Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/SpWLLJg_dK2zXTdQaLezzeQSTGk.roa
File: SpWLLJg_dK2zXTdQaLezzeQSTGk.roa (raw, json)
Hash identifier: Mds40T4xbqs8gnfezinFLOdF+KpmzDp5Ng8nG6TsQ+Q=
Subject key identifier: 4A:95:8B:2C:98:3F:74:AD:B3:5D:37:50:68:B7:B3:CD:E4:12:4C:69
Certificate issuer: /CN=ced755733e91203a17c3093ca5d9cb0392d94f61
Certificate serial: 01856EEFFA184436C30B6CF7BD0F22C1343F
Authority key identifier: CE:D7:55:73:3E:91:20:3A:17:C3:09:3C:A5:D9:CB:03:92:D9:4F:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ztdVcz6RIDoXwwk8pdnLA5LZT2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/SpWLLJg_dK2zXTdQaLezzeQSTGk.roa
Signing time: Sun 01 Jan 2023 20:04:58 +0000
ROA not before: Sun 01 Jan 2023 20:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21320
IP address blocks: 62.40.96.0/19 maxlen: 19
83.97.88.0/21 maxlen: 21
2001:799::/32 maxlen: 32
2001:798::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 04 Aug 2023 13:11:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:ef:fa:18:44:36:c3:0b:6c:f7:bd:0f:22:c1:34:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ced755733e91203a17c3093ca5d9cb0392d94f61
Validity
Not Before: Jan 1 20:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4a958b2c983f74adb35d375068b7b3cde4124c69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:58:6d:1a:2d:6b:f9:70:04:d2:a2:7f:70:17:
70:56:27:01:7f:87:86:2e:55:8c:84:35:d8:06:96:
3b:64:55:15:35:c1:69:ee:76:72:8d:ff:75:0d:62:
fa:1c:47:d8:f7:c2:7f:4c:66:86:74:d4:b8:15:39:
74:f1:eb:e7:59:69:61:84:8a:ea:d0:5d:ad:df:1c:
b4:57:a6:be:0d:37:a2:74:ff:00:da:fe:58:d1:de:
fd:f9:05:68:08:85:92:4d:68:e4:38:d5:84:01:89:
6e:8b:4f:33:15:f7:6f:e5:12:56:9d:2d:87:1f:3d:
bd:be:2f:2c:01:33:84:d2:2c:e4:82:1e:04:91:d9:
bb:66:a4:d2:80:62:2c:ac:46:29:16:e3:de:c5:d9:
96:3e:68:d4:e2:75:54:ac:15:4d:0b:24:63:8c:f6:
08:70:a8:8f:52:52:77:46:8f:2c:ad:81:20:46:44:
09:6b:50:c9:d0:56:65:8c:a2:c3:5d:6a:17:3d:33:
84:a1:76:59:69:23:84:ea:3e:51:fc:78:b6:13:65:
57:6b:b3:a1:d4:7a:69:e0:b5:65:13:c3:a1:cb:af:
13:84:e5:22:bb:6a:2e:af:06:ec:ec:cb:fd:3f:16:
6b:68:ce:f3:68:74:cb:fc:77:a6:35:78:60:d2:d3:
ed:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:95:8B:2C:98:3F:74:AD:B3:5D:37:50:68:B7:B3:CD:E4:12:4C:69
X509v3 Authority Key Identifier:
keyid:CE:D7:55:73:3E:91:20:3A:17:C3:09:3C:A5:D9:CB:03:92:D9:4F:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztdVcz6RIDoXwwk8pdnLA5LZT2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/SpWLLJg_dK2zXTdQaLezzeQSTGk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/ztdVcz6RIDoXwwk8pdnLA5LZT2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.40.96.0/19
