Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/sJAi-xje8M8GGHGImKlle47QPZA.roa
File: sJAi-xje8M8GGHGImKlle47QPZA.roa (raw, json)
Hash identifier: WJopEnfpXcdXj6BgD0Qmai+X5JY7yZ3iYASZPJ+p7+c=
Subject key identifier: B0:90:22:FB:18:DE:F0:CF:06:18:71:88:98:A9:65:7B:8E:D0:3D:90
Certificate issuer: /CN=53f3590809d187f7b361fb24cd43f93f664b20b3
Certificate serial: 018571A7C653661B0B3E75A21BC99396FF84
Authority key identifier: 53:F3:59:08:09:D1:87:F7:B3:61:FB:24:CD:43:F9:3F:66:4B:20:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U_NZCAnRh_ezYfskzUP5P2ZLILM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/sJAi-xje8M8GGHGImKlle47QPZA.roa
Signing time: Mon 02 Jan 2023 08:44:58 +0000
ROA not before: Mon 02 Jan 2023 08:44:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48355
IP address blocks: 185.1.137.0/24 maxlen: 24
2001:7f8:db::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:a7:c6:53:66:1b:0b:3e:75:a2:1b:c9:93:96:ff:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53f3590809d187f7b361fb24cd43f93f664b20b3
Validity
Not Before: Jan 2 08:44:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b09022fb18def0cf0618718898a9657b8ed03d90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:6c:18:ea:d8:b0:4b:3c:a8:2e:0d:4e:40:b1:
e5:d9:ab:dc:1f:16:ee:95:81:53:82:65:e9:31:49:
e9:ee:b8:46:c7:92:6f:da:04:22:99:7d:fa:9c:31:
60:ab:02:89:d4:65:c2:7f:52:94:55:08:dd:7b:eb:
db:c9:41:8e:a0:3e:50:a9:6c:99:bc:53:a5:91:43:
2d:f5:1d:3d:f7:ac:89:be:f4:71:43:c4:ea:a2:18:
f0:5b:68:23:3d:af:c2:48:72:5d:c4:3c:fa:b7:b5:
1a:7e:16:ba:30:19:98:22:2c:05:db:67:4c:db:10:
e7:65:4e:09:91:82:99:d8:cb:5d:3d:ec:39:8d:3f:
8a:2d:02:ee:a4:14:1d:78:ef:43:f0:da:68:6a:f4:
85:ec:59:5d:aa:76:6e:6d:84:bf:0d:cf:d7:46:8f:
c8:8a:95:50:5b:74:e6:28:6d:f8:44:0e:86:73:80:
a6:48:74:9e:e4:cc:cd:b4:f4:4f:9b:ac:03:10:74:
48:f8:46:7b:c2:05:7e:5c:91:05:f0:ca:78:29:2f:
92:97:64:52:0d:49:01:ba:73:27:19:a1:da:96:3a:
b7:d0:79:df:cf:b1:36:3d:c8:6a:db:66:24:72:74:
a5:ff:7b:0e:09:cb:4b:6b:da:c4:72:7b:9f:2b:6d:
45:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:90:22:FB:18:DE:F0:CF:06:18:71:88:98:A9:65:7B:8E:D0:3D:90
X509v3 Authority Key Identifier:
keyid:53:F3:59:08:09:D1:87:F7:B3:61:FB:24:CD:43:F9:3F:66:4B:20:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_NZCAnRh_ezYfskzUP5P2ZLILM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/sJAi-xje8M8GGHGImKlle47QPZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.1.137.0/24
IPv6:
2001:7f8:db::/48
Signature Algorithm: sha256WithRSAEncryption
