Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/ly0of6470KzEmVC45wWzVJ_z5SM.roa
File: ly0of6470KzEmVC45wWzVJ_z5SM.roa (raw, json)
Hash identifier: pNSBuiuBPXDX5Dm6/AnHODTE8MZ8jAJD7fGUdud59w0=
Subject key identifier: 97:2D:28:7F:AE:3B:D0:AC:C4:99:50:B8:E7:05:B3:54:9F:F3:E5:23
Certificate issuer: /CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Certificate serial: 018DC5E95696BBC287979854BB0E07114239
Authority key identifier: 18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/ly0of6470KzEmVC45wWzVJ_z5SM.roa
Signing time: Tue 20 Feb 2024 09:46:59 +0000
ROA not before: Tue 20 Feb 2024 09:46:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216271
IP address blocks: 185.168.28.0/22 maxlen: 22
185.201.136.0/22 maxlen: 22
2a06:b3c0::/29 maxlen: 29
2a06:b440::/29 maxlen: 29
2a06:cac0::/29 maxlen: 29
2a11:2f40::/29 maxlen: 29
2a11:3b40::/29 maxlen: 29
2a11:9600::/29 maxlen: 29
2a12:440::/29 maxlen: 29
2a12:6640::/29 maxlen: 29
2a12:6740::/29 maxlen: 29
2a12:6f40::/29 maxlen: 29
2a12:7740::/29 maxlen: 29
2a14:c0::/29 maxlen: 29
2a14:140::/29 maxlen: 29
2a14:1c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 22 Feb 2024 10:07:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c5:e9:56:96:bb:c2:87:97:98:54:bb:0e:07:11:42:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Validity
Not Before: Feb 20 09:46:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=972d287fae3bd0acc49950b8e705b3549ff3e523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:40:3f:ef:8e:1d:4a:d9:64:39:25:31:49:35:
34:f4:22:5b:31:e1:c4:4c:91:50:a1:cd:04:12:45:
42:b3:18:7a:07:45:4d:7e:33:f1:77:67:78:b7:25:
9f:21:31:06:10:df:f5:e2:62:1a:9e:03:9d:f4:30:
8c:37:69:66:22:e9:7a:b3:ee:b6:0a:14:89:68:6a:
2f:7d:69:62:1b:7c:a8:6a:ba:f4:98:7c:4d:8d:19:
1f:c4:71:3b:c9:cb:9c:b6:1b:a3:af:07:67:80:c7:
bb:8d:f0:1c:03:99:98:d1:52:8e:27:76:8b:ac:c8:
9f:b9:e7:1b:b4:fd:39:92:7b:4e:2a:3a:f5:20:49:
2f:b4:a7:2b:ee:00:fc:6a:f4:31:1d:42:d0:ba:79:
1f:b0:c9:70:a0:77:bd:0b:e7:74:93:74:a1:dc:6e:
dd:6a:01:3b:96:26:66:01:a9:08:98:22:a3:62:6c:
f6:12:18:15:9f:f7:69:1f:f0:d7:54:2d:aa:cf:71:
23:43:5d:4e:07:b7:fe:a8:33:c6:b6:d4:81:05:7b:
1d:3d:81:04:f9:23:b9:cc:10:b4:6f:23:e8:55:0b:
6a:e2:ce:6f:76:f0:21:ae:39:72:b3:fd:ab:f0:42:
c5:f0:2d:83:fc:62:b7:02:5b:b8:8b:4b:e9:8a:3f:
5c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:2D:28:7F:AE:3B:D0:AC:C4:99:50:B8:E7:05:B3:54:9F:F3:E5:23
X509v3 Authority Key Identifier:
keyid:18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/ly0of6470KzEmVC45wWzVJ_z5SM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.168.28.0/22
185.201.136.0/22
IPv6:
2a06:b3c0::/29
2a06:b440::/29
2a06:cac0::/29
2a11:2f40::/29
2a11:3b40::/29
2a11:9600::/29
2a12:440::/29
2a12:6640::/29
2a12:6740::/29
2a12:6f40::/29
2a12:7740::/29
2a14:c0::/29
