Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/KEVDTfNzFktZUiDInmGRdypORIw.roa
File: KEVDTfNzFktZUiDInmGRdypORIw.roa (raw, json)
Hash identifier: tBJ+7G+RJYxxZyyqvExiV/YGHq59vthCHWgmD9kujJ4=
Subject key identifier: 28:45:43:4D:F3:73:16:4B:59:52:20:C8:9E:61:91:77:2A:4E:44:8C
Certificate issuer: /CN=ca47921e4430521a7727888c13bc7b8e104cbdbe
Certificate serial: 01856C2EDC2579639D0988EBD41FE1F63193
Authority key identifier: CA:47:92:1E:44:30:52:1A:77:27:88:8C:13:BC:7B:8E:10:4C:BD:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ykeSHkQwUhp3J4iME7x7jhBMvb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/KEVDTfNzFktZUiDInmGRdypORIw.roa
Signing time: Sun 01 Jan 2023 07:14:48 +0000
ROA not before: Sun 01 Jan 2023 07:14:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203082
IP address blocks: 185.251.244.0/24 maxlen: 24
185.251.244.0/22 maxlen: 24
185.251.245.0/24 maxlen: 24
185.251.246.0/24 maxlen: 24
185.251.247.0/24 maxlen: 24
2a0c:6cc0::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:30:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:2e:dc:25:79:63:9d:09:88:eb:d4:1f:e1:f6:31:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca47921e4430521a7727888c13bc7b8e104cbdbe
Validity
Not Before: Jan 1 07:14:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2845434df373164b595220c89e6191772a4e448c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b9:b2:4c:03:b8:03:bb:77:c7:3b:6b:71:a2:
76:03:40:68:9d:45:7c:6f:9f:9f:51:23:4d:47:b0:
63:a2:e1:7a:cf:62:e2:e4:db:ef:a9:15:b2:c3:e8:
69:7b:cb:e9:8a:56:f6:e9:65:38:d4:1c:0a:98:20:
a5:f0:d6:8a:6f:66:10:86:e9:28:6b:62:ee:9f:ca:
75:9f:a3:bd:7a:43:a5:8d:41:10:f1:bf:c6:f6:d7:
b2:31:96:fb:1d:db:71:31:0d:01:b1:2e:c3:f5:b3:
be:0f:2b:14:b4:f1:7d:80:c5:52:d9:81:44:57:51:
38:aa:b2:14:24:47:22:c5:7b:3c:e3:08:47:9d:d8:
19:6f:cd:54:40:6c:ea:4e:a7:9e:de:c4:c5:0d:93:
19:02:06:0d:04:7a:99:21:c8:9a:fc:30:0e:41:41:
9e:fa:3f:91:17:1a:30:cc:23:c2:1a:4a:a1:ff:2a:
02:7b:1e:54:62:2a:22:c9:9a:ed:9e:44:db:5d:3a:
93:6b:5a:17:4e:13:9f:2d:70:7f:c6:6b:bf:36:99:
04:ac:25:46:b2:ca:f4:44:e9:88:8f:5d:c1:10:c8:
43:45:63:f7:f3:df:d6:2a:ef:51:c4:0f:d1:db:1d:
bb:ea:b4:7b:6a:15:55:4d:7f:8b:76:69:5a:9b:79:
ab:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:45:43:4D:F3:73:16:4B:59:52:20:C8:9E:61:91:77:2A:4E:44:8C
X509v3 Authority Key Identifier:
keyid:CA:47:92:1E:44:30:52:1A:77:27:88:8C:13:BC:7B:8E:10:4C:BD:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ykeSHkQwUhp3J4iME7x7jhBMvb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/KEVDTfNzFktZUiDInmGRdypORIw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.251.244.0/22
