Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/3s4A48a3iu4OVTjtKwOociqdcVQ.roa
File: 3s4A48a3iu4OVTjtKwOociqdcVQ.roa (raw, json)
Hash identifier: KUovA8LeU5o6EninErAldA0kblIapDciQN8xoUbMd38=
Subject key identifier: DE:CE:00:E3:C6:B7:8A:EE:0E:55:38:ED:2B:03:A8:72:2A:9D:71:54
Certificate issuer: /CN=632e3d037bf0507571b2a068cb90308374ce53ed
Certificate serial: 0188B07082806B5353D6714FFAD0D024AF67
Authority key identifier: 63:2E:3D:03:7B:F0:50:75:71:B2:A0:68:CB:90:30:83:74:CE:53:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yy49A3vwUHVxsqBoy5Awg3TOU-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/3s4A48a3iu4OVTjtKwOociqdcVQ.roa
Signing time: Mon 12 Jun 2023 16:29:03 +0000
ROA not before: Mon 12 Jun 2023 16:29:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2914
IP address blocks: 171.22.145.0/24 maxlen: 24
185.243.129.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b0:70:82:80:6b:53:53:d6:71:4f:fa:d0:d0:24:af:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=632e3d037bf0507571b2a068cb90308374ce53ed
Validity
Not Before: Jun 12 16:29:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dece00e3c6b78aee0e5538ed2b03a8722a9d7154
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:26:a8:e7:7f:9b:90:23:d2:45:d2:df:d6:8e:
c4:d8:88:46:18:d2:54:3d:78:07:00:a7:23:87:ca:
ae:3c:5f:a8:dc:2d:d9:7f:2d:26:78:30:c7:1d:b8:
50:eb:72:86:77:07:b3:72:85:32:d3:42:94:83:c5:
97:5c:6a:69:80:7a:55:ef:6b:b0:cb:ad:d0:10:a6:
37:d8:bc:3a:59:49:63:d0:76:8f:a4:d8:f9:ae:c8:
54:d8:cc:19:fb:06:71:28:c7:9a:d3:f3:c2:46:39:
ee:69:8b:38:63:cf:ce:d5:0c:32:d4:c0:5a:f0:34:
b7:55:30:a2:5b:48:24:1b:da:f3:26:91:73:a5:9f:
41:88:20:2e:4b:7e:1e:51:c0:7f:00:25:a8:13:39:
33:b3:e4:b0:d5:3b:10:7a:f6:58:59:4b:b3:f2:27:
49:9b:d0:8a:2a:7d:34:70:18:92:0f:4b:33:f7:96:
f4:87:4b:dd:27:ee:40:e6:2b:32:06:ac:1f:c5:fb:
2e:47:54:06:0e:a8:e3:c4:06:b7:79:54:3e:0e:9c:
9f:1d:e8:48:93:6e:58:61:6f:ec:4b:6d:fc:eb:cf:
8f:b0:20:16:65:cd:31:26:9a:ae:bf:c9:e4:ec:73:
a1:ae:ad:89:18:27:2a:cb:a4:d9:0a:59:6c:32:54:
46:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:CE:00:E3:C6:B7:8A:EE:0E:55:38:ED:2B:03:A8:72:2A:9D:71:54
X509v3 Authority Key Identifier:
keyid:63:2E:3D:03:7B:F0:50:75:71:B2:A0:68:CB:90:30:83:74:CE:53:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yy49A3vwUHVxsqBoy5Awg3TOU-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/3s4A48a3iu4OVTjtKwOociqdcVQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.22.145.0/24
185.243.129.0/24
Signature Algorithm: sha256WithRSAEncryption
