Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/s-cpEgicbqqEfsO-BLNvoLy-mhU.roa
File: s-cpEgicbqqEfsO-BLNvoLy-mhU.roa (raw, json)
Hash identifier: fGwNUsJWaz6gUKQfZdkee8kf9jhfn1reeEWU4PQ4DDE=
Subject key identifier: B3:E7:29:12:08:9C:6E:AA:84:7E:C3:BE:04:B3:6F:A0:BC:BE:9A:15
Certificate issuer: /CN=06c44b821ab5db542cc536c1f88b84baf0621654
Certificate serial: 018CC2DB4A5548C78D1F41B2ABB23EA9B353
Authority key identifier: 06:C4:4B:82:1A:B5:DB:54:2C:C5:36:C1:F8:8B:84:BA:F0:62:16:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BsRLghq121QsxTbB-IuEuvBiFlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/s-cpEgicbqqEfsO-BLNvoLy-mhU.roa
Signing time: Mon 01 Jan 2024 02:30:00 +0000
ROA not before: Mon 01 Jan 2024 02:30:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203653
IP address blocks: 185.128.38.0/24 maxlen: 24
185.128.36.0/24 maxlen: 24
185.128.39.0/24 maxlen: 24
2a03:9f60::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 09 May 2024 14:23:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:4a:55:48:c7:8d:1f:41:b2:ab:b2:3e:a9:b3:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06c44b821ab5db542cc536c1f88b84baf0621654
Validity
Not Before: Jan 1 02:30:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b3e72912089c6eaa847ec3be04b36fa0bcbe9a15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c4:ed:0d:93:75:ec:24:7d:35:68:21:77:fd:
69:12:a5:e9:12:e1:40:c7:fb:df:b3:2c:6e:d1:c9:
58:f3:80:d9:57:dd:cb:5a:9e:6e:cb:1b:e9:80:ec:
f7:53:7d:d1:22:7a:92:b1:cb:21:05:a5:33:1a:59:
22:9f:52:5a:55:62:bb:a5:91:24:0c:30:e2:36:14:
65:62:37:20:fd:52:0c:ac:c4:9a:c9:ca:3d:0e:07:
02:ee:ea:71:61:5e:86:58:3c:49:49:ab:94:a0:05:
4e:62:04:af:07:60:71:00:da:dc:be:a8:bf:71:c8:
04:53:55:37:b1:06:53:ba:a6:fb:f7:5d:b0:95:51:
f2:d3:82:e7:8d:41:1a:6e:b8:17:4e:32:49:62:a0:
09:6d:16:74:c2:10:40:a4:11:b9:f3:fd:ae:c3:dd:
e6:36:f0:cc:e4:75:16:5d:ee:d1:32:d7:a8:7c:c8:
6e:a0:f6:b5:9e:49:83:ab:f8:87:de:f9:5a:11:73:
5b:e3:05:2c:14:c3:24:b7:45:77:a2:ff:2b:9b:4b:
85:fe:fd:d5:ff:fd:84:9c:d8:63:c8:aa:16:05:50:
bb:8b:80:ab:a2:77:2d:e5:59:d0:e2:0e:d5:ce:16:
8b:51:32:12:a1:ca:46:f7:b2:ca:87:d0:d7:aa:b2:
61:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:E7:29:12:08:9C:6E:AA:84:7E:C3:BE:04:B3:6F:A0:BC:BE:9A:15
X509v3 Authority Key Identifier:
keyid:06:C4:4B:82:1A:B5:DB:54:2C:C5:36:C1:F8:8B:84:BA:F0:62:16:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsRLghq121QsxTbB-IuEuvBiFlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/s-cpEgicbqqEfsO-BLNvoLy-mhU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.128.36.0/24
185.128.38.0/23
IPv6:
2a03:9f60::/32
