Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/488f90-224e-4634-967f-8f181d3a3e8f/1/ue1fpUSsarEMKGYv-IjGosXEhlI.roa
File: ue1fpUSsarEMKGYv-IjGosXEhlI.roa (raw, json)
Hash identifier: EMXyzFpW7Mhd0oG4R80WTY6PACQxYjnxqyrAHyAFA9E=
Subject key identifier: B9:ED:5F:A5:44:AC:6A:B1:0C:28:66:2F:F8:88:C6:A2:C5:C4:86:52
Certificate issuer: /CN=8cf0b0b46a08d1e70fcbdd877ad939a0132e1269
Certificate serial: 0185711531BD0F9691B53CCA273C9028C8EC
Authority key identifier: 8C:F0:B0:B4:6A:08:D1:E7:0F:CB:DD:87:7A:D9:39:A0:13:2E:12:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jPCwtGoI0ecPy92Hetk5oBMuEmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/488f90-224e-4634-967f-8f181d3a3e8f/1/ue1fpUSsarEMKGYv-IjGosXEhlI.roa
Signing time: Mon 02 Jan 2023 06:04:52 +0000
ROA not before: Mon 02 Jan 2023 06:04:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206255
IP address blocks: 185.174.196.0/24 maxlen: 24
185.174.199.0/24 maxlen: 24
185.174.198.0/24 maxlen: 24
185.174.197.0/24 maxlen: 24
2a11:b880::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:30:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:15:31:bd:0f:96:91:b5:3c:ca:27:3c:90:28:c8:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cf0b0b46a08d1e70fcbdd877ad939a0132e1269
Validity
Not Before: Jan 2 06:04:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b9ed5fa544ac6ab10c28662ff888c6a2c5c48652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f8:60:67:88:36:ff:06:a0:0e:1c:2d:2b:9f:
45:52:f7:9d:19:22:ad:69:0d:3c:9d:f4:37:10:5c:
d9:8b:f3:cc:f8:bb:ae:5d:d8:8a:43:b1:02:98:f9:
c0:dc:cd:87:fb:b9:38:b8:42:42:83:9a:58:1a:f4:
a4:71:9e:42:0f:a3:b7:68:73:77:d7:46:51:35:de:
8e:17:32:6e:7e:95:70:c3:36:37:96:38:48:87:15:
de:ea:0a:c6:e7:59:12:cb:bd:57:66:39:3d:f8:c9:
20:ae:a2:15:d7:23:b4:94:5d:84:e7:21:2b:1d:b2:
ce:6f:80:26:f1:a7:5a:a7:fd:c2:04:07:c8:72:73:
7d:42:1e:42:31:83:8b:b6:28:51:c7:b8:47:38:c6:
d9:03:47:50:35:49:bb:2e:c6:a0:7e:d0:f7:f9:ac:
a7:d9:45:57:4a:da:84:34:1d:12:4c:b6:d7:72:7d:
69:05:03:63:1d:c6:d4:3b:4c:7f:62:7f:35:00:eb:
7a:a9:16:10:99:9a:8a:a7:b0:ef:d2:b7:99:a9:1c:
c0:0b:e1:db:d5:1c:26:f4:73:02:c1:8e:37:d4:19:
ae:41:9e:e6:73:d6:76:ac:5b:e9:dc:90:28:bf:68:
4f:b7:03:96:05:58:05:ed:e8:df:f0:e3:0b:59:48:
b5:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:ED:5F:A5:44:AC:6A:B1:0C:28:66:2F:F8:88:C6:A2:C5:C4:86:52
X509v3 Authority Key Identifier:
keyid:8C:F0:B0:B4:6A:08:D1:E7:0F:CB:DD:87:7A:D9:39:A0:13:2E:12:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jPCwtGoI0ecPy92Hetk5oBMuEmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/488f90-224e-4634-967f-8f181d3a3e8f/1/ue1fpUSsarEMKGYv-IjGosXEhlI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/488f90-224e-4634-967f-8f181d3a3e8f/1/jPCwtGoI0ecPy92Hetk5oBMuEmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.174.196.0/22
