Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/9NcvpANEnS_pUMYRK6k3Zt4G-tI.roa
File: 9NcvpANEnS_pUMYRK6k3Zt4G-tI.roa (raw, json)
Hash identifier: GpXTGFnXO5hDsBrWtuvAUdO5H7/Pi1pd+UtoGACnCB8=
Subject key identifier: F4:D7:2F:A4:03:44:9D:2F:E9:50:C6:11:2B:A9:37:66:DE:06:FA:D2
Certificate issuer: /CN=959efe6ef97728a4282ae2c7b05a240506571f1c
Certificate serial: 01856F390721D3F01AD76EC00D50B59950AC
Authority key identifier: 95:9E:FE:6E:F9:77:28:A4:28:2A:E2:C7:B0:5A:24:05:06:57:1F:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lZ7-bvl3KKQoKuLHsFokBQZXHxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/9NcvpANEnS_pUMYRK6k3Zt4G-tI.roa
Signing time: Sun 01 Jan 2023 21:24:46 +0000
ROA not before: Sun 01 Jan 2023 21:24:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212889
IP address blocks: 185.164.30.0/24 maxlen: 24
185.203.111.0/24 maxlen: 24
185.203.108.0/24 maxlen: 24
185.203.109.0/24 maxlen: 24
185.203.110.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:39:07:21:d3:f0:1a:d7:6e:c0:0d:50:b5:99:50:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=959efe6ef97728a4282ae2c7b05a240506571f1c
Validity
Not Before: Jan 1 21:24:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f4d72fa403449d2fe950c6112ba93766de06fad2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f6:72:4d:ee:f0:79:75:c1:48:28:61:ae:fb:
d4:c7:37:b1:b4:46:c8:ca:0e:76:e5:08:65:46:3d:
7b:ea:5f:6b:f8:8e:26:d2:fa:07:c2:20:b8:0d:6b:
92:61:0f:07:94:d1:a5:3d:d0:bd:34:74:d3:f1:75:
5f:48:ac:e7:18:2c:96:e9:0e:35:2f:b5:84:d8:27:
31:72:43:70:5a:1c:df:d8:5e:5f:ba:66:ee:4b:9d:
1a:b6:ce:08:89:d5:f8:d7:09:1c:d2:cf:54:0b:7e:
28:25:c5:f6:3c:ab:e6:c2:07:53:e9:25:f5:38:c0:
a1:a9:96:5a:43:b8:d0:3a:9b:60:43:6c:2e:29:20:
ce:f7:5b:98:6b:a9:6f:98:e9:d0:4f:36:f6:6c:32:
f1:79:bb:4d:c6:73:e6:bf:8d:6f:4f:d2:19:1f:23:
05:22:70:22:30:e1:a2:44:82:56:eb:8c:3a:75:2a:
5f:80:fd:63:8e:9a:d6:82:c9:42:fe:93:4c:88:5c:
a8:7f:06:9c:82:1b:6e:bd:05:e0:4a:5e:f4:0a:96:
43:96:d1:b4:c7:13:d5:c9:80:68:a8:8c:c3:a4:b9:
f4:5f:58:db:17:25:56:3f:7e:5d:11:8c:f0:dc:98:
e5:17:17:dc:6a:7d:f6:0c:d9:91:09:13:03:bc:1f:
90:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:D7:2F:A4:03:44:9D:2F:E9:50:C6:11:2B:A9:37:66:DE:06:FA:D2
X509v3 Authority Key Identifier:
keyid:95:9E:FE:6E:F9:77:28:A4:28:2A:E2:C7:B0:5A:24:05:06:57:1F:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lZ7-bvl3KKQoKuLHsFokBQZXHxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/9NcvpANEnS_pUMYRK6k3Zt4G-tI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.164.30.0/24
185.203.108.0/22
