Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/KOWUzuDTPfHYfFUFnsFInoG3Izc.roa
File: KOWUzuDTPfHYfFUFnsFInoG3Izc.roa (raw, json)
Hash identifier: bsafLWo+swVqr361czrmnOSm+KwFEFBAndMxzsQyuFM=
Subject key identifier: 28:E5:94:CE:E0:D3:3D:F1:D8:7C:55:05:9E:C1:48:9E:81:B7:23:37
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 018A765F5004593A499AA644E8A06B39B76D
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/KOWUzuDTPfHYfFUFnsFInoG3Izc.roa
Signing time: Fri 08 Sep 2023 19:57:52 +0000
ROA not before: Fri 08 Sep 2023 19:57:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208258
IP address blocks: 185.243.112.0/24 maxlen: 24
185.243.113.0/24 maxlen: 24
185.228.83.0/24 maxlen: 24
185.227.82.0/24 maxlen: 24
185.208.208.0/24 maxlen: 24
185.208.209.0/24 maxlen: 24
185.208.210.0/24 maxlen: 24
185.208.211.0/24 maxlen: 24
195.88.227.0/24 maxlen: 24
194.146.48.0/24 maxlen: 24
193.56.239.0/24 maxlen: 24
45.151.156.0/23 maxlen: 24
45.151.158.0/24 maxlen: 24
45.144.244.0/23 maxlen: 24
195.26.6.0/24 maxlen: 24
195.26.7.0/24 maxlen: 24
2a0b:3c40:17::/48 maxlen: 48
2a0b:3c40:12::/48 maxlen: 48
2a0e:5540:11::/48 maxlen: 48
2a0b:3c40:fca6::/48 maxlen: 48
2a0b:3c40:1::/48 maxlen: 48
2a0b:3c40:21::/48 maxlen: 48
2a0e:5540:100::/48 maxlen: 48
2a0e:5540::/48 maxlen: 48
2a0b:3c40:25::/48 maxlen: 48
2a0b:3c40:20::/48 maxlen: 48
2a0b:3c40:16::/48 maxlen: 48
2a0b:3c40:11::/48 maxlen: 48
2a0e:5540:10::/48 maxlen: 48
2a0b:3c40:15::/48 maxlen: 48
2a0e:5540:12::/48 maxlen: 48
2a0b:3c40:9::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 26 Oct 2023 09:40:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:76:5f:50:04:59:3a:49:9a:a6:44:e8:a0:6b:39:b7:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Sep 8 19:57:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=28e594cee0d33df1d87c55059ec1489e81b72337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:44:1f:b2:54:d9:c1:ee:3a:a5:59:0e:da:02:
07:47:3d:08:07:9d:c4:db:a7:49:5a:a5:89:3d:ea:
7f:d5:83:14:fb:2e:b1:2b:c0:3b:36:87:dc:08:12:
73:df:7f:63:61:d7:0e:9d:da:3b:b9:2b:a0:07:33:
88:8d:39:c3:9f:fb:92:04:42:f1:7c:bf:71:5f:7a:
54:fa:67:46:3e:a0:22:69:5a:1c:87:01:f1:ec:6b:
39:e4:b2:a3:0d:21:8d:d7:06:a0:84:34:3c:80:e2:
c5:bd:66:f6:ed:fd:9d:fb:06:1a:52:8a:2a:9b:49:
76:e9:c9:dc:1d:a2:1f:ae:07:3f:24:ba:3e:1c:bc:
41:9f:e1:d0:6b:29:f4:dd:cf:88:5e:fe:e5:88:57:
9e:17:ff:8d:ef:a4:c9:38:4a:b1:43:37:68:30:31:
58:3d:f2:4e:99:c3:87:f6:a1:92:c5:24:6b:3f:5f:
b8:ed:71:cb:ab:be:c9:c7:d4:5c:63:b6:1e:d4:c5:
d7:fd:9e:89:7f:bb:72:76:12:23:97:71:e3:7a:f9:
4b:c6:e0:1a:c4:19:ae:e3:b8:cc:71:9a:4e:f3:c5:
c1:a9:61:9d:9d:28:76:6f:66:c3:3c:a8:f7:bd:af:
72:e3:27:3d:87:ea:61:eb:14:e9:46:23:91:86:0a:
21:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:E5:94:CE:E0:D3:3D:F1:D8:7C:55:05:9E:C1:48:9E:81:B7:23:37
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/KOWUzuDTPfHYfFUFnsFInoG3Izc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.244.0/23
45.151.156.0-45.151.158.255
185.208.208.0/22
185.227.82.0/24
185.228.83.0/24
185.243.112.0/23
