Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/621woP9euG37xbjKhFWhX8Q2r48.roa
File: 621woP9euG37xbjKhFWhX8Q2r48.roa (raw, json)
Hash identifier: p24PAMkRIcZ3i/ElvDu65yR9VrTy6pkRDTFE1/smtIM=
Subject key identifier: EB:6D:70:A0:FF:5E:B8:6D:FB:C5:B8:CA:84:55:A1:5F:C4:36:AF:8F
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 01891B0544C760EB9F8F2DE2A98876E41968
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/621woP9euG37xbjKhFWhX8Q2r48.roa
Signing time: Mon 03 Jul 2023 09:11:17 +0000
ROA not before: Mon 03 Jul 2023 09:11:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 149457
IP address blocks: 185.233.17.0/24 maxlen: 24
85.92.114.0/24 maxlen: 24
185.233.18.0/24 maxlen: 24
193.107.218.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:1b:05:44:c7:60:eb:9f:8f:2d:e2:a9:88:76:e4:19:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Jul 3 09:11:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eb6d70a0ff5eb86dfbc5b8ca8455a15fc436af8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:56:2f:fc:7d:5d:ac:d4:b8:ea:df:95:91:a1:
81:61:72:8a:25:2f:51:4f:bf:38:f8:5e:23:02:f1:
b8:74:95:52:dc:65:4a:51:d0:a1:12:19:a5:50:be:
c9:8d:1d:9b:c8:f1:7e:99:37:b2:34:c8:72:c5:cf:
df:52:69:c2:24:7e:18:16:23:64:19:c5:d1:ea:31:
5a:db:5b:39:7f:19:9d:d8:1c:ba:a1:5e:a3:2e:18:
c3:f8:7a:75:16:74:e2:6c:07:27:a9:ad:cb:a0:93:
c9:a2:11:56:d8:c4:00:fa:17:82:73:ae:9f:9d:33:
45:3c:f3:7c:eb:0b:51:47:64:1c:dc:10:31:71:19:
ec:17:b1:2c:2b:91:d5:24:cf:19:99:01:48:28:56:
2c:e0:05:bd:b2:25:4c:ce:06:e4:fa:f7:c7:ff:99:
a1:76:a6:a9:13:83:d2:69:5b:09:08:3d:c4:37:16:
8e:ea:4b:28:f5:fc:dd:04:86:6f:c2:f3:cf:2c:1b:
7f:95:3a:c5:b7:cc:9a:cd:d8:b7:99:4d:12:af:33:
7c:b5:a6:36:1b:9a:76:30:44:de:d8:74:53:9c:de:
cf:74:6a:7a:de:b7:ff:5b:28:e2:85:2e:8a:9a:4c:
33:b0:11:bb:a2:f0:cf:f9:23:1b:6a:a4:1a:11:bb:
d8:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:6D:70:A0:FF:5E:B8:6D:FB:C5:B8:CA:84:55:A1:5F:C4:36:AF:8F
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/621woP9euG37xbjKhFWhX8Q2r48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.92.114.0/24
185.233.17.0-185.233.18.255
193.107.218.0/24
Signature Algorithm: sha256WithRSAEncryption
60:2b:ba:34:ba:f2:fe:8a:01:07:2e:f0:e9:e0:a1:38:9b:c8:
8e:cf:7a:66:8a:b2:d5:5c:e1:b4:d0:9c:47:8c:73:13:50:d5:
52:40:e8:48:cb:f6:b0:b0:32:91:0d:c9:bf:7b:f7:69:92:95:
2c:cd:08:8c:81:6c:d7:12:ea:77:ce:2a:6f:dc:e0:6d:52:74:
b1:17:f6:ad:d4:e9:59:b3:b2:7c:8e:52:5a:df:78:a1:ae:02:
2a:37:c8:0b:61:0d:2e:9f:bc:ba:00:a0:e4:4b:bd:6b:ef:f8:
d0:69:8a:47:a2:d4:d7:a0:0e:5c:18:d3:bf:5c:2e:a7:a1:4b:
66:a7:19:81:8c:56:8e:57:84:de:db:15:58:ab:2e:cf:d5:bd:
55:a0:6d:78:51:c9:60:36:09:30:ab:e6:16:55:0c:fb:8d:5b:
70:c0:d9:d6:08:f7:7e:ad:90:1b:5b:d7:33:fa:39:a9:17:c1:
51:d8:e5:ac:28:4b:06:60:7c:d1:88:e3:25:00:03:61:05:13:
71:c7:ba:37:79:9e:16:e5:aa:87:c2:fa:e3:39:d0:ec:ce:18:
ff:e0:a4:9d:fe:e0:d2:1a:07:98:d4:c7:e2:66:73:57:ce:c0:
57:f0:c8:40:5b:2b:ec:b7:21:13:b3:36:a5:9d:f8:10:67:39:
22:4b:16:31
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAYkbBUTHYOufjy3iqYh25BloMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3ZDAzZjI5ODE4MGNjMTA5ZjE5ZDRiMTk5MmM3ZDcxYzU2
YzhkY2MwHhcNMjMwNzAzMDkxMTE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYjZkNzBhMGZmNWViODZkZmJjNWI4Y2E4NDU1YTE1ZmM0MzZhZjhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkFYv/H1drNS46t+VkaGBYXKKJS9R
T784+F4jAvG4dJVS3GVKUdChEhmlUL7JjR2byPF+mTeyNMhyxc/fUmnCJH4YFiNk
GcXR6jFa21s5fxmd2By6oV6jLhjD+Hp1FnTibAcnqa3LoJPJohFW2MQA+heCc66f
nTNFPPN86wtRR2Qc3BAxcRnsF7EsK5HVJM8ZmQFIKFYs4AW9siVMzgbk+vfH/5mh
dqapE4PSaVsJCD3ENxaO6kso9fzdBIZvwvPPLBt/lTrFt8yazdi3mU0SrzN8taY2
G5p2METe2HRTnN7PdGp63rf/WyjihS6KmkwzsBG7ovDP+SMbaqQaEbvY7QIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFOttcKD/Xrht+8W4yoRVoV/ENq+PMB8GA1UdIwQY
MBaAFBfQPymBgMwQnxnUsZksfXHFbI3MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUt
OTE4YWM2NDYyNjc5LzEvNjIxd29QOWV1RzM3eGJqS2hGV2hYOFEycjQ4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUtOTE4YWM2NDYyNjc5
LzEvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQAVVxyMAwD
BAC56REDBAC56RIDBADBa9owDQYJKoZIhvcNAQELBQADggEBAGArujS68v6KAQcu
8OngoTibyI7PemaKstVc4bTQnEeMcxNQ1VJA6EjL9rCwMpENyb9792mSlSzNCIyB
bNcS6nfOKm/c4G1SdLEX9q3U6VmzsnyOUlrfeKGuAio3yAthDS6fvLoAoORLvWvv
+NBpikei1NegDlwY079cLqehS2anGYGMVo5XhN7bFVirLs/VvVWgbXhRyWA2CTCr
5hZVDPuNW3DA2dYI936tkBtb1zP6OakXwVHY5awoSwZgfNGI4yUAA2EFE3HHujd5
nhblqofC+uM50OzOGP/gpJ3+4NIaB5jUx+Jmc1fOwFfwyEBbK+y3IROzNqWd+BBn
OSJLFjE=
-----END CERTIFICATE-----
Generated at Sat Dec 23 13:11:22 2023 by rpki-client on console-ams.rpki-client.org