Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/y83uPhP9jQ3xmsIhKmqZ22nlt5s.roa
File: y83uPhP9jQ3xmsIhKmqZ22nlt5s.roa (raw, json)
Hash identifier: zKn6Q5gI+Q/OY/Utr/fKVrAkbYTNM+pJ5lCsq0jil28=
Subject key identifier: CB:CD:EE:3E:13:FD:8D:0D:F1:9A:C2:21:2A:6A:99:DB:69:E5:B7:9B
Certificate issuer: /CN=f49ba99114ebdabd6e4cbd36f6cd475b33cf1386
Certificate serial: 01875EC6D72A70ECA53C0A005E44C0B9DACE
Authority key identifier: F4:9B:A9:91:14:EB:DA:BD:6E:4C:BD:36:F6:CD:47:5B:33:CF:13:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9JupkRTr2r1uTL029s1HWzPPE4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/y83uPhP9jQ3xmsIhKmqZ22nlt5s.roa
Signing time: Sat 08 Apr 2023 02:51:42 +0000
ROA not before: Sat 08 Apr 2023 02:51:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50875
IP address blocks: 185.86.245.0/24 maxlen: 24
185.86.246.0/24 maxlen: 24
185.86.244.0/22 maxlen: 22
185.86.244.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 17 May 2023 09:45:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:5e:c6:d7:2a:70:ec:a5:3c:0a:00:5e:44:c0:b9:da:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f49ba99114ebdabd6e4cbd36f6cd475b33cf1386
Validity
Not Before: Apr 8 02:51:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cbcdee3e13fd8d0df19ac2212a6a99db69e5b79b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:27:94:0e:ec:9d:4d:6d:ff:c1:2c:51:e1:53:
6d:99:f3:32:e9:a8:d3:25:1e:35:48:b5:6a:f0:47:
2f:74:7c:e9:80:64:ec:91:92:4f:b2:2c:ee:70:9a:
6b:d0:39:0a:49:c1:03:73:0e:4e:26:26:96:c4:a5:
f1:be:d8:25:31:f9:42:ce:f4:5d:df:60:71:7e:99:
3b:0f:5c:76:4d:42:1a:e7:45:a0:65:22:91:7d:39:
75:0c:55:fc:d4:da:2a:57:58:ec:7f:3f:b7:56:26:
eb:bf:81:e6:63:e0:f3:73:65:f3:2c:2b:13:45:7a:
e6:38:15:f3:51:09:e2:07:1c:94:99:1c:27:38:79:
8b:bb:3a:2c:17:ef:ff:97:e6:40:c3:95:ca:cf:55:
c9:f1:b7:5d:ba:62:3f:f8:a3:4f:33:ea:20:6b:79:
bc:6e:43:ac:a3:fe:7e:85:74:78:e1:0b:a2:22:f1:
5f:4a:f1:49:69:d1:bf:54:29:a4:92:0c:c8:bf:56:
ed:c2:1f:83:4d:3b:90:9f:01:df:41:eb:f3:57:fa:
1a:37:c9:ea:bf:b7:9a:65:c8:30:0f:22:c8:81:82:
21:e1:ab:c9:75:df:28:b9:03:6b:de:b4:17:d9:bd:
78:ce:9c:6c:6a:1b:c1:71:24:27:98:53:28:f4:29:
f7:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:CD:EE:3E:13:FD:8D:0D:F1:9A:C2:21:2A:6A:99:DB:69:E5:B7:9B
X509v3 Authority Key Identifier:
keyid:F4:9B:A9:91:14:EB:DA:BD:6E:4C:BD:36:F6:CD:47:5B:33:CF:13:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9JupkRTr2r1uTL029s1HWzPPE4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/y83uPhP9jQ3xmsIhKmqZ22nlt5s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.86.244.0/22
