Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9tZDo0mtn7nKln90MMjwAqVGYTI.roa
File: 9tZDo0mtn7nKln90MMjwAqVGYTI.roa (raw, json)
Hash identifier: gSeGNoVr8dFQchryMw6LkZaUb2UsekIpNUDUsQKyAys=
Subject key identifier: F6:D6:43:A3:49:AD:9F:B9:CA:96:7F:74:30:C8:F0:02:A5:46:61:32
Certificate issuer: /CN=f49ba99114ebdabd6e4cbd36f6cd475b33cf1386
Certificate serial: 018D0D6728834D101532DC1F916D8F3FB9C9
Authority key identifier: F4:9B:A9:91:14:EB:DA:BD:6E:4C:BD:36:F6:CD:47:5B:33:CF:13:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9JupkRTr2r1uTL029s1HWzPPE4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9tZDo0mtn7nKln90MMjwAqVGYTI.roa
Signing time: Mon 15 Jan 2024 13:54:40 +0000
ROA not before: Mon 15 Jan 2024 13:54:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44028
IP address blocks: 185.251.66.0/24 maxlen: 24
185.251.67.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 16 Jan 2024 13:46:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:0d:67:28:83:4d:10:15:32:dc:1f:91:6d:8f:3f:b9:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f49ba99114ebdabd6e4cbd36f6cd475b33cf1386
Validity
Not Before: Jan 15 13:54:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f6d643a349ad9fb9ca967f7430c8f002a5466132
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:61:e0:7f:5b:3b:2a:5a:d1:5e:b8:02:fe:9e:
93:0c:c9:aa:0a:94:a6:bb:99:09:28:b7:d8:ee:65:
61:09:3a:4d:fc:13:71:65:47:7c:ad:60:77:f1:7c:
d0:ba:e3:08:5b:62:3e:36:5c:ad:14:65:0d:86:63:
f4:cd:fc:8c:40:5b:dc:ea:2d:41:3a:b2:34:9a:9d:
8c:bd:25:49:b1:7e:27:94:b9:89:2f:d9:51:03:b9:
6b:ea:e9:6c:2d:65:5d:95:6e:e2:3f:75:8d:1a:1d:
95:9b:a3:58:2b:42:41:2a:34:3d:63:ad:58:cc:cd:
af:89:4c:54:23:ed:5a:97:11:d8:27:a1:2b:1b:d7:
e3:77:b6:ed:cd:0d:c4:ea:3a:49:2f:d9:74:c6:24:
66:f1:9a:1f:5e:2b:92:0e:57:cf:63:30:20:1d:75:
8d:dd:58:f6:6e:1a:c8:4e:e4:6d:d7:cf:94:e3:8f:
3a:87:2e:67:0f:48:d4:a2:ab:0c:7c:f3:94:a9:c0:
ba:f2:21:98:01:c7:a6:8b:66:39:33:fd:33:e5:78:
67:7b:69:f2:10:f0:c5:b5:bd:4c:0f:53:c6:f4:02:
20:96:36:4b:d4:84:f8:5d:45:75:65:6b:24:af:e2:
ff:09:26:ae:b1:db:ab:0c:92:34:55:27:f3:1a:0a:
1d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:D6:43:A3:49:AD:9F:B9:CA:96:7F:74:30:C8:F0:02:A5:46:61:32
X509v3 Authority Key Identifier:
keyid:F4:9B:A9:91:14:EB:DA:BD:6E:4C:BD:36:F6:CD:47:5B:33:CF:13:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9JupkRTr2r1uTL029s1HWzPPE4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9tZDo0mtn7nKln90MMjwAqVGYTI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.251.66.0/23
Signature Algorithm: sha256WithRSAEncryption
