Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/RIkcO50WLml5Jf04fR-ghuT3xOE.roa
File: RIkcO50WLml5Jf04fR-ghuT3xOE.roa (raw, json)
Hash identifier: exuTAbx2ZWJf92Ufdt/u/Ss40PDEFcNo8p+8JnKjPIY=
Subject key identifier: 44:89:1C:3B:9D:16:2E:69:79:25:FD:38:7D:1F:A0:86:E4:F7:C4:E1
Certificate issuer: /CN=ed30a131718560a34ab3493884e858ec431f6ad1
Certificate serial: 019035F96216B6F93267526F041C1A276C44
Authority key identifier: ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/RIkcO50WLml5Jf04fR-ghuT3xOE.roa
Signing time: Thu 20 Jun 2024 14:07:34 +0000
ROA not before: Thu 20 Jun 2024 14:07:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216361
IP address blocks: 185.217.39.0/24 maxlen: 24
194.36.172.0/24 maxlen: 24
194.36.173.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jul 2024 12:14:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:35:f9:62:16:b6:f9:32:67:52:6f:04:1c:1a:27:6c:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed30a131718560a34ab3493884e858ec431f6ad1
Validity
Not Before: Jun 20 14:07:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=44891c3b9d162e697925fd387d1fa086e4f7c4e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:24:d4:d2:69:36:84:7f:ac:04:3b:95:97:f5:
4a:a5:ef:8d:97:ff:0c:ad:3a:b1:88:d1:5a:7f:44:
fe:a8:de:87:01:bc:f8:14:7d:ef:e0:57:ce:2b:5e:
66:9f:ba:2f:4f:ad:c8:91:58:d6:2d:88:18:cf:79:
44:f1:7d:ef:69:e3:b8:d9:39:cc:1a:fb:c6:23:c8:
98:37:55:99:2c:00:6b:8a:5f:bf:73:7a:fc:2f:1b:
cc:8b:47:73:d7:86:08:e6:45:df:0c:89:de:11:28:
60:11:1b:16:41:4f:06:ac:d3:22:67:90:09:81:df:
f6:5c:af:3f:d4:63:cc:30:50:9f:43:a2:94:06:df:
eb:90:29:dd:4a:36:d3:df:d5:47:b1:7c:f1:62:0a:
9a:74:f6:56:8f:ae:96:e6:31:77:23:34:b2:d9:f6:
53:a6:4c:97:a4:5d:e9:08:b8:2a:85:97:d3:de:98:
49:04:85:52:c7:42:95:a5:fc:a7:1a:55:9a:ac:1e:
a9:31:30:55:32:b1:3f:ed:05:65:1b:76:3c:15:96:
f9:d0:02:72:3d:da:45:09:69:c3:46:3e:9d:57:31:
58:cb:e7:7c:c5:4c:a4:f5:36:e3:e7:75:ef:a5:26:
ce:d6:b6:05:4e:44:1e:aa:b3:e3:2e:fc:7c:16:98:
bb:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:89:1C:3B:9D:16:2E:69:79:25:FD:38:7D:1F:A0:86:E4:F7:C4:E1
X509v3 Authority Key Identifier:
keyid:ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/RIkcO50WLml5Jf04fR-ghuT3xOE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.217.39.0/24
194.36.172.0/23
Signature Algorithm: sha256WithRSAEncryption
80:be:ed:28:d9:98:1d:b1:2b:52:c0:91:2b:b6:49:45:9d:17:
de:23:56:c2:27:ed:b7:ff:17:5a:58:66:bc:16:36:d7:7d:3e:
f6:9e:46:de:58:94:b6:6c:3a:ec:41:8e:3c:c9:6d:a8:7a:61:
a1:90:cb:67:7c:e3:dd:72:af:c9:1f:5a:77:20:65:76:53:ec:
2b:37:4b:9e:66:54:01:c6:43:68:2b:b2:89:d6:f9:b9:12:9e:
9c:99:6b:de:53:18:93:2c:c1:7c:cc:1d:43:5e:77:54:e7:1b:
f8:ba:16:b2:2c:fb:c2:01:61:cb:62:00:9f:d5:89:04:02:65:
15:b5:52:99:68:0d:0c:d4:ba:27:60:62:78:21:65:3f:db:fe:
e2:2b:cc:15:9b:32:5e:9c:41:cb:71:f7:f1:9a:15:c0:ab:f5:
7d:b7:dc:d4:7e:40:75:c3:90:f4:a3:7e:1a:4f:ec:aa:47:b9:
ac:bd:db:c2:e9:e8:10:75:c9:2b:e2:cc:ed:95:26:3e:e4:40:
34:1d:cf:c4:e8:3e:36:4c:d0:3a:5b:18:e7:e9:28:6c:22:b7:
0b:f9:ed:ed:54:99:38:e9:e5:28:83:fa:a5:13:48:cc:fc:7b:
50:9b:8e:4d:56:2b:8a:11:15:5f:9b:32:1b:60:c6:9e:ac:aa:
dd:25:61:76
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZA1+WIWtvkyZ1JvBBwaJ2xEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkMzBhMTMxNzE4NTYwYTM0YWIzNDkzODg0ZTg1OGVjNDMx
ZjZhZDEwHhcNMjQwNjIwMTQwNzM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NDg5MWMzYjlkMTYyZTY5NzkyNWZkMzg3ZDFmYTA4NmU0ZjdjNGUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3STU0mk2hH+sBDuVl/VKpe+Nl/8M
rTqxiNFaf0T+qN6HAbz4FH3v4FfOK15mn7ovT63IkVjWLYgYz3lE8X3vaeO42TnM
GvvGI8iYN1WZLABril+/c3r8LxvMi0dz14YI5kXfDIneEShgERsWQU8GrNMiZ5AJ
gd/2XK8/1GPMMFCfQ6KUBt/rkCndSjbT39VHsXzxYgqadPZWj66W5jF3IzSy2fZT
pkyXpF3pCLgqhZfT3phJBIVSx0KVpfynGlWarB6pMTBVMrE/7QVlG3Y8FZb50AJy
PdpFCWnDRj6dVzFYy+d8xUyk9Tbj53XvpSbO1rYFTkQeqrPjLvx8Fpi7KQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFESJHDudFi5peSX9OH0foIbk98ThMB8GA1UdIwQY
MBaAFO0woTFxhWCjSrNJOIToWOxDH2rRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1RDaE1YR0ZZS05LczBrNGhPaFk3RU1mYXRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi81YjA3MDItMTZlNy00NjI3LWFlMTkt
NGIzYjFiNjNiNmFiLzEvUklrY081MFdMbWw1SmYwNGZSLWdodVQzeE9FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi81YjA3MDItMTZlNy00NjI3LWFlMTktNGIzYjFiNjNiNmFi
LzEvN1RDaE1YR0ZZS05LczBrNGhPaFk3RU1mYXRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAudknAwQB
wiSsMA0GCSqGSIb3DQEBCwUAA4IBAQCAvu0o2ZgdsStSwJErtklFnRfeI1bCJ+23
/xdaWGa8FjbXfT72nkbeWJS2bDrsQY48yW2oemGhkMtnfOPdcq/JH1p3IGV2U+wr
N0ueZlQBxkNoK7KJ1vm5Ep6cmWveUxiTLMF8zB1DXndU5xv4uhayLPvCAWHLYgCf
1YkEAmUVtVKZaA0M1LonYGJ4IWU/2/7iK8wVmzJenEHLcffxmhXAq/V9t9zUfkB1
w5D0o34aT+yqR7msvdvC6egQdckr4sztlSY+5EA0Hc/E6D42TNA6Wxjn6ShsIrcL
+e3tVJk46eUog/qlE0jM/HtQm45NViuKERVfmzIbYMaerKrdJWF2
-----END CERTIFICATE-----
Generated at Mon Jul 1 14:21:11 2024 by rpki-client on console-ams.rpki-client.org