Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/OsLPhbkwC1uxPonGsEGz5m3es_4.roa
File: OsLPhbkwC1uxPonGsEGz5m3es_4.roa (raw, json)
Hash identifier: e/8ajDyLQ9BSsT2+gIgmtsLI9+6G8qQq2COCNKBnA8E=
Subject key identifier: 3A:C2:CF:85:B9:30:0B:5B:B1:3E:89:C6:B0:41:B3:E6:6D:DE:B3:FE
Certificate issuer: /CN=7490ce6b6f8f750e03584ebbd7bdad0f11fbe31c
Certificate serial: 0185738FFD16282D50A8345B08E98C99FDEA
Authority key identifier: 74:90:CE:6B:6F:8F:75:0E:03:58:4E:BB:D7:BD:AD:0F:11:FB:E3:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJDOa2-PdQ4DWE67172tDxH74xw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/OsLPhbkwC1uxPonGsEGz5m3es_4.roa
Signing time: Mon 02 Jan 2023 17:38:14 +0000
ROA not before: Mon 02 Jan 2023 17:38:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198473
IP address blocks: 2.59.184.0/22 maxlen: 22
185.149.229.0/24 maxlen: 24
185.149.230.0/24 maxlen: 24
91.235.100.0/24 maxlen: 24
2a10:b080::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:8f:fd:16:28:2d:50:a8:34:5b:08:e9:8c:99:fd:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7490ce6b6f8f750e03584ebbd7bdad0f11fbe31c
Validity
Not Before: Jan 2 17:38:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3ac2cf85b9300b5bb13e89c6b041b3e66ddeb3fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f1:95:0b:df:58:6d:dd:9d:9e:10:56:fa:e3:
f3:8e:0e:06:fb:54:44:14:86:4d:e5:84:e5:11:f4:
fc:e4:9a:c3:13:a2:b4:e4:02:83:63:54:09:38:8b:
42:5d:8b:11:8a:c9:21:b5:a9:7b:3e:94:61:e8:47:
10:e8:4b:0b:f3:19:ac:cb:5a:43:11:67:6b:97:ae:
0d:3b:97:f9:ce:5e:e6:e0:f0:fd:98:80:5a:6f:3f:
2f:bf:52:85:d6:5f:c8:58:f4:5f:43:ee:60:0f:60:
cc:a2:29:5d:dd:f0:17:79:33:c9:d8:45:bb:81:e4:
3b:ab:01:73:1f:56:ec:70:44:36:e2:ed:05:28:cc:
df:25:d1:38:0b:97:f2:ac:5e:72:de:91:ce:aa:03:
14:8d:9f:f6:eb:20:80:1a:48:5a:8c:70:19:f5:d7:
86:81:30:10:44:fd:04:a7:c5:5a:6a:87:7c:94:d0:
72:52:bf:2b:61:9c:6d:e0:f4:6e:cc:d1:fc:f1:f8:
85:d9:2f:50:aa:54:8b:dc:11:96:61:77:0c:c4:57:
2c:af:14:6d:58:94:db:db:47:89:6c:f9:73:82:43:
61:42:a9:f2:a1:9f:46:ee:98:7e:2a:ba:c2:5d:f7:
46:42:73:22:67:53:08:3e:3f:f2:c8:19:61:33:c5:
bb:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:C2:CF:85:B9:30:0B:5B:B1:3E:89:C6:B0:41:B3:E6:6D:DE:B3:FE
X509v3 Authority Key Identifier:
keyid:74:90:CE:6B:6F:8F:75:0E:03:58:4E:BB:D7:BD:AD:0F:11:FB:E3:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJDOa2-PdQ4DWE67172tDxH74xw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/OsLPhbkwC1uxPonGsEGz5m3es_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.184.0/22
91.235.100.0/24
185.149.229.0-185.149.230.255
IPv6:
2a10:b080::/29