2a14:140::/29
2a14:1c0::/29
Signature Algorithm: sha256WithRSAEncryption
83:da:4a:01:4f:a3:5d:fe:52:63:56:ae:39:42:e5:45:b1:f8:
95:27:51:54:fd:00:99:b4:17:5a:7d:0c:35:d1:ab:8e:5e:7c:
26:c9:37:6d:e1:c0:2f:ed:eb:3b:c4:1b:09:51:c6:e7:2d:0f:
ed:5d:aa:39:da:94:2d:be:30:68:97:b5:4f:ef:ac:3f:b7:56:
97:0e:f6:e6:8c:6c:c1:23:cf:34:a7:b8:3b:57:3b:9c:9b:e3:
07:9c:85:03:72:df:a2:6f:df:f8:58:39:cf:3d:d1:19:0f:1e:
fd:fd:3e:27:e3:cb:69:e1:84:eb:cd:54:9f:95:df:3a:3b:85:
54:a0:08:53:6a:b1:26:8f:56:f5:08:79:9d:31:0b:e5:00:0b:
fd:15:35:ee:55:93:8e:71:34:4a:97:13:57:82:ff:6a:09:1f:
4d:f6:b5:3b:ac:20:2d:90:0d:16:34:d9:3c:80:1f:53:7b:52:
ec:33:83:a9:d5:ed:57:e2:e9:32:55:49:2a:12:f3:90:01:f3:
24:e2:fc:56:3c:fe:96:26:05:01:82:a2:d7:8e:cf:2e:1b:c4:
6e:bf:a2:2e:56:7a:55:fb:ea:5d:d8:14:26:32:38:14:51:05:
cb:b0:63:a8:86:c1:00:d3:3d:dc:3e:1f:a0:6f:0f:99:f8:15:
ca:88:e5:22
-----BEGIN CERTIFICATE-----
MIIFbzCCBFegAwIBAgISAY3F6VaWu8KHl5hUuw4HEUI5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4OWQ2YjU1ZDZhNjg4ZWU1ZTMzODE4ODNiYjVhZjY4NDMz
Mjc2ZTMwHhcNMjQwMjIwMDk0NjU5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NzJkMjg3ZmFlM2JkMGFjYzQ5OTUwYjhlNzA1YjM1NDlmZjNlNTIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUA/744dStlkOSUxSTU09CJbMeHE
TJFQoc0EEkVCsxh6B0VNfjPxd2d4tyWfITEGEN/14mIangOd9DCMN2lmIul6s+62
ChSJaGovfWliG3yoarr0mHxNjRkfxHE7ycucthujrwdngMe7jfAcA5mY0VKOJ3aL
rMifuecbtP05kntOKjr1IEkvtKcr7gD8avQxHULQunkfsMlwoHe9C+d0k3Sh3G7d
agE7liZmAakImCKjYmz2EhgVn/dpH/DXVC2qz3EjQ11OB7f+qDPGttSBBXsdPYEE
+SO5zBC0byPoVQtq4s5vdvAhrjlys/2r8ELF8C2D/GK3Alu4i0vpij9caQIDAQAB
o4ICezCCAncwHQYDVR0OBBYEFJctKH+uO9CsxJlQuOcFs1Sf8+UjMB8GA1UdIwQY
MBaAFBida1XWpojuXjOBiDu1r2hDMnbjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0oxclZkYW1pTzVlTTRHSU83V3ZhRU15ZHVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS83NTdiNTYtN2I1Ny00OGEwLTlhNzUt
YTJhNGM2YTYyMWNkLzEvbHkwb2Y2NDcwS3pFbVZDNDV3V3pWSl96NVNNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS83NTdiNTYtN2I1Ny00OGEwLTlhNzUtYTJhNGM2YTYyMWNk
LzEvR0oxclZkYW1pTzVlTTRHSU83V3ZhRU15ZHVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGQBggrBgEFBQcBBwEB/wSBgDB+MBIEAgABMAwDBAK5qBwD
BAK5yYgwaAQCAAIwYgMFAyoGs8ADBQMqBrRAAwUDKgbKwAMFAyoRL0ADBQMqETtA
AwUDKhGWAAMFAyoSBEADBQMqEmZAAwUDKhJnQAMFAyoSb0ADBQMqEndAAwUDKhQA
wAMFAyoUAUADBQMqFAHAMA0GCSqGSIb3DQEBCwUAA4IBAQCD2koBT6Nd/lJjVq45
QuVFsfiVJ1FU/QCZtBdafQw10auOXnwmyTdt4cAv7es7xBsJUcbnLQ/tXao52pQt
vjBol7VP76w/t1aXDvbmjGzBI880p7g7Vzucm+MHnIUDct+ib9/4WDnPPdEZDx79
/T4n48tp4YTrzVSfld86O4VUoAhTarEmj1b1CHmdMQvlAAv9FTXuVZOOcTRKlxNX
gv9qCR9N9rU7rCAtkA0WNNk8gB9Te1LsM4Op1e1X4ukyVUkqEvOQAfMk4vxWPP6W
JgUBgqLXjs8uG8Ruv6IuVnpV++pd2BQmMjgUUQXLsGOohsEA0z3cPh+gbw+Z+BXK
iOUi
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:02 2024 by rpki-client on console-ams.rpki-client.org