Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/SICNT72j_MArADuIOZZY9MACaUU.roa
File: SICNT72j_MArADuIOZZY9MACaUU.roa (raw, json)
Hash identifier: heUc8MLNuLqzLEMnPGCUxmtalzHiahNtqEUAI5FB87M=
Subject key identifier: 48:80:8D:4F:BD:A3:FC:C0:2B:00:3B:88:39:96:58:F4:C0:02:69:45
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0186A31E2E2AF0D7A782B0E2FEE31BCB6D12
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/SICNT72j_MArADuIOZZY9MACaUU.roa
Signing time: Thu 02 Mar 2023 16:18:29 +0000
ROA not before: Thu 02 Mar 2023 16:18:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 135752
IP address blocks: 178.239.203.0/24 maxlen: 24
89.40.160.0/24 maxlen: 24
93.114.195.0/24 maxlen: 24
185.9.55.0/24 maxlen: 24
89.43.210.0/24 maxlen: 24
89.46.92.0/24 maxlen: 24
185.103.74.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:a3:1e:2e:2a:f0:d7:a7:82:b0:e2:fe:e3:1b:cb:6d:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Mar 2 16:18:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=48808d4fbda3fcc02b003b88399658f4c0026945
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f8:62:55:3f:8b:53:4b:41:4d:49:c0:d8:db:
69:8b:a9:41:96:d9:c2:f2:69:4f:93:69:e6:ff:c1:
0c:fa:6b:bd:74:82:05:e2:6d:76:1b:3b:8c:08:7b:
36:96:7c:40:0d:6d:5f:05:55:05:34:df:7d:d5:a1:
89:1f:44:e4:21:d4:22:75:2c:d2:99:a6:43:6d:a7:
2e:10:9d:52:94:34:0a:32:eb:95:9a:ce:63:d8:4e:
f2:c7:21:06:e4:b6:6a:85:0d:49:77:af:62:81:6e:
a4:cf:fc:7e:27:17:30:5f:6c:eb:8e:00:33:c6:b0:
1f:7c:77:3d:ba:47:e6:e7:93:3f:e1:41:ee:87:44:
17:d2:3a:5b:f0:76:0b:85:27:f6:73:99:30:1a:8a:
a1:84:90:b8:b1:ea:8a:80:97:54:8b:88:c4:38:78:
c7:fb:e8:ba:59:0b:70:73:ce:ec:da:4d:bf:9c:46:
4d:ad:58:93:ee:3b:46:40:cb:f9:7a:87:44:46:88:
a6:2a:88:39:63:33:5d:0c:29:17:82:39:cd:21:ec:
c2:2e:43:8e:58:42:7b:a3:2c:06:68:30:66:06:c8:
da:84:27:3d:a4:b0:3b:4a:09:05:a9:58:c5:9f:fd:
59:77:29:70:a8:52:e6:44:c9:f8:71:d9:9c:19:4c:
67:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:80:8D:4F:BD:A3:FC:C0:2B:00:3B:88:39:96:58:F4:C0:02:69:45
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/SICNT72j_MArADuIOZZY9MACaUU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.40.160.0/24
89.43.210.0/24
89.46.92.0/24
93.114.195.0/24
178.239.203.0/24
185.9.55.0/24
185.103.74.0/24
Signature Algorithm: sha256WithRSAEncryption
34:9b:b7:87:33:3a:8f:86:e2:a6:43:3e:2c:87:28:e2:14:0d:
f6:40:87:33:a5:76:a2:74:ac:77:ea:c0:11:0e:5c:44:32:a8:
72:c1:0d:3e:08:44:57:90:61:c1:64:d0:8b:6f:9a:15:1c:fd:
b2:16:fb:10:e8:d2:ea:f2:5e:c4:53:c5:5a:16:03:5e:ca:90:
e9:df:5a:55:7c:34:af:6e:32:24:db:7e:6e:aa:f2:95:bc:bf:
09:46:ac:c8:c6:1c:68:ce:ca:10:66:1e:f2:06:db:7e:b7:44:
67:24:05:fe:e5:a8:11:e3:0b:05:10:77:07:c5:ae:52:d2:8a:
f8:b3:f5:5a:5b:42:47:7c:fc:62:93:a1:54:ef:ce:c5:53:f9:
fa:b7:aa:3b:c4:53:b3:a2:62:86:37:bc:55:12:a2:e3:58:02:
02:d4:c1:d0:89:03:93:9f:aa:b1:c8:c3:54:a8:51:a0:90:fe:
b5:8d:68:b6:d8:65:06:16:57:d1:4f:10:1d:21:d7:e2:87:8a:
7b:59:52:6b:08:9d:96:bd:94:b9:ae:76:9a:5a:90:7a:82:8a:
99:8c:16:27:40:05:75:17:dc:94:f5:1d:0b:34:81:cf:7b:f9:
70:63:a3:9a:28:1a:cd:cc:ed:70:dc:9f:be:1b:bd:c2:c9:cd:
45:fb:f9:1e
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAYajHi4q8NengrDi/uMby20SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw
NWIwZTIwHhcNMjMwMzAyMTYxODI5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ODgwOGQ0ZmJkYTNmY2MwMmIwMDNiODgzOTk2NThmNGMwMDI2OTQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfhiVT+LU0tBTUnA2Ntpi6lBltnC
8mlPk2nm/8EM+mu9dIIF4m12GzuMCHs2lnxADW1fBVUFNN991aGJH0TkIdQidSzS
maZDbacuEJ1SlDQKMuuVms5j2E7yxyEG5LZqhQ1Jd69igW6kz/x+JxcwX2zrjgAz
xrAffHc9ukfm55M/4UHuh0QX0jpb8HYLhSf2c5kwGoqhhJC4seqKgJdUi4jEOHjH
++i6WQtwc87s2k2/nEZNrViT7jtGQMv5eodERoimKog5YzNdDCkXgjnNIezCLkOO
WEJ7oywGaDBmBsjahCc9pLA7SgkFqVjFn/1ZdylwqFLmRMn4cdmcGUxnbQIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFEiAjU+9o/zAKwA7iDmWWPTAAmlFMB8GA1UdIwQY
MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt
MmNjZWRiOTY2YTU4LzEvU0lDTlQ3MmpfTUFyQUR1SU9aWlk5TUFDYVVVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4
LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQAWSigAwQA
WSvSAwQAWS5cAwQAXXLDAwQAsu/LAwQAuQk3AwQAuWdKMA0GCSqGSIb3DQEBCwUA
A4IBAQA0m7eHMzqPhuKmQz4shyjiFA32QIczpXaidKx36sARDlxEMqhywQ0+CERX
kGHBZNCLb5oVHP2yFvsQ6NLq8l7EU8VaFgNeypDp31pVfDSvbjIk235uqvKVvL8J
RqzIxhxozsoQZh7yBtt+t0RnJAX+5agR4wsFEHcHxa5S0or4s/VaW0JHfPxik6FU
787FU/n6t6o7xFOzomKGN7xVEqLjWAIC1MHQiQOTn6qxyMNUqFGgkP61jWi22GUG
FlfRTxAdIdfih4p7WVJrCJ2WvZS5rnaaWpB6goqZjBYnQAV1F9yU9R0LNIHPe/lw
Y6OaKBrNzO1w3J++G73Cyc1F+/ke
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:55 2023 by rpki-client on console-ams.rpki-client.org