Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/swOShFF50pU8dHFcU0Doa_2Qip4.roa
File: swOShFF50pU8dHFcU0Doa_2Qip4.roa (raw, json)
Hash identifier: OSPvathCBboYRRRTmdwldlpjFflIOjpfOER+8A+mAv8=
Subject key identifier: B3:03:92:84:51:79:D2:95:3C:74:71:5C:53:40:E8:6B:FD:90:8A:9E
Certificate issuer: /CN=89056fa9625b6c87404267c6dc219924ac160045
Certificate serial: 0185CA6572F9E818C0E83B6641C645A773CE
Authority key identifier: 89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/swOShFF50pU8dHFcU0Doa_2Qip4.roa
Signing time: Thu 19 Jan 2023 14:18:44 +0000
ROA not before: Thu 19 Jan 2023 14:18:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 136258
IP address blocks: 185.213.23.0/24 maxlen: 24
147.78.0.0/24 maxlen: 24
147.78.1.0/24 maxlen: 24
185.126.239.0/24 maxlen: 24
2a11:840:12::/48 maxlen: 48
2a11:840:8::/48 maxlen: 48
2a11:840:18::/48 maxlen: 48
2a11:840:13::/48 maxlen: 48
2a11:840:11::/48 maxlen: 48
2a11:840:41::/48 maxlen: 48
2a11:840:17::/48 maxlen: 48
2a11:840:7::/48 maxlen: 48
2a11:840:47::/48 maxlen: 48
2a11:840:40::/48 maxlen: 48
2a11:840:10::/48 maxlen: 48
2a11:840:19::/48 maxlen: 48
2a11:840:14::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 03 May 2023 08:23:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ca:65:72:f9:e8:18:c0:e8:3b:66:41:c6:45:a7:73:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89056fa9625b6c87404267c6dc219924ac160045
Validity
Not Before: Jan 19 14:18:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b30392845179d2953c74715c5340e86bfd908a9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:1a:39:0a:3a:98:7a:4a:bb:55:5f:a4:40:88:
2a:da:f1:49:c8:38:54:f2:fe:16:27:de:50:81:5f:
ab:1a:2c:0a:10:05:9e:86:2c:15:f2:98:53:d6:a3:
83:ea:cc:4b:d7:22:c7:a8:a9:8f:0e:d4:ad:14:f2:
b6:1d:22:90:31:7c:00:cb:2c:19:fb:f3:4b:ea:49:
82:d3:3c:f3:72:34:61:b6:4f:0a:d1:9b:ec:b8:09:
83:64:1b:04:4c:64:b2:f3:9b:64:e0:d9:b0:44:df:
b9:2a:f0:f4:a7:c3:2c:6a:6d:a8:83:7e:aa:de:2c:
f5:dd:65:0e:8a:e7:2e:ba:11:fa:af:12:0c:3f:99:
b7:cd:cb:d2:90:ba:a9:21:32:e6:70:a1:7d:e6:b5:
15:dc:ef:6e:14:07:70:34:c8:b3:bc:5f:eb:b9:92:
1b:f8:eb:7e:a6:0c:20:cb:07:30:56:30:2c:8c:96:
c2:af:6b:67:7d:2e:87:c0:ee:ca:92:90:d4:21:05:
af:da:bb:41:4c:31:ba:b8:e3:74:dc:e9:a9:08:49:
0e:99:3a:d2:66:e4:3e:42:c8:64:e4:b2:b9:17:14:
84:0e:f3:90:d3:5b:42:68:3a:c3:b1:ea:ee:0e:d6:
c1:90:43:40:1b:8c:75:d7:63:81:72:28:0e:3a:de:
2a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:03:92:84:51:79:D2:95:3C:74:71:5C:53:40:E8:6B:FD:90:8A:9E
X509v3 Authority Key Identifier:
keyid:89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/swOShFF50pU8dHFcU0Doa_2Qip4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.0.0/23
185.126.239.0/24
185.213.23.0/24
IPv6:
2a11:840:7::-2a11:840:8:ffff:ffff:ffff:ffff:ffff
2a11:840:10::-2a11:840:14:ffff:ffff:ffff:ffff:ffff
