Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/UYSs6ZloCctWIwO0sz5IDVLpqIw.roa
File: UYSs6ZloCctWIwO0sz5IDVLpqIw.roa (raw, json)
Hash identifier: gVX0BaPl9KDl+rWRSkDlrBFZWMVOWgFd6IG4rU+Unfc=
Subject key identifier: 51:84:AC:E9:99:68:09:CB:56:23:03:B4:B3:3E:48:0D:52:E9:A8:8C
Certificate issuer: /CN=21021b252222997bfe33b7e4b315ac8d5e067954
Certificate serial: 018571D78FE5C5109F7DF5E7940AD4594732
Authority key identifier: 21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/UYSs6ZloCctWIwO0sz5IDVLpqIw.roa
Signing time: Mon 02 Jan 2023 09:37:10 +0000
ROA not before: Mon 02 Jan 2023 09:37:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203061
IP address blocks: 193.84.183.0/24 maxlen: 24
185.145.216.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d7:8f:e5:c5:10:9f:7d:f5:e7:94:0a:d4:59:47:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21021b252222997bfe33b7e4b315ac8d5e067954
Validity
Not Before: Jan 2 09:37:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5184ace9996809cb562303b4b33e480d52e9a88c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d4:9d:37:f7:2b:e7:78:ae:9c:e0:a8:bc:c9:
51:f0:e0:d7:d8:3a:22:74:6c:04:13:1f:d4:56:21:
3a:75:d8:51:26:bb:ca:c0:5d:dd:21:6b:aa:6c:a0:
44:57:73:ef:61:bb:72:11:d6:ac:a9:90:d2:52:23:
78:ac:fb:dc:e3:12:eb:ba:02:3b:41:18:4d:b3:c2:
f3:57:e9:cc:ce:9a:79:90:e9:fe:fa:c5:73:96:6c:
ed:e5:44:b8:08:41:d9:e6:d3:a0:14:be:6d:c3:ee:
3e:13:31:41:95:a6:80:96:56:28:73:f1:62:98:a6:
7b:4c:0e:26:b6:47:16:aa:6f:22:47:1c:2f:62:80:
76:70:94:aa:c5:33:95:de:35:6c:ec:d1:f0:a8:7e:
95:58:69:57:66:81:60:a5:4f:96:33:63:4e:e7:11:
9a:22:5c:fe:95:45:97:53:dd:ae:68:a9:84:f4:67:
ca:d3:45:a2:eb:7c:49:04:20:eb:50:2a:08:8f:56:
03:9d:82:b6:2e:f1:9a:09:7f:94:90:d5:55:60:7b:
16:82:8d:77:58:0a:fd:cd:08:a7:aa:27:97:4b:3d:
7c:25:7d:09:8a:2e:12:2f:50:b6:ec:8e:8b:ed:24:
34:6e:ea:3e:82:33:9c:3e:dc:2f:61:32:84:b7:ec:
27:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:84:AC:E9:99:68:09:CB:56:23:03:B4:B3:3E:48:0D:52:E9:A8:8C
X509v3 Authority Key Identifier:
keyid:21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/UYSs6ZloCctWIwO0sz5IDVLpqIw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.145.216.0/22
193.84.183.0/24
Signature Algorithm: sha256WithRSAEncryption
05:2f:40:80:b2:38:f6:68:ab:e7:cc:f8:07:e7:d9:6e:96:39:
18:de:89:d4:71:dc:3a:e0:98:d6:30:00:5a:bc:c2:5a:d6:b7:
8f:7b:d8:98:48:f6:6a:22:63:a8:51:cf:cf:39:16:89:39:a2:
70:92:e7:67:dd:c8:81:77:c2:4e:a7:9a:5e:dd:d3:f7:d0:99:
89:96:b2:08:3f:7e:e1:e2:d4:84:f7:c1:66:c6:7a:06:06:e3:
7f:d3:fb:8a:94:36:a1:58:b2:9d:fc:4b:06:b0:42:3b:ec:12:
47:46:93:ac:17:3c:cc:46:11:76:e4:33:c8:ca:98:a0:e0:4f:
44:fd:31:d3:ee:73:0b:24:65:c4:8c:50:b5:de:0e:d5:50:aa:
e9:f5:84:a3:c1:d4:12:fe:5b:be:12:ac:2c:ab:bf:63:f0:3f:
93:be:d9:1b:76:fc:18:cf:11:08:0b:4e:e5:b7:06:9b:94:f3:
1a:e2:c1:57:c5:5c:f9:5b:6e:9f:d1:05:30:2f:33:b4:71:98:
4e:ed:9c:36:38:9e:16:0f:70:78:ca:67:63:ef:06:38:9c:27:
b8:7e:55:83:a5:6d:20:21:b6:10:36:c9:0e:fb:ce:72:18:d7:
f7:4b:ea:e9:5c:34:35:25:60:e9:31:b4:f7:9d:68:a1:eb:ae:
e9:d8:fd:40
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVx14/lxRCfffXnlArUWUcyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMDIxYjI1MjIyMjk5N2JmZTMzYjdlNGIzMTVhYzhkNWUw
Njc5NTQwHhcNMjMwMTAyMDkzNzEwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MTg0YWNlOTk5NjgwOWNiNTYyMzAzYjRiMzNlNDgwZDUyZTlhODhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodSdN/cr53iunOCovMlR8ODX2Doi
dGwEEx/UViE6ddhRJrvKwF3dIWuqbKBEV3PvYbtyEdasqZDSUiN4rPvc4xLrugI7
QRhNs8LzV+nMzpp5kOn++sVzlmzt5US4CEHZ5tOgFL5tw+4+EzFBlaaAllYoc/Fi
mKZ7TA4mtkcWqm8iRxwvYoB2cJSqxTOV3jVs7NHwqH6VWGlXZoFgpU+WM2NO5xGa
Ilz+lUWXU92uaKmE9GfK00Wi63xJBCDrUCoIj1YDnYK2LvGaCX+UkNVVYHsWgo13
WAr9zQinqieXSz18JX0Jii4SL1C27I6L7SQ0buo+gjOcPtwvYTKEt+wnowIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFGErOmZaAnLViMDtLM+SA1S6aiMMB8GA1UdIwQY
MBaAFCECGyUiIpl7/jO35LMVrI1eBnlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVFJYkpTSWltWHYtTTdma3N4V3NqVjRHZVZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC81OTI5NGMtMGYyNC00MGM1LWI1YzMt
NmVhYzYyZTYwZGY3LzEvVVlTczZabG9DY3RXSXdPMHN6NUlEVkxwcUl3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC81OTI5NGMtMGYyNC00MGM1LWI1YzMtNmVhYzYyZTYwZGY3
LzEvSVFJYkpTSWltWHYtTTdma3N4V3NqVjRHZVZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCuZHYAwQA
wVS3MA0GCSqGSIb3DQEBCwUAA4IBAQAFL0CAsjj2aKvnzPgH59luljkY3onUcdw6
4JjWMABavMJa1rePe9iYSPZqImOoUc/PORaJOaJwkudn3ciBd8JOp5pe3dP30JmJ
lrIIP37h4tSE98FmxnoGBuN/0/uKlDahWLKd/EsGsEI77BJHRpOsFzzMRhF25DPI
ypig4E9E/THT7nMLJGXEjFC13g7VUKrp9YSjwdQS/lu+Eqwsq79j8D+TvtkbdvwY
zxEIC07ltwablPMa4sFXxVz5W26f0QUwLzO0cZhO7Zw2OJ4WD3B4ymdj7wY4nCe4
flWDpW0gIbYQNskO+85yGNf3S+rpXDQ1JWDpMbT3nWih667p2P1A
-----END CERTIFICATE-----
Generated at Mon Jan 1 02:13:30 2024 by rpki-client on console.sobornost.net