Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/osYVeJMFsGvRYk7dlnJZih8GBrM.roa
File: osYVeJMFsGvRYk7dlnJZih8GBrM.roa (raw, json)
Hash identifier: EKcZM5EydYzebnJ7F/dpaB3To4tasqsZ5UNsBCn8MfE=
Subject key identifier: A2:C6:15:78:93:05:B0:6B:D1:62:4E:DD:96:72:59:8A:1F:06:06:B3
Certificate issuer: /CN=37949ac84d0b86910f4fd3cf5962927d83450aeb
Certificate serial: 018A93AFDA8F0CEEBACE542CC39E8F6EF8F1
Authority key identifier: 37:94:9A:C8:4D:0B:86:91:0F:4F:D3:CF:59:62:92:7D:83:45:0A:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N5SayE0LhpEPT9PPWWKSfYNFCus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/osYVeJMFsGvRYk7dlnJZih8GBrM.roa
Signing time: Thu 14 Sep 2023 12:34:50 +0000
ROA not before: Thu 14 Sep 2023 12:34:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202
IP address blocks: 185.148.224.0/22 maxlen: 24
109.234.0.0/21 maxlen: 24
91.205.116.0/22 maxlen: 24
193.242.174.0/23 maxlen: 24
2a07:6200:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:29:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:93:af:da:8f:0c:ee:ba:ce:54:2c:c3:9e:8f:6e:f8:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37949ac84d0b86910f4fd3cf5962927d83450aeb
Validity
Not Before: Sep 14 12:34:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a2c615789305b06bd1624edd9672598a1f0606b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:95:2f:98:8f:38:e2:d4:a5:da:09:3e:20:a5:
0a:81:26:26:06:87:16:dd:62:91:d1:59:a1:8c:ca:
91:3c:f8:96:4d:b7:5d:9b:68:b8:7f:ab:9e:3d:f4:
29:c9:96:79:f5:92:ce:7e:55:7d:67:a6:b4:e0:bd:
57:94:50:2c:96:ec:be:f3:d0:54:f2:4b:ae:7d:ac:
4c:f2:51:fe:93:cd:b6:a8:82:f2:f3:04:e6:8c:68:
ad:0b:b3:93:62:2e:62:b3:b4:c2:2a:d2:32:fb:ec:
20:5d:5c:d5:c5:6d:fd:81:7d:0e:24:2d:91:ec:3d:
f1:68:83:bf:f1:25:2a:ba:a6:6b:a1:8a:22:e4:ec:
15:ac:f7:50:9c:d0:29:3e:6a:00:22:92:cf:83:42:
2c:d1:36:87:95:e0:bd:3e:13:e1:b7:a7:bc:1d:ea:
42:86:6a:f4:b9:0f:96:d8:e9:3e:a2:37:89:84:d8:
3e:55:27:e4:1c:08:82:6e:78:e4:fa:a1:19:20:cb:
05:d4:31:4a:85:91:83:19:11:db:14:21:29:20:86:
7d:4d:80:2d:41:56:3d:75:e8:de:c7:73:a0:52:b5:
75:73:a3:77:a9:1f:1d:c8:9b:bc:21:22:55:1c:9f:
ab:2f:33:cf:e8:19:bf:c7:43:e3:ab:27:55:5b:d5:
07:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:C6:15:78:93:05:B0:6B:D1:62:4E:DD:96:72:59:8A:1F:06:06:B3
X509v3 Authority Key Identifier:
keyid:37:94:9A:C8:4D:0B:86:91:0F:4F:D3:CF:59:62:92:7D:83:45:0A:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N5SayE0LhpEPT9PPWWKSfYNFCus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/osYVeJMFsGvRYk7dlnJZih8GBrM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/N5SayE0LhpEPT9PPWWKSfYNFCus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.205.116.0/22
109.234.0.0/21
