Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/c8bf8e-11ad-459e-b763-6c028a4d85da/1/m9Jd2aLtJ0O-RraBtCYSGEi0XIc.roa
File: m9Jd2aLtJ0O-RraBtCYSGEi0XIc.roa (raw, json)
Hash identifier: jF5yV1uVwihzozo2Rw5TUj8jlnqyrXVGvkg0R8a6FOU=
Subject key identifier: 9B:D2:5D:D9:A2:ED:27:43:BE:46:B6:81:B4:26:12:18:48:B4:5C:87
Certificate issuer: /CN=c297409bc27c5843e2b16ac67cdb6a155c2f73fb
Certificate serial: 018E5613DA5761D5EF90AF6C03D306E831E4
Authority key identifier: C2:97:40:9B:C2:7C:58:43:E2:B1:6A:C6:7C:DB:6A:15:5C:2F:73:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wpdAm8J8WEPisWrGfNtqFVwvc_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/c8bf8e-11ad-459e-b763-6c028a4d85da/1/m9Jd2aLtJ0O-RraBtCYSGEi0XIc.roa
Signing time: Tue 19 Mar 2024 09:38:45 +0000
ROA not before: Tue 19 Mar 2024 09:38:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206082
IP address blocks: 91.239.38.0/23 maxlen: 23
185.196.208.0/22 maxlen: 22
185.221.100.0/22 maxlen: 22
185.221.102.0/24 maxlen: 24
2001:67c:11c0::/48 maxlen: 48
2a0a:7240::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Apr 2024 07:05:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:56:13:da:57:61:d5:ef:90:af:6c:03:d3:06:e8:31:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c297409bc27c5843e2b16ac67cdb6a155c2f73fb
Validity
Not Before: Mar 19 09:38:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9bd25dd9a2ed2743be46b681b426121848b45c87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:93:29:43:da:11:b0:b7:4e:ec:6b:d6:60:04:
ec:ba:47:18:94:61:9d:4b:8f:50:77:22:6a:98:aa:
34:6e:73:a7:8f:b7:62:c2:fc:15:45:db:4f:0d:0f:
c9:b6:20:0e:71:08:64:69:76:6e:7f:52:a4:00:4c:
40:4c:1a:dc:fe:93:f5:7a:71:9a:43:1a:3d:a6:fc:
43:7d:70:cb:c3:ae:2e:20:00:d8:ab:fc:7f:b7:69:
cc:a3:7a:02:a9:03:a6:21:b2:6a:91:09:9b:c4:ee:
5a:4f:52:ff:ff:f3:74:ad:bc:e6:fd:cb:65:b5:bf:
24:87:9e:66:8f:17:bd:2d:7f:6a:41:37:c1:d4:40:
71:9a:a8:2e:8b:f8:56:36:12:e2:73:e5:30:9f:90:
3c:46:39:ed:cb:5c:8e:d3:b9:23:e5:4f:20:ee:68:
48:fe:b3:30:8f:56:04:33:25:40:c3:f1:4d:7e:2f:
1e:81:38:ea:ab:d1:f4:29:eb:44:c8:6c:1a:22:b0:
4c:42:70:48:13:60:4f:bc:fb:8a:f0:62:da:77:df:
58:ba:37:7c:fb:1f:62:49:42:e7:cb:71:63:ea:f7:
b7:b0:f2:ea:e4:f0:d7:cf:44:8d:96:44:fc:18:a0:
ac:dc:90:8a:38:94:25:b8:bc:ff:78:9f:9a:72:53:
83:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:D2:5D:D9:A2:ED:27:43:BE:46:B6:81:B4:26:12:18:48:B4:5C:87
X509v3 Authority Key Identifier:
keyid:C2:97:40:9B:C2:7C:58:43:E2:B1:6A:C6:7C:DB:6A:15:5C:2F:73:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wpdAm8J8WEPisWrGfNtqFVwvc_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/c8bf8e-11ad-459e-b763-6c028a4d85da/1/m9Jd2aLtJ0O-RraBtCYSGEi0XIc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/c8bf8e-11ad-459e-b763-6c028a4d85da/1/wpdAm8J8WEPisWrGfNtqFVwvc_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.38.0/23
