Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/e1QpwVhGdyCSJQK_pM-7-tdmhfk.roa
File: e1QpwVhGdyCSJQK_pM-7-tdmhfk.roa (raw, json)
Hash identifier: mVHF18Z/9UbFr+I2FJi6CApCeDgsiCmfUOhDxBmDOL8=
Subject key identifier: 7B:54:29:C1:58:46:77:20:92:25:02:BF:A4:CF:BB:FA:D7:66:85:F9
Certificate issuer: /CN=c784128505f7f99c7570442980adeb8af90cc270
Certificate serial: 0188B97DB54FD6A564DD5354331FF7742526
Authority key identifier: C7:84:12:85:05:F7:F9:9C:75:70:44:29:80:AD:EB:8A:F9:0C:C2:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x4QShQX3-Zx1cEQpgK3rivkMwnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/e1QpwVhGdyCSJQK_pM-7-tdmhfk.roa
Signing time: Wed 14 Jun 2023 10:40:03 +0000
ROA not before: Wed 14 Jun 2023 10:40:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 396535
IP address blocks: 185.151.204.0/24 maxlen: 24
86.48.44.0/23 maxlen: 23
86.48.44.0/22 maxlen: 22
2a0b:14c0:3::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:32:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b9:7d:b5:4f:d6:a5:64:dd:53:54:33:1f:f7:74:25:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c784128505f7f99c7570442980adeb8af90cc270
Validity
Not Before: Jun 14 10:40:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7b5429c158467720922502bfa4cfbbfad76685f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d9:74:bd:cc:60:94:85:18:c0:22:0f:e8:15:
66:4c:1a:0b:d9:9b:fa:3e:8b:08:70:a3:23:a5:4f:
7e:e1:d4:54:c3:0e:80:ff:c5:5e:df:b1:61:d5:c7:
5e:00:b5:cb:9e:c0:f5:78:37:e0:98:16:13:b3:21:
0e:b7:ef:ac:c3:cc:14:a4:27:5f:f9:c9:71:91:5f:
f6:e4:00:d2:e9:3e:5f:ef:fa:75:e8:41:32:30:bd:
ae:67:49:3f:67:f9:bb:ec:cc:e5:ea:de:e7:21:99:
4b:13:7e:62:94:a6:62:d7:bb:70:b7:48:76:78:e1:
60:04:05:98:bc:b1:c2:59:16:70:45:af:0d:d3:4d:
bd:c3:cc:c5:7f:b4:8d:db:f7:3c:cf:d4:3d:ab:de:
c4:51:98:42:34:81:70:02:e4:4e:8c:16:ff:9d:8a:
98:26:a9:37:56:e2:a2:70:d2:91:58:ce:a4:f2:85:
e4:a3:ce:99:d4:e4:a3:f2:28:31:95:ab:d2:9b:f8:
ee:9d:95:1c:14:bb:42:30:90:ca:cb:b9:b3:ff:09:
e3:b0:82:9f:f2:15:05:f9:9d:91:27:ab:af:2f:5f:
cd:77:33:19:76:5b:59:f9:73:3b:13:3a:c5:ec:3f:
3f:8f:31:42:97:54:17:3a:9f:53:7b:2f:05:01:bf:
bb:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:54:29:C1:58:46:77:20:92:25:02:BF:A4:CF:BB:FA:D7:66:85:F9
X509v3 Authority Key Identifier:
keyid:C7:84:12:85:05:F7:F9:9C:75:70:44:29:80:AD:EB:8A:F9:0C:C2:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x4QShQX3-Zx1cEQpgK3rivkMwnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/e1QpwVhGdyCSJQK_pM-7-tdmhfk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.48.44.0/22
185.151.204.0/24
IPv6:
2a0b:14c0:3::/48
