Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/67bce3-ecbc-478d-8210-d07906a84b1d/1/kLyNdKibb3NY4i74ljyCiah9OJI.roa
File: kLyNdKibb3NY4i74ljyCiah9OJI.roa (raw, json)
Hash identifier: UJ1BR9fhs8/ecDCvDaCW/sIIcaNaWqGpYLX7zbdFc1I=
Subject key identifier: 90:BC:8D:74:A8:9B:6F:73:58:E2:2E:F8:96:3C:82:89:A8:7D:38:92
Certificate issuer: /CN=188fb0985e360c38f8658d56687ca862d9408d90
Certificate serial: 0185734CDD284E8946D4A26DF100B3C120A7
Authority key identifier: 18:8F:B0:98:5E:36:0C:38:F8:65:8D:56:68:7C:A8:62:D9:40:8D:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GI-wmF42DDj4ZY1WaHyoYtlAjZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/67bce3-ecbc-478d-8210-d07906a84b1d/1/kLyNdKibb3NY4i74ljyCiah9OJI.roa
Signing time: Mon 02 Jan 2023 16:24:55 +0000
ROA not before: Mon 02 Jan 2023 16:24:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8868
IP address blocks: 185.120.161.0/24 maxlen: 24
185.120.162.0/24 maxlen: 24
185.120.163.0/24 maxlen: 24
185.194.79.0/24 maxlen: 24
185.120.160.0/24 maxlen: 24
185.120.160.0/23 maxlen: 23
185.174.250.0/24 maxlen: 24
185.174.248.0/23 maxlen: 23
185.174.251.0/24 maxlen: 24
185.194.78.0/24 maxlen: 24
185.194.76.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:4c:dd:28:4e:89:46:d4:a2:6d:f1:00:b3:c1:20:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=188fb0985e360c38f8658d56687ca862d9408d90
Validity
Not Before: Jan 2 16:24:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=90bc8d74a89b6f7358e22ef8963c8289a87d3892
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:99:49:9d:a3:3d:28:a2:67:22:19:48:c7:77:
8b:84:ee:2c:37:34:be:e0:d2:de:91:88:c0:f2:d1:
37:7b:63:10:18:69:27:1d:7b:7a:0f:c9:96:61:8a:
c9:77:78:76:40:e1:7e:3f:de:ff:3d:63:f2:40:12:
fc:18:2e:0a:e8:c0:60:6f:f1:a4:30:20:50:4e:31:
da:31:a6:11:fe:be:24:45:4c:c2:bb:ba:3b:a3:b7:
9f:8d:6a:ba:6f:3d:1e:9a:6b:ac:18:6a:f6:9a:83:
05:59:15:9f:f3:d2:00:a6:5f:a0:18:1f:c8:52:b9:
3a:33:52:8a:8a:a5:9a:24:fa:0b:bd:3d:5e:1d:87:
86:ed:81:f9:18:42:82:89:ee:da:3a:82:00:1c:5d:
52:66:d3:2d:d9:52:47:ee:13:25:f5:8f:65:12:82:
e5:cd:ae:f1:37:8c:c9:b7:50:f4:aa:e7:58:eb:9f:
64:38:2a:02:00:76:3c:bd:6e:e9:8f:21:3e:9b:66:
e4:91:cb:80:45:68:b9:be:42:d5:05:cb:39:a5:1c:
bd:d2:fa:97:11:90:76:a4:95:09:12:75:54:14:5a:
10:99:ef:03:c0:9f:e4:a6:b0:4a:97:cd:fc:fa:4f:
5c:02:30:85:fd:7d:5a:6f:b7:5c:56:8c:9e:1b:ba:
bb:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:BC:8D:74:A8:9B:6F:73:58:E2:2E:F8:96:3C:82:89:A8:7D:38:92
X509v3 Authority Key Identifier:
keyid:18:8F:B0:98:5E:36:0C:38:F8:65:8D:56:68:7C:A8:62:D9:40:8D:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GI-wmF42DDj4ZY1WaHyoYtlAjZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/67bce3-ecbc-478d-8210-d07906a84b1d/1/kLyNdKibb3NY4i74ljyCiah9OJI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/67bce3-ecbc-478d-8210-d07906a84b1d/1/GI-wmF42DDj4ZY1WaHyoYtlAjZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.120.160.0/22
