Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/d5fd99-8ae0-4ae0-b6b4-fe74ef7aac95/1/3vRpYzKLKqvm-Ue-Fooocz24YEo.roa
File: 3vRpYzKLKqvm-Ue-Fooocz24YEo.roa (raw, json)
Hash identifier: OFcfQSnm4FEl9LROrGSz/YUI/JUkSG0u+sLV/YLXfuo=
Subject key identifier: DE:F4:69:63:32:8B:2A:AB:E6:F9:47:BE:16:8A:28:73:3D:B8:60:4A
Certificate issuer: /CN=d2a4452602c9df977c9d5dd8dc13b6661df40136
Certificate serial: 01856F3918B2BB5130B174C89F8E080FF8A4
Authority key identifier: D2:A4:45:26:02:C9:DF:97:7C:9D:5D:D8:DC:13:B6:66:1D:F4:01:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/d5fd99-8ae0-4ae0-b6b4-fe74ef7aac95/1/3vRpYzKLKqvm-Ue-Fooocz24YEo.roa
Signing time: Sun 01 Jan 2023 21:24:50 +0000
ROA not before: Sun 01 Jan 2023 21:24:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197898
IP address blocks: 185.110.52.0/22 maxlen: 24
217.9.192.0/20 maxlen: 24
185.98.178.0/23 maxlen: 24
185.98.179.0/24 maxlen: 24
2a03:37e0::/32 maxlen: 32
2a00:8007::/32 maxlen: 48
Validation: Failed, certificate revoked on Mon 05 Jun 2023 13:16:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:39:18:b2:bb:51:30:b1:74:c8:9f:8e:08:0f:f8:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2a4452602c9df977c9d5dd8dc13b6661df40136
Validity
Not Before: Jan 1 21:24:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=def46963328b2aabe6f947be168a28733db8604a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:6d:6d:a9:c0:4f:d2:22:e8:bb:27:78:3b:b7:
ea:dd:04:1c:95:f0:5c:47:f9:7e:b5:2f:95:90:f2:
ca:2a:e0:f2:5c:cf:61:28:66:fc:cb:f8:2a:35:ba:
2d:34:37:51:25:7f:c5:b7:3e:aa:b2:8a:a2:e6:74:
23:72:dd:d8:06:89:5e:90:f5:0f:84:20:9a:28:b0:
2f:90:79:dd:b8:47:22:51:01:3c:93:98:d6:52:ca:
9b:2e:31:98:05:d0:8c:4a:10:b7:4a:d5:c8:be:e6:
26:13:09:5b:68:9d:7f:66:4a:47:ab:3b:dc:d8:90:
26:4a:cf:3f:73:e5:3e:c8:58:61:f2:52:ed:7b:3b:
1c:c1:d2:31:98:ff:1b:3d:5b:6b:49:41:39:95:19:
cc:68:ae:41:ba:9f:30:3a:ee:27:c1:7e:85:38:d3:
24:9d:0c:3d:11:96:be:50:d0:e7:1f:db:c9:90:e1:
20:ea:8a:c4:5d:73:27:a6:fb:c8:35:dc:46:ce:a5:
df:a7:3b:93:79:9c:7d:9f:28:be:84:28:db:85:a2:
78:74:ac:61:5a:eb:fe:83:8a:00:34:e2:4d:1a:9a:
53:e1:15:76:e3:82:a3:b3:09:4a:ff:7a:76:bd:de:
3f:11:ce:da:33:6e:39:09:9c:7d:f3:52:85:6d:da:
16:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:F4:69:63:32:8B:2A:AB:E6:F9:47:BE:16:8A:28:73:3D:B8:60:4A
X509v3 Authority Key Identifier:
keyid:D2:A4:45:26:02:C9:DF:97:7C:9D:5D:D8:DC:13:B6:66:1D:F4:01:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d5fd99-8ae0-4ae0-b6b4-fe74ef7aac95/1/3vRpYzKLKqvm-Ue-Fooocz24YEo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d5fd99-8ae0-4ae0-b6b4-fe74ef7aac95/1/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.98.178.0/23