2c:b1:30:94:19:4a:cc:0b:24:b8:ae:df:ab:7e:6f:15:8a:ad:
70:9e:c2:40:38:65:a5:52:31:bc:db:6e:5a:e1:39:9b:16:a8:
f7:fd:5c:c4:78:27:6e:5b:05:81:a8:e1:7e:44:c0:86:89:c1:
36:1e:17:3f:5c:9b:15:06:85:a2:c3:b9:1d:17:9c:40:1e:9d:
56:62:1c:7e:b4:e9:8c:93:0b:4e:5c:07:61:21:22:37:95:65:
f7:c9:9b:ef:34:36:a6:34:25:fe:57:ca:f3:6a:6a:5e:f5:60:
86:9f:67:df:a2:f9:90:66:dd:6d:a0:b4:27:c6:91:c1:1b:f2:
f4:60:6b:02:cd:bc:b7:b2:0d:79:34:a4:5c:4a:90:36:16:c5:
09:43:b5:1d:88:53:de:aa:1b:2c:90:0d:24:c6:ad:6c:62:0d:
80:59:29:4d:db:fb:e1:88:c0:a6:4f:dc:aa:99:e1:94:1a:9e:
fa:e3:74:0c:76:d5:f2:62:52:db:2c:a5:83:9e:2b:8b:17:62:
6f:7f:c3:09:8e:8c:ad:6b:ed:c7:d0:86:95:74:bc:98:9c:9d:
6c:dd:71:a9:ce:5d:ab:2a:96:cc:ee:d7:e1:2d:15:80:16:68:
ab:9e:6f:24:88:23:a4:e3:90:51:02:ba:23:ed:9b:b4:d4:4b:
8d:28:18:7d
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYVxp8ZTZhsLPnWiG8mTlv+EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzZjM1OTA4MDlkMTg3ZjdiMzYxZmIyNGNkNDNmOTNmNjY0
YjIwYjMwHhcNMjMwMTAyMDg0NDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMDkwMjJmYjE4ZGVmMGNmMDYxODcxODg5OGE5NjU3YjhlZDAzZDkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmwY6tiwSzyoLg1OQLHl2avcHxbu
lYFTgmXpMUnp7rhGx5Jv2gQimX36nDFgqwKJ1GXCf1KUVQjde+vbyUGOoD5QqWyZ
vFOlkUMt9R0996yJvvRxQ8TqohjwW2gjPa/CSHJdxDz6t7Uafha6MBmYIiwF22dM
2xDnZU4JkYKZ2MtdPew5jT+KLQLupBQdeO9D8NpoavSF7FldqnZubYS/Dc/XRo/I
ipVQW3TmKG34RA6Gc4CmSHSe5MzNtPRPm6wDEHRI+EZ7wgV+XJEF8Mp4KS+Sl2RS
DUkBunMnGaHaljq30Hnfz7E2Pchq22YkcnSl/3sOCctLa9rEcnufK21FkwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFLCQIvsY3vDPBhhxiJipZXuO0D2QMB8GA1UdIwQY
MBaAFFPzWQgJ0Yf3s2H7JM1D+T9mSyCzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVV9OWkNBblJoX2V6WWZza3pVUDVQMlpMSUxNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9kZTYzODMtNGFkNS00NTdiLTk1M2Mt
YTc3NmZlZGU5OTA1LzEvc0pBaS14amU4TThHR0hHSW1LbGxlNDdRUFpBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9kZTYzODMtNGFkNS00NTdiLTk1M2MtYTc3NmZlZGU5OTA1
LzEvVV9OWkNBblJoX2V6WWZza3pVUDVQMlpMSUxNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAuQGJMA8E
AgACMAkDBwAgAQf4ANswDQYJKoZIhvcNAQELBQADggEBACyxMJQZSswLJLiu36t+
bxWKrXCewkA4ZaVSMbzbblrhOZsWqPf9XMR4J25bBYGo4X5EwIaJwTYeFz9cmxUG
haLDuR0XnEAenVZiHH606YyTC05cB2EhIjeVZffJm+80NqY0Jf5XyvNqal71YIaf
Z9+i+ZBm3W2gtCfGkcEb8vRgawLNvLeyDXk0pFxKkDYWxQlDtR2IU96qGyyQDSTG
rWxiDYBZKU3b++GIwKZP3KqZ4ZQanvrjdAx21fJiUtsspYOeK4sXYm9/wwmOjK1r
7cfQhpV0vJicnWzdcanOXasqlszu1+EtFYAWaKuebySII6TjkFECuiPtm7TUS40o
GH0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:54 2024 by rpki-client on console-fra.rpki-client.org