Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/iu8u9X0f7ZeZXyUFCTZ8O4419ic.roa
File: iu8u9X0f7ZeZXyUFCTZ8O4419ic.roa (raw, json)
Hash identifier: kLChHSorfPLW0EGfoDsaTXITNNvPSxnURCrFNaRxsWo=
Subject key identifier: 8A:EF:2E:F5:7D:1F:ED:97:99:5F:25:05:09:36:7C:3B:8E:35:F6:27
Certificate issuer: /CN=2f3fcb6425d598e4b87b04917b3ef9509e3b56c0
Certificate serial: 01872D7BED5CF4E782767482AD94768815C6
Authority key identifier: 2F:3F:CB:64:25:D5:98:E4:B8:7B:04:91:7B:3E:F9:50:9E:3B:56:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lz_LZCXVmOS4ewSRez75UJ47VsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/iu8u9X0f7ZeZXyUFCTZ8O4419ic.roa
Signing time: Wed 29 Mar 2023 13:08:29 +0000
ROA not before: Wed 29 Mar 2023 13:08:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211368
IP address blocks: 185.239.158.0/24 maxlen: 24
185.239.157.0/24 maxlen: 24
185.239.156.0/24 maxlen: 24
185.239.159.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:2d:7b:ed:5c:f4:e7:82:76:74:82:ad:94:76:88:15:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f3fcb6425d598e4b87b04917b3ef9509e3b56c0
Validity
Not Before: Mar 29 13:08:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8aef2ef57d1fed97995f250509367c3b8e35f627
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:50:8d:8c:65:8f:4b:8e:d9:24:93:15:65:84:
03:e8:74:01:1e:2c:25:10:37:ec:29:25:2e:87:ff:
78:49:d7:88:57:38:b8:f1:80:53:bd:77:77:f3:bc:
7a:60:2b:31:83:27:0e:45:c1:c5:d5:34:b4:6a:1e:
d9:c8:08:1c:08:4f:88:34:12:0b:45:bd:22:78:a9:
4a:dc:7c:e6:49:5a:e8:87:45:2a:65:79:7e:5c:30:
f5:65:c6:e5:f7:ff:b9:91:62:37:48:7c:2a:c1:3d:
45:fe:e4:c7:48:de:e7:00:64:e1:7d:1c:d5:b2:c5:
37:82:48:3f:e8:a8:38:07:02:85:e2:d4:59:c8:b6:
a5:89:19:6e:d3:98:cb:f7:ec:15:a4:75:3c:63:96:
72:04:5f:5e:12:9a:1e:48:ed:11:a7:39:00:98:61:
43:68:81:ea:db:37:c7:22:80:ed:d3:d9:05:14:75:
8c:8d:35:90:b2:9f:2a:a5:19:b9:cb:63:57:d2:7c:
15:2f:f3:6b:f4:c3:1f:56:5f:55:27:9a:db:f4:81:
6a:88:48:30:c3:e9:7f:5d:59:04:85:1b:60:e4:d4:
95:83:bd:be:fb:eb:6c:c6:fe:f7:07:df:71:8e:08:
83:94:06:10:88:10:d5:6a:d5:76:51:1c:9c:cf:9d:
46:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:EF:2E:F5:7D:1F:ED:97:99:5F:25:05:09:36:7C:3B:8E:35:F6:27
X509v3 Authority Key Identifier:
keyid:2F:3F:CB:64:25:D5:98:E4:B8:7B:04:91:7B:3E:F9:50:9E:3B:56:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lz_LZCXVmOS4ewSRez75UJ47VsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/iu8u9X0f7ZeZXyUFCTZ8O4419ic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.239.156.0/22
Signature Algorithm: sha256WithRSAEncryption