193.56.239.0/24
194.146.48.0/24
195.26.6.0/23
195.88.227.0/24
IPv6:
2a0b:3c40:1::/48
2a0b:3c40:9::/48
2a0b:3c40:11::-2a0b:3c40:12:ffff:ffff:ffff:ffff:ffff
2a0b:3c40:15::-2a0b:3c40:17:ffff:ffff:ffff:ffff:ffff
2a0b:3c40:20::/47
2a0b:3c40:25::/48
2a0b:3c40:fca6::/48
2a0e:5540::/48
2a0e:5540:10::-2a0e:5540:12:ffff:ffff:ffff:ffff:ffff
2a0e:5540:100::/48
Signature Algorithm: sha256WithRSAEncryption
ab:fb:83:96:36:53:4c:17:36:c9:8f:8e:81:20:e3:06:1e:5b:
85:03:d6:f2:57:a2:9c:ce:f9:ca:4c:59:d8:5b:bf:bb:37:05:
cf:07:56:b6:b2:c0:8f:3b:91:e8:2b:a6:25:ee:05:a4:4d:c5:
c2:1b:95:0d:08:7f:dc:02:3f:c4:e8:49:97:9e:f4:0e:3f:21:
0d:01:00:cc:3f:37:dd:55:18:de:e6:5e:74:66:35:f3:80:cb:
2d:25:7d:cd:8c:77:25:98:2d:2b:b6:fb:b9:49:18:6e:2b:2c:
e9:a0:e0:1b:18:87:70:c9:8c:5d:29:44:02:37:84:5c:76:33:
2a:62:57:5e:24:5b:a3:09:72:b9:84:1a:6f:0a:a8:0d:d4:9b:
d2:f0:86:dc:a8:a9:8d:82:b0:f2:6c:e2:77:0f:eb:05:dc:34:
08:69:20:b7:b3:4a:a8:5e:69:cb:9d:69:70:ac:14:30:54:37:
d8:f9:e3:10:28:0e:d1:80:50:0a:f4:13:48:35:bf:87:a6:1d:
d5:97:68:1c:31:d7:08:87:07:26:56:5e:a8:f0:4a:d4:7e:26:
28:16:89:cc:78:73:77:7c:98:65:93:6f:03:29:b1:fb:d7:75:
6c:ba:ff:47:9f:76:80:74:1a:6c:8a:0e:7a:b1:72:c5:9d:88:
7f:8b:41:3e
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgISAYp2X1AEWTpJmqZE6KBrObdtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1NTdjY2Q0M2FmZTgxNmU0OTUzMjI4YmYxNGE3NWRjMjkw
MTRiOGQwHhcNMjMwOTA4MTk1NzUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyOGU1OTRjZWUwZDMzZGYxZDg3YzU1MDU5ZWMxNDg5ZTgxYjcyMzM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkEQfslTZwe46pVkO2gIHRz0IB53E
26dJWqWJPep/1YMU+y6xK8A7NofcCBJz339jYdcOndo7uSugBzOIjTnDn/uSBELx
fL9xX3pU+mdGPqAiaVochwHx7Gs55LKjDSGN1waghDQ8gOLFvWb27f2d+wYaUooq
m0l26cncHaIfrgc/JLo+HLxBn+HQayn03c+IXv7liFeeF/+N76TJOEqxQzdoMDFY
PfJOmcOH9qGSxSRrP1+47XHLq77Jx9RcY7Ye1MXX/Z6Jf7tydhIjl3HjevlLxuAa
xBmu47jMcZpO88XBqWGdnSh2b2bDPKj3va9y4yc9h+ph6xTpRiORhgoh2wIDAQAB
o4ICzjCCAsowHQYDVR0OBBYEFCjllM7g0z3x2HxVBZ7BSJ6BtyM3MB8GA1UdIwQY
MBaAFLVXzNQ6/oFuSVMii/FKddwpAUuNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUt
NmJjNzU1NzhiNGMzLzEvS09XVXp1RFRQZkhZZkZVRm5zRklub0czSXpjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUtNmJjNzU1NzhiNGMz
LzEvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHjBggrBgEFBQcBBwEB/wSB0zCB0DBKBAIAATBEAwQBLZD0
MAwDBAItl5wDBAAtl54DBAK50NADBAC541IDBAC55FMDBAG583ADBADBOO8DBADC
kjADBAHDGgYDBADDWOMwgYEEAgACMHsDBwAqCzxAAAEDBwAqCzxAAAkwEgMHACoL
PEAAEQMHACoLPEAAEjASAwcAKgs8QAAVAwcDKgs8QAAQAwcBKgs8QAAgAwcAKgs8
QAAlAwcAKgs8QPymAwcAKg5VQAAAMBIDBwQqDlVAABADBwAqDlVAABIDBwAqDlVA
AQAwDQYJKoZIhvcNAQELBQADggEBAKv7g5Y2U0wXNsmPjoEg4wYeW4UD1vJXopzO
+cpMWdhbv7s3Bc8HVraywI87kegrpiXuBaRNxcIblQ0If9wCP8ToSZee9A4/IQ0B
AMw/N91VGN7mXnRmNfOAyy0lfc2MdyWYLSu2+7lJGG4rLOmg4BsYh3DJjF0pRAI3
hFx2MypiV14kW6MJcrmEGm8KqA3Um9LwhtyoqY2CsPJs4ncP6wXcNAhpILezSqhe
acudaXCsFDBUN9j54xAoDtGAUAr0E0g1v4emHdWXaBwx1wiHByZWXqjwStR+JigW
icx4c3d8mGWTbwMpsfvXdWy6/0efdoB0GmyKDnqxcsWdiH+LQT4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:25 2024 by rpki-client on console-fra.rpki-client.org