185.174.248.0/22
185.194.76.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:9c:4d:4c:55:ba:07:38:95:b8:a4:fb:ea:58:4b:5f:5d:72:
c7:a6:b0:6f:94:53:75:92:17:1d:ea:b4:30:91:0d:55:16:33:
57:67:a0:3a:40:84:e0:0c:da:d8:04:25:c0:5c:68:b9:3f:90:
75:13:93:f9:16:9d:4a:95:84:21:88:6b:fa:e9:3c:25:03:f5:
1d:92:e0:5d:32:b9:87:06:b8:e5:08:c4:dd:ed:1f:41:a7:25:
f0:28:b7:b2:02:aa:4d:18:7f:79:c5:7e:65:b5:e5:fd:ad:97:
57:f5:05:27:30:30:96:b1:e9:20:fb:b5:3f:8e:42:fe:06:bc:
50:d9:8d:a0:99:44:b6:07:49:da:be:e8:38:36:77:cc:3c:a5:
f9:1e:5d:4a:6c:b0:18:89:d1:89:ba:d8:10:1e:2a:de:4e:c8:
0e:99:c4:c4:26:61:ea:75:ca:30:42:14:da:dd:9b:d4:42:d8:
14:aa:7c:85:34:cd:c7:9b:1a:0f:22:08:07:41:1b:15:90:17:
d6:b1:75:63:20:c1:bb:bd:ec:84:3a:58:10:f9:19:61:1e:5c:
25:07:24:31:e8:84:72:cc:4f:e0:3c:a8:2b:81:b0:a7:47:fb:
42:9e:e9:79:8f:48:3c:c9:5f:80:fa:0d:53:ea:01:5d:76:aa:
4b:eb:de:98
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYVzTN0oTolG1KJt8QCzwSCnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4OGZiMDk4NWUzNjBjMzhmODY1OGQ1NjY4N2NhODYyZDk0
MDhkOTAwHhcNMjMwMTAyMTYyNDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MGJjOGQ3NGE4OWI2ZjczNThlMjJlZjg5NjNjODI4OWE4N2QzODkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJlJnaM9KKJnIhlIx3eLhO4sNzS+
4NLekYjA8tE3e2MQGGknHXt6D8mWYYrJd3h2QOF+P97/PWPyQBL8GC4K6MBgb/Gk
MCBQTjHaMaYR/r4kRUzCu7o7o7efjWq6bz0emmusGGr2moMFWRWf89IApl+gGB/I
Urk6M1KKiqWaJPoLvT1eHYeG7YH5GEKCie7aOoIAHF1SZtMt2VJH7hMl9Y9lEoLl
za7xN4zJt1D0qudY659kOCoCAHY8vW7pjyE+m2bkkcuARWi5vkLVBcs5pRy90vqX
EZB2pJUJEnVUFFoQme8DwJ/kprBKl838+k9cAjCF/X1ab7dcVoyeG7q7VwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFJC8jXSom29zWOIu+JY8gomofTiSMB8GA1UdIwQY
MBaAFBiPsJheNgw4+GWNVmh8qGLZQI2QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0ktd21GNDJERGo0WlkxV2FIeW9ZdGxBalpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi82N2JjZTMtZWNiYy00NzhkLTgyMTAt
ZDA3OTA2YTg0YjFkLzEva0x5TmRLaWJiM05ZNGk3NGxqeUNpYWg5T0pJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi82N2JjZTMtZWNiYy00NzhkLTgyMTAtZDA3OTA2YTg0YjFk
LzEvR0ktd21GNDJERGo0WlkxV2FIeW9ZdGxBalpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCuXigAwQC
ua74AwQCucJMMA0GCSqGSIb3DQEBCwUAA4IBAQAqnE1MVboHOJW4pPvqWEtfXXLH
prBvlFN1khcd6rQwkQ1VFjNXZ6A6QITgDNrYBCXAXGi5P5B1E5P5Fp1KlYQhiGv6
6TwlA/UdkuBdMrmHBrjlCMTd7R9BpyXwKLeyAqpNGH95xX5lteX9rZdX9QUnMDCW
sekg+7U/jkL+BrxQ2Y2gmUS2B0navug4NnfMPKX5Hl1KbLAYidGJutgQHireTsgO
mcTEJmHqdcowQhTa3ZvUQtgUqnyFNM3HmxoPIggHQRsVkBfWsXVjIMG7veyEOlgQ
+RlhHlwlByQx6IRyzE/gPKgrgbCnR/tCnul5j0g8yV+A+g1T6gFddqpL696Y
-----END CERTIFICATE-----
Generated at Tue Jan 2 04:09:40 2024 by rpki-client on console-ams.rpki-client.org