Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/e09181-2643-414c-8fbe-1e5e430dd711/1/pcSDDwLxi2ixCP5Tlrchy0geaU8.roa
File: pcSDDwLxi2ixCP5Tlrchy0geaU8.roa (raw, json)
Hash identifier: g3zs1JAPUI87ZcKmz2YFqPOceLjtTOocNp4yyiuxcmU=
Subject key identifier: A5:C4:83:0F:02:F1:8B:68:B1:08:FE:53:96:B7:21:CB:48:1E:69:4F
Certificate issuer: /CN=83479514959397c5e3fa76e1ea495e8e1f6c319b
Certificate serial: 01856D13E396F27B3FFBAEE164965D9B4570
Authority key identifier: 83:47:95:14:95:93:97:C5:E3:FA:76:E1:EA:49:5E:8E:1F:6C:31:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g0eVFJWTl8Xj-nbh6klejh9sMZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/e09181-2643-414c-8fbe-1e5e430dd711/1/pcSDDwLxi2ixCP5Tlrchy0geaU8.roa
Signing time: Sun 01 Jan 2023 11:24:57 +0000
ROA not before: Sun 01 Jan 2023 11:24:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13030
IP address blocks: 109.202.192.0/19 maxlen: 19
185.72.64.0/22 maxlen: 22
81.6.32.0/20 maxlen: 20
185.72.67.0/24 maxlen: 24
80.253.88.0/21 maxlen: 21
141.195.80.0/20 maxlen: 20
185.137.172.0/22 maxlen: 22
193.47.153.0/24 maxlen: 24
185.246.104.0/22 maxlen: 22
45.80.136.0/22 maxlen: 22
185.183.192.0/22 maxlen: 22
2a07:600::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 03 Apr 2023 19:04:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:13:e3:96:f2:7b:3f:fb:ae:e1:64:96:5d:9b:45:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83479514959397c5e3fa76e1ea495e8e1f6c319b
Validity
Not Before: Jan 1 11:24:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a5c4830f02f18b68b108fe5396b721cb481e694f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:2f:70:85:ef:76:7d:b9:0a:f3:97:5a:92:60:
2c:63:fa:c7:33:af:31:7f:f1:71:ae:a2:03:bd:ca:
6e:6c:67:9a:0e:f0:43:8e:f1:05:75:58:3b:76:53:
6d:90:c2:41:2b:a6:6d:5c:76:c7:55:62:a6:ba:e1:
0e:31:99:42:d4:45:24:eb:2b:80:a8:5e:a4:5e:3f:
22:e1:ce:52:f9:90:6b:b2:b4:9f:9a:1b:00:3f:4b:
ed:d8:c9:5e:05:a5:31:37:34:ad:ff:52:f9:2d:31:
27:15:9e:c7:0c:73:ed:53:c9:a7:6f:1c:e4:41:58:
4e:61:45:d4:8c:56:86:8f:ce:e3:8c:b9:56:4c:1c:
9a:7c:8f:50:73:c2:72:d0:b7:93:77:7d:9b:17:f7:
35:42:ef:06:f5:2a:92:b6:61:0d:38:7c:f2:17:ad:
b0:25:09:ab:0d:dd:12:01:ed:6b:c9:46:70:f3:44:
ea:3f:34:23:b6:de:ed:b9:3f:bd:48:5d:4c:dc:9a:
3b:3a:06:8e:e2:6f:22:fe:e3:20:f5:95:e9:ed:6f:
73:14:64:ed:07:bf:67:39:63:18:09:6a:37:3e:4f:
47:7a:c2:68:ea:57:d9:5e:c9:8d:08:8d:1e:19:e6:
bb:1a:9a:cf:78:cd:42:25:18:24:6f:a5:f7:ad:c7:
82:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:C4:83:0F:02:F1:8B:68:B1:08:FE:53:96:B7:21:CB:48:1E:69:4F
X509v3 Authority Key Identifier:
keyid:83:47:95:14:95:93:97:C5:E3:FA:76:E1:EA:49:5E:8E:1F:6C:31:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g0eVFJWTl8Xj-nbh6klejh9sMZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e09181-2643-414c-8fbe-1e5e430dd711/1/pcSDDwLxi2ixCP5Tlrchy0geaU8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e09181-2643-414c-8fbe-1e5e430dd711/1/g0eVFJWTl8Xj-nbh6klejh9sMZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.136.0/22
