Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/1TKBrC5qMZXJxs-7DYdCenZwGHM.roa
File: 1TKBrC5qMZXJxs-7DYdCenZwGHM.roa (raw, json)
Hash identifier: oDeI+hTe4eNf/hY+XGUyKu/TC97H0GkqtB9u6ALtL1I=
Subject key identifier: D5:32:81:AC:2E:6A:31:95:C9:C6:CF:BB:0D:87:42:7A:76:70:18:73
Certificate issuer: /CN=f49ba99114ebdabd6e4cbd36f6cd475b33cf1386
Certificate serial: 018D2FCF0087368FC8ED33304C07E92B8FE5
Authority key identifier: F4:9B:A9:91:14:EB:DA:BD:6E:4C:BD:36:F6:CD:47:5B:33:CF:13:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9JupkRTr2r1uTL029s1HWzPPE4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/1TKBrC5qMZXJxs-7DYdCenZwGHM.roa
Signing time: Mon 22 Jan 2024 06:15:11 +0000
ROA not before: Mon 22 Jan 2024 06:15:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50875
IP address blocks: 185.86.244.0/22 maxlen: 22
185.86.244.0/24 maxlen: 24
185.86.245.0/24 maxlen: 24
185.86.246.0/24 maxlen: 24
185.86.247.0/24 maxlen: 24
185.251.66.0/23 maxlen: 23
185.251.66.0/24 maxlen: 24
185.251.67.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 25 Jan 2024 08:50:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:2f:cf:00:87:36:8f:c8:ed:33:30:4c:07:e9:2b:8f:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f49ba99114ebdabd6e4cbd36f6cd475b33cf1386
Validity
Not Before: Jan 22 06:15:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d53281ac2e6a3195c9c6cfbb0d87427a76701873
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0d:1c:c2:60:66:1c:8b:b1:97:1e:ac:8d:d0:
68:9c:99:c3:89:d1:11:30:2c:7a:95:c4:e3:12:9c:
33:30:66:75:9e:e6:92:5f:68:69:8f:56:62:8d:95:
a8:be:60:c4:e8:11:23:6f:79:1d:62:79:dd:27:77:
56:33:5b:25:e7:19:80:cd:0e:7a:b9:03:a9:b3:b0:
64:37:5a:2b:5f:16:1b:09:fb:1c:5d:9e:a6:63:c6:
b0:b6:ec:44:0e:da:f2:1b:f4:87:65:ba:aa:43:62:
bf:61:05:4e:47:52:5f:33:93:1a:ae:63:d3:e0:13:
4d:c1:7b:1d:ee:c0:bd:0a:3c:46:59:4c:0e:6e:a9:
5d:e3:f1:e2:77:89:56:ff:fd:8c:2e:36:0a:99:74:
c2:8e:35:4d:22:c4:8e:c5:54:da:b9:6d:99:86:35:
7f:f0:49:04:13:02:14:7b:4e:95:a3:bb:4f:d4:5a:
29:44:5f:3f:43:d4:5e:da:04:4c:2a:5d:ad:fb:04:
ea:89:92:4d:89:5b:9d:41:9f:77:3f:d9:91:f7:a7:
0b:e4:2e:e9:9a:ec:be:b8:33:63:ef:22:2f:32:ea:
6d:2a:ec:4d:f7:8d:ed:89:ad:41:15:5e:4d:2c:20:
c4:48:33:e3:32:5e:1a:60:36:70:cd:d5:37:93:c4:
9b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:32:81:AC:2E:6A:31:95:C9:C6:CF:BB:0D:87:42:7A:76:70:18:73
X509v3 Authority Key Identifier:
keyid:F4:9B:A9:91:14:EB:DA:BD:6E:4C:BD:36:F6:CD:47:5B:33:CF:13:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9JupkRTr2r1uTL029s1HWzPPE4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/1TKBrC5qMZXJxs-7DYdCenZwGHM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.86.244.0/22
