Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/455f56-1e6f-467d-b711-ebdf38b0095c/1/iQ0QyokyUrP08t6YlgcU2hID8bk.roa
File: iQ0QyokyUrP08t6YlgcU2hID8bk.roa (raw, json)
Hash identifier: Flto8qcTh9VWuxI0tE01dyUudEljuFczfi5PIS/5wuA=
Subject key identifier: 89:0D:10:CA:89:32:52:B3:F4:F2:DE:98:96:07:14:DA:12:03:F1:B9
Certificate issuer: /CN=f4460d6554d581ebb80e39e45015cd7d36d93f66
Certificate serial: 01856F14B144B31F2270E98B09C927D7D580
Authority key identifier: F4:46:0D:65:54:D5:81:EB:B8:0E:39:E4:50:15:CD:7D:36:D9:3F:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/455f56-1e6f-467d-b711-ebdf38b0095c/1/iQ0QyokyUrP08t6YlgcU2hID8bk.roa
Signing time: Sun 01 Jan 2023 20:45:05 +0000
ROA not before: Sun 01 Jan 2023 20:45:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15753
IP address blocks: 149.177.228.0/22 maxlen: 22
149.177.176.0/21 maxlen: 21
149.177.192.0/23 maxlen: 23
149.177.194.0/23 maxlen: 23
149.177.212.0/23 maxlen: 23
149.177.218.0/23 maxlen: 23
149.177.214.0/23 maxlen: 23
149.177.216.0/23 maxlen: 23
149.177.224.0/22 maxlen: 22
149.177.128.0/22 maxlen: 22
149.177.148.0/22 maxlen: 22
149.177.152.0/22 maxlen: 22
149.177.164.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:31:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:14:b1:44:b3:1f:22:70:e9:8b:09:c9:27:d7:d5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4460d6554d581ebb80e39e45015cd7d36d93f66
Validity
Not Before: Jan 1 20:45:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=890d10ca893252b3f4f2de98960714da1203f1b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d9:87:16:b2:cc:f4:27:b3:b6:74:ab:ba:80:
4d:e9:c8:ff:23:ab:c8:4f:89:f9:76:5f:30:a0:14:
aa:eb:54:94:73:ae:7c:61:87:d8:d4:33:8c:7d:88:
99:4e:8c:8c:77:ee:60:9d:40:92:26:6b:ff:35:1d:
f3:73:fd:f4:ab:f6:6c:cc:01:8b:af:92:22:40:db:
b4:67:ac:51:6a:33:06:68:21:e4:1f:fc:ef:01:5c:
51:44:69:5c:28:64:b6:cc:7c:40:4c:8c:13:94:68:
1b:de:a8:b7:35:2d:9a:21:80:62:50:82:68:3d:75:
cd:b5:8b:3b:ca:3b:35:a2:4c:ce:07:41:99:f1:43:
cf:10:cb:c4:22:22:b7:79:8d:37:6a:23:21:96:b5:
f3:eb:5a:5b:0f:54:e4:56:42:54:bb:68:a3:fe:d7:
c5:2f:dc:ea:b7:af:9d:b1:1e:8d:82:e8:e2:27:71:
68:0a:af:c2:18:e6:1e:5d:c9:4a:a5:d6:62:ba:4b:
a3:e5:5a:65:eb:6d:06:82:70:d5:b9:1b:78:6d:c7:
83:9a:ed:97:68:79:ed:df:3f:ba:78:86:d4:06:e6:
81:8a:b9:70:ce:a0:55:ae:35:d2:8f:52:d5:c8:53:
65:c9:61:b6:21:40:09:ae:9e:b8:f0:a0:be:c4:fb:
bd:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:0D:10:CA:89:32:52:B3:F4:F2:DE:98:96:07:14:DA:12:03:F1:B9
X509v3 Authority Key Identifier:
keyid:F4:46:0D:65:54:D5:81:EB:B8:0E:39:E4:50:15:CD:7D:36:D9:3F:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/455f56-1e6f-467d-b711-ebdf38b0095c/1/iQ0QyokyUrP08t6YlgcU2hID8bk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/455f56-1e6f-467d-b711-ebdf38b0095c/1/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.177.128.0/22
