Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/93620e-7528-4aac-9212-c7857a033962/1/44nHXdEj4iOF7wUyP_lSWV8VYHc.roa
File: 44nHXdEj4iOF7wUyP_lSWV8VYHc.roa (raw, json)
Hash identifier: nTp2Ai3K2IrsVGE+iG719x9FqbZqgppCTSGnGblVOG0=
Subject key identifier: E3:89:C7:5D:D1:23:E2:23:85:EF:05:32:3F:F9:52:59:5F:15:60:77
Certificate issuer: /CN=c3a882b10f1ba9ea4ba1fa7706db64747e62a413
Certificate serial: 0185728CAAAD6E4864D9D64B508CE04E7F06
Authority key identifier: C3:A8:82:B1:0F:1B:A9:EA:4B:A1:FA:77:06:DB:64:74:7E:62:A4:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w6iCsQ8bqepLofp3BttkdH5ipBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/93620e-7528-4aac-9212-c7857a033962/1/44nHXdEj4iOF7wUyP_lSWV8VYHc.roa
Signing time: Mon 02 Jan 2023 12:54:59 +0000
ROA not before: Mon 02 Jan 2023 12:54:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 19905
IP address blocks: 185.220.160.0/22 maxlen: 24
2a0b:f940:1af2::/48 maxlen: 48
2a0b:f940:2af2::/48 maxlen: 48
2a0b:f940:3af2::/48 maxlen: 48
2a0b:f940:4af2::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:8c:aa:ad:6e:48:64:d9:d6:4b:50:8c:e0:4e:7f:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3a882b10f1ba9ea4ba1fa7706db64747e62a413
Validity
Not Before: Jan 2 12:54:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e389c75dd123e22385ef05323ff952595f156077
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:11:4c:73:e2:07:33:ea:02:b9:82:a1:d6:a4:
92:21:50:0f:14:15:95:cc:37:33:63:aa:c4:d5:97:
30:c2:04:3d:12:d3:c8:b9:51:cd:0c:33:d0:b8:85:
bb:1a:41:8c:66:2f:de:56:f1:f9:7f:50:a5:bc:76:
08:07:c4:2b:ea:4f:ff:b6:e8:7d:1e:98:7d:84:75:
ea:32:6d:16:f2:4f:bd:0b:d8:a0:ee:36:e5:ef:93:
56:3d:29:8c:88:2d:49:a0:61:3d:c6:8a:34:86:39:
65:c5:f1:1b:73:3c:07:80:48:dc:c7:e0:83:ee:92:
86:c2:66:60:ef:50:17:7d:00:92:53:e4:26:96:2d:
bf:ec:a6:bf:7e:06:6f:ad:c4:5a:78:ff:96:b7:9f:
9e:2d:4e:00:19:9e:29:33:26:2d:80:52:3b:ce:3a:
3d:0b:6a:3e:4f:dd:41:d9:7b:8d:00:84:0d:05:2c:
c0:5a:d9:f2:f2:8e:6b:33:b9:f2:11:39:f0:7f:21:
25:9d:20:be:0c:3b:e1:10:a1:44:cf:e5:1b:f2:47:
48:ee:d6:04:96:b3:6f:30:9b:69:92:27:17:e5:79:
4d:55:4f:8e:26:76:a2:97:07:52:1d:50:2a:66:1f:
27:f6:06:c9:65:eb:72:5e:ad:92:7b:cb:75:2f:13:
38:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:89:C7:5D:D1:23:E2:23:85:EF:05:32:3F:F9:52:59:5F:15:60:77
X509v3 Authority Key Identifier:
keyid:C3:A8:82:B1:0F:1B:A9:EA:4B:A1:FA:77:06:DB:64:74:7E:62:A4:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w6iCsQ8bqepLofp3BttkdH5ipBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/93620e-7528-4aac-9212-c7857a033962/1/44nHXdEj4iOF7wUyP_lSWV8VYHc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/93620e-7528-4aac-9212-c7857a033962/1/w6iCsQ8bqepLofp3BttkdH5ipBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.220.160.0/22