185.251.66.0/23
Signature Algorithm: sha256WithRSAEncryption
5f:e5:41:be:73:27:a8:12:bc:14:07:53:81:9a:70:82:4c:d5:
86:1d:f8:a3:40:d5:78:19:33:f4:f0:98:f1:7c:19:96:f2:8e:
05:45:d8:25:5c:b7:b3:21:71:12:51:99:b7:4c:e6:34:23:b0:
1f:65:32:38:8e:8d:d1:1c:9a:66:32:b4:e5:fe:d5:aa:f5:3b:
3b:cc:18:9b:97:60:48:d8:92:c3:cd:55:f5:1d:ee:6e:73:4c:
5d:4f:46:98:b4:29:77:6e:35:75:90:c7:4c:e7:f0:55:d5:1f:
72:8e:f9:88:e3:d4:6a:6e:b8:1c:80:4e:f4:83:ae:e5:c6:6f:
a4:96:b8:30:33:eb:4e:14:78:8f:15:e9:87:da:8a:dc:96:4f:
0d:4d:62:7b:98:89:02:7e:9b:49:1f:6a:fc:02:e2:35:df:ed:
ca:45:f0:f1:3a:df:b2:f3:00:97:ed:59:13:c8:36:a7:2a:f2:
a7:c1:90:b1:a0:d9:1a:ce:bd:db:1e:b7:29:b5:6d:54:5f:b1:
d0:0f:2b:a0:45:a5:4a:83:bf:61:28:4b:89:20:b2:a0:c2:3f:
5b:6f:6f:e6:72:ad:cf:87:d7:4f:45:3d:b8:20:3c:86:9d:a1:
f6:ab:bf:7c:f0:22:99:2f:11:8b:1a:be:fe:ae:1c:9b:dd:04:
52:4c:d3:be
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAY0vzwCHNo/I7TMwTAfpK4/lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0OWJhOTkxMTRlYmRhYmQ2ZTRjYmQzNmY2Y2Q0NzViMzNj
ZjEzODYwHhcNMjQwMTIyMDYxNTExWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNTMyODFhYzJlNmEzMTk1YzljNmNmYmIwZDg3NDI3YTc2NzAxODczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsg0cwmBmHIuxlx6sjdBonJnDidER
MCx6lcTjEpwzMGZ1nuaSX2hpj1ZijZWovmDE6BEjb3kdYnndJ3dWM1sl5xmAzQ56
uQOps7BkN1orXxYbCfscXZ6mY8awtuxEDtryG/SHZbqqQ2K/YQVOR1JfM5MarmPT
4BNNwXsd7sC9CjxGWUwObqld4/Hid4lW//2MLjYKmXTCjjVNIsSOxVTauW2ZhjV/
8EkEEwIUe06Vo7tP1FopRF8/Q9Re2gRMKl2t+wTqiZJNiVudQZ93P9mR96cL5C7p
muy+uDNj7yIvMuptKuxN943tia1BFV5NLCDESDPjMl4aYDZwzdU3k8SbTQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFNUygawuajGVycbPuw2HQnp2cBhzMB8GA1UdIwQY
MBaAFPSbqZEU69q9bky9NvbNR1szzxOGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUp1cGtSVHIycjF1VEwwMjlzMUhXelBQRTRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS82ZTRkYjctNDVhOC00OTkzLWIzODQt
OWE2ZWU0ODZlZmY3LzEvMVRLQnJDNXFNWlhKeHMtN0RZZENlblp3R0hNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS82ZTRkYjctNDVhOC00OTkzLWIzODQtOWE2ZWU0ODZlZmY3
LzEvOUp1cGtSVHIycjF1VEwwMjlzMUhXelBQRTRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCuVb0AwQB
uftCMA0GCSqGSIb3DQEBCwUAA4IBAQBf5UG+cyeoErwUB1OBmnCCTNWGHfijQNV4
GTP08JjxfBmW8o4FRdglXLezIXESUZm3TOY0I7AfZTI4jo3RHJpmMrTl/tWq9Ts7
zBibl2BI2JLDzVX1He5uc0xdT0aYtCl3bjV1kMdM5/BV1R9yjvmI49RqbrgcgE70
g67lxm+klrgwM+tOFHiPFemH2orclk8NTWJ7mIkCfptJH2r8AuI13+3KRfDxOt+y
8wCX7VkTyDanKvKnwZCxoNkazr3bHrcptW1UX7HQDyugRaVKg79hKEuJILKgwj9b
b2/mcq3Ph9dPRT24IDyGnaH2q7988CKZLxGLGr7+rhyb3QRSTNO+
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:57 2024 by rpki-client on console-fra.rpki-client.org