Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/IY4y4C3_jUKdaQKtxfSSZEeMRpM.roa
File: IY4y4C3_jUKdaQKtxfSSZEeMRpM.roa (raw, json)
Hash identifier: Kn2Y1QNKxkoAUzvcIF5gq9j0QxyONTQB8XKPqP/iwqQ=
Subject key identifier: 21:8E:32:E0:2D:FF:8D:42:9D:69:02:AD:C5:F4:92:64:47:8C:46:93
Certificate issuer: /CN=f1808f1abef8e6b59cd4359a6b4481fc7c9631d1
Certificate serial: 01856DA65E8151D901242D1CB5C1ECC39BE4
Authority key identifier: F1:80:8F:1A:BE:F8:E6:B5:9C:D4:35:9A:6B:44:81:FC:7C:96:31:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8YCPGr745rWc1DWaa0SB_HyWMdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/IY4y4C3_jUKdaQKtxfSSZEeMRpM.roa
Signing time: Sun 01 Jan 2023 14:04:57 +0000
ROA not before: Sun 01 Jan 2023 14:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34966
IP address blocks: 194.30.174.0/24 maxlen: 24
185.237.33.0/24 maxlen: 24
185.237.32.0/24 maxlen: 24
153.92.184.0/23 maxlen: 24
153.92.186.0/24 maxlen: 24
195.238.224.0/24 maxlen: 24
2a0c:280::/30 maxlen: 30
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:a6:5e:81:51:d9:01:24:2d:1c:b5:c1:ec:c3:9b:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1808f1abef8e6b59cd4359a6b4481fc7c9631d1
Validity
Not Before: Jan 1 14:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=218e32e02dff8d429d6902adc5f49264478c4693
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:33:f6:d7:f5:fe:b4:5f:a0:a0:f1:2b:d5:51:
99:9a:52:03:9a:b4:7b:93:0f:d3:1a:7d:f2:1e:be:
4f:98:23:96:03:c8:7f:1e:d6:a6:56:56:8d:ba:25:
e1:d8:c1:01:72:49:d5:25:b7:b9:14:81:0b:54:52:
43:8e:6d:2c:f3:16:63:50:78:33:70:5c:15:a3:e7:
71:08:69:62:c3:fa:4e:6e:45:f4:99:03:67:ef:02:
54:9c:32:e7:29:99:e1:10:88:2e:6e:cc:9f:b9:e2:
8f:7f:45:29:22:a7:78:f0:28:78:88:b0:ec:88:d7:
62:06:f5:da:8b:4c:41:52:59:41:02:ee:9c:46:e7:
d7:7b:6b:a5:51:91:4e:f8:9e:49:40:b8:bd:4c:79:
16:17:c3:bb:b9:19:dd:14:a7:ed:e2:21:38:eb:f6:
e0:3f:f9:c6:98:d9:b0:1b:2c:da:e8:f1:85:e3:b4:
79:35:da:0b:29:cd:e9:64:e8:8f:cc:d8:65:e7:da:
72:db:d1:16:66:12:69:30:04:13:59:84:db:88:16:
5c:54:69:e5:54:aa:20:77:4f:b3:69:ed:86:fb:6e:
eb:e6:4d:d5:53:36:52:76:fe:b2:bd:33:18:c4:be:
a5:dd:21:48:2c:af:1a:68:6c:b0:8f:05:71:24:6a:
63:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:8E:32:E0:2D:FF:8D:42:9D:69:02:AD:C5:F4:92:64:47:8C:46:93
X509v3 Authority Key Identifier:
keyid:F1:80:8F:1A:BE:F8:E6:B5:9C:D4:35:9A:6B:44:81:FC:7C:96:31:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8YCPGr745rWc1DWaa0SB_HyWMdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/IY4y4C3_jUKdaQKtxfSSZEeMRpM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.92.184.0-153.92.186.255
185.237.32.0/23
194.30.174.0/24
195.238.224.0/24
IPv6:
2a0c:280::/30
Signature Algorithm: sha256WithRSAEncryption
ac:04:45:06:e7:ce:8b:96:39:a2:e4:4e:d3:59:00:03:b2:ec:
1e:6e:ad:e1:60:c8:87:3c:ba:74:5f:08:f3:9d:a2:3f:4e:94:
a0:50:a1:e3:75:66:11:ee:ec:de:34:f6:04:3e:28:39:be:fd:
a6:0e:ff:8d:17:a5:ee:f3:22:5a:d5:ec:c1:da:51:82:8c:c0:
9f:ca:9c:aa:ae:eb:c9:e4:5d:8c:4d:90:a2:66:eb:0f:5e:05:
cc:a6:10:dc:6d:8d:19:9f:df:c1:ea:69:6b:f0:80:c4:a0:2e:
d4:f7:78:33:8c:76:25:a1:79:89:a4:eb:a1:00:1e:2f:3e:2e:
be:a3:88:c2:b7:9c:6e:99:07:fb:6d:e6:e2:53:01:14:b1:35:
77:6b:00:7d:50:31:a4:85:57:cd:e6:54:2b:11:94:d9:3c:d9:
91:e5:92:df:cd:cc:74:de:9a:57:d1:af:8c:04:6e:ca:c4:a8:
d4:03:18:fb:fd:6e:1a:fc:c0:ca:5a:e6:c6:43:a0:1e:ba:a6:
ce:9f:0a:d6:4e:ae:9f:29:f4:74:6a:01:1c:e7:5d:ae:24:7b:
cd:5c:67:53:43:51:21:8e:0e:ed:f7:c2:22:d9:de:65:4e:5b:
5d:79:48:87:fa:5b:d2:80:db:3f:45:b8:10:3b:bd:0d:fb:53:
c8:38:a2:10
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgISAYVtpl6BUdkBJC0ctcHsw5vkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxODA4ZjFhYmVmOGU2YjU5Y2Q0MzU5YTZiNDQ4MWZjN2M5
NjMxZDEwHhcNMjMwMTAxMTQwNDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMThlMzJlMDJkZmY4ZDQyOWQ2OTAyYWRjNWY0OTI2NDQ3OGM0NjkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTP21/X+tF+goPEr1VGZmlIDmrR7
kw/TGn3yHr5PmCOWA8h/HtamVlaNuiXh2MEBcknVJbe5FIELVFJDjm0s8xZjUHgz
cFwVo+dxCGliw/pObkX0mQNn7wJUnDLnKZnhEIgubsyfueKPf0UpIqd48Ch4iLDs
iNdiBvXai0xBUllBAu6cRufXe2ulUZFO+J5JQLi9THkWF8O7uRndFKft4iE46/bg
P/nGmNmwGyza6PGF47R5NdoLKc3pZOiPzNhl59py29EWZhJpMAQTWYTbiBZcVGnl
VKogd0+zae2G+27r5k3VUzZSdv6yvTMYxL6l3SFILK8aaGywjwVxJGpjuQIDAQAB
o4ICMjCCAi4wHQYDVR0OBBYEFCGOMuAt/41CnWkCrcX0kmRHjEaTMB8GA1UdIwQY
MBaAFPGAjxq++Oa1nNQ1mmtEgfx8ljHRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFlDUEdyNzQ1cldjMURXYWEwU0JfSHlXTWRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9hZTMyNGYtNTRmNS00MWRhLWJlYmYt
MDMwNzdlMzdjNjFhLzEvSVk0eTRDM19qVUtkYVFLdHhmU1NaRWVNUnBNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC9hZTMyNGYtNTRmNS00MWRhLWJlYmYtMDMwNzdlMzdjNjFh
LzEvOFlDUEdyNzQ1cldjMURXYWEwU0JfSHlXTWRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEgGCCsGAQUFBwEHAQH/BDkwNzAmBAIAATAgMAwDBAOZXLgD
BACZXLoDBAG57SADBADCHq4DBADD7uAwDQQCAAIwBwMFAioMAoAwDQYJKoZIhvcN
AQELBQADggEBAKwERQbnzouWOaLkTtNZAAOy7B5ureFgyIc8unRfCPOdoj9OlKBQ
oeN1ZhHu7N409gQ+KDm+/aYO/40Xpe7zIlrV7MHaUYKMwJ/KnKqu68nkXYxNkKJm
6w9eBcymENxtjRmf38HqaWvwgMSgLtT3eDOMdiWheYmk66EAHi8+Lr6jiMK3nG6Z
B/tt5uJTARSxNXdrAH1QMaSFV83mVCsRlNk82ZHlkt/NzHTemlfRr4wEbsrEqNQD
GPv9bhr8wMpa5sZDoB66ps6fCtZOrp8p9HRqARznXa4ke81cZ1NDUSGODu33wiLZ
3mVOW115SIf6W9KA2z9FuBA7vQ37U8g4ohA=
-----END CERTIFICATE-----
Generated at Mon Jan 1 11:16:14 2024 by rpki-client on console-ams.rpki-client.org