83.97.88.0/21
IPv6:
2001:798::/31
Signature Algorithm: sha256WithRSAEncryption
8d:e2:3b:45:87:2c:f6:53:8e:35:61:d5:8e:8e:39:77:c2:da:
1a:d1:cd:33:5c:34:d8:3f:58:f3:1e:ac:2a:03:e0:c6:55:22:
1c:2b:ab:dd:00:ab:7e:c7:3f:39:2f:e8:0a:d9:66:af:5c:1e:
ad:66:7f:96:74:9c:0d:57:74:12:ce:83:07:a8:52:ee:1e:62:
9e:36:5e:2b:6a:fc:b8:dd:52:f8:df:5d:39:2a:c9:36:66:2c:
75:ea:e5:3d:43:06:28:b7:51:ac:ba:64:86:d2:0f:e3:cd:ea:
78:00:d4:7a:9b:dc:ad:db:a2:de:11:92:95:0a:e3:a8:c8:b2:
fe:42:d9:1f:b8:e5:67:da:2d:6f:69:8d:df:ba:ed:ad:a3:b6:
78:ce:4f:dc:61:ea:30:4a:0b:29:80:9d:d4:ce:38:ec:32:46:
1c:a4:5d:13:aa:51:1c:90:57:35:d2:c3:5c:3a:96:7f:b6:4c:
79:c5:8d:5d:47:71:ad:d2:92:f4:f1:0a:04:13:50:81:64:28:
f5:71:e2:f1:7b:52:15:b7:36:84:90:ed:d6:05:8d:d7:08:30:
c0:31:1d:c4:c7:ac:68:6f:5e:70:de:ea:3d:fc:37:89:ee:8a:
73:3c:00:35:9e:54:2f:24:2d:be:ea:10:e2:2e:e4:4d:21:c0:
da:ae:d1:24
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYVu7/oYRDbDC2z3vQ8iwTQ/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlZDc1NTczM2U5MTIwM2ExN2MzMDkzY2E1ZDljYjAzOTJk
OTRmNjEwHhcNMjMwMTAxMjAwNDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YTk1OGIyYzk4M2Y3NGFkYjM1ZDM3NTA2OGI3YjNjZGU0MTI0YzY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6VhtGi1r+XAE0qJ/cBdwVicBf4eG
LlWMhDXYBpY7ZFUVNcFp7nZyjf91DWL6HEfY98J/TGaGdNS4FTl08evnWWlhhIrq
0F2t3xy0V6a+DTeidP8A2v5Y0d79+QVoCIWSTWjkONWEAYlui08zFfdv5RJWnS2H
Hz29vi8sATOE0izkgh4Ekdm7ZqTSgGIsrEYpFuPexdmWPmjU4nVUrBVNCyRjjPYI
cKiPUlJ3Ro8srYEgRkQJa1DJ0FZljKLDXWoXPTOEoXZZaSOE6j5R/Hi2E2VXa7Oh
1Hpp4LVlE8Ohy68ThOUiu2ourwbs7Mv9PxZraM7zaHTL/HemNXhg0tPtcwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFEqViyyYP3Sts103UGi3s83kEkxpMB8GA1UdIwQY
MBaAFM7XVXM+kSA6F8MJPKXZywOS2U9hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenRkVmN6NlJJRG9Yd3drOHBkbkxBNUxaVDJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9jMmY2MWEtMTVmOS00YzZiLTkwZTUt
ZWY0YjY1OWVmZjhkLzEvU3BXTExKZ19kSzJ6WFRkUWFMZXp6ZVFTVEdrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9jMmY2MWEtMTVmOS00YzZiLTkwZTUtZWY0YjY1OWVmZjhk
LzEvenRkVmN6NlJJRG9Yd3drOHBkbkxBNUxaVDJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQFPihgAwQD
U2FYMA0EAgACMAcDBQEgAQeYMA0GCSqGSIb3DQEBCwUAA4IBAQCN4jtFhyz2U441
YdWOjjl3wtoa0c0zXDTYP1jzHqwqA+DGVSIcK6vdAKt+xz85L+gK2WavXB6tZn+W
dJwNV3QSzoMHqFLuHmKeNl4ravy43VL43105Ksk2Zix16uU9QwYot1GsumSG0g/j
zep4ANR6m9yt26LeEZKVCuOoyLL+QtkfuOVn2i1vaY3fuu2to7Z4zk/cYeowSgsp
gJ3UzjjsMkYcpF0TqlEckFc10sNcOpZ/tkx5xY1dR3Gt0pL08QoEE1CBZCj1ceLx
e1IVtzaEkO3WBY3XCDDAMR3Ex6xob15w3uo9/DeJ7opzPAA1nlQvJC2+6hDiLuRN
IcDartEk
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:39 2024 by rpki-client on console-fra.rpki-client.org