Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/1af625-c6ba-49db-af64-34928f9a1c4f/1/PHtDNkgkWYUurlLPbVtsM_czPH8.roa
File: PHtDNkgkWYUurlLPbVtsM_czPH8.roa (raw, json)
Hash identifier: VMRIzJKtY1h+jxcYDjGRggE/GFpy7PlCZFtxQrEQHqc=
Subject key identifier: 3C:7B:43:36:48:24:59:85:2E:AE:52:CF:6D:5B:6C:33:F7:33:3C:7F
Certificate issuer: /CN=c191a7bf2f03a67fdffcb7144bd2f8114dcdd3b3
Certificate serial: 018571B0B4090E44730920717C95644B93D4
Authority key identifier: C1:91:A7:BF:2F:03:A6:7F:DF:FC:B7:14:4B:D2:F8:11:4D:CD:D3:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wZGnvy8Dpn_f_LcUS9L4EU3N07M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/1af625-c6ba-49db-af64-34928f9a1c4f/1/PHtDNkgkWYUurlLPbVtsM_czPH8.roa
Signing time: Mon 02 Jan 2023 08:54:43 +0000
ROA not before: Mon 02 Jan 2023 08:54:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202208
IP address blocks: 185.42.252.0/22 maxlen: 22
185.42.252.0/24 maxlen: 24
185.42.254.0/23 maxlen: 23
2a01:66a0::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:b0:b4:09:0e:44:73:09:20:71:7c:95:64:4b:93:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c191a7bf2f03a67fdffcb7144bd2f8114dcdd3b3
Validity
Not Before: Jan 2 08:54:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3c7b4336482459852eae52cf6d5b6c33f7333c7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:cb:be:2f:c6:fb:2f:ef:a3:06:97:50:de:0a:
d6:78:04:18:9c:df:c3:df:05:3a:24:8a:ad:03:8b:
49:ef:19:33:2a:99:db:d0:e1:8e:b7:2f:0d:e4:6e:
d9:a1:4f:8b:7e:82:85:79:2c:a3:ba:0a:6f:02:a4:
96:08:5d:fa:a8:26:14:b2:a5:30:7f:5a:a9:2d:f5:
8a:15:19:70:89:14:cb:ef:ed:91:f4:ea:00:f1:94:
9d:ef:52:39:88:16:25:25:ba:e6:2d:b8:b1:14:89:
b6:e2:a7:e6:0f:c5:a9:ce:5c:c5:7d:6a:7b:5a:b0:
92:1d:4d:4a:7c:80:46:de:61:66:f4:54:9b:6a:d8:
8e:69:83:f4:b3:3c:9c:22:a4:dc:f2:7d:61:3b:e9:
cc:50:fd:90:84:7f:3d:21:53:27:56:87:d8:e9:41:
71:d4:c5:47:16:0c:d3:dc:59:4f:bf:13:12:f9:6a:
f9:29:d8:ad:5c:2a:1c:a8:2d:5c:a8:5c:73:d1:d0:
9d:e4:6f:c7:55:36:82:c3:8a:bf:97:48:49:b4:85:
33:27:5b:0f:cb:8c:0c:c7:5b:39:84:f4:88:76:6d:
88:b5:17:51:99:eb:9a:ab:2f:82:2a:33:52:ca:99:
c8:7a:9b:a3:4e:ec:4a:cf:8c:42:c3:c6:9a:79:af:
c7:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:7B:43:36:48:24:59:85:2E:AE:52:CF:6D:5B:6C:33:F7:33:3C:7F
X509v3 Authority Key Identifier:
keyid:C1:91:A7:BF:2F:03:A6:7F:DF:FC:B7:14:4B:D2:F8:11:4D:CD:D3:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wZGnvy8Dpn_f_LcUS9L4EU3N07M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1af625-c6ba-49db-af64-34928f9a1c4f/1/PHtDNkgkWYUurlLPbVtsM_czPH8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1af625-c6ba-49db-af64-34928f9a1c4f/1/wZGnvy8Dpn_f_LcUS9L4EU3N07M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.42.252.0/22
