Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/0iHNxcNMLuovcOQgdZeAEHSIQGM.roa
File: 0iHNxcNMLuovcOQgdZeAEHSIQGM.roa (raw, json)
Hash identifier: JwK74TSN0fqck4QnSJQl7IeJEsi6GcCPocFb93hLHYM=
Subject key identifier: D2:21:CD:C5:C3:4C:2E:EA:2F:70:E4:20:75:97:80:10:74:88:40:63
Certificate issuer: /CN=9e9e6887ea7572a6411306c87b0cc089397a6354
Certificate serial: 018A0DD8C608678BFCEDDDEEAD186B0B52B0
Authority key identifier: 9E:9E:68:87:EA:75:72:A6:41:13:06:C8:7B:0C:C0:89:39:7A:63:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/np5oh-p1cqZBEwbIewzAiTl6Y1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/0iHNxcNMLuovcOQgdZeAEHSIQGM.roa
Signing time: Sat 19 Aug 2023 12:50:24 +0000
ROA not before: Sat 19 Aug 2023 12:50:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213145
IP address blocks: 188.125.173.0/24 maxlen: 24
188.125.175.0/24 maxlen: 24
185.117.99.0/24 maxlen: 24
185.14.172.0/24 maxlen: 24
185.14.173.0/24 maxlen: 24
185.14.174.0/24 maxlen: 24
185.14.175.0/24 maxlen: 24
188.125.172.0/24 maxlen: 24
188.125.171.0/24 maxlen: 24
185.117.120.0/24 maxlen: 24
185.117.121.0/24 maxlen: 24
185.117.123.0/24 maxlen: 24
185.117.122.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:0d:d8:c6:08:67:8b:fc:ed:dd:ee:ad:18:6b:0b:52:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e9e6887ea7572a6411306c87b0cc089397a6354
Validity
Not Before: Aug 19 12:50:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d221cdc5c34c2eea2f70e4207597801074884063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4a:6d:25:8a:09:9d:76:db:af:ac:dc:e3:08:
50:9a:3a:3d:77:8f:3a:94:f4:20:0c:74:64:b3:19:
50:24:b7:a9:eb:06:95:0f:85:e5:30:a6:ad:d4:b2:
a2:01:5d:0d:65:04:d6:1f:5a:f1:8f:8c:34:20:d1:
5c:6b:14:63:9f:e4:43:d2:25:c8:02:61:74:e9:fe:
29:01:10:be:1d:70:9c:25:bc:13:6c:4a:fb:9f:8a:
2e:47:2a:15:4d:90:0c:ba:a9:4a:1d:34:ee:37:cc:
91:c0:64:d7:df:bc:6e:72:c5:44:e5:db:06:66:a3:
2f:d6:26:5a:b3:0d:49:46:28:89:42:e7:dc:42:6d:
b4:c9:b5:21:86:99:d2:03:4a:eb:ba:fd:8e:25:c2:
40:2f:f7:aa:03:9f:02:0c:9e:ea:1b:f0:ef:33:c7:
de:c1:d1:97:dd:09:e7:46:db:5b:c3:13:d2:d9:11:
18:cc:2b:86:dd:44:b4:fb:f6:a5:11:f0:33:04:6a:
a5:0d:5c:34:94:79:53:4d:8d:b3:fe:22:89:00:a9:
20:69:84:c3:50:16:3c:2f:a1:38:26:f7:bc:da:85:
d9:94:3a:c6:4a:95:3c:bd:42:79:11:a5:6b:7b:13:
7d:ba:ce:b5:a0:25:98:28:01:d5:10:5c:8e:88:0c:
97:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:21:CD:C5:C3:4C:2E:EA:2F:70:E4:20:75:97:80:10:74:88:40:63
X509v3 Authority Key Identifier:
keyid:9E:9E:68:87:EA:75:72:A6:41:13:06:C8:7B:0C:C0:89:39:7A:63:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/np5oh-p1cqZBEwbIewzAiTl6Y1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/0iHNxcNMLuovcOQgdZeAEHSIQGM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/np5oh-p1cqZBEwbIewzAiTl6Y1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.14.172.0/22
