Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/CZmbQBKhKUuondGDFNmbAYbChxk.roa
File: CZmbQBKhKUuondGDFNmbAYbChxk.roa (raw, json)
Hash identifier: N3xygszSOhRMRRmoAozO7rK87qTnNVDcEk0WKhOrSXw=
Subject key identifier: 09:99:9B:40:12:A1:29:4B:A8:9D:D1:83:14:D9:9B:01:86:C2:87:19
Certificate issuer: /CN=622ecc6cc5903aea0db61200f4ccd4f824cdd54f
Certificate serial: 018AB7D49AB56131832EAEB446D6851A582F
Authority key identifier: 62:2E:CC:6C:C5:90:3A:EA:0D:B6:12:00:F4:CC:D4:F8:24:CD:D5:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yi7MbMWQOuoNthIA9MzU-CTN1U8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/CZmbQBKhKUuondGDFNmbAYbChxk.roa
Signing time: Thu 21 Sep 2023 13:01:18 +0000
ROA not before: Thu 21 Sep 2023 13:01:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206686
IP address blocks: 185.127.140.0/24 maxlen: 24
185.127.143.0/24 maxlen: 24
185.127.142.0/24 maxlen: 24
185.127.141.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 14:34:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b7:d4:9a:b5:61:31:83:2e:ae:b4:46:d6:85:1a:58:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=622ecc6cc5903aea0db61200f4ccd4f824cdd54f
Validity
Not Before: Sep 21 13:01:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=09999b4012a1294ba89dd18314d99b0186c28719
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:76:ec:6c:f6:b1:5b:2f:e7:e9:75:85:38:ca:
6d:d2:8a:f8:3f:da:00:83:d6:3c:9c:6f:8a:81:a1:
37:7c:54:c1:0f:eb:d4:a1:6f:72:57:cc:ce:48:6e:
4c:42:c1:7c:86:f1:b0:a3:bd:09:94:e8:e6:3d:b2:
b5:03:6b:6f:9d:50:eb:0c:2c:8b:44:03:ad:f9:96:
ac:7f:fc:cd:a3:47:50:fa:9d:28:37:22:14:67:fa:
35:13:fe:f7:26:4a:49:cb:9f:86:2d:55:1c:63:51:
98:0d:0f:1a:d5:c3:be:eb:52:49:01:b8:91:d8:b7:
e4:19:b2:20:29:14:2e:7e:2d:63:d1:92:8c:58:53:
1a:b4:fc:f5:30:71:f4:7e:05:00:60:c7:0e:25:6a:
27:c1:2c:72:2f:38:d6:fa:04:53:72:f5:9a:3c:15:
1b:c2:3d:9a:fa:4b:06:31:34:97:e8:a7:2f:ea:5c:
73:0b:49:de:de:d5:ee:8e:8b:ac:db:89:aa:3d:43:
4a:f1:56:6f:02:4b:ea:e9:27:9c:f2:98:8e:8c:ad:
d0:d7:09:a4:f5:db:63:14:96:a7:b8:81:ca:c8:4a:
44:38:02:20:44:1c:ea:10:14:e8:ff:ec:58:2d:60:
f4:10:f4:d7:82:60:81:0f:5b:ff:34:be:dd:d6:53:
1b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:99:9B:40:12:A1:29:4B:A8:9D:D1:83:14:D9:9B:01:86:C2:87:19
X509v3 Authority Key Identifier:
keyid:62:2E:CC:6C:C5:90:3A:EA:0D:B6:12:00:F4:CC:D4:F8:24:CD:D5:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yi7MbMWQOuoNthIA9MzU-CTN1U8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/CZmbQBKhKUuondGDFNmbAYbChxk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/Yi7MbMWQOuoNthIA9MzU-CTN1U8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.127.140.0/22