8c:b9:10:82:a1:2a:38:29:2d:b5:ad:ea:15:ba:ee:15:88:81:
0d:86:60:5e:c3:a1:81:fe:b8:de:f7:65:96:04:8c:eb:04:60:
05:bc:e0:01:74:86:32:b9:c4:1b:26:ab:99:7c:4f:d6:40:8e:
e9:35:6a:8f:4f:96:82:3d:8f:24:44:ec:22:de:fb:79:aa:f6:
73:3d:b4:eb:90:db:0f:8e:e1:6d:d2:ff:bc:78:24:c7:08:72:
3e:73:13:ae:d7:47:2f:4b:3b:8c:e9:d6:fd:aa:8e:55:c1:72:
7a:03:74:36:fc:33:13:a3:e9:9f:84:dc:20:fa:1c:29:9e:45:
be:72:d2:eb:40:e1:08:16:85:12:b9:d2:80:49:d5:8f:80:0d:
d0:44:31:5b:e9:1b:6b:9d:13:3a:73:de:67:1a:4b:94:40:e0:
ac:6f:3b:e7:bf:f9:0e:c4:b2:f2:a4:c0:56:fa:b2:0a:35:cd:
4f:bb:1a:1a:7f:9c:e9:2b:9c:d9:6f:a5:51:58:02:0d:5c:1b:
ff:ce:85:25:00:ed:05:7d:85:85:c1:ac:c2:8d:bb:8d:34:8c:
2e:d6:cb:f5:e6:ea:fa:f1:77:8a:52:e2:98:20:a6:98:59:4c:
ae:93:cc:ac:76:f8:db:88:af:67:06:75:97:17:90:0a:03:c6:
94:ba:e5:11
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY0NZyiDTRAVMtwfkW2PP7nJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0OWJhOTkxMTRlYmRhYmQ2ZTRjYmQzNmY2Y2Q0NzViMzNj
ZjEzODYwHhcNMjQwMTE1MTM1NDQwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNmQ2NDNhMzQ5YWQ5ZmI5Y2E5NjdmNzQzMGM4ZjAwMmE1NDY2MTMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmHgf1s7KlrRXrgC/p6TDMmqCpSm
u5kJKLfY7mVhCTpN/BNxZUd8rWB38XzQuuMIW2I+NlytFGUNhmP0zfyMQFvc6i1B
OrI0mp2MvSVJsX4nlLmJL9lRA7lr6ulsLWVdlW7iP3WNGh2Vm6NYK0JBKjQ9Y61Y
zM2viUxUI+1alxHYJ6ErG9fjd7btzQ3E6jpJL9l0xiRm8ZofXiuSDlfPYzAgHXWN
3Vj2bhrITuRt18+U4486hy5nD0jUoqsMfPOUqcC68iGYAcemi2Y5M/0z5Xhne2ny
EPDFtb1MD1PG9AIgljZL1IT4XUV1ZWskr+L/CSausdurDJI0VSfzGgodfQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPbWQ6NJrZ+5ypZ/dDDI8AKlRmEyMB8GA1UdIwQY
MBaAFPSbqZEU69q9bky9NvbNR1szzxOGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUp1cGtSVHIycjF1VEwwMjlzMUhXelBQRTRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS82ZTRkYjctNDVhOC00OTkzLWIzODQt
OWE2ZWU0ODZlZmY3LzEvOXRaRG8wbXRuN25LbG45ME1NandBcVZHWVRJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS82ZTRkYjctNDVhOC00OTkzLWIzODQtOWE2ZWU0ODZlZmY3
LzEvOUp1cGtSVHIycjF1VEwwMjlzMUhXelBQRTRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuftCMA0G
CSqGSIb3DQEBCwUAA4IBAQCMuRCCoSo4KS21reoVuu4ViIENhmBew6GB/rje92WW
BIzrBGAFvOABdIYyucQbJquZfE/WQI7pNWqPT5aCPY8kROwi3vt5qvZzPbTrkNsP
juFt0v+8eCTHCHI+cxOu10cvSzuM6db9qo5VwXJ6A3Q2/DMTo+mfhNwg+hwpnkW+
ctLrQOEIFoUSudKASdWPgA3QRDFb6RtrnRM6c95nGkuUQOCsbzvnv/kOxLLypMBW
+rIKNc1Puxoaf5zpK5zZb6VRWAINXBv/zoUlAO0FfYWFwazCjbuNNIwu1sv15ur6
8XeKUuKYIKaYWUyuk8ysdvjbiK9nBnWXF5AKA8aUuuUR
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:57 2024 by rpki-client on console-fra.rpki-client.org