2a11:840:17::-2a11:840:19:ffff:ffff:ffff:ffff:ffff
2a11:840:40::/47
2a11:840:47::/48
Signature Algorithm: sha256WithRSAEncryption
93:c1:66:b8:15:2c:eb:0e:ed:49:2f:9d:7c:11:45:39:f4:17:
3a:db:8c:93:e2:27:12:2e:03:1f:1f:c2:bd:76:c1:97:16:57:
ac:71:64:a3:9b:0e:78:e6:98:7c:35:20:cf:98:58:57:0d:d4:
87:fe:df:e7:40:6f:17:2f:d9:de:10:89:73:37:b4:23:25:76:
9b:12:10:c3:7a:1d:b7:3c:8b:dc:7b:3a:df:05:f5:8d:91:fd:
e1:51:f5:ff:3b:7d:d3:90:24:6d:72:19:00:ad:e7:e0:d0:ac:
d2:ef:35:8b:42:d2:77:36:2e:96:e2:b8:7f:e5:b8:eb:ad:da:
61:95:fe:84:b9:93:60:b2:98:9c:3a:d3:a4:6c:6a:2f:a5:8a:
2b:b2:1f:73:ec:13:d1:ee:94:d7:39:99:5c:41:76:ed:1f:31:
90:13:b7:63:16:e6:1c:43:d1:50:c4:e5:5c:dd:8e:53:e5:15:
c8:93:e0:83:54:88:01:a4:8a:1d:e2:ef:d3:42:bb:29:57:14:
97:7d:8c:d8:9e:1f:0e:7d:cc:ba:1f:0a:63:ff:74:88:e4:42:
2e:09:07:14:6d:1d:6a:37:63:34:03:5e:53:0f:56:1f:3b:36:
6b:97:79:80:b5:5d:d2:40:ab:d8:44:8e:28:43:b3:51:70:1b:
b7:7f:b7:e5
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgISAYXKZXL56BjA6DtmQcZFp3POMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5MDU2ZmE5NjI1YjZjODc0MDQyNjdjNmRjMjE5OTI0YWMx
NjAwNDUwHhcNMjMwMTE5MTQxODQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMzAzOTI4NDUxNzlkMjk1M2M3NDcxNWM1MzQwZTg2YmZkOTA4YTllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Ro5CjqYekq7VV+kQIgq2vFJyDhU
8v4WJ95QgV+rGiwKEAWehiwV8phT1qOD6sxL1yLHqKmPDtStFPK2HSKQMXwAyywZ
+/NL6kmC0zzzcjRhtk8K0ZvsuAmDZBsETGSy85tk4NmwRN+5KvD0p8Msam2og36q
3iz13WUOiucuuhH6rxIMP5m3zcvSkLqpITLmcKF95rUV3O9uFAdwNMizvF/ruZIb
+Ot+pgwgywcwVjAsjJbCr2tnfS6HwO7KkpDUIQWv2rtBTDG6uON03OmpCEkOmTrS
ZuQ+Qshk5LK5FxSEDvOQ01tCaDrDseruDtbBkENAG4x112OBcigOOt4qzwIDAQAB
o4ICbDCCAmgwHQYDVR0OBBYEFLMDkoRRedKVPHRxXFNA6Gv9kIqeMB8GA1UdIwQY
MBaAFIkFb6liW2yHQEJnxtwhmSSsFgBFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVFWdnFXSmJiSWRBUW1mRzNDR1pKS3dXQUVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi85OWFlMmYtMzljYy00M2YzLTk0MWQt
NTE5MjAzNzMzNTNjLzEvc3dPU2hGRjUwcFU4ZEhGY1UwRG9hXzJRaXA0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi85OWFlMmYtMzljYy00M2YzLTk0MWQtNTE5MjAzNzMzNTNj
LzEvaVFWdnFXSmJiSWRBUW1mRzNDR1pKS3dXQUVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGBBggrBgEFBQcBBwEB/wRyMHAwGAQCAAEwEgMEAZNOAAME
ALl+7wMEALnVFzBUBAIAAjBOMBIDBwAqEQhAAAcDBwAqEQhAAAgwEgMHBCoRCEAA
EAMHACoRCEAAFDASAwcAKhEIQAAXAwcBKhEIQAAYAwcBKhEIQABAAwcAKhEIQABH
MA0GCSqGSIb3DQEBCwUAA4IBAQCTwWa4FSzrDu1JL518EUU59Bc624yT4icSLgMf
H8K9dsGXFlescWSjmw545ph8NSDPmFhXDdSH/t/nQG8XL9neEIlzN7QjJXabEhDD
eh23PIvcezrfBfWNkf3hUfX/O33TkCRtchkArefg0KzS7zWLQtJ3Ni6W4rh/5bjr
rdphlf6EuZNgspicOtOkbGovpYorsh9z7BPR7pTXOZlcQXbtHzGQE7djFuYcQ9FQ
xOVc3Y5T5RXIk+CDVIgBpIod4u/TQrspVxSXfYzYnh8Ofcy6Hwpj/3SI5EIuCQcU
bR1qN2M0A15TD1YfOzZrl3mAtV3SQKvYRI4oQ7NRcBu3f7fl
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:20 2024 by rpki-client on console-fra.rpki-client.org