Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/c5f714-472c-4856-aa4b-9b21b6f6679a/1/1mIx-hqokud1VyuWUH1QgNSJmqU.roa
File: 1mIx-hqokud1VyuWUH1QgNSJmqU.roa (raw, json)
Hash identifier: Migoks/HgrVeST5e1+hZIHYtlgkHmmGB1vUDKZMj7fk=
Subject key identifier: D6:62:31:FA:1A:A8:92:E7:75:57:2B:96:50:7D:50:80:D4:89:9A:A5
Certificate issuer: /CN=f4c6b7dd5175be8db7a0522f7d4e41c5c42c6b29
Certificate serial: 018F14D09693ED9A3CAC055F5E3E3CE0C0EA
Authority key identifier: F4:C6:B7:DD:51:75:BE:8D:B7:A0:52:2F:7D:4E:41:C5:C4:2C:6B:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Ma33VF1vo23oFIvfU5BxcQsayk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/c5f714-472c-4856-aa4b-9b21b6f6679a/1/1mIx-hqokud1VyuWUH1QgNSJmqU.roa
Signing time: Thu 25 Apr 2024 10:32:45 +0000
ROA not before: Thu 25 Apr 2024 10:32:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212136
IP address blocks: 5.172.178.0/24 maxlen: 24
81.22.46.0/24 maxlen: 24
81.22.47.0/24 maxlen: 24
185.228.248.0/24 maxlen: 24
185.247.187.0/24 maxlen: 24
194.31.9.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 20 May 2024 12:27:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:14:d0:96:93:ed:9a:3c:ac:05:5f:5e:3e:3c:e0:c0:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4c6b7dd5175be8db7a0522f7d4e41c5c42c6b29
Validity
Not Before: Apr 25 10:32:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d66231fa1aa892e775572b96507d5080d4899aa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:09:39:ff:47:1c:6f:7b:ba:72:5c:48:a1:e5:
7f:0b:1d:59:fa:80:0a:f0:90:89:66:2a:6d:b4:e2:
dd:43:10:fa:9f:2b:f8:ae:36:39:a5:61:bf:a1:11:
f2:37:5a:f7:7c:8b:26:65:73:7a:8a:ec:56:c3:c4:
1b:9d:b0:02:3f:2e:9c:04:87:60:0e:66:88:03:ab:
61:f7:73:69:e4:ee:bc:a8:87:82:0e:19:47:03:22:
58:10:78:c8:20:e5:77:2f:16:34:c1:84:2d:88:9a:
ef:d2:61:7d:6a:be:60:4c:91:50:62:dc:9a:15:02:
07:06:f9:e4:49:3f:bb:0a:37:72:37:48:74:e7:f1:
97:10:67:11:78:6e:f0:6c:5f:c5:bb:9c:6c:b1:84:
a0:ee:33:86:40:f4:f4:d9:3c:03:d5:31:44:90:91:
2f:7d:13:60:d7:77:0d:91:9f:5e:9b:42:b2:5e:3c:
35:b0:0c:06:05:9b:0d:1f:75:48:5b:13:11:3a:66:
e4:f0:52:df:47:a4:bd:c1:fc:87:6f:1d:44:4d:b5:
2e:c1:b8:ad:c3:83:48:fe:54:db:41:5a:81:c9:6a:
a1:40:68:12:0f:bd:bd:7c:35:f4:23:7a:61:cd:25:
2e:46:b5:8d:fb:a8:9b:d5:e1:3d:04:1d:63:fe:be:
74:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:62:31:FA:1A:A8:92:E7:75:57:2B:96:50:7D:50:80:D4:89:9A:A5
X509v3 Authority Key Identifier:
keyid:F4:C6:B7:DD:51:75:BE:8D:B7:A0:52:2F:7D:4E:41:C5:C4:2C:6B:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Ma33VF1vo23oFIvfU5BxcQsayk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c5f714-472c-4856-aa4b-9b21b6f6679a/1/1mIx-hqokud1VyuWUH1QgNSJmqU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c5f714-472c-4856-aa4b-9b21b6f6679a/1/9Ma33VF1vo23oFIvfU5BxcQsayk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.172.178.0/24