Signature Algorithm: sha256WithRSAEncryption
57:c5:20:b6:7a:ad:fa:51:f7:a3:a9:9b:db:46:b8:76:c0:aa:
5f:4f:a4:11:05:e8:97:77:be:96:4f:1d:7d:5b:c6:c9:43:46:
0f:92:47:56:57:65:e4:cc:07:c8:49:82:75:2a:c5:82:ce:80:
99:5a:72:aa:4e:2a:39:a1:95:34:18:46:9a:18:f1:05:90:51:
09:88:6f:19:0b:8d:a0:ad:54:a9:a0:16:e2:02:c0:c2:16:24:
38:d7:c6:c6:c7:a2:4e:42:70:52:08:b0:77:7f:cc:5c:ec:41:
e9:81:95:60:0f:72:46:a0:bd:ce:e2:9e:5f:06:a3:0b:0d:b0:
67:b1:da:80:0b:5d:4d:3b:8c:dd:e0:a1:ac:90:56:2f:19:ca:
36:67:d9:a2:fe:9f:6b:a0:82:12:c8:ac:ca:58:ac:66:aa:75:
25:e6:50:e7:79:12:16:26:fa:72:2b:ee:5a:75:f3:94:52:ca:
42:7a:bd:d5:78:6b:82:e5:3e:dc:40:99:64:b4:41:39:ce:9b:
19:5c:f4:85:53:1c:ef:22:4e:1a:59:88:c1:3d:cc:12:58:4e:
23:05:c4:df:47:41:18:1c:08:cd:26:ea:b5:d6:7a:20:4c:fb:
48:f3:a2:2e:23:95:f1:9b:f0:34:64:99:91:56:b0:db:26:91:
c4:84:f0:46
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVvOQch0/Aa127ADVC1mVCsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1OWVmZTZlZjk3NzI4YTQyODJhZTJjN2IwNWEyNDA1MDY1
NzFmMWMwHhcNMjMwMTAxMjEyNDQ2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNGQ3MmZhNDAzNDQ5ZDJmZTk1MGM2MTEyYmE5Mzc2NmRlMDZmYWQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0fZyTe7weXXBSChhrvvUxzextEbI
yg525QhlRj176l9r+I4m0voHwiC4DWuSYQ8HlNGlPdC9NHTT8XVfSKznGCyW6Q41
L7WE2CcxckNwWhzf2F5fumbuS50ats4IidX41wkc0s9UC34oJcX2PKvmwgdT6SX1
OMChqZZaQ7jQOptgQ2wuKSDO91uYa6lvmOnQTzb2bDLxebtNxnPmv41vT9IZHyMF
InAiMOGiRIJW64w6dSpfgP1jjprWgslC/pNMiFyofwacghtuvQXgSl70CpZDltG0
xxPVyYBoqIzDpLn0X1jbFyVWP35dEYzw3JjlFxfcan32DNmRCRMDvB+Q0wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFPTXL6QDRJ0v6VDGESupN2beBvrSMB8GA1UdIwQY
MBaAFJWe/m75dyikKCrix7BaJAUGVx8cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFo3LWJ2bDNLS1FvS3VMSHNGb2tCUVpYSHh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84YzFlNDktN2RkMS00NDhkLTg4MTUt
YTA5MjY2YmI0ZDhjLzEvOU5jdnBBTkVuU19wVU1ZUks2azNadDRHLXRJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84YzFlNDktN2RkMS00NDhkLTg4MTUtYTA5MjY2YmI0ZDhj
LzEvbFo3LWJ2bDNLS1FvS3VMSHNGb2tCUVpYSHh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuaQeAwQC
uctsMA0GCSqGSIb3DQEBCwUAA4IBAQBXxSC2eq36UfejqZvbRrh2wKpfT6QRBeiX
d76WTx19W8bJQ0YPkkdWV2XkzAfISYJ1KsWCzoCZWnKqTio5oZU0GEaaGPEFkFEJ
iG8ZC42grVSpoBbiAsDCFiQ418bGx6JOQnBSCLB3f8xc7EHpgZVgD3JGoL3O4p5f
BqMLDbBnsdqAC11NO4zd4KGskFYvGco2Z9mi/p9roIISyKzKWKxmqnUl5lDneRIW
JvpyK+5adfOUUspCer3VeGuC5T7cQJlktEE5zpsZXPSFUxzvIk4aWYjBPcwSWE4j
BcTfR0EYHAjNJuq11nogTPtI86IuI5Xxm/A0ZJmRVrDbJpHEhPBG
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:16 2023 by rpki-client on console-fra.rpki-client.org