Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/p9_EPtPn0Wf8GI_KdH4XhCEId2E.roa
File: p9_EPtPn0Wf8GI_KdH4XhCEId2E.roa (raw, json)
Hash identifier: 6dgnJK9SU+/HxowICyEimdgzsAKElOId4xwQ/8xZInM=
Subject key identifier: A7:DF:C4:3E:D3:E7:D1:67:FC:18:8F:CA:74:7E:17:84:21:08:77:61
Certificate issuer: /CN=66ed3ba68c78bff2c4724400ade6348482fb4364
Certificate serial: 018D3EBB7F31963F2A8A0A281FDB1E69CD80
Authority key identifier: 66:ED:3B:A6:8C:78:BF:F2:C4:72:44:00:AD:E6:34:84:82:FB:43:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zu07pox4v_LEckQAreY0hIL7Q2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/p9_EPtPn0Wf8GI_KdH4XhCEId2E.roa
Signing time: Thu 25 Jan 2024 03:48:11 +0000
ROA not before: Thu 25 Jan 2024 03:48:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 64289
IP address blocks: 185.225.26.0/24 maxlen: 24
192.189.157.0/24 maxlen: 24
2a14:3f80:8::/45 maxlen: 45
2a14:3f80:10::/45 maxlen: 45
2a14:3f80:18::/45 maxlen: 45
Validation: Failed, certificate revoked on Tue 20 Feb 2024 01:37:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:3e:bb:7f:31:96:3f:2a:8a:0a:28:1f:db:1e:69:cd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66ed3ba68c78bff2c4724400ade6348482fb4364
Validity
Not Before: Jan 25 03:48:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a7dfc43ed3e7d167fc188fca747e178421087761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:75:f9:a5:0c:7f:2c:c7:18:3f:77:39:b1:e7:
84:1f:6e:11:58:18:9f:d1:05:9e:81:ca:4a:6d:8d:
41:5b:4e:ea:bd:0a:a9:55:ee:9e:53:20:58:ef:5a:
2e:29:db:7f:5d:a8:a0:4b:44:27:c6:d6:71:92:74:
74:65:e5:eb:4d:8b:c4:95:8e:30:67:e7:8b:e6:5c:
55:53:a1:ea:a1:58:b7:71:df:c6:85:23:d7:2c:d2:
64:7b:02:9f:58:ce:4d:96:1a:2e:57:96:60:f1:8a:
b6:f1:3b:3a:d6:e4:a1:11:ab:f0:49:8f:f7:df:bb:
1f:cc:8f:4a:cf:32:69:14:6f:04:b5:12:05:9d:98:
ce:57:09:1b:25:d4:13:cb:73:af:51:f4:27:3f:04:
99:fd:42:be:7e:1c:b9:e0:14:39:9d:6d:c4:7b:ce:
58:fc:ea:70:1d:e1:88:54:cf:d6:59:33:79:4d:96:
fa:ef:54:2a:06:da:0c:2c:cf:5e:05:3e:76:b7:43:
0e:e0:1c:85:f6:53:fc:51:b2:91:77:c2:3e:e2:8d:
df:e8:a6:21:8e:a6:9c:e3:58:59:8f:00:0b:28:60:
3b:8f:d6:d0:66:8b:1c:f4:4c:53:9f:bd:2c:25:b5:
a3:0a:ad:b7:f6:13:2a:0c:b0:22:59:35:52:18:fa:
c2:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:DF:C4:3E:D3:E7:D1:67:FC:18:8F:CA:74:7E:17:84:21:08:77:61
X509v3 Authority Key Identifier:
keyid:66:ED:3B:A6:8C:78:BF:F2:C4:72:44:00:AD:E6:34:84:82:FB:43:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zu07pox4v_LEckQAreY0hIL7Q2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/p9_EPtPn0Wf8GI_KdH4XhCEId2E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Zu07pox4v_LEckQAreY0hIL7Q2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.26.0/24