Signature Algorithm: sha256WithRSAEncryption
b6:2a:02:fa:9d:7d:a8:20:94:e4:30:f5:80:8f:51:f9:f6:cf:
20:68:8a:18:f0:76:33:48:9a:aa:ea:5b:5f:f7:56:8d:20:52:
2d:b1:44:ca:54:64:6c:1a:7c:0a:f4:42:6e:13:55:80:fb:9d:
69:86:ed:db:c6:3d:8e:ee:09:a4:72:d7:8a:40:0b:ba:e3:b6:
2d:36:08:47:73:b4:cd:ca:21:c9:f7:1c:79:4f:68:da:2e:b1:
19:76:0a:34:b9:a4:1c:1b:db:c6:50:ae:eb:b3:59:d5:34:2e:
25:b0:dc:5d:a4:ab:ed:97:92:da:77:36:22:cd:49:53:d6:7e:
1c:25:3d:a5:c5:05:c2:e9:f9:23:e9:55:b2:cd:0b:dd:af:be:
f9:22:65:29:8b:45:97:77:35:30:e0:92:d6:a0:4a:dd:f6:d2:
d9:29:4f:a3:ae:84:8e:87:da:ae:0c:fd:ea:a4:8a:02:41:28:
8c:77:60:98:fd:1b:b1:0e:af:34:a3:28:e1:3b:f6:27:45:5d:
b1:5b:37:b7:e9:b6:6d:00:05:88:d5:b4:16:08:f0:54:b2:22:
30:f1:85:1e:da:5b:d8:28:c9:2d:c8:53:09:d6:24:f3:e3:06:
e3:f0:c1:ea:45:7c:96:b8:aa:ed:79:bc:a5:0a:73:ae:63:b1:
a8:38:f5:af
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAYi5fbVP1qVk3VNUMx/3dCUmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3ODQxMjg1MDVmN2Y5OWM3NTcwNDQyOTgwYWRlYjhhZjkw
Y2MyNzAwHhcNMjMwNjE0MTA0MDAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YjU0MjljMTU4NDY3NzIwOTIyNTAyYmZhNGNmYmJmYWQ3NjY4NWY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2tl0vcxglIUYwCIP6BVmTBoL2Zv6
PosIcKMjpU9+4dRUww6A/8Ve37Fh1cdeALXLnsD1eDfgmBYTsyEOt++sw8wUpCdf
+clxkV/25ADS6T5f7/p16EEyML2uZ0k/Z/m77Mzl6t7nIZlLE35ilKZi17twt0h2
eOFgBAWYvLHCWRZwRa8N0029w8zFf7SN2/c8z9Q9q97EUZhCNIFwAuROjBb/nYqY
Jqk3VuKicNKRWM6k8oXko86Z1OSj8igxlavSm/junZUcFLtCMJDKy7mz/wnjsIKf
8hUF+Z2RJ6uvL1/NdzMZdltZ+XM7EzrF7D8/jzFCl1QXOp9Tey8FAb+7CwIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFHtUKcFYRncgkiUCv6TPu/rXZoX5MB8GA1UdIwQY
MBaAFMeEEoUF9/mcdXBEKYCt64r5DMJwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDRRU2hRWDMtWngxY0VRcGdLM3JpdmtNd25BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC80YzVjM2QtMjFiMC00MDU4LTg5ZmQt
NmMxYjQ0NzFmN2VlLzEvZTFRcHdWaEdkeUNTSlFLX3BNLTctdGRtaGZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC80YzVjM2QtMjFiMC00MDU4LTg5ZmQtNmMxYjQ0NzFmN2Vl
LzEveDRRU2hRWDMtWngxY0VRcGdLM3JpdmtNd25BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQCVjAsAwQA
uZfMMA8EAgACMAkDBwAqCxTAAAMwDQYJKoZIhvcNAQELBQADggEBALYqAvqdfagg
lOQw9YCPUfn2zyBoihjwdjNImqrqW1/3Vo0gUi2xRMpUZGwafAr0Qm4TVYD7nWmG
7dvGPY7uCaRy14pAC7rjti02CEdztM3KIcn3HHlPaNousRl2CjS5pBwb28ZQruuz
WdU0LiWw3F2kq+2Xktp3NiLNSVPWfhwlPaXFBcLp+SPpVbLNC92vvvkiZSmLRZd3
NTDgktagSt320tkpT6OuhI6H2q4M/eqkigJBKIx3YJj9G7EOrzSjKOE79idFXbFb
N7fptm0ABYjVtBYI8FSyIjDxhR7aW9goyS3IUwnWJPPjBuPwwepFfJa4qu15vKUK
c65jsag49a8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:24 2024 by rpki-client on console-ams.rpki-client.org