Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/Kfc4LyhtLchVu3AnPm3nL8RqvO0.roa
File: Kfc4LyhtLchVu3AnPm3nL8RqvO0.roa (raw, json)
Hash identifier: FELewLZdyNpZhlsbm7YSOg3He3XnfswnGqPMpdj9TQg=
Subject key identifier: 29:F7:38:2F:28:6D:2D:C8:55:BB:70:27:3E:6D:E7:2F:C4:6A:BC:ED
Certificate issuer: /CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Certificate serial: 018AA4F983F59070C887ECC121A88B1020A2
Authority key identifier: AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/Kfc4LyhtLchVu3AnPm3nL8RqvO0.roa
Signing time: Sun 17 Sep 2023 21:08:50 +0000
ROA not before: Sun 17 Sep 2023 21:08:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208485
IP address blocks: 185.148.243.0/24 maxlen: 24
185.148.241.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 25 Oct 2023 10:44:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:a4:f9:83:f5:90:70:c8:87:ec:c1:21:a8:8b:10:20:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Validity
Not Before: Sep 17 21:08:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=29f7382f286d2dc855bb70273e6de72fc46abced
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:06:22:cc:80:b0:95:f0:d6:90:a1:ec:a2:75:
9e:29:3b:91:97:d1:b2:6a:83:f6:e2:d9:85:14:70:
3a:7f:65:5d:b5:06:c4:9d:db:5f:e2:4f:de:f1:61:
7a:fa:42:fd:40:8a:50:3a:8d:ca:5c:eb:28:a1:1b:
92:88:8e:bc:22:79:4f:df:86:af:d4:d3:94:00:b9:
d0:d7:d5:55:6a:e3:cb:0a:1d:c6:37:97:9b:31:bd:
e9:81:38:12:67:c1:7b:f4:9d:6c:a6:bc:5a:e6:a5:
76:df:9b:b0:25:2a:57:1a:f8:b5:67:8e:40:b9:4b:
c7:c5:e3:43:63:29:02:bd:1c:24:db:bc:3d:3b:64:
93:85:a8:92:f7:18:d9:3d:66:61:64:94:6f:42:95:
83:07:b7:74:1c:cd:44:7a:1b:e0:7e:8e:e2:08:41:
bd:80:6e:ea:8c:ea:ef:0a:56:a5:3d:73:71:cf:2f:
47:e6:c0:5f:c7:c7:4a:3d:43:8e:36:4d:4d:37:22:
4e:0e:d7:15:df:59:b4:0b:dc:04:ca:64:2e:9e:a9:
c6:6e:09:3e:f6:cc:5a:af:f9:37:39:bc:b7:90:30:
f8:a6:f5:1e:38:b1:4c:17:5b:95:bd:5a:c5:c0:be:
42:78:61:d8:82:42:45:19:e1:aa:4e:0e:34:7f:9e:
82:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:F7:38:2F:28:6D:2D:C8:55:BB:70:27:3E:6D:E7:2F:C4:6A:BC:ED
X509v3 Authority Key Identifier:
keyid:AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/Kfc4LyhtLchVu3AnPm3nL8RqvO0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.148.241.0/24
185.148.243.0/24
Signature Algorithm: sha256WithRSAEncryption
65:b4:8f:10:20:b4:4c:a4:e5:d2:ae:62:e7:f5:7d:f9:30:17:
e2:d3:e6:75:bf:0b:e4:fe:9c:ab:87:9a:d7:73:a7:a2:89:f2:
59:3c:d9:06:01:db:ff:c9:b9:e2:98:32:be:93:4c:b1:c8:7d:
d4:e8:cb:de:67:a3:50:f1:b9:ef:9d:8b:28:10:f2:c6:40:d7:
1d:8b:e7:12:1b:32:d8:60:2d:e2:13:3a:3c:eb:ab:0e:f3:aa:
f1:c3:01:fb:11:1e:89:19:91:1b:9f:02:0b:b4:65:fc:9a:37:
9c:e3:fe:64:19:e3:1e:cf:49:51:04:44:ce:00:6c:e2:b3:f3:
57:15:9f:36:6d:c5:a8:3b:99:75:f4:3a:15:e3:ea:2e:43:98:
7d:9f:ce:65:7b:8e:6c:72:34:7a:23:1e:96:76:98:43:f1:04:
38:b9:d0:df:20:03:ab:77:60:f1:1f:d8:1b:55:93:93:79:21:
a4:24:d4:15:e5:b0:f3:81:c2:92:2c:7d:ce:6f:5c:de:21:61:
93:35:c2:b9:d9:f8:0e:6f:2b:94:13:cd:17:d8:d0:45:4b:09:
7c:83:17:f3:06:78:ac:0a:ae:66:a4:6d:b3:46:4f:b6:42:fa:
fb:25:5a:70:37:c8:62:53:83:ac:39:f9:af:ce:cb:29:d7:5e:
ef:54:08:59
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYqk+YP1kHDIh+zBIaiLECCiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkMGRhNDNiNGE1ZDNkYjc4YmEzZjc3NGU1YjMxYjc3MDM3
MjAyZDUwHhcNMjMwOTE3MjEwODUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyOWY3MzgyZjI4NmQyZGM4NTViYjcwMjczZTZkZTcyZmM0NmFiY2VkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQYizICwlfDWkKHsonWeKTuRl9Gy
aoP24tmFFHA6f2VdtQbEndtf4k/e8WF6+kL9QIpQOo3KXOsooRuSiI68InlP34av
1NOUALnQ19VVauPLCh3GN5ebMb3pgTgSZ8F79J1sprxa5qV235uwJSpXGvi1Z45A
uUvHxeNDYykCvRwk27w9O2SThaiS9xjZPWZhZJRvQpWDB7d0HM1Eehvgfo7iCEG9
gG7qjOrvClalPXNxzy9H5sBfx8dKPUOONk1NNyJODtcV31m0C9wEymQunqnGbgk+
9sxar/k3Oby3kDD4pvUeOLFMF1uVvVrFwL5CeGHYgkJFGeGqTg40f56CiwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFCn3OC8obS3IVbtwJz5t5y/EarztMB8GA1UdIwQY
MBaAFK0NpDtKXT23i6P3dOWzG3cDcgLVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclEya08wcGRQYmVMb19kMDViTWJkd055QXRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9kZDgwOTYtMTRjYy00ODhkLTkyNTct
YzUxNWYzNTRjYzVhLzEvS2ZjNEx5aHRMY2hWdTNBblBtM25MOFJxdk8wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC9kZDgwOTYtMTRjYy00ODhkLTkyNTctYzUxNWYzNTRjYzVh
LzEvclEya08wcGRQYmVMb19kMDViTWJkd055QXRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuZTxAwQA
uZTzMA0GCSqGSIb3DQEBCwUAA4IBAQBltI8QILRMpOXSrmLn9X35MBfi0+Z1vwvk
/pyrh5rXc6eiifJZPNkGAdv/ybnimDK+k0yxyH3U6MveZ6NQ8bnvnYsoEPLGQNcd
i+cSGzLYYC3iEzo866sO86rxwwH7ER6JGZEbnwILtGX8mjec4/5kGeMez0lRBETO
AGzis/NXFZ82bcWoO5l19DoV4+ouQ5h9n85le45scjR6Ix6WdphD8QQ4udDfIAOr
d2DxH9gbVZOTeSGkJNQV5bDzgcKSLH3Ob1zeIWGTNcK52fgObyuUE80X2NBFSwl8
gxfzBnisCq5mpG2zRk+2Qvr7JVpwN8hiU4OsOfmvzssp117vVAhZ
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:49 2024 by rpki-client on console-fra.rpki-client.org