IPv6:
2a0c:6cc0::/29
Signature Algorithm: sha256WithRSAEncryption
92:b3:0a:d5:b7:20:e5:33:81:91:6e:ae:c6:b8:11:b3:d4:78:
11:7e:b3:fe:6c:e8:3c:33:e0:d8:e7:18:3d:fd:53:af:2d:7b:
c9:c7:de:4f:c7:68:07:80:35:7a:1b:6d:a7:93:26:a3:86:f2:
c5:d2:6e:ad:83:9d:1e:5d:58:06:b8:bf:c7:9b:82:be:dc:93:
a9:11:12:f3:ac:0c:b6:03:ec:ec:92:a2:27:dd:8b:b0:be:80:
03:13:df:e9:28:c5:e4:15:54:d1:a1:e9:99:8d:5d:84:e3:0f:
86:ee:68:e8:6a:df:b1:ca:93:84:9e:56:61:67:80:fa:d3:7d:
f1:bd:49:3b:fd:db:00:5b:cd:7c:53:6e:cb:4a:0c:82:41:df:
3d:a6:c4:cc:02:e5:b0:48:cb:48:93:39:0f:d0:8c:3c:ff:3d:
df:29:95:51:5a:9e:35:cf:6b:1b:23:1c:ff:63:35:84:c8:b6:
e7:b6:4e:72:d7:64:ad:0e:f3:2f:97:36:3b:03:7a:5b:de:43:
ce:52:71:95:ee:d9:27:a5:69:13:61:3f:8b:e0:21:bb:d2:58:
f0:21:90:ea:10:2e:b8:99:cb:a7:ee:03:93:5b:96:78:5f:e4:
77:65:53:a7:ca:37:09:50:db:36:cf:15:af:a4:7f:49:6c:f6:
93:e9:c7:6d
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVsLtwleWOdCYjr1B/h9jGTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhNDc5MjFlNDQzMDUyMWE3NzI3ODg4YzEzYmM3YjhlMTA0
Y2JkYmUwHhcNMjMwMTAxMDcxNDQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyODQ1NDM0ZGYzNzMxNjRiNTk1MjIwYzg5ZTYxOTE3NzJhNGU0NDhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7myTAO4A7t3xztrcaJ2A0BonUV8
b5+fUSNNR7BjouF6z2Li5NvvqRWyw+hpe8vpilb26WU41BwKmCCl8NaKb2YQhuko
a2Lun8p1n6O9ekOljUEQ8b/G9teyMZb7HdtxMQ0BsS7D9bO+DysUtPF9gMVS2YFE
V1E4qrIUJEcixXs84whHndgZb81UQGzqTqee3sTFDZMZAgYNBHqZIcia/DAOQUGe
+j+RFxowzCPCGkqh/yoCex5UYioiyZrtnkTbXTqTa1oXThOfLXB/xmu/NpkErCVG
ssr0ROmIj13BEMhDRWP389/WKu9RxA/R2x276rR7ahVVTX+Ldmlam3mrVQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFChFQ03zcxZLWVIgyJ5hkXcqTkSMMB8GA1UdIwQY
MBaAFMpHkh5EMFIadyeIjBO8e44QTL2+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWtlU0hrUXdVaHAzSjRpTUU3eDdqaEJNdmI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi82M2YxZTgtMzcxNS00NDE0LTlmM2It
ODNlNTVjNWY2ZjdkLzEvS0VWRFRmTnpGa3RaVWlESW5tR1JkeXBPUkl3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi82M2YxZTgtMzcxNS00NDE0LTlmM2ItODNlNTVjNWY2Zjdk
LzEveWtlU0hrUXdVaHAzSjRpTUU3eDdqaEJNdmI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCufv0MA0E
AgACMAcDBQMqDGzAMA0GCSqGSIb3DQEBCwUAA4IBAQCSswrVtyDlM4GRbq7GuBGz
1HgRfrP+bOg8M+DY5xg9/VOvLXvJx95Px2gHgDV6G22nkyajhvLF0m6tg50eXVgG
uL/Hm4K+3JOpERLzrAy2A+zskqIn3YuwvoADE9/pKMXkFVTRoemZjV2E4w+G7mjo
at+xypOEnlZhZ4D6033xvUk7/dsAW818U27LSgyCQd89psTMAuWwSMtIkzkP0Iw8
/z3fKZVRWp41z2sbIxz/YzWEyLbntk5y12StDvMvlzY7A3pb3kPOUnGV7tknpWkT
YT+L4CG70ljwIZDqEC64mcun7gOTW5Z4X+R3ZVOnyjcJUNs2zxWvpH9JbPaT6cdt
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:47 2024 by rpki-client on console-ams.rpki-client.org