81.22.46.0/23
185.228.248.0/24
185.247.187.0/24
194.31.9.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:7d:55:09:17:95:e9:3e:96:d3:47:30:4c:12:29:8b:4e:b3:
ee:f5:30:11:54:e3:6f:95:14:ea:06:0d:85:3c:f3:ee:14:0a:
55:21:a3:a7:03:7e:3e:91:e1:93:f6:45:ec:33:a8:50:64:d4:
9a:55:87:5a:ad:7e:47:e1:66:90:a3:d3:62:db:f6:09:79:89:
79:ad:6a:b1:63:bc:eb:2f:b0:88:fe:23:45:ac:32:ac:66:ea:
9f:c5:1d:54:57:9c:e9:03:cd:4d:98:9c:c9:cf:7c:de:32:e0:
db:8c:12:1d:5c:b5:a9:e1:e9:96:f0:da:fc:92:d8:1c:c8:a7:
b0:e6:90:9c:91:fa:f6:4d:7a:04:12:77:74:8b:02:a3:41:1e:
f9:5e:55:84:42:a9:9e:d1:7d:f6:c0:da:5b:34:e1:76:f1:6b:
07:75:75:2d:9b:1e:9c:28:56:5b:a0:51:d5:ea:78:f3:2d:08:
80:20:96:22:e3:d6:0c:e4:76:f8:8e:f1:f3:1d:b9:2d:ad:cf:
c9:80:fe:b2:27:dc:b1:ab:31:76:dd:8d:fa:c3:33:b7:fa:b9:
b9:9f:f9:a3:a5:b2:78:5b:7c:1f:44:29:8e:df:f6:7e:ba:de:
57:bc:2d:85:0c:a8:7b:a4:bc:df:6f:aa:80:13:b2:aa:98:60:
9d:aa:45:32
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAY8U0JaT7Zo8rAVfXj484MDqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0YzZiN2RkNTE3NWJlOGRiN2EwNTIyZjdkNGU0MWM1YzQy
YzZiMjkwHhcNMjQwNDI1MTAzMjQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNjYyMzFmYTFhYTg5MmU3NzU1NzJiOTY1MDdkNTA4MGQ0ODk5YWE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAk5/0ccb3u6clxIoeV/Cx1Z+oAK
8JCJZipttOLdQxD6nyv4rjY5pWG/oRHyN1r3fIsmZXN6iuxWw8QbnbACPy6cBIdg
DmaIA6th93Np5O68qIeCDhlHAyJYEHjIIOV3LxY0wYQtiJrv0mF9ar5gTJFQYtya
FQIHBvnkST+7CjdyN0h05/GXEGcReG7wbF/Fu5xssYSg7jOGQPT02TwD1TFEkJEv
fRNg13cNkZ9em0KyXjw1sAwGBZsNH3VIWxMROmbk8FLfR6S9wfyHbx1ETbUuwbit
w4NI/lTbQVqByWqhQGgSD729fDX0I3phzSUuRrWN+6ib1eE9BB1j/r50/QIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFNZiMfoaqJLndVcrllB9UIDUiZqlMB8GA1UdIwQY
MBaAFPTGt91Rdb6Nt6BSL31OQcXELGspMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOU1hMzNWRjF2bzIzb0ZJdmZVNUJ4Y1FzYXlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9jNWY3MTQtNDcyYy00ODU2LWFhNGIt
OWIyMWI2ZjY2NzlhLzEvMW1JeC1ocW9rdWQxVnl1V1VIMVFnTlNKbXFVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS9jNWY3MTQtNDcyYy00ODU2LWFhNGItOWIyMWI2ZjY2Nzlh
LzEvOU1hMzNWRjF2bzIzb0ZJdmZVNUJ4Y1FzYXlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQABayyAwQB
URYuAwQAueT4AwQAufe7AwQAwh8JMA0GCSqGSIb3DQEBCwUAA4IBAQA/fVUJF5Xp
PpbTRzBMEimLTrPu9TARVONvlRTqBg2FPPPuFApVIaOnA34+keGT9kXsM6hQZNSa
VYdarX5H4WaQo9Ni2/YJeYl5rWqxY7zrL7CI/iNFrDKsZuqfxR1UV5zpA81NmJzJ
z3zeMuDbjBIdXLWp4emW8Nr8ktgcyKew5pCckfr2TXoEEnd0iwKjQR75XlWEQqme
0X32wNpbNOF28WsHdXUtmx6cKFZboFHV6njzLQiAIJYi49YM5Hb4jvHzHbktrc/J
gP6yJ9yxqzF23Y36wzO3+rm5n/mjpbJ4W3wfRCmO3/Z+ut5XvC2FDKh7pLzfb6qA
E7KqmGCdqkUy
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:48 2024 by rpki-client on console-fra.rpki-client.org