Signature Algorithm: sha256WithRSAEncryption
88:a1:e5:87:cb:76:4b:64:95:fc:be:1f:69:bc:b6:63:14:b7:
19:bd:b7:3a:10:0d:55:88:81:f9:78:fc:71:b3:6c:38:71:28:
29:a1:ed:d4:70:e4:1d:ab:eb:86:04:8e:46:c0:ee:2b:20:da:
71:89:c3:22:b1:8a:17:6b:a2:2a:43:44:b7:7d:da:65:b9:4d:
3c:96:eb:cb:c6:d3:58:15:6f:3e:1b:94:1c:df:73:29:b9:80:
86:fe:1b:65:a5:8b:fc:cc:ca:b4:a1:df:7d:e3:98:9c:bc:a9:
8f:f2:5c:a1:2f:4a:a9:c3:ce:00:27:ec:c5:29:19:c3:e0:df:
3e:77:28:f7:2d:7e:58:41:8e:b8:74:df:2a:15:8e:6f:7a:32:
4d:38:da:7a:02:ee:23:1c:96:4e:fb:c5:37:0b:e0:a7:f6:1b:
0b:30:3d:68:57:01:22:75:c0:62:b8:90:c0:e2:d2:28:fb:9c:
cb:d1:22:20:92:f9:8d:de:68:7b:84:aa:da:bc:19:03:40:8d:
9c:b9:a1:5b:cf:81:b2:3b:ad:f2:2b:fa:c3:93:c9:78:c0:66:
04:83:7c:e9:db:b5:da:05:e1:24:b4:2f:19:7c:e1:b8:50:06:
5f:94:3d:f5:2c:86:e7:90:89:c8:76:c4:00:bf:56:c0:0d:92:
06:77:f9:46
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYzC20pVSMeNH0Gyq7I+qbNTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2YzQ0YjgyMWFiNWRiNTQyY2M1MzZjMWY4OGI4NGJhZjA2
MjE2NTQwHhcNMjQwMTAxMDIzMDAwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiM2U3MjkxMjA4OWM2ZWFhODQ3ZWMzYmUwNGIzNmZhMGJjYmU5YTE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAksTtDZN17CR9NWghd/1pEqXpEuFA
x/vfsyxu0clY84DZV93LWp5uyxvpgOz3U33RInqSscshBaUzGlkin1JaVWK7pZEk
DDDiNhRlYjcg/VIMrMSayco9DgcC7upxYV6GWDxJSauUoAVOYgSvB2BxANrcvqi/
ccgEU1U3sQZTuqb7912wlVHy04LnjUEabrgXTjJJYqAJbRZ0whBApBG58/2uw93m
NvDM5HUWXe7RMteofMhuoPa1nkmDq/iH3vlaEXNb4wUsFMMkt0V3ov8rm0uF/v3V
//2EnNhjyKoWBVC7i4Cronct5VnQ4g7VzhaLUTISocpG97LKh9DXqrJhfQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFLPnKRIInG6qhH7DvgSzb6C8vpoVMB8GA1UdIwQY
MBaAFAbES4IatdtULMU2wfiLhLrwYhZUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnNSTGdocTEyMVFzeFRiQi1JdUV1dkJpRmxRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi83OWNlZjgtNDNhMS00MDg5LTgwOWYt
ZGM5ODQyNjU1NjdkLzEvcy1jcEVnaWNicXFFZnNPLUJMTnZvTHktbWhVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi83OWNlZjgtNDNhMS00MDg5LTgwOWYtZGM5ODQyNjU1Njdk
LzEvQnNSTGdocTEyMVFzeFRiQi1JdUV1dkJpRmxRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAuYAkAwQB
uYAmMA0EAgACMAcDBQAqA59gMA0GCSqGSIb3DQEBCwUAA4IBAQCIoeWHy3ZLZJX8
vh9pvLZjFLcZvbc6EA1ViIH5ePxxs2w4cSgpoe3UcOQdq+uGBI5GwO4rINpxicMi
sYoXa6IqQ0S3fdpluU08luvLxtNYFW8+G5Qc33MpuYCG/htlpYv8zMq0od9945ic
vKmP8lyhL0qpw84AJ+zFKRnD4N8+dyj3LX5YQY64dN8qFY5vejJNONp6Au4jHJZO
+8U3C+Cn9hsLMD1oVwEidcBiuJDA4tIo+5zL0SIgkvmN3mh7hKravBkDQI2cuaFb
z4GyO63yK/rDk8l4wGYEg3zp27XaBeEktC8ZfOG4UAZflD31LIbnkInIdsQAv1bA
DZIGd/lG
-----END CERTIFICATE-----
Generated at Thu May 9 17:33:33 2024 by rpki-client on console-fra.rpki-client.org