Signature Algorithm: sha256WithRSAEncryption
b1:a4:b1:fa:48:b4:a5:20:2d:4e:db:dc:3e:cc:b8:ce:12:58:
12:5e:83:7f:a3:8c:51:bd:05:89:d9:af:de:0f:1d:6c:fa:8e:
2b:e9:a8:fc:fa:de:e0:58:f2:8f:f2:1d:60:9d:47:0c:bd:b2:
99:d9:ef:c9:19:9b:de:d0:6d:3f:e2:b1:8c:69:50:3d:66:d9:
02:1c:5c:90:58:34:63:24:05:ee:9c:cf:0c:8c:e5:a2:8a:72:
24:f6:a5:d0:e9:9a:f8:be:19:bf:51:a5:4b:da:1a:fa:6c:44:
23:ed:1e:e3:c4:68:40:07:5b:29:37:6b:e6:19:d4:d4:de:34:
31:9f:4a:56:5e:aa:66:57:84:07:ac:27:11:31:ee:45:1d:29:
32:78:1d:aa:be:f6:cd:4f:67:dd:3e:42:af:bf:48:b4:2c:e5:
f2:8f:03:fa:ca:c3:58:c0:96:85:30:35:30:af:45:57:9d:80:
cc:cf:57:65:59:7d:9f:42:16:73:21:3b:99:68:ae:6e:c8:48:
7e:90:8a:31:e5:f3:dd:21:5b:25:fe:ee:c8:09:d0:17:f3:4f:
ed:0b:e3:0d:0b:e9:8d:1e:5a:8e:20:49:a9:e3:56:fe:cf:52:
e1:99:6e:7e:e9:f6:fb:3d:5e:10:56:77:3d:dc:f2:fd:07:f4:
12:1d:6b:c5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYdextcqcOylPAoAXkTAudrOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0OWJhOTkxMTRlYmRhYmQ2ZTRjYmQzNmY2Y2Q0NzViMzNj
ZjEzODYwHhcNMjMwNDA4MDI1MTQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYmNkZWUzZTEzZmQ4ZDBkZjE5YWMyMjEyYTZhOTlkYjY5ZTViNzliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSeUDuydTW3/wSxR4VNtmfMy6ajT
JR41SLVq8EcvdHzpgGTskZJPsizucJpr0DkKScEDcw5OJiaWxKXxvtglMflCzvRd
32Bxfpk7D1x2TUIa50WgZSKRfTl1DFX81NoqV1jsfz+3Vibrv4HmY+Dzc2XzLCsT
RXrmOBXzUQniBxyUmRwnOHmLuzosF+//l+ZAw5XKz1XJ8bddumI/+KNPM+oga3m8
bkOso/5+hXR44QuiIvFfSvFJadG/VCmkkgzIv1btwh+DTTuQnwHfQevzV/oaN8nq
v7eaZcgwDyLIgYIh4avJdd8ouQNr3rQX2b14zpxsahvBcSQnmFMo9Cn3nQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMvN7j4T/Y0N8ZrCISpqmdtp5bebMB8GA1UdIwQY
MBaAFPSbqZEU69q9bky9NvbNR1szzxOGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUp1cGtSVHIycjF1VEwwMjlzMUhXelBQRTRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS82ZTRkYjctNDVhOC00OTkzLWIzODQt
OWE2ZWU0ODZlZmY3LzEveTgzdVBoUDlqUTN4bXNJaEttcVoyMm5sdDVzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS82ZTRkYjctNDVhOC00OTkzLWIzODQtOWE2ZWU0ODZlZmY3
LzEvOUp1cGtSVHIycjF1VEwwMjlzMUhXelBQRTRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuVb0MA0G
CSqGSIb3DQEBCwUAA4IBAQCxpLH6SLSlIC1O29w+zLjOElgSXoN/o4xRvQWJ2a/e
Dx1s+o4r6aj8+t7gWPKP8h1gnUcMvbKZ2e/JGZve0G0/4rGMaVA9ZtkCHFyQWDRj
JAXunM8MjOWiinIk9qXQ6Zr4vhm/UaVL2hr6bEQj7R7jxGhAB1spN2vmGdTU3jQx
n0pWXqpmV4QHrCcRMe5FHSkyeB2qvvbNT2fdPkKvv0i0LOXyjwP6ysNYwJaFMDUw
r0VXnYDMz1dlWX2fQhZzITuZaK5uyEh+kIox5fPdIVsl/u7ICdAX80/tC+MNC+mN
HlqOIEmp41b+z1LhmW5+6fb7PV4QVnc93PL9B/QSHWvF
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:13 2024 by rpki-client on console-ams.rpki-client.org