IPv6:
2a01:66a0::/32
Signature Algorithm: sha256WithRSAEncryption
b4:ff:ad:d0:29:be:2d:f0:42:10:33:ca:94:56:a8:a7:e4:0f:
72:e2:53:64:a0:fa:cf:f8:00:84:23:64:8b:4f:16:15:28:f9:
cc:1f:1a:2a:1d:0e:dd:c8:f2:b0:de:31:af:3c:f7:03:58:1d:
b1:e2:94:6f:02:c2:84:66:0b:26:05:18:09:2e:57:4e:8e:04:
1e:43:ad:cb:33:1d:5a:eb:d0:04:23:c8:67:5e:5f:ae:41:1c:
20:32:90:3c:86:05:7e:9d:73:96:d3:f8:7d:d4:78:c0:f6:d9:
dd:71:6c:1e:c2:a1:22:c8:14:11:42:bd:ba:4a:3d:03:37:96:
ed:72:fa:28:9a:ce:a3:0f:b5:fd:63:cc:51:fe:04:cd:25:3d:
d2:f0:a8:71:bf:76:a2:ab:10:8f:53:5c:bb:4a:6d:3d:9d:61:
73:3d:18:4a:ec:a3:25:9f:94:1b:09:31:84:95:93:4d:f6:c6:
c4:42:2b:8b:d6:fa:a0:98:5a:28:b4:32:9b:90:89:e9:31:db:
11:4c:07:05:e6:5a:76:31:6f:c5:45:ea:a0:8b:cf:9f:27:5a:
59:54:53:08:4f:c7:5d:44:f8:07:21:61:ac:d7:2f:6a:e0:9f:
0e:8a:dd:c0:bb:7e:c2:45:3c:1f:00:a4:eb:09:c1:cf:c4:c9:
38:1e:94:29
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVxsLQJDkRzCSBxfJVkS5PUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxOTFhN2JmMmYwM2E2N2ZkZmZjYjcxNDRiZDJmODExNGRj
ZGQzYjMwHhcNMjMwMTAyMDg1NDQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYzdiNDMzNjQ4MjQ1OTg1MmVhZTUyY2Y2ZDViNmMzM2Y3MzMzYzdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMu+L8b7L++jBpdQ3grWeAQYnN/D
3wU6JIqtA4tJ7xkzKpnb0OGOty8N5G7ZoU+LfoKFeSyjugpvAqSWCF36qCYUsqUw
f1qpLfWKFRlwiRTL7+2R9OoA8ZSd71I5iBYlJbrmLbixFIm24qfmD8WpzlzFfWp7
WrCSHU1KfIBG3mFm9FSbatiOaYP0szycIqTc8n1hO+nMUP2QhH89IVMnVofY6UFx
1MVHFgzT3FlPvxMS+Wr5KditXCocqC1cqFxz0dCd5G/HVTaCw4q/l0hJtIUzJ1sP
y4wMx1s5hPSIdm2ItRdRmeuaqy+CKjNSypnIepujTuxKz4xCw8aaea/HtwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFDx7QzZIJFmFLq5Sz21bbDP3Mzx/MB8GA1UdIwQY
MBaAFMGRp78vA6Z/3/y3FEvS+BFNzdOzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1pHbnZ5OERwbl9mX0xjVVM5TDRFVTNOMDdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8xYWY2MjUtYzZiYS00OWRiLWFmNjQt
MzQ5MjhmOWExYzRmLzEvUEh0RE5rZ2tXWVV1cmxMUGJWdHNNX2N6UEg4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni8xYWY2MjUtYzZiYS00OWRiLWFmNjQtMzQ5MjhmOWExYzRm
LzEvd1pHbnZ5OERwbl9mX0xjVVM5TDRFVTNOMDdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuSr8MA0E
AgACMAcDBQAqAWagMA0GCSqGSIb3DQEBCwUAA4IBAQC0/63QKb4t8EIQM8qUVqin
5A9y4lNkoPrP+ACEI2SLTxYVKPnMHxoqHQ7dyPKw3jGvPPcDWB2x4pRvAsKEZgsm
BRgJLldOjgQeQ63LMx1a69AEI8hnXl+uQRwgMpA8hgV+nXOW0/h91HjA9tndcWwe
wqEiyBQRQr26Sj0DN5btcvooms6jD7X9Y8xR/gTNJT3S8Khxv3aiqxCPU1y7Sm09
nWFzPRhK7KMln5QbCTGElZNN9sbEQiuL1vqgmFootDKbkInpMdsRTAcF5lp2MW/F
Reqgi8+fJ1pZVFMIT8ddRPgHIWGs1y9q4J8Oit3Au37CRTwfAKTrCcHPxMk4HpQp
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:35 2024 by rpki-client on console-fra.rpki-client.org