Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/OuZviOuM0swRdYsE28f2NRLb2yA.roa
File: OuZviOuM0swRdYsE28f2NRLb2yA.roa (raw, json)
Hash identifier: nGRBEGNNucKkiil4/5sPFdtVzbfDpqrg/YePNJoiI0Y=
Subject key identifier: 3A:E6:6F:88:EB:8C:D2:CC:11:75:8B:04:DB:C7:F6:35:12:DB:DB:20
Certificate issuer: /CN=1e514098a5a9736cda4303e0495e94652390aa91
Certificate serial: 01856CB8588919521D2461178C2FF94F6EC5
Authority key identifier: 1E:51:40:98:A5:A9:73:6C:DA:43:03:E0:49:5E:94:65:23:90:AA:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlFAmKWpc2zaQwPgSV6UZSOQqpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/OuZviOuM0swRdYsE28f2NRLb2yA.roa
Signing time: Sun 01 Jan 2023 09:44:58 +0000
ROA not before: Sun 01 Jan 2023 09:44:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208959
IP address blocks: 46.232.210.0/23 maxlen: 23
185.207.164.0/22 maxlen: 22
45.86.221.0/24 maxlen: 24
2a11:b00::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:30:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:b8:58:89:19:52:1d:24:61:17:8c:2f:f9:4f:6e:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e514098a5a9736cda4303e0495e94652390aa91
Validity
Not Before: Jan 1 09:44:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3ae66f88eb8cd2cc11758b04dbc7f63512dbdb20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:36:f8:44:2b:35:0b:66:67:e6:e3:94:e7:80:
ee:3a:c7:60:c9:9c:f8:d3:75:db:72:ac:58:bd:d7:
b2:58:99:ad:77:6c:44:aa:f4:9d:a0:71:72:0d:06:
04:2b:d9:9e:c1:4f:75:79:e4:13:10:fa:ff:fb:c7:
68:e9:f6:76:96:c7:86:50:66:14:bc:0a:c2:36:40:
08:a7:aa:92:0d:ab:e6:6c:08:03:97:66:67:db:f9:
c1:31:3b:12:70:49:7a:81:8a:a2:4c:12:ec:23:2b:
43:b0:d6:7a:4f:0c:99:c2:bc:61:61:65:1d:03:f3:
5c:ba:99:43:10:15:fb:2f:13:70:8c:01:bd:1e:f2:
36:34:4f:be:3c:9a:4a:70:77:ff:50:27:40:c5:af:
86:88:84:ad:8e:3d:d6:1b:52:bd:6c:01:8f:8b:7c:
ef:26:dd:a8:03:5c:e4:6d:3a:83:0d:0b:5e:ec:2a:
1a:f7:25:cb:23:72:b5:68:e4:ba:f0:73:fc:66:19:
98:42:5e:50:55:e6:89:a7:ea:57:93:5c:cc:a5:87:
bd:98:80:d1:5d:32:93:03:0e:56:f0:ef:ef:a7:e2:
08:d3:fc:56:81:0b:4c:8b:53:71:dc:eb:53:53:b3:
17:a4:be:f1:b7:ec:8a:13:99:f8:9a:0a:64:55:d1:
4e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:E6:6F:88:EB:8C:D2:CC:11:75:8B:04:DB:C7:F6:35:12:DB:DB:20
X509v3 Authority Key Identifier:
keyid:1E:51:40:98:A5:A9:73:6C:DA:43:03:E0:49:5E:94:65:23:90:AA:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlFAmKWpc2zaQwPgSV6UZSOQqpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/OuZviOuM0swRdYsE28f2NRLb2yA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.221.0/24
46.232.210.0/23
185.207.164.0/22
IPv6:
2a11:b00::/29