IPv6:
2a0b:f940:1af2::/48
2a0b:f940:2af2::/48
2a0b:f940:3af2::/48
2a0b:f940:4af2::/48
Signature Algorithm: sha256WithRSAEncryption
6c:30:8e:7d:2c:8d:5e:22:e8:5d:9d:d5:14:a4:d8:b0:7e:09:
71:56:3b:55:69:c5:01:e9:7a:30:20:7a:39:45:97:11:3a:e4:
70:0e:cb:a9:09:d2:c6:2f:04:ce:a3:35:06:10:47:3a:f5:5b:
f0:08:26:57:06:19:ad:97:7f:2f:53:82:f5:9f:4a:88:69:e4:
46:16:8a:44:dd:be:8e:72:4c:eb:e6:9c:31:aa:f3:90:9a:2a:
64:da:c5:ae:6f:1a:ee:2a:7b:ea:e6:76:80:14:f0:d0:55:61:
7a:d9:35:49:61:13:c5:f8:3d:4d:19:95:f1:98:cd:bb:1b:96:
9f:f4:e7:11:07:e8:8f:9d:f0:56:cb:9b:94:59:42:ba:09:e2:
7c:9c:85:f9:79:1a:29:9d:a6:f3:fa:f0:15:36:3d:37:74:3b:
cf:f4:c7:42:50:64:23:2a:4b:d2:79:14:12:90:58:80:5c:c7:
98:bb:b0:ad:d0:6a:27:12:8f:c2:9a:e6:0a:96:2f:b0:08:56:
51:ce:81:99:24:68:8c:dc:e0:61:1f:c8:8f:b4:96:1c:56:0a:
e2:93:9f:e9:00:e7:14:d6:c7:7d:74:15:5b:d0:b8:95:cd:ac:
13:11:91:1d:88:bc:1f:2e:92:6b:12:80:64:ba:ba:6c:8a:05:
1c:01:15:76
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgISAYVyjKqtbkhk2dZLUIzgTn8GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYTg4MmIxMGYxYmE5ZWE0YmExZmE3NzA2ZGI2NDc0N2U2
MmE0MTMwHhcNMjMwMTAyMTI1NDU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMzg5Yzc1ZGQxMjNlMjIzODVlZjA1MzIzZmY5NTI1OTVmMTU2MDc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRFMc+IHM+oCuYKh1qSSIVAPFBWV
zDczY6rE1ZcwwgQ9EtPIuVHNDDPQuIW7GkGMZi/eVvH5f1ClvHYIB8Qr6k//tuh9
Hph9hHXqMm0W8k+9C9ig7jbl75NWPSmMiC1JoGE9xoo0hjllxfEbczwHgEjcx+CD
7pKGwmZg71AXfQCSU+Qmli2/7Ka/fgZvrcRaeP+Wt5+eLU4AGZ4pMyYtgFI7zjo9
C2o+T91B2XuNAIQNBSzAWtny8o5rM7nyETnwfyElnSC+DDvhEKFEz+Ub8kdI7tYE
lrNvMJtpkicX5XlNVU+OJnailwdSHVAqZh8n9gbJZetyXq2Se8t1LxM4pQIDAQAB
o4ICNTCCAjEwHQYDVR0OBBYEFOOJx13RI+Ijhe8FMj/5UllfFWB3MB8GA1UdIwQY
MBaAFMOogrEPG6nqS6H6dwbbZHR+YqQTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzZpQ3NROGJxZXBMb2ZwM0J0dGtkSDVpcEJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS85MzYyMGUtNzUyOC00YWFjLTkyMTIt
Yzc4NTdhMDMzOTYyLzEvNDRuSFhkRWo0aU9GN3dVeVBfbFNXVjhWWUhjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS85MzYyMGUtNzUyOC00YWFjLTkyMTItYzc4NTdhMDMzOTYy
LzEvdzZpQ3NROGJxZXBMb2ZwM0J0dGtkSDVpcEJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEsGCCsGAQUFBwEHAQH/BDwwOjAMBAIAATAGAwQCudygMCoE
AgACMCQDBwAqC/lAGvIDBwAqC/lAKvIDBwAqC/lAOvIDBwAqC/lASvIwDQYJKoZI
hvcNAQELBQADggEBAGwwjn0sjV4i6F2d1RSk2LB+CXFWO1VpxQHpejAgejlFlxE6
5HAOy6kJ0sYvBM6jNQYQRzr1W/AIJlcGGa2Xfy9TgvWfSohp5EYWikTdvo5yTOvm
nDGq85CaKmTaxa5vGu4qe+rmdoAU8NBVYXrZNUlhE8X4PU0ZlfGYzbsblp/05xEH
6I+d8FbLm5RZQroJ4nychfl5GimdpvP68BU2PTd0O8/0x0JQZCMqS9J5FBKQWIBc
x5i7sK3QaicSj8Ka5gqWL7AIVlHOgZkkaIzc4GEfyI+0lhxWCuKTn+kA5xTWx310
FVvQuJXNrBMRkR2IvB8ukmsSgGS6umyKBRwBFXY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:11 2024 by rpki-client on console-ams.rpki-client.org