Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/9jEfZ4-P9Rb2G_L9eTgrrGZD0qk.roa
File: 9jEfZ4-P9Rb2G_L9eTgrrGZD0qk.roa (raw, json)
Hash identifier: I9ZwjVtRk6hmVkKEVjximDNNV1NuZXbab9VSUcCtrks=
Subject key identifier: F6:31:1F:67:8F:8F:F5:16:F6:1B:F2:FD:79:38:2B:AC:66:43:D2:A9
Certificate issuer: /CN=a647893fb5b348e68a66d55a28f278cbf3931df4
Certificate serial: 018C3EF1FAD7087E1ED5B26E9A8CCA0C7502
Authority key identifier: A6:47:89:3F:B5:B3:48:E6:8A:66:D5:5A:28:F2:78:CB:F3:93:1D:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/9jEfZ4-P9Rb2G_L9eTgrrGZD0qk.roa
Signing time: Wed 06 Dec 2023 11:44:54 +0000
ROA not before: Wed 06 Dec 2023 11:44:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31727
IP address blocks: 185.207.132.0/23 maxlen: 23
185.207.134.0/24 maxlen: 24
185.207.135.0/24 maxlen: 24
185.170.152.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 06 Dec 2023 12:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:3e:f1:fa:d7:08:7e:1e:d5:b2:6e:9a:8c:ca:0c:75:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a647893fb5b348e68a66d55a28f278cbf3931df4
Validity
Not Before: Dec 6 11:44:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f6311f678f8ff516f61bf2fd79382bac6643d2a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d0:cf:e7:ef:fe:b4:49:f2:8f:8b:af:7a:1b:
57:07:9b:eb:67:f2:7d:ea:99:c7:06:8e:48:12:9e:
60:57:b8:8a:c2:ec:9c:df:06:1b:20:00:dd:23:10:
d2:23:40:22:f3:ac:33:a7:52:e4:35:77:0b:12:e3:
11:6a:6b:33:53:85:c4:ac:8e:ad:cf:80:e6:e2:7e:
8f:54:90:8c:46:ba:0e:c4:b7:b4:1b:5a:4c:f9:b2:
fb:59:54:6f:f0:bb:89:e9:b2:7a:15:56:56:3e:43:
0b:e5:86:2d:53:fa:ac:53:ea:27:4e:29:ae:90:bb:
54:29:85:80:9c:4a:5c:42:63:c9:1b:c7:bc:65:55:
e8:54:59:1e:00:1b:d8:a4:8d:74:d6:18:b4:2c:30:
45:31:19:52:de:64:22:5b:ac:ef:44:55:a6:ea:3b:
0d:f5:17:64:f0:4d:a6:ba:1e:0d:cc:ff:88:aa:88:
58:23:ce:a1:9c:dc:66:97:78:2e:21:2b:45:5f:5c:
d0:3e:2f:22:8e:f6:97:e4:43:32:3f:65:e5:15:8d:
01:6d:56:74:3f:41:92:5d:57:1a:c5:1b:8b:4a:f4:
0f:02:6e:42:ac:b1:51:b8:23:76:eb:39:51:5c:28:
f2:a9:b8:ac:5d:66:25:bf:cb:9a:84:01:97:b9:f9:
3e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:31:1F:67:8F:8F:F5:16:F6:1B:F2:FD:79:38:2B:AC:66:43:D2:A9
X509v3 Authority Key Identifier:
keyid:A6:47:89:3F:B5:B3:48:E6:8A:66:D5:5A:28:F2:78:CB:F3:93:1D:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/9jEfZ4-P9Rb2G_L9eTgrrGZD0qk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.170.152.0/22
185.207.132.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:28:26:f2:30:09:fb:f9:4f:c5:70:28:f0:d2:9e:96:87:b2:
0e:f7:d6:a8:cb:6b:04:ae:50:04:b2:27:09:8f:05:07:2c:0f:
5d:e4:db:83:8f:97:1b:29:00:d2:db:33:71:33:03:c2:65:fa:
17:ac:0b:fb:34:c7:a6:e7:ea:68:14:6a:42:10:35:e6:9b:6c:
6b:2c:61:ad:79:39:11:d8:af:0c:20:6c:f5:07:33:37:bf:ed:
16:38:ef:3a:62:ee:bb:c9:68:c7:c7:0c:c2:4f:dc:c5:38:b4:
00:dc:78:e9:eb:f0:6e:ba:3d:77:29:25:44:e6:98:15:3f:61:
90:5c:03:e2:a2:2a:8e:c1:f8:40:8f:3a:95:21:35:b3:58:18:
65:18:8e:68:3f:eb:49:79:ea:4b:39:6d:6a:72:23:3e:0d:c8:
e0:3e:97:e6:80:6e:56:e7:0d:94:dc:89:61:c5:de:6f:ca:67:
80:be:e5:b8:78:8d:de:9a:61:cc:a9:dc:81:1a:48:49:cf:4c:
6a:4c:3e:2e:f7:51:d1:0c:d3:b8:d3:61:a4:58:1a:f4:67:98:
c1:0b:d9:80:03:c2:b6:99:65:d4:0f:69:52:be:eb:df:e9:86:
40:2b:d3:7a:3a:c9:7d:25:48:34:37:20:da:da:5b:07:68:ba:
d4:71:7e:6c
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYw+8frXCH4e1bJumozKDHUCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2NDc4OTNmYjViMzQ4ZTY4YTY2ZDU1YTI4ZjI3OGNiZjM5
MzFkZjQwHhcNMjMxMjA2MTE0NDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNjMxMWY2NzhmOGZmNTE2ZjYxYmYyZmQ3OTM4MmJhYzY2NDNkMmE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstDP5+/+tEnyj4uvehtXB5vrZ/J9
6pnHBo5IEp5gV7iKwuyc3wYbIADdIxDSI0Ai86wzp1LkNXcLEuMRamszU4XErI6t
z4Dm4n6PVJCMRroOxLe0G1pM+bL7WVRv8LuJ6bJ6FVZWPkML5YYtU/qsU+onTimu
kLtUKYWAnEpcQmPJG8e8ZVXoVFkeABvYpI101hi0LDBFMRlS3mQiW6zvRFWm6jsN
9Rdk8E2muh4NzP+IqohYI86hnNxml3guIStFX1zQPi8ijvaX5EMyP2XlFY0BbVZ0
P0GSXVcaxRuLSvQPAm5CrLFRuCN26zlRXCjyqbisXWYlv8uahAGXufk+6wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFPYxH2ePj/UW9hvy/Xk4K6xmQ9KpMB8GA1UdIwQY
MBaAFKZHiT+1s0jmimbVWijyeMvzkx30MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGtlSlA3V3pTT2FLWnRWYUtQSjR5X09USGZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9kYThjYjEtMWJmYy00M2ZkLWEwZDIt
ZDYyNDQ5NmRkY2M4LzEvOWpFZlo0LVA5UmIyR19MOWVUZ3JyR1pEMHFrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My9kYThjYjEtMWJmYy00M2ZkLWEwZDItZDYyNDQ5NmRkY2M4
LzEvcGtlSlA3V3pTT2FLWnRWYUtQSjR5X09USGZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCuaqYAwQC
uc+EMA0GCSqGSIb3DQEBCwUAA4IBAQA6KCbyMAn7+U/FcCjw0p6Wh7IO99aoy2sE
rlAEsicJjwUHLA9d5NuDj5cbKQDS2zNxMwPCZfoXrAv7NMem5+poFGpCEDXmm2xr
LGGteTkR2K8MIGz1BzM3v+0WOO86Yu67yWjHxwzCT9zFOLQA3Hjp6/Buuj13KSVE
5pgVP2GQXAPioiqOwfhAjzqVITWzWBhlGI5oP+tJeepLOW1qciM+DcjgPpfmgG5W
5w2U3Ilhxd5vymeAvuW4eI3emmHMqdyBGkhJz0xqTD4u91HRDNO402GkWBr0Z5jB
C9mAA8K2mWXUD2lSvuvf6YZAK9N6Osl9JUg0NyDa2lsHaLrUcX5s
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:41 2024 by rpki-client on console-ams.rpki-client.org