192.189.157.0/24
IPv6:
2a14:3f80:8::-2a14:3f80:1f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
5e:d7:69:66:01:da:c7:19:be:4b:69:28:4d:3c:84:76:b6:28:
5d:11:65:2f:0e:16:8e:28:a1:49:1a:09:56:d5:0e:b1:3d:f9:
d4:36:e7:3e:8c:04:b4:87:5f:65:fc:d1:86:c3:9f:83:47:08:
7e:e1:a2:6d:7a:3b:07:0b:0f:94:a7:ee:85:a2:ea:33:14:05:
75:3f:83:e6:25:d0:51:e9:b5:e4:c5:c4:c0:f9:73:1e:8d:c2:
3e:aa:3f:5d:a1:97:ec:15:72:c7:c7:3e:3e:7c:86:0d:a3:f3:
cd:a3:f4:53:a8:3e:ef:96:c8:eb:26:7f:2b:b2:d3:91:33:f6:
a3:4b:7b:ce:11:6b:2b:b1:ff:65:e5:72:87:a8:b2:88:89:19:
74:5b:90:34:a7:85:32:6f:cb:58:51:fb:47:b9:2d:f6:07:57:
79:c2:01:3d:d9:59:0d:9b:4e:48:1d:56:14:aa:7b:a6:e5:cd:
d9:c2:3c:99:83:cf:70:70:26:83:ac:be:d7:c0:ba:f8:a3:d5:
a2:16:df:a7:6a:ab:65:37:ef:79:21:e5:bf:03:e6:4b:a6:4b:
aa:49:22:64:d7:03:63:10:c8:13:d3:9e:30:c4:fc:9b:32:59:
87:58:30:e0:44:cf:f2:34:69:6f:cf:be:ed:92:f8:81:0d:c6:
1a:a5:bd:73
-----BEGIN CERTIFICATE-----
MIIFHzCCBAegAwIBAgISAY0+u38xlj8qigooH9seac2AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2ZWQzYmE2OGM3OGJmZjJjNDcyNDQwMGFkZTYzNDg0ODJm
YjQzNjQwHhcNMjQwMTI1MDM0ODExWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhN2RmYzQzZWQzZTdkMTY3ZmMxODhmY2E3NDdlMTc4NDIxMDg3NzYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonX5pQx/LMcYP3c5seeEH24RWBif
0QWegcpKbY1BW07qvQqpVe6eUyBY71ouKdt/XaigS0QnxtZxknR0ZeXrTYvElY4w
Z+eL5lxVU6HqoVi3cd/GhSPXLNJkewKfWM5NlhouV5Zg8Yq28Ts61uShEavwSY/3
37sfzI9KzzJpFG8EtRIFnZjOVwkbJdQTy3OvUfQnPwSZ/UK+fhy54BQ5nW3Ee85Y
/OpwHeGIVM/WWTN5TZb671QqBtoMLM9eBT52t0MO4ByF9lP8UbKRd8I+4o3f6KYh
jqac41hZjwALKGA7j9bQZosc9ExTn70sJbWjCq239hMqDLAiWTVSGPrCiQIDAQAB
o4ICKzCCAicwHQYDVR0OBBYEFKffxD7T59Fn/BiPynR+F4QhCHdhMB8GA1UdIwQY
MBaAFGbtO6aMeL/yxHJEAK3mNISC+0NkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnUwN3BveDR2X0xFY2tRQXJlWTBoSUw3UTJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9iNzlhNjgtNWIwMi00MDk3LWEyZTMt
MGE0M2I3YTNlYjU0LzEvcDlfRVB0UG4wV2Y4R0lfS2RINFhoQ0VJZDJFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9iNzlhNjgtNWIwMi00MDk3LWEyZTMtMGE0M2I3YTNlYjU0
LzEvWnUwN3BveDR2X0xFY2tRQXJlWTBoSUw3UTJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDASBAIAATAMAwQAueEaAwQA
wL2dMBoEAgACMBQwEgMHAyoUP4AACAMHBSoUP4AAADANBgkqhkiG9w0BAQsFAAOC
AQEAXtdpZgHaxxm+S2koTTyEdrYoXRFlLw4WjiihSRoJVtUOsT351DbnPowEtIdf
ZfzRhsOfg0cIfuGibXo7BwsPlKfuhaLqMxQFdT+D5iXQUem15MXEwPlzHo3CPqo/
XaGX7BVyx8c+PnyGDaPzzaP0U6g+75bI6yZ/K7LTkTP2o0t7zhFrK7H/ZeVyh6iy
iIkZdFuQNKeFMm/LWFH7R7kt9gdXecIBPdlZDZtOSB1WFKp7puXN2cI8mYPPcHAm
g6y+18C6+KPVohbfp2qrZTfveSHlvwPmS6ZLqkkiZNcDYxDIE9OeMMT8mzJZh1gw
4ETP8jRpb8++7ZL4gQ3GGqW9cw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:14 2024 by rpki-client on console-fra.rpki-client.org