185.148.224.0/22
193.242.174.0/23
IPv6:
2a07:6200:1::/48
Signature Algorithm: sha256WithRSAEncryption
76:6c:b1:9d:73:f8:d0:b4:36:d7:89:c9:63:fd:ff:eb:de:cb:
92:0d:88:12:14:d1:d4:ce:91:7b:93:b9:40:71:9c:10:37:15:
73:28:1b:fd:4f:cb:71:57:c4:04:bc:38:50:b5:e5:3f:44:41:
5e:fc:1b:57:d6:09:a7:b5:9b:a9:04:56:45:ea:a9:2c:3a:51:
37:07:9f:c2:c7:e0:4b:db:1c:74:52:56:2c:01:e9:fb:f5:53:
08:9c:7d:c9:b7:53:81:82:10:4f:8f:c4:2d:1a:64:c7:bc:38:
23:f8:da:56:4a:0c:57:d3:b0:41:3a:83:7c:28:25:6a:bf:c6:
43:51:6b:d2:d7:9f:f0:3b:45:3a:b4:b1:72:79:16:fb:d7:a5:
b6:ff:6a:a6:ef:b8:3f:28:33:c3:2b:8b:81:c3:c9:45:ab:f3:
0f:1c:11:80:bb:02:ca:9f:dd:48:1e:58:9f:60:cb:45:05:e3:
80:75:70:6d:eb:ba:be:fc:92:a6:dd:32:5d:3b:63:3d:c7:d8:
a5:39:35:fd:ac:cb:ee:54:7a:3e:26:8c:71:5f:41:f8:5a:12:
00:74:b5:19:43:a6:44:f1:78:64:f8:9e:b1:ca:1a:90:12:60:
57:0b:cd:8b:da:24:73:23:ca:47:0a:66:04:4d:f3:f2:d6:42:
f4:9b:03:1a
-----BEGIN CERTIFICATE-----
MIIFIDCCBAigAwIBAgISAYqTr9qPDO66zlQsw56PbvjxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3OTQ5YWM4NGQwYjg2OTEwZjRmZDNjZjU5NjI5MjdkODM0
NTBhZWIwHhcNMjMwOTE0MTIzNDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMmM2MTU3ODkzMDViMDZiZDE2MjRlZGQ5NjcyNTk4YTFmMDYwNmIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5UvmI844tSl2gk+IKUKgSYmBocW
3WKR0VmhjMqRPPiWTbddm2i4f6uePfQpyZZ59ZLOflV9Z6a04L1XlFAsluy+89BU
8kuufaxM8lH+k822qILy8wTmjGitC7OTYi5is7TCKtIy++wgXVzVxW39gX0OJC2R
7D3xaIO/8SUquqZroYoi5OwVrPdQnNApPmoAIpLPg0Is0TaHleC9PhPht6e8HepC
hmr0uQ+W2Ok+ojeJhNg+VSfkHAiCbnjk+qEZIMsF1DFKhZGDGRHbFCEpIIZ9TYAt
QVY9dejex3OgUrV1c6N3qR8dyJu8ISJVHJ+rLzPP6Bm/x0PjqydVW9UH/wIDAQAB
o4ICLDCCAigwHQYDVR0OBBYEFKLGFXiTBbBr0WJO3ZZyWYofBgazMB8GA1UdIwQY
MBaAFDeUmshNC4aRD0/Tz1likn2DRQrrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjVTYXlFMExocEVQVDlQUFdXS1NmWU5GQ3VzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9jMjhlYTQtMDU5Yy00OWRkLTkyNzgt
YTRkYjM5NmM4OTg3LzEvb3NZVmVKTUZzR3ZSWWs3ZGxuSlppaDhHQnJNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC9jMjhlYTQtMDU5Yy00OWRkLTkyNzgtYTRkYjM5NmM4OTg3
LzEvTjVTYXlFMExocEVQVDlQUFdXS1NmWU5GQ3VzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAeBAIAATAYAwQCW810AwQD
beoAAwQCuZTgAwQBwfKuMA8EAgACMAkDBwAqB2IAAAEwDQYJKoZIhvcNAQELBQAD
ggEBAHZssZ1z+NC0NteJyWP9/+vey5INiBIU0dTOkXuTuUBxnBA3FXMoG/1Py3FX
xAS8OFC15T9EQV78G1fWCae1m6kEVkXqqSw6UTcHn8LH4EvbHHRSViwB6fv1Uwic
fcm3U4GCEE+PxC0aZMe8OCP42lZKDFfTsEE6g3woJWq/xkNRa9LXn/A7RTq0sXJ5
FvvXpbb/aqbvuD8oM8Mri4HDyUWr8w8cEYC7Asqf3UgeWJ9gy0UF44B1cG3rur78
kqbdMl07Yz3H2KU5Nf2sy+5Uej4mjHFfQfhaEgB0tRlDpkTxeGT4nrHKGpASYFcL
zYvaJHMjykcKZgRN8/LWQvSbAxo=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:51 2024 by rpki-client on console-fra.rpki-client.org