Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/iNmo7Yfw8-3lbKFaH-qpjvKz5gs.roa
File: iNmo7Yfw8-3lbKFaH-qpjvKz5gs.roa (raw, json)
Hash identifier: 23IpB7buJ5j6KJ8rM+cxjh0NphPUJK8GUfOMhduXfLQ=
Subject key identifier: 88:D9:A8:ED:87:F0:F3:ED:E5:6C:A1:5A:1F:EA:A9:8E:F2:B3:E6:0B
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 018571D7CAB7D10A7D19512A935669173977
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/iNmo7Yfw8-3lbKFaH-qpjvKz5gs.roa
Signing time: Mon 02 Jan 2023 09:37:25 +0000
ROA not before: Mon 02 Jan 2023 09:37:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 188.255.206.0/24 maxlen: 24
188.255.134.0/24 maxlen: 24
212.69.10.0/23 maxlen: 23
109.233.184.0/23 maxlen: 24
178.253.237.0/24 maxlen: 24
109.121.0.0/19 maxlen: 19
185.47.91.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 26 Jan 2023 09:07:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d7:ca:b7:d1:0a:7d:19:51:2a:93:56:69:17:39:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jan 2 09:37:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=88d9a8ed87f0f3ede56ca15a1feaa98ef2b3e60b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:4f:1d:50:cb:ec:97:17:9a:5f:8c:cd:94:f1:
93:7e:59:03:7e:d0:ee:e3:b7:e9:90:05:49:6c:af:
27:5b:38:c9:6b:2c:25:b3:af:6d:ff:b8:70:a9:0e:
5a:a8:91:5c:5b:0b:45:36:fd:f4:c5:75:ff:00:79:
17:00:10:1c:5d:09:18:b6:0f:e1:fa:f9:c5:75:2d:
fa:d2:5d:78:42:91:60:96:ac:5b:86:56:09:b1:ea:
8f:2c:d6:2c:38:cd:66:2f:66:66:8e:76:6e:54:c0:
e2:20:0a:6c:e0:4b:94:06:db:0e:5a:57:a7:ec:cb:
cb:54:03:92:b2:43:48:a8:ed:c6:4c:2f:a6:94:91:
23:c4:bf:f6:f7:da:4d:74:db:50:a3:99:fa:c6:5c:
c6:ba:2e:3c:bc:8f:95:af:95:a2:83:d3:b1:a7:03:
9b:73:cd:65:d7:a5:9a:f6:9b:d2:fc:b8:d6:a8:0e:
4d:e7:33:7e:40:87:fb:a6:f6:e3:30:d8:99:21:35:
8a:a0:af:36:38:86:e4:1d:50:84:77:a2:43:5d:26:
ba:6c:b2:82:dc:ae:44:38:31:5e:56:9d:d2:a1:31:
1d:66:bb:d0:d7:aa:a6:0f:62:a0:d0:b7:00:85:ec:
be:0a:8f:84:62:1e:72:b9:6f:70:03:49:3e:b6:d1:
08:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:D9:A8:ED:87:F0:F3:ED:E5:6C:A1:5A:1F:EA:A9:8E:F2:B3:E6:0B
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/iNmo7Yfw8-3lbKFaH-qpjvKz5gs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.121.0.0/19
109.233.184.0/23
178.253.237.0/24
185.47.91.0/24
188.255.134.0/24
188.255.206.0/24
212.69.10.0/23
Signature Algorithm: sha256WithRSAEncryption
36:ed:e3:32:e9:63:fb:da:f2:b9:4f:ab:7f:b4:b7:fb:48:3d:
44:c8:25:15:57:5b:9a:54:c0:38:00:b7:1c:a2:dc:0c:54:34:
64:52:38:0b:18:cc:e3:41:24:a7:2e:c8:1e:86:f1:7f:fa:73:
bd:c6:68:5d:63:0d:fa:ab:aa:e1:af:85:a8:f8:12:88:72:04:
41:75:5d:8d:c8:72:36:53:22:bb:78:f5:14:c2:f5:ae:3e:30:
d9:6a:92:7e:5f:9d:58:56:76:53:fa:c0:8e:ef:e4:4c:65:95:
26:03:f1:3e:18:06:56:bf:df:0c:dd:72:5d:36:04:b4:69:9e:
85:4c:f5:35:23:f2:6d:f9:48:f9:19:fd:35:c0:b5:f3:ab:8c:
9f:28:87:17:d0:93:7c:91:af:e6:02:d2:76:e2:10:6e:da:97:
3f:23:76:dc:bf:25:c2:82:22:8a:43:c3:d8:9d:a5:ad:30:a5:
e7:20:6e:7f:88:a0:be:43:ae:1a:b4:6d:1b:6a:b5:6e:ae:a1:
2a:b5:8e:26:85:b1:93:00:73:4c:b0:49:6d:ea:a1:d2:29:54:
c5:43:eb:13:1f:88:ed:29:32:7f:65:3c:08:ca:95:75:81:a5:
ea:47:af:0a:a7:5a:d7:cd:5f:8b:5d:bb:e9:74:4b:87:c3:74:
0f:cc:9d:5d
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAYVx18q30Qp9GVEqk1ZpFzl3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj
N2U5MTUwHhcNMjMwMTAyMDkzNzI1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OGQ5YThlZDg3ZjBmM2VkZTU2Y2ExNWExZmVhYTk4ZWYyYjNlNjBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1k8dUMvslxeaX4zNlPGTflkDftDu
47fpkAVJbK8nWzjJaywls69t/7hwqQ5aqJFcWwtFNv30xXX/AHkXABAcXQkYtg/h
+vnFdS360l14QpFglqxbhlYJseqPLNYsOM1mL2ZmjnZuVMDiIAps4EuUBtsOWlen
7MvLVAOSskNIqO3GTC+mlJEjxL/299pNdNtQo5n6xlzGui48vI+Vr5Wig9OxpwOb
c81l16Wa9pvS/LjWqA5N5zN+QIf7pvbjMNiZITWKoK82OIbkHVCEd6JDXSa6bLKC
3K5EODFeVp3SoTEdZrvQ16qmD2Kg0LcAhey+Co+EYh5yuW9wA0k+ttEINQIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFIjZqO2H8PPt5WyhWh/qqY7ys+YLMB8GA1UdIwQY
MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt
ZmFlNWRiZWQzYjFiLzEvaU5tbzdZZnc4LTNsYktGYUgtcXBqdkt6NWdzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi
LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQFbXkAAwQB
bem4AwQAsv3tAwQAuS9bAwQAvP+GAwQAvP/OAwQB1EUKMA0GCSqGSIb3DQEBCwUA
A4IBAQA27eMy6WP72vK5T6t/tLf7SD1EyCUVV1uaVMA4ALccotwMVDRkUjgLGMzj
QSSnLsgehvF/+nO9xmhdYw36q6rhr4Wo+BKIcgRBdV2NyHI2UyK7ePUUwvWuPjDZ
apJ+X51YVnZT+sCO7+RMZZUmA/E+GAZWv98M3XJdNgS0aZ6FTPU1I/Jt+Uj5Gf01
wLXzq4yfKIcX0JN8ka/mAtJ24hBu2pc/I3bcvyXCgiKKQ8PYnaWtMKXnIG5/iKC+
Q64atG0barVurqEqtY4mhbGTAHNMsElt6qHSKVTFQ+sTH4jtKTJ/ZTwIypV1gaXq
R68Kp1rXzV+LXbvpdEuHw3QPzJ1d
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:05 2024 by rpki-client on console-ams.rpki-client.org