Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/tNY5WG_oACHc2Ij03Wf2e0itJqc.roa
File: tNY5WG_oACHc2Ij03Wf2e0itJqc.roa (raw, json)
Hash identifier: BnxxzxIQMLojBuWaB+/04qdrJrqkDbZu9ZeCAlT7yIk=
Subject key identifier: B4:D6:39:58:6F:E8:00:21:DC:D8:88:F4:DD:67:F6:7B:48:AD:26:A7
Certificate issuer: /CN=09253886a0250a04ec69be00bbf8433c2f014b7c
Certificate serial: 01876F4682F0B38F648EEF8315E821F737A4
Authority key identifier: 09:25:38:86:A0:25:0A:04:EC:69:BE:00:BB:F8:43:3C:2F:01:4B:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CSU4hqAlCgTsab4Au_hDPC8BS3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/tNY5WG_oACHc2Ij03Wf2e0itJqc.roa
Signing time: Tue 11 Apr 2023 07:45:04 +0000
ROA not before: Tue 11 Apr 2023 07:45:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42926
IP address blocks: 194.110.170.0/24 maxlen: 24
194.110.168.0/24 maxlen: 24
185.84.183.0/24 maxlen: 24
185.84.182.0/24 maxlen: 24
185.84.181.0/24 maxlen: 24
185.84.180.0/24 maxlen: 24
2a05:a740::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:6f:46:82:f0:b3:8f:64:8e:ef:83:15:e8:21:f7:37:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09253886a0250a04ec69be00bbf8433c2f014b7c
Validity
Not Before: Apr 11 07:45:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b4d639586fe80021dcd888f4dd67f67b48ad26a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ae:66:f7:ad:14:64:88:f0:a3:d2:1b:36:f0:
ba:4e:f5:b2:f7:7c:03:f5:04:8d:bf:5e:a8:aa:e2:
2e:9e:74:a7:dd:12:39:c7:63:38:e8:5e:0b:69:3b:
0a:25:8d:e4:44:58:98:17:03:2a:4f:53:96:ed:c5:
47:f9:c0:64:f8:a1:fc:d8:5a:a4:a7:c7:2b:7b:23:
70:60:c7:8d:20:60:31:91:38:f4:0b:f0:1b:2a:28:
cf:aa:b9:30:ec:ff:ff:06:bc:74:36:06:1d:21:ef:
e6:52:80:dd:16:b2:c4:53:b3:47:b7:6d:27:3a:40:
5c:4c:ac:b3:45:60:1d:9c:6e:7d:a0:86:c4:81:5e:
2d:46:ac:d5:3b:53:c8:6f:49:2a:af:8b:28:50:95:
83:32:e3:51:a8:33:27:e3:48:76:4c:16:13:08:71:
2f:ec:04:13:7f:d2:11:51:8a:1d:51:69:d0:e4:be:
2b:1e:d5:b8:c9:61:a6:c2:c9:fd:78:2d:d3:2c:38:
a2:52:1e:53:97:27:3c:1f:36:e5:d4:f0:6d:73:a1:
68:aa:f6:fe:02:d7:c0:26:df:ec:af:11:f9:60:57:
c1:58:fb:06:4f:f3:bd:5b:6d:e5:04:6d:49:32:f6:
94:e1:07:84:0d:24:fa:8b:bb:10:62:5e:6e:d3:8b:
ba:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:D6:39:58:6F:E8:00:21:DC:D8:88:F4:DD:67:F6:7B:48:AD:26:A7
X509v3 Authority Key Identifier:
keyid:09:25:38:86:A0:25:0A:04:EC:69:BE:00:BB:F8:43:3C:2F:01:4B:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CSU4hqAlCgTsab4Au_hDPC8BS3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/tNY5WG_oACHc2Ij03Wf2e0itJqc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.84.180.0/22
194.110.168.0/24
194.110.170.0/24
IPv6:
2a05:a740::/29
Signature Algorithm: sha256WithRSAEncryption
19:0b:e8:81:06:51:8f:cf:a3:7b:df:a3:03:48:21:9e:e5:60:
03:e6:a4:30:db:a0:a7:78:36:15:50:59:e9:f2:97:ee:96:2c:
9b:05:40:ea:1b:f6:9d:b5:57:49:79:63:9e:24:00:66:2e:0c:
b8:69:25:2f:1b:ee:de:33:22:0f:af:96:c3:f8:98:be:19:5c:
b7:27:28:8d:95:75:24:59:81:0a:79:fe:58:2a:d5:ef:47:3f:
2e:7b:5f:aa:fe:91:e5:a0:ce:52:05:90:b5:44:bb:16:25:37:
d4:5e:01:0f:7f:7f:13:4b:df:58:82:6e:69:d9:4e:0a:f0:d7:
c9:38:56:84:25:bb:d0:58:93:9c:ce:80:39:99:cf:bf:e5:24:
28:32:66:50:22:c0:a6:c7:c3:b4:25:4f:16:de:e2:d6:2b:0d:
ca:75:45:f8:6f:c2:44:40:36:0f:b8:2f:c1:b6:87:67:56:57:
f1:80:d4:55:28:9e:31:b0:11:77:5a:3d:da:ee:cb:53:0d:81:
ea:0d:83:02:55:f3:ea:17:fc:b4:39:73:19:7f:71:3e:c2:64:
ad:2d:34:f7:d1:13:97:94:6d:cf:5f:14:5f:7d:fc:9a:ad:f4:
4b:6f:df:7f:fb:66:84:39:24:bd:50:56:62:05:93:2f:8b:a6:
81:92:1a:f3
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAYdvRoLws49kju+DFegh9zekMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MjUzODg2YTAyNTBhMDRlYzY5YmUwMGJiZjg0MzNjMmYw
MTRiN2MwHhcNMjMwNDExMDc0NTA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNGQ2Mzk1ODZmZTgwMDIxZGNkODg4ZjRkZDY3ZjY3YjQ4YWQyNmE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtq5m960UZIjwo9IbNvC6TvWy93wD
9QSNv16oquIunnSn3RI5x2M46F4LaTsKJY3kRFiYFwMqT1OW7cVH+cBk+KH82Fqk
p8creyNwYMeNIGAxkTj0C/AbKijPqrkw7P//Brx0NgYdIe/mUoDdFrLEU7NHt20n
OkBcTKyzRWAdnG59oIbEgV4tRqzVO1PIb0kqr4soUJWDMuNRqDMn40h2TBYTCHEv
7AQTf9IRUYodUWnQ5L4rHtW4yWGmwsn9eC3TLDiiUh5Tlyc8Hzbl1PBtc6Foqvb+
AtfAJt/srxH5YFfBWPsGT/O9W23lBG1JMvaU4QeEDST6i7sQYl5u04u6IQIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFLTWOVhv6AAh3NiI9N1n9ntIrSanMB8GA1UdIwQY
MBaAFAklOIagJQoE7Gm+ALv4QzwvAUt8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1NVNGhxQWxDZ1RzYWI0QXVfaERQQzhCUzN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS8zNmY4M2UtNmJlNi00MmM1LTgzODAt
MTE0YWQ0MWNmMzMxLzEvdE5ZNVdHX29BQ0hjMklqMDNXZjJlMGl0SnFjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS8zNmY4M2UtNmJlNi00MmM1LTgzODAtMTE0YWQ0MWNmMzMx
LzEvQ1NVNGhxQWxDZ1RzYWI0QXVfaERQQzhCUzN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCuVS0AwQA
wm6oAwQAwm6qMA0EAgACMAcDBQMqBadAMA0GCSqGSIb3DQEBCwUAA4IBAQAZC+iB
BlGPz6N736MDSCGe5WAD5qQw26CneDYVUFnp8pfuliybBUDqG/adtVdJeWOeJABm
Lgy4aSUvG+7eMyIPr5bD+Ji+GVy3JyiNlXUkWYEKef5YKtXvRz8ue1+q/pHloM5S
BZC1RLsWJTfUXgEPf38TS99Ygm5p2U4K8NfJOFaEJbvQWJOczoA5mc+/5SQoMmZQ
IsCmx8O0JU8W3uLWKw3KdUX4b8JEQDYPuC/BtodnVlfxgNRVKJ4xsBF3Wj3a7stT
DYHqDYMCVfPqF/y0OXMZf3E+wmStLTT30ROXlG3PXxRfffyarfRLb99/+2aEOSS9
UFZiBZMvi6aBkhrz
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:26 2023 by rpki-client on console-ams.rpki-client.org