Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/j0QLEnj9giU7Lhx6TFS1n11NlT4.roa
File: j0QLEnj9giU7Lhx6TFS1n11NlT4.roa (raw, json)
Hash identifier: E2k1Nu/lhQSC4aMQVboweJYMP3zgtyr/Uja13G2xQiw=
Subject key identifier: 8F:44:0B:12:78:FD:82:25:3B:2E:1C:7A:4C:54:B5:9F:5D:4D:95:3E
Certificate issuer: /CN=67b5b02dc401666ee045ab90cc88817fe09d706a
Certificate serial: 0186BB4F4724B9EC7F6EC036821CCAC542B3
Authority key identifier: 67:B5:B0:2D:C4:01:66:6E:E0:45:AB:90:CC:88:81:7F:E0:9D:70:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/j0QLEnj9giU7Lhx6TFS1n11NlT4.roa
Signing time: Tue 07 Mar 2023 09:03:00 +0000
ROA not before: Tue 07 Mar 2023 09:03:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2914
IP address blocks: 163.171.89.0/24 maxlen: 24
148.253.239.0/24 maxlen: 24
148.253.240.0/24 maxlen: 24
148.253.241.0/24 maxlen: 24
148.253.243.0/24 maxlen: 24
185.27.228.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 08 Mar 2023 01:48:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:bb:4f:47:24:b9:ec:7f:6e:c0:36:82:1c:ca:c5:42:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67b5b02dc401666ee045ab90cc88817fe09d706a
Validity
Not Before: Mar 7 09:03:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8f440b1278fd82253b2e1c7a4c54b59f5d4d953e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ca:74:46:40:09:5d:de:69:36:7f:1f:40:56:
20:e1:49:8e:60:01:9d:d0:ac:4b:15:c2:4e:8c:2a:
a7:5a:85:da:4e:09:04:10:14:93:2f:bc:81:95:80:
d2:e1:b3:0f:48:c4:55:61:d8:c8:da:c9:61:a3:da:
36:be:d3:7e:a8:6d:88:61:ab:dd:1b:54:60:07:d3:
c9:38:0e:f3:75:2f:45:fa:d2:2c:e4:d2:b3:95:32:
e0:1e:67:a9:56:a2:11:ce:f7:71:69:0f:28:cf:b4:
30:3f:20:6f:88:1e:ae:52:b4:46:7f:bd:90:6d:a9:
23:37:b2:78:bb:ab:cd:18:2a:af:92:36:91:02:82:
ec:4d:46:07:28:86:65:e9:2a:b8:e8:f9:6c:64:50:
cb:17:17:c7:5b:44:c9:11:64:5c:88:9d:e1:91:bf:
3a:fb:df:6a:c9:b5:53:0d:6b:72:31:8a:d9:cd:9f:
53:6b:9e:9e:18:62:31:ee:39:4f:d0:14:b2:91:3e:
30:f9:fc:20:30:15:3c:72:26:68:42:32:37:38:dd:
cd:f3:2c:37:5b:cf:a4:34:8b:1c:fd:b9:22:b1:3d:
f7:a2:e1:eb:de:ed:c2:d5:b5:54:5b:82:62:7d:0d:
44:f3:5b:96:aa:35:4a:57:c2:6a:a7:60:d3:15:79:
a7:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:44:0B:12:78:FD:82:25:3B:2E:1C:7A:4C:54:B5:9F:5D:4D:95:3E
X509v3 Authority Key Identifier:
keyid:67:B5:B0:2D:C4:01:66:6E:E0:45:AB:90:CC:88:81:7F:E0:9D:70:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/j0QLEnj9giU7Lhx6TFS1n11NlT4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.253.239.0-148.253.241.255
148.253.243.0/24
163.171.89.0/24
185.27.228.0/24
Signature Algorithm: sha256WithRSAEncryption
