Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/533416-5192-4944-ab50-813c76ff40b4/1/RKYodRx3gnyolZJJXkW6jd3uPzE.roa
File: RKYodRx3gnyolZJJXkW6jd3uPzE.roa (raw, json)
Hash identifier: TByJXxoBqO3ibZuf4ufUxgNZqpDG9+PzFCWxZbcvq0E=
Subject key identifier: 44:A6:28:75:1C:77:82:7C:A8:95:92:49:5E:45:BA:8D:DD:EE:3F:31
Certificate issuer: /CN=b545e434bba473706da8336fda016bb2e68b3623
Certificate serial: 01857183155AD38358B8BA3D9235C887ED4E
Authority key identifier: B5:45:E4:34:BB:A4:73:70:6D:A8:33:6F:DA:01:6B:B2:E6:8B:36:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tUXkNLukc3BtqDNv2gFrsuaLNiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/533416-5192-4944-ab50-813c76ff40b4/1/RKYodRx3gnyolZJJXkW6jd3uPzE.roa
Signing time: Mon 02 Jan 2023 08:04:54 +0000
ROA not before: Mon 02 Jan 2023 08:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200914
IP address blocks: 185.91.159.0/24 maxlen: 24
185.91.156.0/22 maxlen: 22
2a03:8960::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:83:15:5a:d3:83:58:b8:ba:3d:92:35:c8:87:ed:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b545e434bba473706da8336fda016bb2e68b3623
Validity
Not Before: Jan 2 08:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=44a628751c77827ca89592495e45ba8dddee3f31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9a:7c:81:6b:ae:8a:5f:05:06:f9:a3:28:23:
55:0c:ca:6e:e1:79:49:ad:f1:78:10:6d:be:c1:19:
9e:9d:71:96:a7:18:68:b4:d0:65:98:f9:74:dd:f6:
de:a7:38:b3:ce:9f:98:77:fa:2f:85:a3:9f:3f:39:
5a:65:e6:19:a3:52:b5:20:14:76:15:4b:30:b8:63:
14:01:1b:64:b6:89:d3:b1:8d:33:b5:09:97:a1:91:
f7:50:ed:d3:63:51:de:31:98:c7:a6:22:6d:42:2a:
7a:10:85:d9:c2:e7:91:a2:38:ab:eb:28:8e:b3:3d:
11:66:67:dc:25:fd:70:c6:70:1a:b2:e8:50:33:6b:
b0:ef:f7:7f:9c:7c:4d:24:95:59:5c:ef:56:21:3a:
24:91:89:db:e0:59:8a:36:a0:c5:ac:44:1d:b8:7f:
3d:4d:96:61:ad:c4:3f:15:2d:56:8b:8a:e3:41:30:
9e:ee:5c:55:e1:f4:50:d2:0c:72:33:b8:0e:b9:35:
8b:3a:62:b2:fd:0a:6e:7e:53:bf:3e:45:76:c3:e2:
6c:b0:0d:5d:18:dc:39:28:92:34:27:2a:83:24:bc:
f7:d0:bb:9f:cd:92:25:a7:d8:f6:d9:3a:ed:55:cd:
c6:b1:56:0c:cb:45:2f:59:15:a2:44:53:ed:41:2c:
87:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:A6:28:75:1C:77:82:7C:A8:95:92:49:5E:45:BA:8D:DD:EE:3F:31
X509v3 Authority Key Identifier:
keyid:B5:45:E4:34:BB:A4:73:70:6D:A8:33:6F:DA:01:6B:B2:E6:8B:36:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUXkNLukc3BtqDNv2gFrsuaLNiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/533416-5192-4944-ab50-813c76ff40b4/1/RKYodRx3gnyolZJJXkW6jd3uPzE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/533416-5192-4944-ab50-813c76ff40b4/1/tUXkNLukc3BtqDNv2gFrsuaLNiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.91.156.0/22