Signature Algorithm: sha256WithRSAEncryption
02:cd:69:de:03:3d:78:4c:13:0b:72:49:1e:21:76:49:cc:ca:
61:79:9b:d6:03:2c:3f:c4:89:52:42:bc:ae:db:bd:97:ca:ba:
c6:5a:82:a2:1f:03:42:06:b3:65:32:cb:66:2f:87:4a:cb:e5:
27:9a:76:d5:17:7d:9c:72:f8:9c:f9:df:eb:af:c8:b1:c3:70:
d1:b4:07:59:b5:51:77:87:67:9d:63:ab:1b:e1:c9:b6:90:ec:
fa:71:1e:c9:f2:0d:cb:97:3b:88:14:7b:bf:5b:d7:41:d1:ac:
62:0e:ab:53:22:4e:91:62:23:54:44:72:ae:1c:4c:e4:98:67:
e3:39:0b:39:d0:30:8d:e8:ae:8a:af:02:f2:5b:70:87:72:73:
5e:7f:71:33:b1:4d:73:8c:fd:ca:53:3d:b7:ca:02:05:65:ad:
9b:d2:bd:a1:0c:20:1a:a3:3c:8c:7c:f6:a3:f4:51:9d:d1:8d:
a3:98:9d:20:5d:52:84:08:e3:d7:f2:08:4c:1c:7d:42:d3:5f:
d4:65:2b:20:22:75:6e:c6:f5:f4:5a:01:85:ac:e2:c6:1c:a9:
82:56:d2:e5:d6:f0:46:19:9e:e1:47:d7:e4:b7:0f:5b:d0:dd:
bc:b3:46:8b:dd:4a:9c:79:41:06:d5:19:cc:7e:15:d9:ae:2e:
13:07:34:d6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYq31Jq1YTGDLq60RtaFGlgvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyMmVjYzZjYzU5MDNhZWEwZGI2MTIwMGY0Y2NkNGY4MjRj
ZGQ1NGYwHhcNMjMwOTIxMTMwMTE4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOTk5OWI0MDEyYTEyOTRiYTg5ZGQxODMxNGQ5OWIwMTg2YzI4NzE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3bsbPaxWy/n6XWFOMpt0or4P9oA
g9Y8nG+KgaE3fFTBD+vUoW9yV8zOSG5MQsF8hvGwo70JlOjmPbK1A2tvnVDrDCyL
RAOt+Zasf/zNo0dQ+p0oNyIUZ/o1E/73JkpJy5+GLVUcY1GYDQ8a1cO+61JJAbiR
2LfkGbIgKRQufi1j0ZKMWFMatPz1MHH0fgUAYMcOJWonwSxyLzjW+gRTcvWaPBUb
wj2a+ksGMTSX6Kcv6lxzC0ne3tXujous24mqPUNK8VZvAkvq6Sec8piOjK3Q1wmk
9dtjFJanuIHKyEpEOAIgRBzqEBTo/+xYLWD0EPTXgmCBD1v/NL7d1lMbIwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAmZm0ASoSlLqJ3RgxTZmwGGwocZMB8GA1UdIwQY
MBaAFGIuzGzFkDrqDbYSAPTM1PgkzdVPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWk3TWJNV1FPdW9OdGhJQTlNelUtQ1ROMVU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8yNjJhNGItYzcwMS00OGRjLTlhZTUt
MzQ2MzY4ODI3ZTY4LzEvQ1ptYlFCS2hLVXVvbmRHREZObWJBWWJDaHhrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy8yNjJhNGItYzcwMS00OGRjLTlhZTUtMzQ2MzY4ODI3ZTY4
LzEvWWk3TWJNV1FPdW9OdGhJQTlNelUtQ1ROMVU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuX+MMA0G
CSqGSIb3DQEBCwUAA4IBAQACzWneAz14TBMLckkeIXZJzMpheZvWAyw/xIlSQryu
272XyrrGWoKiHwNCBrNlMstmL4dKy+UnmnbVF32ccvic+d/rr8ixw3DRtAdZtVF3
h2edY6sb4cm2kOz6cR7J8g3LlzuIFHu/W9dB0axiDqtTIk6RYiNURHKuHEzkmGfj
OQs50DCN6K6KrwLyW3CHcnNef3EzsU1zjP3KUz23ygIFZa2b0r2hDCAaozyMfPaj
9FGd0Y2jmJ0gXVKECOPX8ghMHH1C01/UZSsgInVuxvX0WgGFrOLGHKmCVtLl1vBG
GZ7hR9fktw9b0N28s0aL3UqceUEG1RnMfhXZri4TBzTW
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:56 2024 by rpki-client on console-fra.rpki-client.org