Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/3X4h4ZvAniEwWDf7VHp3Qb50VOY.roa
File: 3X4h4ZvAniEwWDf7VHp3Qb50VOY.roa (raw, json)
Hash identifier: hDwc9Sfa16sKswR78w2Tc/Xej+kQx09ImymLcrTICug=
Subject key identifier: DD:7E:21:E1:9B:C0:9E:21:30:58:37:FB:54:7A:77:41:BE:74:54:E6
Certificate issuer: /CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3
Certificate serial: 018C4904CD968432991C1BED1DDB78A7AA61
Authority key identifier: C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/3X4h4ZvAniEwWDf7VHp3Qb50VOY.roa
Signing time: Fri 08 Dec 2023 10:41:40 +0000
ROA not before: Fri 08 Dec 2023 10:41:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1820
IP address blocks: 185.170.192.0/22 maxlen: 32
195.66.93.0/24 maxlen: 32
31.223.224.0/21 maxlen: 32
91.226.1.0/24 maxlen: 32
195.177.72.0/22 maxlen: 32
185.45.244.0/22 maxlen: 32
185.16.228.0/22 maxlen: 32
193.16.47.0/24 maxlen: 32
2a00:6180::/29 maxlen: 128
2a13:8800::/29 maxlen: 64
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:49:04:cd:96:84:32:99:1c:1b:ed:1d:db:78:a7:aa:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3
Validity
Not Before: Dec 8 10:41:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dd7e21e19bc09e21305837fb547a7741be7454e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:59:4d:20:fd:46:3c:7b:d1:f8:20:18:4d:f6:
05:66:4c:f7:7d:3f:94:8d:74:f9:08:f2:3e:ec:39:
55:82:0a:e1:45:a7:8f:bb:75:63:5f:be:4a:64:65:
1a:c8:cc:fd:d6:26:d7:e6:af:3d:7d:44:65:59:66:
17:a0:ac:2b:e9:b3:bf:56:e9:f7:3f:14:7d:5e:63:
d2:66:19:38:83:fc:8d:43:29:b6:8a:8f:49:61:70:
b4:50:88:c3:3d:97:3d:87:a1:ed:96:a1:df:61:51:
46:47:3d:3c:d5:fb:c0:d3:46:1c:88:a2:d9:bc:58:
0a:65:bb:f1:aa:9f:77:c6:f8:83:e8:18:d7:5d:d0:
63:e1:cb:76:fb:85:f5:20:b3:68:d8:ad:78:68:b6:
ac:19:c7:91:94:ce:48:8a:11:7b:a7:a9:a0:0e:c1:
58:cc:20:38:f5:78:55:68:c2:92:06:cc:1b:b6:7f:
17:03:60:ab:4e:d8:5e:5a:0f:33:d1:a4:66:9e:86:
cf:2c:ef:4c:e0:71:22:e9:f2:ca:ee:19:d9:a9:af:
2e:ec:83:83:77:76:e9:7c:ad:1b:fe:90:6b:32:af:
47:5b:c1:69:03:7a:45:2e:c4:d0:1c:29:31:38:21:
3e:65:6a:3c:fc:23:0e:8d:eb:5e:c4:cc:7e:11:ff:
ba:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:7E:21:E1:9B:C0:9E:21:30:58:37:FB:54:7A:77:41:BE:74:54:E6
X509v3 Authority Key Identifier:
keyid:C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/3X4h4ZvAniEwWDf7VHp3Qb50VOY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.223.224.0/21
91.226.1.0/24
185.16.228.0/22
185.45.244.0/22
185.170.192.0/22
193.16.47.0/24
195.66.93.0/24
195.177.72.0/22
IPv6:
2a00:6180::/29
2a13:8800::/29
Signature Algorithm: sha256WithRSAEncryption
33:2a:5d:74:d4:b9:e0:0f:b3:b5:a8:54:02:dc:15:ba:d9:11:
