Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/ARWbSR1H8Dm-vvnW7qhwu0k7lPs.roa
File: ARWbSR1H8Dm-vvnW7qhwu0k7lPs.roa (raw, json)
Hash identifier: vvyJvVBM0MbqCyOyHIy/v4pQgwAGUb6u6l3pthnOGNs=
Subject key identifier: 01:15:9B:49:1D:47:F0:39:BE:BE:F9:D6:EE:A8:70:BB:49:3B:94:FB
Certificate issuer: /CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Certificate serial: 0186E590E054B4283409548870E97CBE101E
Authority key identifier: 92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/ARWbSR1H8Dm-vvnW7qhwu0k7lPs.roa
Signing time: Wed 15 Mar 2023 13:58:42 +0000
ROA not before: Wed 15 Mar 2023 13:58:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207990
IP address blocks: 45.156.224.0/22 maxlen: 32
193.228.58.0/23 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:e5:90:e0:54:b4:28:34:09:54:88:70:e9:7c:be:10:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Validity
Not Before: Mar 15 13:58:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=01159b491d47f039bebef9d6eea870bb493b94fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:12:e1:3c:e0:02:66:39:10:ce:1c:af:25:2c:
c4:f9:9c:fd:47:21:f6:bc:d6:f3:0b:53:75:63:fd:
f0:0a:8d:23:2f:05:cd:0d:30:80:fc:76:f3:16:fe:
16:b6:df:fb:d8:fc:d9:40:a9:a4:c0:dd:7e:34:1d:
89:48:63:47:e7:49:95:eb:ee:0a:60:f0:ca:83:87:
bb:87:30:4d:d3:cf:e0:ce:53:63:5d:9c:ba:ff:fe:
fe:b1:ba:4a:ec:16:d4:02:7b:7f:49:ee:e4:fd:46:
20:ce:4a:ec:52:89:73:1e:bc:cd:95:ff:c3:01:e4:
29:bd:09:e0:d2:5f:16:9f:21:66:b8:95:7b:45:fc:
6e:b1:c3:99:1f:3f:08:c7:35:dd:36:51:53:5e:7a:
ec:4b:15:06:b9:ab:d3:11:43:da:31:1f:67:17:21:
77:36:a0:6c:80:bf:58:23:dd:f4:6a:49:78:48:23:
25:74:6b:d0:e0:a2:da:d7:a6:82:b4:97:f5:d5:83:
d7:57:6e:6c:78:71:40:1c:a0:0c:7b:89:31:6e:65:
26:74:09:17:12:1e:47:27:db:63:70:41:60:5b:b2:
26:57:6b:67:6f:4e:6c:3b:82:a0:50:e6:86:aa:ba:
1d:a0:6c:17:5a:71:6f:a2:8e:59:0e:b8:33:1f:1f:
be:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:15:9B:49:1D:47:F0:39:BE:BE:F9:D6:EE:A8:70:BB:49:3B:94:FB
X509v3 Authority Key Identifier:
keyid:92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/ARWbSR1H8Dm-vvnW7qhwu0k7lPs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.224.0/22
193.228.58.0/23
Signature Algorithm: sha256WithRSAEncryption
11:f7:29:e3:ca:1b:a9:68:24:7f:46:93:f5:43:16:43:03:e5:
34:7d:6b:67:7d:e7:eb:1d:fe:75:e8:39:4f:dd:be:6e:0d:74:
1b:4b:46:15:14:9a:d1:69:75:34:99:3b:98:a6:cd:84:56:1b:
83:3b:b3:68:5c:fa:27:80:1f:55:d6:b0:30:af:3d:0e:bd:59:
69:c4:79:cb:60:cd:51:3e:c2:f4:0c:ee:d5:11:bf:ed:8c:e3:
74:83:ee:3d:80:f0:b0:b3:d3:94:af:c2:88:ea:9d:7a:18:0f:
20:e0:a6:f0:5f:f6:08:a7:d3:c1:79:f0:78:a4:45:d1:f7:f1:
e7:3b:f5:fb:42:cd:49:44:ae:69:5b:c7:cd:4e:d0:c1:47:b1:
6e:c7:2f:a0:31:15:ba:2b:05:18:9a:03:c6:fa:9d:6d:65:bd:
ad:71:0d:50:46:4f:c1:cb:d3:5a:99:9f:25:6e:df:06:e3:35:
00:8a:4a:bb:e4:09:f4:82:f6:53:65:2a:6e:2f:3d:08:dc:46:
d7:18:8f:89:f1:46:cf:09:72:3a:f3:63:0a:7c:32:ca:72:e1:
da:02:5b:20:f4:86:7c:27:ee:cf:fe:ba:cc:43:85:69:72:09:
fb:bd:d7:84:5b:0e:ce:eb:b7:20:2d:fc:d0:71:bb:57:58:0d:
cd:e8:2b:d0
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYblkOBUtCg0CVSIcOl8vhAeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyMjIwOGI0N2I2YTg2NGQ5ZDFmZjMzZTA2YWE4MWQxMzgx
OWE3NGUwHhcNMjMwMzE1MTM1ODQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMTE1OWI0OTFkNDdmMDM5YmViZWY5ZDZlZWE4NzBiYjQ5M2I5NGZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0hLhPOACZjkQzhyvJSzE+Zz9RyH2
vNbzC1N1Y/3wCo0jLwXNDTCA/HbzFv4Wtt/72PzZQKmkwN1+NB2JSGNH50mV6+4K
YPDKg4e7hzBN08/gzlNjXZy6//7+sbpK7BbUAnt/Se7k/UYgzkrsUolzHrzNlf/D
AeQpvQng0l8WnyFmuJV7RfxuscOZHz8IxzXdNlFTXnrsSxUGuavTEUPaMR9nFyF3
NqBsgL9YI930akl4SCMldGvQ4KLa16aCtJf11YPXV25seHFAHKAMe4kxbmUmdAkX
Eh5HJ9tjcEFgW7ImV2tnb05sO4KgUOaGqrodoGwXWnFvoo5ZDrgzHx++WQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFAEVm0kdR/A5vr751u6ocLtJO5T7MB8GA1UdIwQY
MBaAFJIiCLR7aoZNnR/zPgaqgdE4GadOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2lJSXRIdHFoazJkSF9NLUJxcUIwVGdacDA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS82OTkwZTktYzNjMC00NzhhLTk5OTct
OTViMDhlMzY2MGNmLzEvQVJXYlNSMUg4RG0tdnZuVzdxaHd1MGs3bFBzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS82OTkwZTktYzNjMC00NzhhLTk5OTctOTViMDhlMzY2MGNm
LzEva2lJSXRIdHFoazJkSF9NLUJxcUIwVGdacDA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLZzgAwQB
weQ6MA0GCSqGSIb3DQEBCwUAA4IBAQAR9ynjyhupaCR/RpP1QxZDA+U0fWtnfefr
Hf516DlP3b5uDXQbS0YVFJrRaXU0mTuYps2EVhuDO7NoXPongB9V1rAwrz0OvVlp
xHnLYM1RPsL0DO7VEb/tjON0g+49gPCws9OUr8KI6p16GA8g4KbwX/YIp9PBefB4
pEXR9/HnO/X7Qs1JRK5pW8fNTtDBR7Fuxy+gMRW6KwUYmgPG+p1tZb2tcQ1QRk/B
y9NamZ8lbt8G4zUAikq75An0gvZTZSpuLz0I3EbXGI+J8UbPCXI682MKfDLKcuHa
Alsg9IZ8J+7P/rrMQ4Vpcgn7vdeEWw7O67cgLfzQcbtXWA3N6CvQ
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:28 2023 by rpki-client on console-fra.rpki-client.org