80.253.88.0/21
81.6.32.0/20
109.202.192.0/19
141.195.80.0/20
185.72.64.0/22
185.137.172.0/22
185.183.192.0/22
185.246.104.0/22
193.47.153.0/24
IPv6:
2a07:600::/29
Signature Algorithm: sha256WithRSAEncryption
5d:f1:df:92:48:8d:3c:6d:75:9a:2f:c5:a0:d4:d8:9a:57:fd:
9c:cb:3a:f5:f7:e1:05:c8:5a:b4:b1:38:ee:21:ef:a5:af:b4:
4e:4b:ff:cd:63:b9:2b:d8:5f:23:bf:c6:e2:d5:89:87:26:31:
fc:9a:a1:b9:9a:d2:5d:1b:55:8d:b2:0a:85:ad:0e:c3:c0:2e:
95:cf:09:a7:d6:a8:f3:e4:50:a0:7b:db:40:be:85:61:cc:82:
f5:47:75:9b:9e:4d:5d:68:d7:55:46:41:9e:22:55:77:ce:c8:
d8:a6:59:d0:2e:cb:9d:02:1d:7d:b3:db:7f:44:64:06:a5:62:
e2:b5:d7:fd:75:88:95:03:9d:3e:ab:7a:f8:05:83:b1:52:ac:
60:3c:af:da:9e:2e:5d:1a:51:e8:3b:fe:1b:67:46:b8:06:f1:
40:fc:9e:93:a2:15:03:6c:49:2a:73:5b:bb:36:5f:44:84:6c:
64:2c:b1:36:b1:b6:96:ea:85:1c:0f:35:8c:8a:67:43:9d:6b:
22:db:a0:1d:ce:35:e0:cc:06:31:b0:be:d2:27:bb:d3:76:8c:
f1:55:d8:fa:d8:38:af:73:2b:84:9a:2d:60:83:3b:d8:24:76:
8f:14:2e:e5:14:65:e8:3b:35:23:a1:e4:52:c4:05:94:69:83:
5d:15:35:a1
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgISAYVtE+OW8ns/+67hZJZdm0VwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzNDc5NTE0OTU5Mzk3YzVlM2ZhNzZlMWVhNDk1ZThlMWY2
YzMxOWIwHhcNMjMwMTAxMTEyNDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNWM0ODMwZjAyZjE4YjY4YjEwOGZlNTM5NmI3MjFjYjQ4MWU2OTRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjC9whe92fbkK85dakmAsY/rHM68x
f/FxrqIDvcpubGeaDvBDjvEFdVg7dlNtkMJBK6ZtXHbHVWKmuuEOMZlC1EUk6yuA
qF6kXj8i4c5S+ZBrsrSfmhsAP0vt2MleBaUxNzSt/1L5LTEnFZ7HDHPtU8mnbxzk
QVhOYUXUjFaGj87jjLlWTByafI9Qc8Jy0LeTd32bF/c1Qu8G9SqStmENOHzyF62w
JQmrDd0SAe1ryUZw80TqPzQjtt7tuT+9SF1M3Jo7OgaO4m8i/uMg9ZXp7W9zFGTt
B79nOWMYCWo3Pk9HesJo6lfZXsmNCI0eGea7GprPeM1CJRgkb6X3rceCkwIDAQAB
o4ICTjCCAkowHQYDVR0OBBYEFKXEgw8C8YtosQj+U5a3IctIHmlPMB8GA1UdIwQY
MBaAFINHlRSVk5fF4/p24epJXo4fbDGbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzBlVkZKV1RsOFhqLW5iaDZrbGVqaDlzTVpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9lMDkxODEtMjY0My00MTRjLThmYmUt
MWU1ZTQzMGRkNzExLzEvcGNTRER3THhpMml4Q1A1VGxyY2h5MGdlYVU4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy9lMDkxODEtMjY0My00MTRjLThmYmUtMWU1ZTQzMGRkNzEx
LzEvZzBlVkZKV1RsOFhqLW5iaDZrbGVqaDlzTVpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGQGCCsGAQUFBwEHAQH/BFUwUzBCBAIAATA8AwQCLVCIAwQD
UP1YAwQEUQYgAwQFbcrAAwQEjcNQAwQCuUhAAwQCuYmsAwQCubfAAwQCufZoAwQA
wS+ZMA0EAgACMAcDBQMqBwYAMA0GCSqGSIb3DQEBCwUAA4IBAQBd8d+SSI08bXWa
L8Wg1NiaV/2cyzr19+EFyFq0sTjuIe+lr7ROS//NY7kr2F8jv8bi1YmHJjH8mqG5
mtJdG1WNsgqFrQ7DwC6Vzwmn1qjz5FCge9tAvoVhzIL1R3Wbnk1daNdVRkGeIlV3
zsjYplnQLsudAh19s9t/RGQGpWLitdf9dYiVA50+q3r4BYOxUqxgPK/ani5dGlHo
O/4bZ0a4BvFA/J6TohUDbEkqc1u7Nl9EhGxkLLE2sbaW6oUcDzWMimdDnWsi26Ad
zjXgzAYxsL7SJ7vTdozxVdj62DivcyuEmi1ggzvYJHaPFC7lFGXoOzUjoeRSxAWU
aYNdFTWh
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:28 2024 by rpki-client on console-fra.rpki-client.org