Signature Algorithm: sha256WithRSAEncryption
82:63:21:1b:8f:09:08:f8:79:2a:2e:c6:2b:53:d4:c2:db:4b:
63:e2:22:ca:ad:47:dd:81:da:25:fa:36:5d:4e:15:8c:19:8e:
8f:23:c3:26:e0:fa:76:b0:33:cd:c1:04:66:c6:36:0d:ff:20:
4d:3a:30:46:b9:ae:dc:0e:4c:b1:de:ea:6b:b2:ca:21:42:5d:
e1:45:d0:de:d8:16:b1:4d:17:db:4e:5c:ce:05:2e:9d:2b:93:
ba:0e:a2:fe:d7:2b:6c:a9:ef:cb:8e:20:af:8a:d0:61:3c:24:
b6:91:ae:24:b0:02:b2:30:6b:a3:c8:b1:cd:b5:de:45:92:e0:
cd:7c:56:4d:e1:e7:1b:27:e6:88:dd:43:bc:00:4d:c9:8e:5b:
1f:01:a7:e2:cd:bd:42:0b:9e:8f:1d:23:3f:88:bb:92:38:ea:
6b:b4:55:bb:d7:dc:de:33:ad:e4:bb:c5:36:65:f8:9c:89:b0:
19:a9:96:36:04:7d:5e:a5:fe:4d:5e:9e:09:12:f8:fd:d9:da:
f7:78:5d:b4:56:b0:ec:13:a6:31:7d:13:d8:99:ce:4b:c7:55:
bb:a6:c0:92:df:5e:c9:b6:64:c9:46:8a:f0:31:f6:11:d0:25:
f1:aa:e1:55:e6:15:13:4d:c1:d9:0f:f6:ef:33:39:80:87:81:
0a:70:c2:4e
-----BEGIN CERTIFICATE-----
MIIFIDCCBAigAwIBAgISAYVzj/0WKC1QqDRbCOmMmf3qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTBjZTZiNmY4Zjc1MGUwMzU4NGViYmQ3YmRhZDBmMTFm
YmUzMWMwHhcNMjMwMTAyMTczODE0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYWMyY2Y4NWI5MzAwYjViYjEzZTg5YzZiMDQxYjNlNjZkZGViM2ZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofGVC99Ybd2dnhBW+uPzjg4G+1RE
FIZN5YTlEfT85JrDE6K05AKDY1QJOItCXYsRiskhtal7PpRh6EcQ6EsL8xmsy1pD
EWdrl64NO5f5zl7m4PD9mIBabz8vv1KF1l/IWPRfQ+5gD2DMoild3fAXeTPJ2EW7
geQ7qwFzH1bscEQ24u0FKMzfJdE4C5fyrF5y3pHOqgMUjZ/26yCAGkhajHAZ9deG
gTAQRP0Ep8Vaaod8lNByUr8rYZxt4PRuzNH88fiF2S9QqlSL3BGWYXcMxFcsrxRt
WJTb20eJbPlzgkNhQqnyoZ9G7ph+KrrCXfdGQnMiZ1MIPj/yyBlhM8W7xQIDAQAB
o4ICLDCCAigwHQYDVR0OBBYEFDrCz4W5MAtbsT6JxrBBs+Zt3rP+MB8GA1UdIwQY
MBaAFHSQzmtvj3UOA1hOu9e9rQ8R++McMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpET2EyLVBkUTREV0U2NzE3MnREeEg3NHh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9lZDhlYmEtNmJkNC00NDM4LWIzZTAt
YzQ5NmY5Y2FmYTgzLzEvT3NMUGhia3dDMXV4UG9uR3NFR3o1bTNlc180LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy9lZDhlYmEtNmJkNC00NDM4LWIzZTAtYzQ5NmY5Y2FmYTgz
LzEvZEpET2EyLVBkUTREV0U2NzE3MnREeEg3NHh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAgBAIAATAaAwQCAju4AwQA
W+tkMAwDBAC5leUDBAC5leYwDQQCAAIwBwMFAyoQsIAwDQYJKoZIhvcNAQELBQAD
ggEBAIJjIRuPCQj4eSouxitT1MLbS2PiIsqtR92B2iX6Nl1OFYwZjo8jwybg+naw
M83BBGbGNg3/IE06MEa5rtwOTLHe6muyyiFCXeFF0N7YFrFNF9tOXM4FLp0rk7oO
ov7XK2yp78uOIK+K0GE8JLaRriSwArIwa6PIsc213kWS4M18Vk3h5xsn5ojdQ7wA
TcmOWx8Bp+LNvUILno8dIz+Iu5I46mu0VbvX3N4zreS7xTZl+JyJsBmpljYEfV6l
/k1engkS+P3Z2vd4XbRWsOwTpjF9E9iZzkvHVbumwJLfXsm2ZMlGivAx9hHQJfGq
4VXmFRNNwdkP9u8zOYCHgQpwwk4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:15 2024 by rpki-client on console-ams.rpki-client.org