41:80:1f:dc:f6:19:e3:d2:d0:c6:d2:e1:87:c8:06:63:12:6a:
dd:ee:ad:77:0e:35:54:9e:cc:90:fb:ff:47:0b:05:16:5e:93:
94:46:3f:01:b2:51:9f:a9:37:ca:e4:7f:3a:86:78:4a:52:12:
87:61:1b:0e:1d:ca:1f:2a:70:ad:a8:bb:3e:92:8f:18:59:25:
f5:79:b9:ac:86:5a:cf:ee:26:a6:fa:06:1c:c3:25:ef:7e:ab:
e7:b3:af:88:e1:b2:83:bb:d7:b3:6f:7a:35:51:bb:ed:dc:51:
00:d2:0b:b4:10:ee:b5:2f:e4:4e:1a:00:e1:c6:3b:e5:86:f3:
f2:82:f1:44:e8:13:5e:88:33:ff:fb:3b:fb:ed:f4:c9:d7:a0:
fd:ed:7a:d8:3a:11:cc:ca:84:9f:57:0e:ea:cf:1e:a7:a5:44:
de:b6:1f:0a:ac:aa:c8:d3:a0:e7:6d:a4:5c:44:57:15:cc:cd:
1e:65:c4:3f:eb:92:a5:c5:8f:54:fd:6c:5c:81:3e:99:10:7f:
f0:95:64:b7:b5:65:d0:64:c1:e3:6e:9d:dc:2e:f1:3b:3b:e5:
1f:7b:71:f7:fe:6f:33:7a:f2:a0:d0:18:57:27:0d:ee:99:9a:
ce:90:2d:6a:11:7c:23:07:2d:b7:f2:49:3b:7e:91:4f:6e:d6:
a0:9c:d8:57
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYcte+1c9OeCdnSCrZR2iBXGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmM2ZjYjY0MjVkNTk4ZTRiODdiMDQ5MTdiM2VmOTUwOWUz
YjU2YzAwHhcNMjMwMzI5MTMwODI5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YWVmMmVmNTdkMWZlZDk3OTk1ZjI1MDUwOTM2N2MzYjhlMzVmNjI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA21CNjGWPS47ZJJMVZYQD6HQBHiwl
EDfsKSUuh/94SdeIVzi48YBTvXd387x6YCsxgycORcHF1TS0ah7ZyAgcCE+INBIL
Rb0ieKlK3HzmSVroh0UqZXl+XDD1Zcbl9/+5kWI3SHwqwT1F/uTHSN7nAGThfRzV
ssU3gkg/6Kg4BwKF4tRZyLaliRlu05jL9+wVpHU8Y5ZyBF9eEpoeSO0RpzkAmGFD
aIHq2zfHIoDt09kFFHWMjTWQsp8qpRm5y2NX0nwVL/Nr9MMfVl9VJ5rb9IFqiEgw
w+l/XVkEhRtg5NSVg72+++tsxv73B99xjgiDlAYQiBDVatV2URycz51G9QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIrvLvV9H+2XmV8lBQk2fDuONfYnMB8GA1UdIwQY
MBaAFC8/y2Ql1ZjkuHsEkXs++VCeO1bAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHpfTFpDWFZtT1M0ZXdTUmV6NzVVSjQ3VnNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC80YjYyMmUtZjVhMS00YzJjLThjNzct
NmY3MWNhZDE2Zjk2LzEvaXU4dTlYMGY3WmVaWHlVRkNUWjhPNDQxOWljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC80YjYyMmUtZjVhMS00YzJjLThjNzctNmY3MWNhZDE2Zjk2
LzEvTHpfTFpDWFZtT1M0ZXdTUmV6NzVVSjQ3VnNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCue+cMA0G
CSqGSIb3DQEBCwUAA4IBAQBBgB/c9hnj0tDG0uGHyAZjEmrd7q13DjVUnsyQ+/9H
CwUWXpOURj8BslGfqTfK5H86hnhKUhKHYRsOHcofKnCtqLs+ko8YWSX1ebmshlrP
7iam+gYcwyXvfqvns6+I4bKDu9ezb3o1Ubvt3FEA0gu0EO61L+ROGgDhxjvlhvPy
gvFE6BNeiDP/+zv77fTJ16D97XrYOhHMyoSfVw7qzx6npUTeth8KrKrI06DnbaRc
RFcVzM0eZcQ/65KlxY9U/WxcgT6ZEH/wlWS3tWXQZMHjbp3cLvE7O+Ufe3H3/m8z
evKg0BhXJw3umZrOkC1qEXwjBy238kk7fpFPbtagnNhX
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:38 2024 by rpki-client on console-ams.rpki-client.org