89:2a:79:2d:f0:4f:33:d1:3b:1b:b3:c9:03:79:99:a4:d6:49:
d7:7b:fd:09:be:b9:bc:0f:a1:5d:e8:6b:d3:38:a7:1a:f3:f8:
a3:c2:75:8d:46:d2:d3:3c:0a:3d:c9:52:66:0e:0a:48:cf:bc:
e0:91:ce:b0:3d:5e:66:39:23:54:55:c6:26:c9:46:0e:41:00:
c0:4b:0f:be:ec:3e:32:62:e8:ee:f2:dd:87:b8:0b:f7:68:e0:
18:a2:51:50:47:9c:7d:81:3d:81:26:0a:0d:f2:a6:df:12:49:
6a:30:a9:5d:10:34:b9:15:a2:3f:3a:a2:e2:21:1d:99:45:97:
be:ae:ab:88:8a:d3:d6:24:53:54:67:1a:06:40:88:fb:12:49:
5c:6f:d7:16:5a:15:3d:08:4d:b5:c5:d1:aa:8e:35:9c:27:0a:
61:17:ad:c5:e4:f3:86:4f:cd:08:2d:8c:c0:b9:a1:f7:28:41:
62:24:6d:a2:95:48:a2:f1:3b:4f:67:3d:f7:be:7f:cb:f0:e9:
ac:c7:73:7c:4c:98:80:31:ce:cb:8c:ca:ea:e6:4e:52:74:66:
c3:e4:f3:63:f3:57:4c:0e:3f:82:87:99:48:1c:9f:5b:dd:97:
00:7a:c4:ea:d0:bb:35:1e:21:5b:57:ff:48:18:6b:ef:36:ee:
7c:af:a6:52
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYiwcIKAa1NT1nFP+tDQJK9nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzMmUzZDAzN2JmMDUwNzU3MWIyYTA2OGNiOTAzMDgzNzRj
ZTUzZWQwHhcNMjMwNjEyMTYyOTAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZWNlMDBlM2M2Yjc4YWVlMGU1NTM4ZWQyYjAzYTg3MjJhOWQ3MTU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgiao53+bkCPSRdLf1o7E2IhGGNJU
PXgHAKcjh8quPF+o3C3Zfy0meDDHHbhQ63KGdwezcoUy00KUg8WXXGppgHpV72uw
y63QEKY32Lw6WUlj0HaPpNj5rshU2MwZ+wZxKMea0/PCRjnuaYs4Y8/O1Qwy1MBa
8DS3VTCiW0gkG9rzJpFzpZ9BiCAuS34eUcB/ACWoEzkzs+Sw1TsQevZYWUuz8idJ
m9CKKn00cBiSD0sz95b0h0vdJ+5A5isyBqwfxfsuR1QGDqjjxAa3eVQ+DpyfHehI
k25YYW/sS23868+PsCAWZc0xJpquv8nk7HOhrq2JGCcqy6TZCllsMlRGmwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFN7OAOPGt4ruDlU47SsDqHIqnXFUMB8GA1UdIwQY
MBaAFGMuPQN78FB1cbKgaMuQMIN0zlPtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXk0OUEzdndVSFZ4c3FCb3k1QXdnM1RPVS0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9mOWY0YTktYTBjZC00MTA3LWFhNDEt
ZDUyYTE4OTg1OTk5LzEvM3M0QTQ4YTNpdTRPVlRqdEt3T29jaXFkY1ZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS9mOWY0YTktYTBjZC00MTA3LWFhNDEtZDUyYTE4OTg1OTk5
LzEvWXk0OUEzdndVSFZ4c3FCb3k1QXdnM1RPVS0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAqxaRAwQA
ufOBMA0GCSqGSIb3DQEBCwUAA4IBAQCJKnkt8E8z0Tsbs8kDeZmk1knXe/0Jvrm8
D6Fd6GvTOKca8/ijwnWNRtLTPAo9yVJmDgpIz7zgkc6wPV5mOSNUVcYmyUYOQQDA
Sw++7D4yYuju8t2HuAv3aOAYolFQR5x9gT2BJgoN8qbfEklqMKldEDS5FaI/OqLi
IR2ZRZe+rquIitPWJFNUZxoGQIj7Eklcb9cWWhU9CE21xdGqjjWcJwphF63F5POG
T80ILYzAuaH3KEFiJG2ilUii8TtPZz33vn/L8Omsx3N8TJiAMc7LjMrq5k5SdGbD
5PNj81dMDj+Ch5lIHJ9b3ZcAesTq0Ls1HiFbV/9IGGvvNu58r6ZS
-----END CERTIFICATE-----
Generated at Mon Jan 1 04:40:55 2024 by rpki-client on console-ams.rpki-client.org