149.177.148.0-149.177.155.255
149.177.164.0/22
149.177.176.0/21
149.177.192.0/22
149.177.212.0-149.177.219.255
149.177.224.0/21
Signature Algorithm: sha256WithRSAEncryption
76:31:b4:7c:e3:e4:e5:fe:5a:5a:b7:3e:9a:a9:3f:d3:4e:59:
63:2a:65:eb:c9:c6:aa:ba:8a:56:fd:59:9b:c1:85:38:de:86:
64:51:22:70:d8:51:96:20:c9:fa:4c:e1:8c:63:11:05:ec:0c:
0c:52:db:f0:8c:f6:1e:e8:93:09:18:94:e4:e9:93:31:89:b0:
50:e8:cc:12:85:52:16:6f:81:da:80:dc:b5:a5:59:b1:8a:93:
61:ef:03:e4:28:9d:6b:e0:b4:0a:62:64:39:89:64:f9:1b:60:
e4:d0:83:ac:0d:02:1c:0b:20:39:b3:d3:cc:03:bd:7e:6d:7e:
03:4e:a7:d2:71:24:32:cd:75:5a:cc:e6:44:1a:4b:4e:2b:7d:
a7:35:73:42:28:ad:74:22:37:a1:eb:ba:63:44:de:b1:1b:07:
00:08:79:44:57:46:00:9d:d6:97:b2:5e:41:16:bc:99:e3:47:
48:54:fd:25:60:5b:f7:52:10:f8:a3:92:1d:8b:6e:f1:6c:a3:
fb:52:fd:93:7d:27:e6:52:a3:74:c2:cb:6f:8c:85:4b:88:b7:
09:6c:c7:a2:71:62:8d:4b:37:9d:a3:9a:b4:34:7c:72:1d:be:
ae:65:1d:48:a0:3f:38:10:06:3a:df:12:6f:6c:92:07:84:d6:
d1:7b:af:44
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgISAYVvFLFEsx8icOmLCckn19WAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0NDYwZDY1NTRkNTgxZWJiODBlMzllNDUwMTVjZDdkMzZk
OTNmNjYwHhcNMjMwMTAxMjA0NTA1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OTBkMTBjYTg5MzI1MmIzZjRmMmRlOTg5NjA3MTRkYTEyMDNmMWI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9mHFrLM9CeztnSruoBN6cj/I6vI
T4n5dl8woBSq61SUc658YYfY1DOMfYiZToyMd+5gnUCSJmv/NR3zc/30q/ZszAGL
r5IiQNu0Z6xRajMGaCHkH/zvAVxRRGlcKGS2zHxATIwTlGgb3qi3NS2aIYBiUIJo
PXXNtYs7yjs1okzOB0GZ8UPPEMvEIiK3eY03aiMhlrXz61pbD1TkVkJUu2ij/tfF
L9zqt6+dsR6NgujiJ3FoCq/CGOYeXclKpdZiukuj5Vpl620GgnDVuRt4bceDmu2X
aHnt3z+6eIbUBuaBirlwzqBVrjXSj1LVyFNlyWG2IUAJrp648KC+xPu9uwIDAQAB
o4ICPTCCAjkwHQYDVR0OBBYEFIkNEMqJMlKz9PLemJYHFNoSA/G5MB8GA1UdIwQY
MBaAFPRGDWVU1YHruA455FAVzX022T9mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUVZTlpWVFZnZXU0RGpua1VCWE5mVGJaUDJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi80NTVmNTYtMWU2Zi00NjdkLWI3MTEt
ZWJkZjM4YjAwOTVjLzEvaVEwUXlva3lVclAwOHQ2WWxnY1UyaElEOGJrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi80NTVmNTYtMWU2Zi00NjdkLWI3MTEtZWJkZjM4YjAwOTVj
LzEvOUVZTlpWVFZnZXU0RGpua1VCWE5mVGJaUDJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFMGCCsGAQUFBwEHAQH/BEQwQjBABAIAATA6AwQClbGAMAwD
BAKVsZQDBAKVsZgDBAKVsaQDBAOVsbADBAKVscAwDAMEApWx1AMEApWx2AMEA5Wx
4DANBgkqhkiG9w0BAQsFAAOCAQEAdjG0fOPk5f5aWrc+mqk/005ZYypl68nGqrqK
Vv1Zm8GFON6GZFEicNhRliDJ+kzhjGMRBewMDFLb8Iz2HuiTCRiU5OmTMYmwUOjM
EoVSFm+B2oDctaVZsYqTYe8D5Cida+C0CmJkOYlk+Rtg5NCDrA0CHAsgObPTzAO9
fm1+A06n0nEkMs11WszmRBpLTit9pzVzQiitdCI3oeu6Y0TesRsHAAh5RFdGAJ3W
l7JeQRa8meNHSFT9JWBb91IQ+KOSHYtu8Wyj+1L9k30n5lKjdMLLb4yFS4i3CWzH
onFijUs3naOatDR8ch2+rmUdSKA/OBAGOt8Sb2ySB4TW0XuvRA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:27 2024 by rpki-client on console-ams.rpki-client.org