58:e3:35:5c:50:6c:e9:bd:1a:b1:ce:75:87:3a:ff:5c:1e:40:
99:c9:1a:e1:0b:d2:f5:05:17:49:b3:24:f9:cb:f9:9b:95:98:
b6:60:34:cb:c2:27:d3:eb:68:bf:37:e2:6b:75:fc:e6:e0:43:
c8:f2:8a:19:f3:17:b7:26:4a:3e:a3:b8:7d:22:9f:bf:3f:1e:
8c:f1:77:f4:a0:da:03:cc:9a:bb:3d:d4:d3:98:31:d1:ce:b4:
84:0d:88:13:1d:8a:00:48:c5:de:b7:ce:67:a8:f9:9b:41:8e:
a8:27:83:c9:5c:42:e1:2d:54:10:5e:e1:4a:10:6e:8d:2b:1f:
4e:b4:7d:c5:7e:95:39:1a:79:67:34:76:e8:1b:ec:6a:f1:79:
65:9e:37:14:f6:5a:bd:56:19:cc:42:07:1b:69:c2:a4:70:5c:
38:2b:75:6d:be:c3:c0:e1:28:4b:8d:e5:9f:c1:2a:6f:56:4d:
5d:cf:28:00:e9:ca:ad:ee:66:88:a3:30:2d:a4:8a:ff:9b:9f:
5e:ac:6c:1d:18:c9:1f:93:63:71:6e:4a:bf:f0:4a:bc:26:72:
bd:28:e7:fc:37:d6:74:5c:e0:29:a2:6d:c7:8a:66:b5:1f:8f:
67:ac:8e:f6
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgISAYxJBM2WhDKZHBvtHdt4p6phMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2MTk1M2MwODk4MGFkYzk0ZjJmYTNhM2MxYmE5NWM0MGQy
MWU3ZDMwHhcNMjMxMjA4MTA0MTQwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZDdlMjFlMTliYzA5ZTIxMzA1ODM3ZmI1NDdhNzc0MWJlNzQ1NGU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFlNIP1GPHvR+CAYTfYFZkz3fT+U
jXT5CPI+7DlVggrhRaePu3VjX75KZGUayMz91ibX5q89fURlWWYXoKwr6bO/Vun3
PxR9XmPSZhk4g/yNQym2io9JYXC0UIjDPZc9h6HtlqHfYVFGRz081fvA00YciKLZ
vFgKZbvxqp93xviD6BjXXdBj4ct2+4X1ILNo2K14aLasGceRlM5IihF7p6mgDsFY
zCA49XhVaMKSBswbtn8XA2CrTtheWg8z0aRmnobPLO9M4HEi6fLK7hnZqa8u7IOD
d3bpfK0b/pBrMq9HW8FpA3pFLsTQHCkxOCE+ZWo8/CMOjetexMx+Ef+6ywIDAQAB
o4ICSTCCAkUwHQYDVR0OBBYEFN1+IeGbwJ4hMFg3+1R6d0G+dFTmMB8GA1UdIwQY
MBaAFMYZU8CJgK3JTy+jo8G6lcQNIefTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGhsVHdJbUFyY2xQTDZPandicVZ4QTBoNTlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9lMDEyODUtNjYwZC00Y2QyLWFkMWYt
NjI1MjQ1YTAwYWJmLzEvM1g0aDRadkFuaUV3V0RmN1ZIcDNRYjUwVk9ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9lMDEyODUtNjYwZC00Y2QyLWFkMWYtNjI1MjQ1YTAwYWJm
LzEveGhsVHdJbUFyY2xQTDZPandicVZ4QTBoNTlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMF8GCCsGAQUFBwEHAQH/BFAwTjA2BAIAATAwAwQDH9/gAwQA
W+IBAwQCuRDkAwQCuS30AwQCuarAAwQAwRAvAwQAw0JdAwQCw7FIMBQEAgACMA4D
BQMqAGGAAwUDKhOIADANBgkqhkiG9w0BAQsFAAOCAQEAMypddNS54A+ztahUAtwV
utkRWOM1XFBs6b0asc51hzr/XB5Amcka4QvS9QUXSbMk+cv5m5WYtmA0y8In0+to
vzfia3X85uBDyPKKGfMXtyZKPqO4fSKfvz8ejPF39KDaA8yauz3U05gx0c60hA2I
Ex2KAEjF3rfOZ6j5m0GOqCeDyVxC4S1UEF7hShBujSsfTrR9xX6VORp5ZzR26Bvs
avF5ZZ43FPZavVYZzEIHG2nCpHBcOCt1bb7DwOEoS43ln8Eqb1ZNXc8oAOnKre5m
iKMwLaSK/5ufXqxsHRjJH5NjcW5Kv/BKvCZyvSjn/DfWdFzgKaJtx4pmtR+PZ6yO
9g==
-----END CERTIFICATE-----
Generated at Tue Jan 2 01:41:37 2024 by rpki-client on console-ams.rpki-client.org