1:02:48:bb:ba:2d:7b:1b:59:2d:c3:
e0:3a:f6:47:ce:8b:60:c0:9f:73:d6:b2:9d:40:41:
47:98:7b:ac:a8:58:1b:e4:a7:c7:e5:76:84:a5:fb:
69:53:98:ca:6c:d3:86:b7:ae:c9:c3:ed:3b:2b:dd:
a6:d3:b4:46:74:ba:7f:30:02:b9:1a:b7:a8:30:62:
12:0b:75:26:60:8c:d3:60:35:a5:2b:1c:86:91:aa:
f3:e9:ab:7c:f4:bf:ef:d6:40:a0:05:4e:56:02:5d:
de:74:49:46:e8:b3:b8:f1:a3:18:e5:f3:09:dc:2d:
a2:1a:24:3b:7a:08:c7:da:9f:e5:99:4b:d3:c3:98:
ce:d7:26:a3:c9:e0:0b:b6:55:18:c1:7c:c2:e6:fa:
cd:f7:56:84:48:00:c9:7e:f9:74:5a:84:5f:85:77:
11:0b:65:4c:64:f1:30:71:8d:36:73:f9:85:dd:86:
2b:3c:9d:70:82:98:21:37:cd:ea:06:01:f6:45:c3:
2b:59:e0:9b:9d:31:95:13:20:d3:87:ff:2b:e5:dd:
51:5e:fc:05:7b:e9:9a:23:27:b6:5c:dd:c4:1c:cf:
b0:61:ef:f8:d4:f9:f4:ab:e3:a5:7f:98:e2:96:f8:
4f:0a:3a:4d:a2:1c:e3:e4:64:3f:2e:52:b6:b5:f7:
b3:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:4B:18:7D:76:AC:CB:90:2B:36:A1:64:4E:82:62:6D:79:8A:DD:C6
X509v3 Authority Key Identifier:
keyid:80:AD:8C:52:0B:B9:67:74:61:DD:C4:EC:09:B7:6D:73:3B:7D:83:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/bksYfXasy5ArNqFkToJibXmK3cY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.188.0/22
185.141.36.0/22
Signature Algorithm: sha256WithRSAEncryption
59:5d:20:13:db:aa:df:ea:6a:a6:9a:7b:97:f0:c4:39:36:0f:
e9:4b:24:4e:47:37:c7:6e:e2:8d:5e:51:6e:5c:79:73:ab:70:
62:b4:d1:9f:b9:6f:c4:b1:8c:46:93:b9:f5:e1:bd:94:ad:2c:
f1:13:d0:aa:74:7d:51:83:75:dd:32:27:51:f3:bd:06:be:a9:
3e:af:e4:56:f5:9e:dd:95:ec:7e:b5:5a:1e:7d:37:bd:90:bf:
62:41:c3:ba:78:30:75:28:d1:c3:95:09:97:86:ab:72:76:8e:
5a:68:3a:bd:d5:5b:21:00:67:3a:bc:d1:e8:fa:57:7b:5c:d3:
55:3e:59:fd:9a:e5:01:53:74:1b:bf:fd:df:7f:4a:ed:5c:6b:
88:de:56:35:56:dd:cd:16:08:b1:d7:99:ee:4d:50:8b:80:d7:
85:92:d8:64:ce:ce:bb:92:c7:f8:74:0f:a9:ea:8a:c5:6d:31:
dc:d4:a6:5a:53:0c:d9:df:4a:6e:4a:6b:61:40:14:05:b2:75:
b7:59:74:86:0f:d9:a1:49:ca:33:2e:49:91:82:27:fb:83:6c:
8e:3d:58:57:1c:b5:36:32:cf:1a:c3:9a:0d:8a:d0:87:b5:b1:
64:04:64:fc:85:75:0c:56:4a:67:36:69:f1:20:43:17:40:78:
56:26:94:74
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVxaaNCQyjyjPNcOEGVrrUOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwYWQ4YzUyMGJiOTY3NzQ2MWRkYzRlYzA5Yjc2ZDczM2I3
ZDgzNzAwHhcNMjMwMTAyMDczNzA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZTRiMTg3ZDc2YWNjYjkwMmIzNmExNjQ0ZTgyNjI2ZDc5OGFkZGM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhhJj4QJIu7otextZLcPgOvZHzotg
wJ9z1rKdQEFHmHusqFgb5KfH5XaEpftpU5jKbNOGt67Jw+07K92m07RGdLp/MAK5
GreoMGISC3UmYIzTYDWlKxyGkarz6at89L/v1kCgBU5WAl3edElG6LO48aMY5fMJ
3C2iGiQ7egjH2p/lmUvTw5jO1yajyeALtlUYwXzC5vrN91aESADJfvl0WoRfhXcR
C2VMZPEwcY02c/mF3YYrPJ1wgpghN83qBgH2RcMrWeCbnTGVEyDTh/8r5d1RXvwF
e+maIye2XN3EHM+wYe/41Pn0q+Olf5jilvhPCjpNohzj5GQ/LlK2tfezqQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFG5LGH12rMuQKzahZE6CYm15it3GMB8GA1UdIwQY
MBaAFICtjFILuWd0Yd3E7Am3bXM7fYNwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0syTVVndTVaM1JoM2NUc0NiZHRjenQ5ZzNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8yMjVlYzMtMDM4Ny00YjVkLTg4YzEt
YzYxNzUxYzZiMTk1LzEvYmtzWWZYYXN5NUFyTnFGa1RvSmliWG1LM2NZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy8yMjVlYzMtMDM4Ny00YjVkLTg4YzEtYzYxNzUxYzZiMTk1
LzEvZ0syTVVndTVaM1JoM2NUc0NiZHRjenQ5ZzNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLY68AwQC
uY0kMA0GCSqGSIb3DQEBCwUAA4IBAQBZXSAT26rf6mqmmnuX8MQ5Ng/pSyRORzfH
buKNXlFuXHlzq3BitNGfuW/EsYxGk7n14b2UrSzxE9CqdH1Rg3XdMidR870Gvqk+
r+RW9Z7dlex+tVoefTe9kL9iQcO6eDB1KNHDlQmXhqtydo5aaDq91VshAGc6vNHo
+ld7XNNVPln9muUBU3Qbv/3ff0rtXGuI3lY1Vt3NFgix15nuTVCLgNeFkthkzs67
ksf4dA+p6orFbTHc1KZaUwzZ30puSmthQBQFsnW3WXSGD9mhScozLkmRgif7g2yO
PVhXHLU2Ms8aw5oNitCHtbFkBGT8hXUMVkpnNmnxIEMXQHhWJpR0
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:42 2024 by rpki-client on console-fra.rpki-client.org