IPv6:
2a03:8960::/32
Signature Algorithm: sha256WithRSAEncryption
34:7b:02:e7:13:44:69:7c:fa:13:d6:0d:79:eb:6f:b6:7a:a8:
a9:f9:13:50:3b:56:30:68:2a:79:a4:df:15:6d:2c:52:1c:b7:
9c:7c:95:c8:c5:19:08:a4:28:eb:b5:c3:43:6a:72:ee:33:7b:
e4:7f:9d:c2:6a:aa:1e:8c:a4:5d:97:9a:2a:da:e3:7d:8b:93:
b3:a6:94:11:27:f1:b6:d6:56:9b:1b:ec:e0:73:50:0e:8b:5a:
94:ee:d4:a2:44:b2:43:29:27:19:01:e8:71:10:76:77:f6:80:
a4:3d:66:c8:12:da:94:f0:5f:c8:fe:df:49:7c:6a:8b:3d:c3:
cb:32:22:4c:65:e7:10:51:5c:d4:c9:1a:87:a4:55:c1:72:33:
af:ec:36:fe:2d:cf:68:f8:25:f5:0c:b3:56:68:55:b9:b4:a5:
5d:0b:e9:33:d0:a1:55:ee:50:39:c0:7e:a7:a9:0e:51:ec:7d:
c5:0b:cf:a5:a2:14:71:46:dd:95:52:55:29:05:31:62:f0:a6:
96:31:b7:ae:06:e6:81:61:10:7c:19:c1:b4:88:58:16:af:0c:
ae:01:a4:05:4d:d5:dc:6b:53:d0:75:3f:30:ab:89:b4:15:7a:
69:fc:1a:4a:ac:2e:5d:b0:c2:03:e6:3b:a1:90:5c:b5:7b:58:
f0:f5:14:ca
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVxgxVa04NYuLo9kjXIh+1OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1NDVlNDM0YmJhNDczNzA2ZGE4MzM2ZmRhMDE2YmIyZTY4
YjM2MjMwHhcNMjMwMTAyMDgwNDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NGE2Mjg3NTFjNzc4MjdjYTg5NTkyNDk1ZTQ1YmE4ZGRkZWUzZjMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJp8gWuuil8FBvmjKCNVDMpu4XlJ
rfF4EG2+wRmenXGWpxhotNBlmPl03fbepzizzp+Yd/ovhaOfPzlaZeYZo1K1IBR2
FUswuGMUARtktonTsY0ztQmXoZH3UO3TY1HeMZjHpiJtQip6EIXZwueRojir6yiO
sz0RZmfcJf1wxnAasuhQM2uw7/d/nHxNJJVZXO9WITokkYnb4FmKNqDFrEQduH89
TZZhrcQ/FS1Wi4rjQTCe7lxV4fRQ0gxyM7gOuTWLOmKy/QpuflO/PkV2w+JssA1d
GNw5KJI0JyqDJLz30LufzZIlp9j22TrtVc3GsVYMy0UvWRWiRFPtQSyHrQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFESmKHUcd4J8qJWSSV5Fuo3d7j8xMB8GA1UdIwQY
MBaAFLVF5DS7pHNwbagzb9oBa7LmizYjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFVYa05MdWtjM0J0cUROdjJnRnJzdWFMTmlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy81MzM0MTYtNTE5Mi00OTQ0LWFiNTAt
ODEzYzc2ZmY0MGI0LzEvUktZb2RSeDNnbnlvbFpKSlhrVzZqZDN1UHpFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy81MzM0MTYtNTE5Mi00OTQ0LWFiNTAtODEzYzc2ZmY0MGI0
LzEvdFVYa05MdWtjM0J0cUROdjJnRnJzdWFMTmlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuVucMA0E
AgACMAcDBQAqA4lgMA0GCSqGSIb3DQEBCwUAA4IBAQA0ewLnE0RpfPoT1g1562+2
eqip+RNQO1YwaCp5pN8VbSxSHLecfJXIxRkIpCjrtcNDanLuM3vkf53CaqoejKRd
l5oq2uN9i5OzppQRJ/G21labG+zgc1AOi1qU7tSiRLJDKScZAehxEHZ39oCkPWbI
EtqU8F/I/t9JfGqLPcPLMiJMZecQUVzUyRqHpFXBcjOv7Db+Lc9o+CX1DLNWaFW5
tKVdC+kz0KFV7lA5wH6nqQ5R7H3FC8+lohRxRt2VUlUpBTFi8KaWMbeuBuaBYRB8
GcG0iFgWrwyuAaQFTdXca1PQdT8wq4m0FXpp/BpKrC5dsMID5juhkFy1e1jw9RTK
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:30 2024 by rpki-client on console-ams.rpki-client.org