185.196.208.0/22
185.221.100.0/22
IPv6:
2001:67c:11c0::/48
2a0a:7240::/32
Signature Algorithm: sha256WithRSAEncryption
6b:b7:79:e7:cc:6b:e3:af:1a:9a:ee:71:00:7b:09:7e:eb:80:
63:17:33:41:05:aa:a6:99:c3:30:2c:71:0d:a2:9a:32:0a:77:
9c:56:b7:65:06:ed:c4:c6:2b:1f:ff:6e:b5:e0:7c:a0:52:94:
4e:0d:9a:0b:92:9d:f2:e1:3c:8b:ab:2c:06:b3:38:a7:02:79:
51:9e:a2:db:46:88:fb:1f:51:23:54:29:46:dc:5f:91:7c:27:
fd:c8:6e:f3:5f:a0:17:f8:32:0e:fe:a2:31:3c:bd:b9:ec:7d:
a7:d3:76:7e:51:4f:67:a0:63:99:b9:0a:e0:ec:55:1e:95:9f:
ba:c5:d1:35:27:8d:d8:29:20:fb:bf:64:cc:83:1d:9f:77:c1:
0d:5c:e5:fa:e2:66:9f:3c:54:50:39:91:c1:93:95:58:ee:36:
6a:77:76:c8:a9:ef:f7:93:1d:0e:67:ed:fd:67:d0:35:39:cf:
30:f5:00:22:af:b0:b9:2f:f2:78:72:90:8d:56:38:2d:5c:f0:
b2:9b:37:c6:61:bb:35:07:3d:be:62:f8:99:27:d1:30:c4:da:
38:b5:be:ee:85:5d:6c:f6:2e:67:34:14:aa:7b:d7:3c:50:d1:
4e:a7:a3:7c:5a:dd:70:61:54:ae:a8:83:9b:32:b2:b9:49:08:
1c:55:98:87
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAY5WE9pXYdXvkK9sA9MG6DHkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyOTc0MDliYzI3YzU4NDNlMmIxNmFjNjdjZGI2YTE1NWMy
ZjczZmIwHhcNMjQwMzE5MDkzODQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YmQyNWRkOWEyZWQyNzQzYmU0NmI2ODFiNDI2MTIxODQ4YjQ1Yzg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZMpQ9oRsLdO7GvWYATsukcYlGGd
S49QdyJqmKo0bnOnj7diwvwVRdtPDQ/JtiAOcQhkaXZuf1KkAExATBrc/pP1enGa
Qxo9pvxDfXDLw64uIADYq/x/t2nMo3oCqQOmIbJqkQmbxO5aT1L///N0rbzm/ctl
tb8kh55mjxe9LX9qQTfB1EBxmqgui/hWNhLic+Uwn5A8Rjnty1yO07kj5U8g7mhI
/rMwj1YEMyVAw/FNfi8egTjqq9H0KetEyGwaIrBMQnBIE2BPvPuK8GLad99Yujd8
+x9iSULny3Fj6ve3sPLq5PDXz0SNlkT8GKCs3JCKOJQluLz/eJ+aclODSwIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFJvSXdmi7SdDvka2gbQmEhhItFyHMB8GA1UdIwQY
MBaAFMKXQJvCfFhD4rFqxnzbahVcL3P7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3BkQW04SjhXRVBpc1dyR2ZOdHFGVnd2Y19zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9jOGJmOGUtMTFhZC00NTllLWI3NjMt
NmMwMjhhNGQ4NWRhLzEvbTlKZDJhTHRKME8tUnJhQnRDWVNHRWkwWEljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS9jOGJmOGUtMTFhZC00NTllLWI3NjMtNmMwMjhhNGQ4NWRh
LzEvd3BkQW04SjhXRVBpc1dyR2ZOdHFGVnd2Y19zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAYBAIAATASAwQBW+8mAwQC
ucTQAwQCud1kMBYEAgACMBADBwAgAQZ8EcADBQAqCnJAMA0GCSqGSIb3DQEBCwUA
A4IBAQBrt3nnzGvjrxqa7nEAewl+64BjFzNBBaqmmcMwLHENopoyCnecVrdlBu3E
xisf/2614HygUpRODZoLkp3y4TyLqywGszinAnlRnqLbRoj7H1EjVClG3F+RfCf9
yG7zX6AX+DIO/qIxPL257H2n03Z+UU9noGOZuQrg7FUelZ+6xdE1J43YKSD7v2TM
gx2fd8ENXOX64mafPFRQOZHBk5VY7jZqd3bIqe/3kx0OZ+39Z9A1Oc8w9QAir7C5
L/J4cpCNVjgtXPCymzfGYbs1Bz2+YviZJ9EwxNo4tb7uhV1s9i5nNBSqe9c8UNFO
p6N8Wt1wYVSuqIObMrK5SQgcVZiH
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:56:40 2024 by rpki-client on console-ams.rpki-client.org