Signature Algorithm: sha256WithRSAEncryption
0c:85:00:bf:b3:4a:9e:d8:7c:fd:d0:fc:a7:b8:21:99:8e:f9:
e4:93:84:47:f9:4a:a2:57:f3:df:56:06:47:70:36:30:9c:2f:
66:7a:5c:a7:ab:4a:d8:a6:f8:c7:d8:97:af:6d:e6:27:63:e9:
00:a1:17:4c:dc:82:cb:5a:2f:d3:c2:c6:31:06:96:3c:f0:76:
ca:e8:f9:d3:87:50:46:0b:d2:c6:5e:87:d0:6a:4f:d3:ae:02:
2f:43:02:86:49:40:90:7a:cc:4c:bb:64:9c:e6:75:bc:eb:bd:
71:df:88:9e:46:ab:9b:46:9b:90:59:51:a2:72:fd:1e:dc:88:
14:8c:fa:ac:26:23:26:13:ad:df:b1:de:62:38:e5:48:5d:ec:
2a:5d:75:dd:36:3d:29:65:cd:4f:6a:2e:06:9b:16:d1:02:90:
6f:19:22:e2:96:84:86:48:f1:9b:e9:75:7b:80:4d:68:e8:ae:
5d:6e:5e:0a:ff:6e:a7:a0:64:24:28:10:f8:9e:59:89:6c:02:
15:5d:ac:f1:2c:b1:e2:56:17:2e:17:50:e7:60:7a:15:a9:af:
8e:f0:4d:9b:bd:80:cd:7c:26:14:b2:b2:d7:99:7a:e3:1d:78:
a4:14:80:16:4a:df:4c:b4:c1:41:1f:41:cc:38:c0:12:e3:0a:
ea:d2:ab:45
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAYVsuFiJGVIdJGEXjC/5T27FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlNTE0MDk4YTVhOTczNmNkYTQzMDNlMDQ5NWU5NDY1MjM5
MGFhOTEwHhcNMjMwMTAxMDk0NDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYWU2NmY4OGViOGNkMmNjMTE3NThiMDRkYmM3ZjYzNTEyZGJkYjIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jb4RCs1C2Zn5uOU54DuOsdgyZz4
03XbcqxYvdeyWJmtd2xEqvSdoHFyDQYEK9mewU91eeQTEPr/+8do6fZ2lseGUGYU
vArCNkAIp6qSDavmbAgDl2Zn2/nBMTsScEl6gYqiTBLsIytDsNZ6TwyZwrxhYWUd
A/NcuplDEBX7LxNwjAG9HvI2NE++PJpKcHf/UCdAxa+GiIStjj3WG1K9bAGPi3zv
Jt2oA1zkbTqDDQte7Coa9yXLI3K1aOS68HP8ZhmYQl5QVeaJp+pXk1zMpYe9mIDR
XTKTAw5W8O/vp+II0/xWgQtMi1Nx3OtTU7MXpL7xt+yKE5n4mgpkVdFOyQIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFDrmb4jrjNLMEXWLBNvH9jUS29sgMB8GA1UdIwQY
MBaAFB5RQJilqXNs2kMD4ElelGUjkKqRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGxGQW1LV3BjMnphUXdQZ1NWNlVaU09RcXBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8zNWRmY2ItZDkyZC00OGZlLTlkYWQt
ODU0MzgxNjg2YzdiLzEvT3VadmlPdU0wc3dSZFlzRTI4ZjJOUkxiMnlBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy8zNWRmY2ItZDkyZC00OGZlLTlkYWQtODU0MzgxNjg2Yzdi
LzEvSGxGQW1LV3BjMnphUXdQZ1NWNlVaU09RcXBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQALVbdAwQB
LujSAwQCuc+kMA0EAgACMAcDBQMqEQsAMA0GCSqGSIb3DQEBCwUAA4IBAQAMhQC/
s0qe2Hz90PynuCGZjvnkk4RH+UqiV/PfVgZHcDYwnC9melynq0rYpvjH2JevbeYn
Y+kAoRdM3ILLWi/TwsYxBpY88HbK6PnTh1BGC9LGXofQak/TrgIvQwKGSUCQesxM
u2Sc5nW8671x34ieRqubRpuQWVGicv0e3IgUjPqsJiMmE63fsd5iOOVIXewqXXXd
Nj0pZc1Pai4GmxbRApBvGSLiloSGSPGb6XV7gE1o6K5dbl4K/26noGQkKBD4nlmJ
bAIVXazxLLHiVhcuF1DnYHoVqa+O8E2bvYDNfCYUsrLXmXrjHXikFIAWSt9MtMFB
H0HMOMAS4wrq0qtF
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:03 2024 by rpki-client on console-ams.rpki-client.org