185.110.52.0/22
217.9.192.0/20
IPv6:
2a00:8007::/32
2a03:37e0::/32
Signature Algorithm: sha256WithRSAEncryption
2b:ae:5e:17:d1:b9:a8:b3:af:a8:7a:16:00:4d:8c:dc:c4:60:
8a:e9:9e:f6:2e:11:08:12:1c:10:dc:ca:5a:16:c1:15:7d:99:
d2:c1:8c:3b:4c:54:07:a2:e8:90:cb:f6:f3:da:cb:5e:5c:e3:
69:71:ce:46:d6:94:c5:bd:04:6d:37:d5:38:10:52:95:7b:ee:
17:6a:01:d0:00:98:1e:19:62:19:d8:ef:21:c0:5a:59:9e:18:
00:d2:24:2e:77:47:11:61:b4:ea:de:5e:82:4e:08:d8:c6:44:
ea:74:22:20:67:7b:c4:61:2f:28:60:8a:c4:c5:54:3c:a1:46:
9f:02:f7:6e:16:b0:71:dc:50:21:70:75:87:76:8f:31:ee:c6:
54:87:60:a1:8b:4d:9e:1b:91:40:96:fd:aa:7c:2b:45:af:13:
5b:f6:82:f9:38:d6:9c:08:98:ba:af:ee:5c:4e:cf:19:59:61:
5f:d1:97:03:0b:cd:f2:a7:bc:97:8b:8e:93:bc:f9:92:bd:1a:
a6:71:b4:20:ef:15:56:df:07:dc:d4:7e:da:2c:02:74:4c:5f:
b1:dd:97:e8:07:4b:f6:e2:79:88:da:0c:d4:cc:7b:44:1f:1d:
98:29:6e:99:06:21:4c:70:3b:8d:15:b0:ea:58:1b:66:9e:93:
77:d1:a6:1c
-----BEGIN CERTIFICATE-----
MIIFHzCCBAegAwIBAgISAYVvORiyu1EwsXTIn44ID/ikMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyYTQ0NTI2MDJjOWRmOTc3YzlkNWRkOGRjMTNiNjY2MWRm
NDAxMzYwHhcNMjMwMTAxMjEyNDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZWY0Njk2MzMyOGIyYWFiZTZmOTQ3YmUxNjhhMjg3MzNkYjg2MDRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgW1tqcBP0iLouyd4O7fq3QQclfBc
R/l+tS+VkPLKKuDyXM9hKGb8y/gqNbotNDdRJX/Ftz6qsoqi5nQjct3YBolekPUP
hCCaKLAvkHnduEciUQE8k5jWUsqbLjGYBdCMShC3StXIvuYmEwlbaJ1/ZkpHqzvc
2JAmSs8/c+U+yFhh8lLtezscwdIxmP8bPVtrSUE5lRnMaK5Bup8wOu4nwX6FONMk
nQw9EZa+UNDnH9vJkOEg6orEXXMnpvvINdxGzqXfpzuTeZx9nyi+hCjbhaJ4dKxh
Wuv+g4oANOJNGppT4RV244KjswlK/3p2vd4/Ec7aM245CZx981KFbdoWIQIDAQAB
o4ICKzCCAicwHQYDVR0OBBYEFN70aWMyiyqr5vlHvhaKKHM9uGBKMB8GA1UdIwQY
MBaAFNKkRSYCyd+XfJ1d2NwTtmYd9AE2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHFSRkpnTEozNWQ4blYzWTNCTzJaaDMwQVRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9kNWZkOTktOGFlMC00YWUwLWI2YjQt
ZmU3NGVmN2FhYzk1LzEvM3ZScFl6S0xLcXZtLVVlLUZvb29jejI0WUVvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9kNWZkOTktOGFlMC00YWUwLWI2YjQtZmU3NGVmN2FhYzk1
LzEvMHFSRkpnTEozNWQ4blYzWTNCTzJaaDMwQVRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAYBAIAATASAwQBuWKyAwQC
uW40AwQE2QnAMBQEAgACMA4DBQAqAIAHAwUAKgM34DANBgkqhkiG9w0BAQsFAAOC
AQEAK65eF9G5qLOvqHoWAE2M3MRgiume9i4RCBIcENzKWhbBFX2Z0sGMO0xUB6Lo
kMv289rLXlzjaXHORtaUxb0EbTfVOBBSlXvuF2oB0ACYHhliGdjvIcBaWZ4YANIk
LndHEWG06t5egk4I2MZE6nQiIGd7xGEvKGCKxMVUPKFGnwL3bhawcdxQIXB1h3aP
Me7GVIdgoYtNnhuRQJb9qnwrRa8TW/aC+TjWnAiYuq/uXE7PGVlhX9GXAwvN8qe8
l4uOk7z5kr0apnG0IO8VVt8H3NR+2iwCdExfsd2X6AdL9uJ5iNoM1Mx7RB8dmClu
mQYhTHA7jRWw6lgbZp6Td9GmHA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:49 2024 by rpki-client on console-fra.rpki-client.org