IPv6:
2a11:b880::/29
Signature Algorithm: sha256WithRSAEncryption
21:92:13:6f:5f:d9:6e:1e:c6:45:cb:28:2b:cb:a6:1e:23:62:
5e:6b:40:04:79:5d:fe:72:66:28:db:1c:66:63:a2:29:0c:f3:
e5:53:21:d3:eb:de:16:50:0a:4e:b8:a2:77:da:3a:7a:54:04:
73:62:5c:7c:c3:3e:38:90:67:c6:32:72:26:d1:bd:39:da:1b:
68:03:b9:8f:c3:83:82:6a:ae:90:5c:30:1b:26:01:9e:d4:88:
85:e9:92:f9:b8:66:05:de:d6:cc:0b:f1:b6:52:95:37:2e:42:
12:50:61:3f:18:cc:e3:45:f9:2f:41:6c:ce:95:f3:73:1a:30:
53:69:45:47:e0:07:79:8e:8a:78:42:82:48:54:17:85:a4:18:
61:da:cd:2f:28:60:cf:96:1a:05:06:b1:4d:35:3c:4e:66:3a:
d4:c2:47:82:4f:d0:64:a9:03:c2:ba:58:f4:a0:4c:37:f9:0d:
d4:84:8f:e0:f2:7d:8c:6e:c2:2f:23:86:2c:91:27:9c:36:64:
70:18:a7:95:de:57:b2:0d:39:5b:65:3f:66:be:dd:49:2f:f8:
87:bb:c8:59:f3:21:d6:08:5e:3d:30:37:38:25:26:06:5a:51:
70:0b:12:d9:a3:d8:19:bd:9a:b5:3f:29:99:0c:dd:21:c5:e5:
81:38:72:41
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVxFTG9D5aRtTzKJzyQKMjsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjZjBiMGI0NmEwOGQxZTcwZmNiZGQ4NzdhZDkzOWEwMTMy
ZTEyNjkwHhcNMjMwMTAyMDYwNDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOWVkNWZhNTQ0YWM2YWIxMGMyODY2MmZmODg4YzZhMmM1YzQ4NjUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3/hgZ4g2/wagDhwtK59FUvedGSKt
aQ08nfQ3EFzZi/PM+LuuXdiKQ7ECmPnA3M2H+7k4uEJCg5pYGvSkcZ5CD6O3aHN3
10ZRNd6OFzJufpVwwzY3ljhIhxXe6grG51kSy71XZjk9+MkgrqIV1yO0lF2E5yEr
HbLOb4Am8adap/3CBAfIcnN9Qh5CMYOLtihRx7hHOMbZA0dQNUm7LsagftD3+ayn
2UVXStqENB0STLbXcn1pBQNjHcbUO0x/Yn81AOt6qRYQmZqKp7Dv0reZqRzAC+Hb
1Rwm9HMCwY431BmuQZ7mc9Z2rFvp3JAov2hPtwOWBVgF7ejf8OMLWUi1rQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFLntX6VErGqxDChmL/iIxqLFxIZSMB8GA1UdIwQY
MBaAFIzwsLRqCNHnD8vdh3rZOaATLhJpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalBDd3RHb0kwZWNQeTkySGV0azVvQk11RW1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy80ODhmOTAtMjI0ZS00NjM0LTk2N2Yt
OGYxODFkM2EzZThmLzEvdWUxZnBVU3NhckVNS0dZdi1Jakdvc1hFaGxJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy80ODhmOTAtMjI0ZS00NjM0LTk2N2YtOGYxODFkM2EzZThm
LzEvalBDd3RHb0kwZWNQeTkySGV0azVvQk11RW1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCua7EMA0E
AgACMAcDBQMqEbiAMA0GCSqGSIb3DQEBCwUAA4IBAQAhkhNvX9luHsZFyygry6Ye
I2Jea0AEeV3+cmYo2xxmY6IpDPPlUyHT694WUApOuKJ32jp6VARzYlx8wz44kGfG
MnIm0b052htoA7mPw4OCaq6QXDAbJgGe1IiF6ZL5uGYF3tbMC/G2UpU3LkISUGE/
GMzjRfkvQWzOlfNzGjBTaUVH4Ad5jop4QoJIVBeFpBhh2s0vKGDPlhoFBrFNNTxO
ZjrUwkeCT9BkqQPCulj0oEw3+Q3UhI/g8n2MbsIvI4YskSecNmRwGKeV3leyDTlb
ZT9mvt1JL/iHu8hZ8yHWCF49MDc4JSYGWlFwCxLZo9gZvZq1PymZDN0hxeWBOHJB
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:05 2024 by rpki-client on console-ams.rpki-client.org