185.117.99.0/24
185.117.120.0/22
188.125.171.0-188.125.173.255
188.125.175.0/24
Signature Algorithm: sha256WithRSAEncryption
51:fd:0c:01:de:d7:b5:ae:bb:85:f0:d5:0a:bf:42:4f:09:0c:
24:1d:04:03:f7:16:61:bd:54:37:c0:5c:8d:de:8b:c1:94:0f:
ac:18:2a:f7:9f:d1:61:c7:40:7f:c3:52:f6:65:ba:00:bb:22:
be:a7:78:ab:9a:e3:63:9b:a0:35:92:2a:18:67:68:47:ba:52:
ec:00:50:af:e1:4f:4f:fa:82:9a:65:da:3c:fc:47:75:5d:32:
0d:18:48:27:5e:7b:a3:a2:75:15:12:09:2e:05:be:09:df:4a:
eb:51:97:b3:9e:90:60:f7:5a:04:0b:61:e1:51:5f:c7:0d:ac:
36:12:80:89:3a:d3:4e:20:46:fa:b5:1a:12:f3:57:41:85:42:
04:3b:fc:19:a7:42:2e:37:b1:ed:7d:14:74:e2:ab:fd:d0:ed:
43:56:a2:db:40:7c:d7:01:ad:c7:44:8b:ed:6c:6b:c2:15:b4:
2b:af:cf:41:a7:3e:57:5e:68:da:15:1c:b3:cb:38:f2:bb:03:
9c:9d:4d:41:49:4b:79:98:c5:19:e8:63:f4:a0:29:77:74:cd:
9f:30:c3:34:b0:52:7b:4d:83:50:16:a7:8a:4d:1c:4d:0e:e0:
81:1b:40:d0:a5:04:35:8b:df:0c:8b:d9:9f:0a:aa:ab:32:40:
5e:13:29:e9
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAYoN2MYIZ4v87d3urRhrC1KwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllOWU2ODg3ZWE3NTcyYTY0MTEzMDZjODdiMGNjMDg5Mzk3
YTYzNTQwHhcNMjMwODE5MTI1MDI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMjIxY2RjNWMzNGMyZWVhMmY3MGU0MjA3NTk3ODAxMDc0ODg0MDYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyEptJYoJnXbbr6zc4whQmjo9d486
lPQgDHRksxlQJLep6waVD4XlMKat1LKiAV0NZQTWH1rxj4w0INFcaxRjn+RD0iXI
AmF06f4pARC+HXCcJbwTbEr7n4ouRyoVTZAMuqlKHTTuN8yRwGTX37xucsVE5dsG
ZqMv1iZasw1JRiiJQufcQm20ybUhhpnSA0rruv2OJcJAL/eqA58CDJ7qG/DvM8fe
wdGX3QnnRttbwxPS2REYzCuG3US0+/alEfAzBGqlDVw0lHlTTY2z/iKJAKkgaYTD
UBY8L6E4Jve82oXZlDrGSpU8vUJ5EaVrexN9us61oCWYKAHVEFyOiAyXdwIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFNIhzcXDTC7qL3DkIHWXgBB0iEBjMB8GA1UdIwQY
MBaAFJ6eaIfqdXKmQRMGyHsMwIk5emNUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnA1b2gtcDFjcVpCRXdiSWV3ekFpVGw2WTFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9lMmFiYWQtNThmYS00Y2VkLTg2NTAt
ZWM1MDhkZWM3NzkzLzEvMGlITnhjTk1MdW92Y09RZ2RaZUFFSFNJUUdNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My9lMmFiYWQtNThmYS00Y2VkLTg2NTAtZWM1MDhkZWM3Nzkz
LzEvbnA1b2gtcDFjcVpCRXdiSWV3ekFpVGw2WTFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQCuQ6sAwQA
uXVjAwQCuXV4MAwDBAC8fasDBAG8fawDBAC8fa8wDQYJKoZIhvcNAQELBQADggEB
AFH9DAHe17Wuu4Xw1Qq/Qk8JDCQdBAP3FmG9VDfAXI3ei8GUD6wYKvef0WHHQH/D
UvZlugC7Ir6neKua42OboDWSKhhnaEe6UuwAUK/hT0/6gppl2jz8R3VdMg0YSCde
e6OidRUSCS4FvgnfSutRl7OekGD3WgQLYeFRX8cNrDYSgIk6004gRvq1GhLzV0GF
QgQ7/BmnQi43se19FHTiq/3Q7UNWottAfNcBrcdEi+1sa8IVtCuvz0GnPldeaNoV
HLPLOPK7A5ydTUFJS3mYxRnoY/SgKXd0zZ8wwzSwUntNg1AWp4pNHE0O4IEbQNCl
BDWL3wyL2Z8KqqsyQF4TKek=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:01 2024 by rpki-client on console-fra.rpki-client.org