67:d4:98:09:2a:a9:8a:a1:9f:ba:e0:9f:cc:4b:95:18:e9:c8:
8c:95:bf:7b:09:3d:11:7f:05:8d:cc:45:ad:87:d4:30:5f:6c:
3d:98:7a:30:e6:e2:c5:23:32:86:88:c5:f3:dd:40:ea:9a:51:
14:e6:2d:c2:e0:56:88:bc:5d:63:35:bd:15:25:de:c2:6a:31:
50:06:2e:e9:2f:ef:a5:39:44:26:3c:83:96:29:f1:5f:2e:85:
9d:c7:bc:36:4e:44:2e:35:46:02:7a:66:a3:02:97:5f:4e:b0:
34:8d:3c:83:d9:79:71:94:29:c0:28:84:35:97:73:0a:23:17:
4a:c9:92:94:23:6b:59:6a:4c:f6:c0:ac:35:d7:d0:06:a9:e5:
97:ff:f8:f5:3e:3d:56:73:f2:65:b0:30:4f:7a:d0:de:78:d9:
c3:dc:38:2b:37:36:14:32:87:3c:be:5d:a5:1d:18:5f:2f:a4:
82:63:0a:2c:4d:be:09:f4:c7:8d:1b:43:4a:db:cb:a9:23:07:
b6:e2:ea:4a:60:2a:53:66:44:ad:b1:44:b2:01:8c:e9:b4:71:
fe:a6:4d:be:c3:a7:1a:3e:d5:fc:df:1d:ee:13:59:5b:fa:61:
c0:33:3e:c0:5c:41:e8:ee:15:38:bc:d1:ab:07:a2:9c:66:21:
82:62:ef:e1
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAYa7T0ckuex/bsA2ghzKxUKzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3YjViMDJkYzQwMTY2NmVlMDQ1YWI5MGNjODg4MTdmZTA5
ZDcwNmEwHhcNMjMwMzA3MDkwMzAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZjQ0MGIxMjc4ZmQ4MjI1M2IyZTFjN2E0YzU0YjU5ZjVkNGQ5NTNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmcp0RkAJXd5pNn8fQFYg4UmOYAGd
0KxLFcJOjCqnWoXaTgkEEBSTL7yBlYDS4bMPSMRVYdjI2slho9o2vtN+qG2IYavd
G1RgB9PJOA7zdS9F+tIs5NKzlTLgHmepVqIRzvdxaQ8oz7QwPyBviB6uUrRGf72Q
bakjN7J4u6vNGCqvkjaRAoLsTUYHKIZl6Sq46PlsZFDLFxfHW0TJEWRciJ3hkb86
+99qybVTDWtyMYrZzZ9Ta56eGGIx7jlP0BSykT4w+fwgMBU8ciZoQjI3ON3N8yw3
W8+kNIsc/bkisT33ouHr3u3C1bVUW4JifQ1E81uWqjVKV8Jqp2DTFXmnJwIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFI9ECxJ4/YIlOy4cekxUtZ9dTZU+MB8GA1UdIwQY
MBaAFGe1sC3EAWZu4EWrkMyIgX/gnXBqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjdXd0xjUUJabTdnUmF1UXpJaUJmLUNkY0dvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82NGEzZGUtODEyYS00YWNlLTgxNGQt
YjVkODg4YWRmZDM3LzEvajBRTEVuajlnaVU3TGh4NlRGUzFuMTFObFQ0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC82NGEzZGUtODEyYS00YWNlLTgxNGQtYjVkODg4YWRmZDM3
LzEvWjdXd0xjUUJabTdnUmF1UXpJaUJmLUNkY0dvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgMAwDBACU/e8D
BAGU/fADBACU/fMDBACjq1kDBAC5G+QwDQYJKoZIhvcNAQELBQADggEBAGfUmAkq
qYqhn7rgn8xLlRjpyIyVv3sJPRF/BY3MRa2H1DBfbD2YejDm4sUjMoaIxfPdQOqa
URTmLcLgVoi8XWM1vRUl3sJqMVAGLukv76U5RCY8g5Yp8V8uhZ3HvDZORC41RgJ6
ZqMCl19OsDSNPIPZeXGUKcAohDWXcwojF0rJkpQja1lqTPbArDXX0Aap5Zf/+PU+
PVZz8mWwME960N542cPcOCs3NhQyhzy+XaUdGF8vpIJjCixNvgn0x40bQ0rby6kj
B7bi6kpgKlNmRK2xRLIBjOm0cf6mTb7Dpxo+1fzfHe4TWVv6YcAzPsBcQejuFTi8
0asHopxmIYJi7+E=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:27 2024 by rpki-client on console-ams.rpki-client.org